This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
File: NpgLSGOkwPwQnpM6n494kuQmIvg.mft (raw, json)
Hash identifier: UUMPvJ/Z2oMtVTqaiOqs+hwUjoR3RUkYZEo/egiD9iw=
Subject key identifier: 10:73:0F:61:F7:9B:24:15:B6:CF:40:0B:09:DA:1E:63:7C:86:F0:76
Authority key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Certificate issuer: /CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Certificate serial: 019AF389944BC47D73EF43AD7AD5DC3936DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
Manifest number: 1762
Signing time: Sat 06 Dec 2025 12:01:11 +0000
Manifest this update: Sat 06 Dec 2025 12:01:11 +0000
Manifest next update: Sun 07 Dec 2025 12:01:11 +0000
Files and hashes: 1: LuqTaLAIb1FyHM5wmPs1YLA-1NQ.roa (hash: qV1VopZp94X/gYFO14Dpzbo5vZkWKbjRJxqhcQk1sTY=)
2: NpgLSGOkwPwQnpM6n494kuQmIvg.crl (hash: ruRFDZpvNLayWZY45ftr1YL82V9sKtB/DNPYyTwnvkw=)
3: kBYkIoAwOTb1jZVoI-2IjKFmw9s.roa (hash: XJGvgivLL6yw0361zmrsd505aLJW4OPiGkt/w/pz35g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:89:94:4b:c4:7d:73:ef:43:ad:7a:d5:dc:39:36:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Validity
Not Before: Dec 6 12:01:11 2025 GMT
Not After : Dec 7 12:01:11 2025 GMT
Subject: CN=10730f61f79b2415b6cf400b09da1e637c86f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:a9:e9:76:66:7a:01:64:43:fc:38:e3:66:
a7:b8:d2:1d:15:60:fa:de:4f:be:c4:cf:55:54:03:
ae:d5:c6:c6:19:1f:2a:21:1f:63:74:f3:56:99:d1:
e2:9b:ea:63:33:07:fb:5d:d5:7f:37:fb:4d:36:44:
9c:31:c1:4f:65:2a:0a:e9:e1:23:44:84:7e:aa:de:
a5:66:93:80:b0:9e:36:33:d8:1b:c1:62:0a:57:09:
e5:c9:4c:77:b4:73:22:9f:b3:c8:2c:62:06:a1:52:
b3:51:76:c8:91:e4:45:57:31:b6:29:1a:86:6d:4d:
49:6a:ec:4d:ea:8b:b7:1f:fc:ac:30:b8:fb:d6:3d:
4c:10:26:fc:b2:9a:03:29:15:9d:37:fd:d4:9a:91:
50:38:3b:d5:98:73:ae:90:be:82:0c:08:09:06:4f:
11:89:c5:b1:1b:bb:2b:d1:7e:d8:b8:8e:33:a1:70:
05:cd:4e:c7:c2:10:72:59:71:60:03:c4:55:5c:47:
da:b6:4b:5f:f9:e2:a0:f6:fd:f4:69:e0:d6:b0:8b:
d1:ec:c2:a4:82:d9:5a:de:a5:4c:17:a3:06:2c:07:
e8:6c:57:27:f2:a0:20:1f:a0:00:9a:ff:e7:ca:ea:
4f:9d:a4:9b:08:ae:95:4d:52:72:ae:d8:c4:96:22:
c9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:73:0F:61:F7:9B:24:15:B6:CF:40:0B:09:DA:1E:63:7C:86:F0:76
X509v3 Authority Key Identifier:
keyid:36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e5:d7:4b:2b:96:bb:a9:a8:51:65:25:4b:ca:1c:3b:00:1d:
b7:2d:2a:0f:42:77:11:b3:fa:58:b9:db:3b:db:30:1d:b7:20:
43:9a:4b:32:ae:4b:75:a8:91:db:8f:c5:c0:2a:ca:dd:47:fe:
17:fc:8a:99:64:39:1f:68:cc:ee:fd:d5:ea:b5:82:70:22:bb:
83:83:fd:2f:10:81:6c:7a:66:96:47:2f:52:2a:99:74:86:05:
5c:f5:b6:32:b7:86:2a:aa:15:d5:8b:3e:d6:39:03:91:32:ac:
80:cc:45:f1:66:de:35:ff:e2:f3:a1:7a:e4:c8:91:a6:02:6a:
e6:91:45:0e:8b:fd:3f:07:be:8b:96:c0:1a:09:a1:01:92:cb:
d6:b5:fb:e9:57:f7:2d:4a:13:a8:af:eb:89:a5:04:7a:c3:99:
52:96:5d:eb:cb:2a:34:04:5a:97:d8:a5:ca:f8:f1:00:21:37:
74:f1:46:79:34:32:4c:a8:5f:49:5c:8f:f5:eb:53:d8:ea:b9:
f8:b2:94:aa:d2:e6:0a:46:35:1a:d4:7f:82:66:20:1d:97:6e:
d0:0d:94:b1:b5:be:0f:bd:2d:7f:64:56:26:ea:36:45:e8:23:
b7:dd:74:34:1a:94:31:0f:94:73:07:11:58:c5:7d:88:3a:cc:
54:30:0e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:50:41 2025 by rpki-client