This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft File: NPFybqS9bTyAka4MitGgPpHjWaI.mft (raw, json) Hash identifier: QnGus8ZI3vfAKGGYPLDq7QBtEIEHwoo0u1FLpyNh7fc= Subject key identifier: 34:39:13:4F:15:B0:39:5B:E4:B2:C4:5B:84:B5:7E:E1:80:E7:13:96 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019AF31BEE6E9CB9D6667686554B1DB0EE0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft Manifest number: 149D Signing time: Sat 06 Dec 2025 10:01:25 +0000 Manifest this update: Sat 06 Dec 2025 10:01:25 +0000 Manifest next update: Sun 07 Dec 2025 10:01:25 +0000 Files and hashes: 1: 1-QRYDCk4GRkhhK94MTs5nmWBy_E.roa (hash: 0DMmysmCmz5ptQIzT31buoWW9naDewY16lMSk6nyNPM=) 2: 4_hN70Gn93YtNqyU6RsNlMbDtXc.roa (hash: peVwC9DiY5O5MpDM5td7h9VpXZKdL2e2Hkif7cNRbJM=) 3: 6RKHwkUGkLRE0nOS7i-phv0Y7b8.roa (hash: YNCF/KzAqV3Fo+hsWHR3r0AQecfE2O/ljxIxKeerc6E=) 4: NPFybqS9bTyAka4MitGgPpHjWaI.crl (hash: KoY5rt/K7mXLx/RYEtT7GZ9R5BQffrQoWmgNXExDn4s=) 5: RZB6hhj_LzY-DO3DfmavoIAg3K8.roa (hash: 8fSztyIXmdrydCA2Hwo+fzHNQuQ8HachHnXLTdni/F4=) 6: V-ziVBTzF3yW8Qn17SkTQka0Z1w.roa (hash: dzI5Exw0Cav9WTDJa9bU3vaVrx3/DEAhAyNHw9d0Q+M=) 7: f9J3fcUkkHHcn80-VJtEBd6Rau4.roa (hash: JDi8khg5idPehoZbbOnLzz9O6Dz2cHDlR75V8A55UBk=) 8: m26Z4EdJjPTeKqQP4bLFsm0qZJo.roa (hash: NWpdZVKoDOS9cnbyZWpfcC92E8AFSl1SI5HiCmg5+Gg=) 9: mI_12gpPA1x4m56hwYP082Ar3JU.roa (hash: nTAzRPzpRleX8rbBjz+dEflffb+oOGW6DVQuLBf/K4c=) 10: oHw7wrhs1qz9tzh4TUZjM8oea6k.roa (hash: IIsyfj8tmjqckisgTytL6hssPf4b/V3+My7Zj1/h7d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:ee:6e:9c:b9:d6:66:76:86:55:4b:1d:b0:ee:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Dec 6 10:01:25 2025 GMT Not After : Dec 7 10:01:25 2025 GMT Subject: CN=3439134f15b0395be4b2c45b84b57ee180e71396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:3e:5c:c7:19:06:7d:2e:59:6b:a9:04:e2:5b: 8b:e0:94:0c:ae:d6:01:b4:53:9b:99:e9:61:ac:1b: fc:e5:15:ef:69:97:89:d5:60:fe:cd:3a:82:eb:f5: 83:c6:8a:e9:a6:85:60:0c:dd:2a:70:e8:09:01:8a: e7:8d:ed:af:ce:15:8c:b5:62:18:de:72:a3:cd:08: b5:54:1e:97:a7:34:7d:10:80:ed:77:97:49:40:35: 41:94:44:34:72:8c:f6:06:b8:5f:b8:d1:eb:e3:b2: bf:cf:53:c5:7c:0b:75:c2:c1:6e:68:2c:61:be:03: ff:f3:65:ea:67:ec:b3:a7:22:02:9c:b8:c5:4b:54: 6e:05:69:95:8f:e6:05:0b:eb:9a:ec:c9:79:b9:88: d5:f1:60:d9:c6:a5:3a:f2:71:21:8f:ef:84:bc:ea: 6f:d7:58:6a:6d:32:34:a1:ec:44:7f:51:54:8a:da: 48:ff:cb:f2:9c:b4:a2:6c:72:fa:44:95:ae:0e:a7: bd:0d:86:15:e0:a5:32:51:ef:02:94:53:8a:40:61: 20:d8:a4:84:1c:98:73:a0:e8:84:74:9d:b8:41:61: 78:7d:2b:be:61:05:1f:fb:1e:be:6f:34:23:95:61: 61:70:be:54:d2:7a:35:72:8c:1f:60:d7:ab:65:4a: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:39:13:4F:15:B0:39:5B:E4:B2:C4:5B:84:B5:7E:E1:80:E7:13:96 X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d1:ac:84:51:7d:2a:c1:b2:8b:03:8a:bc:5b:86:85:4b:14: 13:c1:ef:80:ed:c5:83:a4:cf:3b:34:61:f7:e4:7f:39:78:43: 6d:df:48:12:a2:4a:92:c4:31:21:a3:74:f7:31:4b:20:2a:5e: 3b:41:c5:66:c4:fe:d4:86:b2:da:56:a1:30:2c:0d:d7:8d:24: e2:18:89:ea:d2:48:cc:bf:85:82:2a:95:cd:f8:a9:ff:16:f8: a6:65:12:59:8f:9a:d1:a0:8d:4b:0e:f1:59:20:c7:74:9a:ed: 18:85:90:4f:b7:0c:20:9e:e7:00:0c:09:15:ba:04:15:f4:65: 42:d4:68:8a:df:3f:44:26:c8:46:a8:f8:a4:7d:3c:bc:d9:02: 36:07:d5:a4:64:28:c9:41:25:31:b4:da:62:79:a2:eb:21:10: 88:fe:a0:85:cf:49:ed:99:34:8e:52:cf:b4:23:11:e8:93:86: 7b:1b:08:2c:dc:69:54:22:03:65:72:ad:c0:9c:e2:09:0f:13: f3:d5:90:f5:a1:18:76:97:0e:be:c8:19:76:62:d5:01:bd:2b: 45:fb:30:63:ba:29:e4:72:73:38:2f:ae:f4:ce:f3:d1:53:31: b8:12:55:f5:f5:6d:ec:7c:25:62:f3:45:1c:88:35:77:a3:09: df:d0:7f:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+5unLnWZnaGVUsdsO4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjUxMjA2MTAwMTI1WhcNMjUxMjA3MTAwMTI1WjAzMTEwLwYDVQQD EygzNDM5MTM0ZjE1YjAzOTViZTRiMmM0NWI4NGI1N2VlMTgwZTcxMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjD5cxxkGfS5Za6kE4luL4JQMrtYB tFObmelhrBv85RXvaZeJ1WD+zTqC6/WDxorppoVgDN0qcOgJAYrnje2vzhWMtWIY 3nKjzQi1VB6XpzR9EIDtd5dJQDVBlEQ0coz2BrhfuNHr47K/z1PFfAt1wsFuaCxh vgP/82XqZ+yzpyICnLjFS1RuBWmVj+YFC+ua7Ml5uYjV8WDZxqU68nEhj++EvOpv 11hqbTI0oexEf1FUitpI/8vynLSibHL6RJWuDqe9DYYV4KUyUe8ClFOKQGEg2KSE HJhzoOiEdJ24QWF4fSu+YQUf+x6+bzQjlWFhcL5U0no1cowfYNerZUqOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQ5E08VsDlb5LLEW4S1fuGA5xOWMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAddGshFF9 KsGyiwOKvFuGhUsUE8HvgO3Fg6TPOzRh9+R/OXhDbd9IEqJKksQxIaN09zFLICpe O0HFZsT+1Iay2lahMCwN140k4hiJ6tJIzL+FgiqVzfip/xb4pmUSWY+a0aCNSw7x WSDHdJrtGIWQT7cMIJ7nAAwJFboEFfRlQtRoit8/RCbIRqj4pH08vNkCNgfVpGQo yUElMbTaYnmi6yEQiP6ghc9J7Zk0jlLPtCMR6JOGexsILNxpVCIDZXKtwJziCQ8T 89WQ9aEYdpcOvsgZdmLVAb0rRfswY7op5HJzOC+u9M7z0VMxuBJV9fVt7HwlYvNF HIg1d6MJ39B/0A== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:22 2025 by rpki-client