This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft File: NPWeovpHqdYxGxyMxahqW5oOR6c.mft (raw, json) Hash identifier: ZGQs/vZKpk18eWCuTibQmG/KM6IxRwlVUi28/wwe/Rk= Subject key identifier: BD:5F:72:2B:74:22:0B:86:32:B8:10:06:0C:A8:3A:5F:AB:33:64:A3 Authority key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7 Certificate issuer: /CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7 Certificate serial: 019AF23FDA90AE9338BB6369B2CDDCBD40C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:02 +0000 Manifest this update: Sat 06 Dec 2025 06:01:02 +0000 Manifest next update: Sun 07 Dec 2025 06:01:02 +0000 Files and hashes: 1: NPWeovpHqdYxGxyMxahqW5oOR6c.crl (hash: TDXZXcYdTYYpRkUyXNS+5Qni4mCQpE4zMPx87B2FeD8=) 2: ugIdAnD72uDX1xk6AnCHQeEOh1Y.roa (hash: QffGW9BNMmaT3r0VD1GTXNsWErI53h66jEjYScdrUso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:da:90:ae:93:38:bb:63:69:b2:cd:dc:bd:40:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7 Validity Not Before: Dec 6 06:01:02 2025 GMT Not After : Dec 7 06:01:02 2025 GMT Subject: CN=bd5f722b74220b8632b810060ca83a5fab3364a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f9:ff:ee:8f:d6:4b:27:41:99:e2:08:dd:c7: 40:ed:06:e8:6c:65:83:cf:6e:c3:b9:07:2c:cd:7a: 8b:0c:b0:d5:07:58:ce:a8:51:44:8c:7a:1e:84:25: bb:a5:ff:a8:93:da:ac:d4:29:99:16:17:25:f4:91: bd:1b:f4:18:25:13:56:35:14:f3:17:94:0c:dd:b0: df:d5:e0:ea:27:ea:1f:67:81:3c:58:fd:22:c8:0c: ff:48:c4:bb:a5:b7:69:f8:5d:b4:c0:ef:aa:c7:ee: 86:03:5b:df:8c:a3:be:1c:57:12:55:0d:d7:48:36: 49:41:6e:18:94:fd:03:ed:1b:0d:1e:0a:64:0f:77: f0:a5:8b:0e:16:c5:e7:a3:d4:7c:35:7b:c6:6e:9a: 61:0b:20:b8:b6:99:88:c4:2f:41:e0:c8:df:97:13: 68:45:70:18:4c:78:29:73:94:8d:eb:0c:ce:80:d3: 3d:da:a7:86:5a:e7:1f:c5:5b:c9:24:04:0a:cd:2a: 67:83:e1:ab:c7:fc:d1:30:16:4c:e4:26:42:6d:ef: 09:b7:74:2c:c7:97:e0:ae:8b:55:be:06:b6:41:31: af:21:9f:b9:ac:ab:d0:19:77:6e:65:c1:21:1e:e8: b9:e0:40:c9:66:44:95:6f:00:d8:da:09:c5:10:81: 26:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:5F:72:2B:74:22:0B:86:32:B8:10:06:0C:A8:3A:5F:AB:33:64:A3 X509v3 Authority Key Identifier: keyid:34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:5b:9b:4d:3e:58:6f:b7:18:02:33:d0:b1:fc:bd:fb:4a:22: 31:0a:69:b4:39:fe:70:11:34:8f:74:74:f2:9b:1a:36:d4:a0: 81:2c:7f:4f:a2:9f:e8:97:f9:0c:b8:d4:ce:a3:4c:74:79:db: 16:47:d2:bd:ca:ee:c7:54:74:8a:53:e4:05:ad:3d:ea:9c:7a: 51:9b:f4:9c:23:24:bf:2f:9e:07:86:91:66:fc:ba:bb:af:a9: 63:a9:e5:f7:a7:df:08:25:86:51:1b:d5:4f:b3:8a:98:68:42: 8f:83:fc:c8:8a:75:ba:a8:1c:d9:5f:d2:b3:88:56:29:45:fb: 7c:65:f8:81:65:99:ae:5e:8a:59:5f:97:9f:34:cd:9b:a9:91: 83:fc:ce:a0:29:5e:ac:5c:ec:22:45:48:2f:18:52:5d:5d:2f: 30:cf:2c:af:e7:bb:c1:fb:f6:55:0e:aa:ed:01:38:d8:62:57: d2:2f:4d:92:f7:fa:5a:0e:5e:48:ff:73:b9:30:60:4b:e2:c6: 0b:5f:1c:7d:82:79:7c:76:88:ca:eb:0e:a7:07:f5:55:44:31: 44:7a:1f:7d:85:0b:12:a9:01:0f:54:40:e0:ac:75:9f:ee:26: b1:1b:49:14:ff:ca:38:b8:08:82:04:d5:7b:d4:6c:70:52:07: 3b:47:d3:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9qQrpM4u2Npss3cvUDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjU5ZWEyZmE0N2E5ZDYzMTFiMWM4Y2M1YTg2YTViOWEw ZTQ3YTcwHhcNMjUxMjA2MDYwMTAyWhcNMjUxMjA3MDYwMTAyWjAzMTEwLwYDVQQD EyhiZDVmNzIyYjc0MjIwYjg2MzJiODEwMDYwY2E4M2E1ZmFiMzM2NGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvn/7o/WSydBmeII3cdA7QbobGWD z27DuQcszXqLDLDVB1jOqFFEjHoehCW7pf+ok9qs1CmZFhcl9JG9G/QYJRNWNRTz F5QM3bDf1eDqJ+ofZ4E8WP0iyAz/SMS7pbdp+F20wO+qx+6GA1vfjKO+HFcSVQ3X SDZJQW4YlP0D7RsNHgpkD3fwpYsOFsXno9R8NXvGbpphCyC4tpmIxC9B4MjflxNo RXAYTHgpc5SN6wzOgNM92qeGWucfxVvJJAQKzSpng+Grx/zRMBZM5CZCbe8Jt3Qs x5fgrotVvga2QTGvIZ+5rKvQGXduZcEhHui54EDJZkSVbwDY2gnFEIEm0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1fcit0IguGMrgQBgyoOl+rM2SjMB8GA1UdIwQY MBaAFDT1nqL6R6nWMRscjMWoaluaDkenMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mODljOWUtM2U5YS00MWJhLTliNDUt MzU2MTRlOTE3OGZjLzEvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mODljOWUtM2U5YS00MWJhLTliNDUtMzU2MTRlOTE3OGZj LzEvTlBXZW92cEhxZFl4R3h5TXhhaHFXNW9PUjZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilubTT5Y b7cYAjPQsfy9+0oiMQpptDn+cBE0j3R08psaNtSggSx/T6Kf6Jf5DLjUzqNMdHnb FkfSvcrux1R0ilPkBa096px6UZv0nCMkvy+eB4aRZvy6u6+pY6nl96ffCCWGURvV T7OKmGhCj4P8yIp1uqgc2V/Ss4hWKUX7fGX4gWWZrl6KWV+XnzTNm6mRg/zOoCle rFzsIkVILxhSXV0vMM8sr+e7wfv2VQ6q7QE42GJX0i9Nkvf6Wg5eSP9zuTBgS+LG C18cfYJ5fHaIyusOpwf1VUQxRHoffYULEqkBD1RA4Kx1n+4msRtJFP/KOLgIggTV e9RscFIHO0fTCg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:17:48 2025 by rpki-client