This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft File: NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json) Hash identifier: OjZ70relAbeLC81LZ1U2JqPqpGXIJlMZoy+2lrF7JEM= Subject key identifier: E1:4D:21:5A:72:64:A7:C4:60:15:7D:32:1F:98:88:26:E6:FE:08:24 Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 Certificate issuer: /CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Certificate serial: 019AF0F5E20DD6F34BEDCCF5A4EFD6A0BDAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft Manifest number: 0DB7 Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: AYNfqVlSCZxSkottsPIfKriDdHo.roa (hash: DR+WljYSnHEBz/1Nc0C8V29PSzaZP+WZg97TUOW5Zds=) 2: I7WvLIen2Qt15jt5djzF4qVwAeA.roa (hash: TDT2LdFRYTW16jzLI/jmwBH74PERZ5uRk6SAxtSvBQc=) 3: Ma-ZL87NKbXOh3PKteMYs4_0CwA.roa (hash: 8ACKMnvKrVu9alfiMw6lXVKm3qwxGI4mZvc+z4si/8c=) 4: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: zk1mMEbDkFiocew4xup+IXL1OVkfKp0gHDnypS57tW4=) 5: ZdlemGQCA8jrtuYIR9ZFtWke_wc.roa (hash: yL1F1JtC6s6D+a5TG0GVaaYEiJsHRH7GC/1uOa8xe0w=) 6: mO0be8bDbmiYSh_iKVixTT5SzHA.roa (hash: lIkXoLyk/hMEyc076/9zdceKJAYDU0c31VY+iGKjKOI=) 7: tEjZ-uzo44NLPAS076hKMuReNzU.asa (hash: 48Hb8aEmbuJS71uhwJUr/NwsMXvw9LlHCMvZffWtx1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e2:0d:d6:f3:4b:ed:cc:f5:a4:ef:d6:a0:bd:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=e14d215a7264a7c460157d321f988826e6fe0824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:29:d7:37:75:59:ad:d3:30:db:57:60:8b:9e: 44:35:90:d0:da:c9:e5:5c:85:b2:a8:f6:7b:57:e7: c5:61:2a:0a:c6:cc:31:25:2a:f8:6a:b8:34:ea:ee: 6c:12:04:3c:1a:d8:af:e4:bc:46:6c:6d:ac:5a:bf: cd:cd:40:65:ec:ef:49:50:b3:af:c0:69:d7:6e:a6: 8f:0f:a5:3d:a9:6b:af:7d:28:88:23:79:db:09:f7: 24:86:ab:fd:85:f9:98:5d:24:ea:b0:52:d7:42:9d: 62:4d:c5:cb:4b:f7:45:45:2d:aa:9b:d6:b8:04:9c: 8f:0f:b5:e7:5c:53:be:81:c2:25:28:1d:e8:78:73: de:e9:aa:dd:26:60:4b:5f:44:b6:63:b9:d9:06:9b: a9:c6:b0:a5:e9:de:58:82:8d:5c:61:b8:a3:8a:9f: e6:1d:21:1c:99:96:9a:24:b0:df:16:a5:a9:08:92: 61:81:3a:e0:8f:f4:b5:fe:e5:ee:20:fb:97:55:e1: db:1c:95:70:5d:8c:a4:c2:89:3e:22:86:53:52:83: 86:0e:d1:b7:35:36:2e:88:ab:18:b8:84:c5:c0:d3: d3:9d:92:38:dd:16:af:b8:5b:f6:ef:91:68:ce:b1: 9b:cd:1d:b5:76:a6:80:cb:54:12:77:79:38:1c:08: 45:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4D:21:5A:72:64:A7:C4:60:15:7D:32:1F:98:88:26:E6:FE:08:24 X509v3 Authority Key Identifier: keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cc:50:81:c5:cd:76:c8:b6:8e:24:a9:5c:ec:02:b6:f1:da: 15:8a:cd:f8:e2:18:15:6a:fe:de:cf:70:d6:ba:50:ec:1a:65: 46:c5:dc:21:27:50:30:a6:36:98:1d:db:af:b8:bc:fd:33:09: 0f:48:10:43:2e:16:40:52:cd:4e:95:65:08:c2:ea:8f:1b:49: 41:68:1d:04:04:a6:8a:55:57:0a:4d:c8:54:77:26:d1:92:24: 97:25:d6:64:55:2f:e6:0c:76:2d:48:d6:02:1a:82:21:84:83: 69:d2:da:db:0e:c1:57:0b:6a:2f:59:da:a0:f5:78:fe:dd:d0: 94:f0:56:48:66:36:c3:68:77:5f:2a:6a:b4:5c:f2:cd:8d:03: 2e:70:95:43:98:c0:f8:4b:4f:c6:42:ca:ec:7d:03:f9:9a:e0: 16:15:79:1d:ba:9d:9b:84:c7:46:b7:67:4c:dd:66:0f:36:4d: 73:61:f9:a4:63:1a:6f:21:1a:31:eb:48:6f:f1:70:42:bb:ae: d8:a9:30:b2:de:a6:59:d0:ff:f0:b9:29:1d:9a:e4:8f:74:4a: d8:39:1e:3f:93:ac:d0:55:fc:62:12:1b:c9:05:ed:09:d0:d0: c9:c8:6e:f2:a2:31:d4:d2:6f:39:14:64:c0:a1:45:49:e4:3c: 25:80:21:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eIN1vNL7cz1pO/WoL2uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTFkMjk1MDE0NWRjZWFjMDBjMGNhNGViNTM2ZDkyODY3 YjM4ZDMwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EyhlMTRkMjE1YTcyNjRhN2M0NjAxNTdkMzIxZjk4ODgyNmU2ZmUwODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwynXN3VZrdMw21dgi55ENZDQ2snl XIWyqPZ7V+fFYSoKxswxJSr4arg06u5sEgQ8Gtiv5LxGbG2sWr/NzUBl7O9JULOv wGnXbqaPD6U9qWuvfSiII3nbCfckhqv9hfmYXSTqsFLXQp1iTcXLS/dFRS2qm9a4 BJyPD7XnXFO+gcIlKB3oeHPe6ardJmBLX0S2Y7nZBpupxrCl6d5Ygo1cYbijip/m HSEcmZaaJLDfFqWpCJJhgTrgj/S1/uXuIPuXVeHbHJVwXYykwok+IoZTUoOGDtG3 NTYuiKsYuITFwNPTnZI43RavuFv275FozrGbzR21dqaAy1QSd3k4HAhFFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFNIVpyZKfEYBV9Mh+YiCbm/ggkMB8GA1UdIwQY MBaAFDaR0pUBRdzqwAwMpOtTbZKGezjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEt MWRlYzQwNTg0ODA2LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8yYTk0MmEtZjFiZi00M2UyLWI5MmEtMWRlYzQwNTg0ODA2 LzEvTnBIU2xRRkYzT3JBREF5azYxTnRrb1o3T05NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMxQgcXN dsi2jiSpXOwCtvHaFYrN+OIYFWr+3s9w1rpQ7BplRsXcISdQMKY2mB3br7i8/TMJ D0gQQy4WQFLNTpVlCMLqjxtJQWgdBASmilVXCk3IVHcm0ZIklyXWZFUv5gx2LUjW AhqCIYSDadLa2w7BVwtqL1naoPV4/t3QlPBWSGY2w2h3XypqtFzyzY0DLnCVQ5jA +EtPxkLK7H0D+ZrgFhV5Hbqdm4THRrdnTN1mDzZNc2H5pGMabyEaMetIb/FwQruu 2Kkwst6mWdD/8LkpHZrkj3RK2DkeP5Os0FX8YhIbyQXtCdDQychu8qIx1NJvORRk wKFFSeQ8JYAhBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:39:09 2025 by rpki-client