This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft File: np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft (raw, json) Hash identifier: eFYDkwGhih5BSy5sMCymdl9v68m8eMeyoMVAJfqEquw= Subject key identifier: 70:A7:9F:CB:6C:C9:DC:C5:03:CB:D3:66:2E:E0:6D:2F:46:FC:E3:F4 Authority key identifier: 9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54 Certificate issuer: /CN=9e9e6887ea7572a6411306c87b0cc089397a6354 Certificate serial: 019AF3898818E1095282FB2A4662CD2661CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft Manifest number: 1318 Signing time: Sat 06 Dec 2025 12:01:07 +0000 Manifest this update: Sat 06 Dec 2025 12:01:07 +0000 Manifest next update: Sun 07 Dec 2025 12:01:07 +0000 Files and hashes: 1: YJ50MQnvVhHtjWvLvxqRLtfcQ7A.roa (hash: dYfbwzgf/ynRL4xNJih6ua1qw+Sw/CexFK1ACNOG+tc=) 2: np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl (hash: LL5feufUgiA2oLPiSbqjNI9xN3C86q0D9iKa28/z5no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:88:18:e1:09:52:82:fb:2a:46:62:cd:26:61:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e9e6887ea7572a6411306c87b0cc089397a6354 Validity Not Before: Dec 6 12:01:07 2025 GMT Not After : Dec 7 12:01:07 2025 GMT Subject: CN=70a79fcb6cc9dcc503cbd3662ee06d2f46fce3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a4:ec:d1:f8:da:94:fe:49:85:a5:08:aa:d3: ae:1b:f4:0d:c9:d3:aa:6e:66:77:02:9f:60:66:a9: a5:68:da:c9:4c:12:a6:cd:48:12:f0:ca:76:99:9d: ff:57:a7:4c:48:ef:1a:2a:3a:ee:bf:8c:df:9d:97: ff:4d:86:ec:1e:c3:43:d8:d5:1b:54:9c:d7:d2:e2: 16:08:cb:37:15:3a:26:0b:b7:ba:a5:98:21:dc:53: 36:c3:6f:0c:de:0f:d5:fb:ee:3a:05:5c:da:d6:52: 34:cd:58:a4:20:03:9a:27:b6:41:b4:f9:4f:ed:d3: 5f:66:c5:59:c3:4f:4f:1b:e9:e1:2c:fc:9d:e7:73: a0:ba:38:68:2f:bb:23:8b:8c:cb:97:6f:3f:4f:78: 05:b8:85:9d:3e:e3:72:0a:c2:ab:b7:4f:18:be:0e: 83:c8:a2:b2:b5:32:fc:fb:44:d3:90:c8:5d:eb:d2: 58:12:6b:86:46:3e:51:f5:1d:33:5e:fe:86:bd:2b: 1f:f9:af:03:d4:e3:0d:f1:e5:93:1c:a2:c4:60:52: e1:d5:39:f6:71:31:b4:48:8a:2b:99:5c:9b:eb:e8: 69:84:67:e3:87:80:b5:05:27:af:10:7f:49:ae:86: f8:0b:be:de:f3:55:ef:5c:46:ee:8e:a8:26:54:13: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A7:9F:CB:6C:C9:DC:C5:03:CB:D3:66:2E:E0:6D:2F:46:FC:E3:F4 X509v3 Authority Key Identifier: keyid:9E:9E:68:87:EA:75:72:A6:41:13:06:C8:7B:0C:C0:89:39:7A:63:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/np5oh-p1cqZBEwbIewzAiTl6Y1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e2abad-58fa-4ced-8650-ec508dec7793/1/np5oh-p1cqZBEwbIewzAiTl6Y1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6d:8a:5f:fb:64:94:d4:15:04:ff:2c:2c:c5:d7:ed:a7:fe: 23:76:bc:49:1b:a7:ea:ab:4e:0a:db:a8:63:1e:67:d6:16:bd: 5e:13:3e:8e:78:3a:2d:8d:d6:8c:61:60:61:3f:04:8a:e7:04: 5a:63:7b:14:f6:2e:6f:71:60:56:2c:f3:36:73:35:ef:16:00: c9:8f:cb:5a:25:e0:01:2d:09:ad:9e:e7:4f:f7:50:f1:a1:e0: 75:98:ab:10:81:5a:7a:69:62:ef:6b:f7:3b:a2:b3:d0:3d:ee: f4:ae:ff:d7:18:06:00:48:4b:75:45:ed:aa:d2:a2:86:4d:f3: 5e:4f:00:43:fb:4a:a3:22:35:4d:c7:7b:1d:e3:bb:20:fb:ed: 9d:2e:8b:0f:93:2b:d7:a5:94:0a:62:82:40:96:94:1b:75:77: 58:dd:03:e7:83:e6:0f:b6:1b:73:63:83:a0:02:52:0d:93:c0: 6f:10:eb:20:a3:b7:37:fc:6b:a8:dd:74:c1:ec:86:75:e0:ac: 6b:67:0b:c3:bd:9b:cb:94:c6:c4:25:d4:bf:ea:ff:02:1d:6d: df:55:f8:ee:21:f5:bd:66:56:54:09:f8:f7:72:09:02:63:b8: 1a:ec:73:7a:a5:0d:7e:85:87:ff:07:38:5b:9e:c1:88:c4:96: b4:f9:b7:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYgY4QlSgvsqRmLNJmHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOWU2ODg3ZWE3NTcyYTY0MTEzMDZjODdiMGNjMDg5Mzk3 YTYzNTQwHhcNMjUxMjA2MTIwMTA3WhcNMjUxMjA3MTIwMTA3WjAzMTEwLwYDVQQD Eyg3MGE3OWZjYjZjYzlkY2M1MDNjYmQzNjYyZWUwNmQyZjQ2ZmNlM2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6Ts0fjalP5JhaUIqtOuG/QNydOq bmZ3Ap9gZqmlaNrJTBKmzUgS8Mp2mZ3/V6dMSO8aKjruv4zfnZf/TYbsHsND2NUb VJzX0uIWCMs3FTomC7e6pZgh3FM2w28M3g/V++46BVza1lI0zVikIAOaJ7ZBtPlP 7dNfZsVZw09PG+nhLPyd53OgujhoL7sji4zLl28/T3gFuIWdPuNyCsKrt08Yvg6D yKKytTL8+0TTkMhd69JYEmuGRj5R9R0zXv6GvSsf+a8D1OMN8eWTHKLEYFLh1Tn2 cTG0SIormVyb6+hphGfjh4C1BSevEH9Jrob4C77e81XvXEbujqgmVBM7JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCnn8tsydzFA8vTZi7gbS9G/OP0MB8GA1UdIwQY MBaAFJ6eaIfqdXKmQRMGyHsMwIk5emNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAt ZWM1MDhkZWM3NzkzLzEvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9lMmFiYWQtNThmYS00Y2VkLTg2NTAtZWM1MDhkZWM3Nzkz LzEvbnA1b2gtcDFjcVpCRXdiSWV3ekFpVGw2WTFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAW2KX/tk lNQVBP8sLMXX7af+I3a8SRun6qtOCtuoYx5n1ha9XhM+jng6LY3WjGFgYT8EiucE WmN7FPYub3FgVizzNnM17xYAyY/LWiXgAS0JrZ7nT/dQ8aHgdZirEIFaemli72v3 O6Kz0D3u9K7/1xgGAEhLdUXtqtKihk3zXk8AQ/tKoyI1Tcd7HeO7IPvtnS6LD5Mr 16WUCmKCQJaUG3V3WN0D54PmD7Ybc2ODoAJSDZPAbxDrIKO3N/xrqN10weyGdeCs a2cLw72by5TGxCXUv+r/Ah1t31X47iH1vWZWVAn493IJAmO4GuxzeqUNfoWH/wc4 W57BiMSWtPm3Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:46:44 2025 by rpki-client