This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft File: NPdSlbuVtVRThE8y1uOVCdO-zkU.mft (raw, json) Hash identifier: +xT/xboZQQJIcUW6ZdZevGZcMd0vN/BO4zm+YNjJtiU= Subject key identifier: 34:F8:AD:E4:65:BD:C4:0C:C0:10:EB:BC:29:7D:CD:E2:7A:EB:BC:34 Authority key identifier: 34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45 Certificate issuer: /CN=34f75295bb95b55453844f32d6e39509d3bece45 Certificate serial: 019AF12E5241DA0567E7DDD36F43E4A0DE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft Manifest number: 01D5 Signing time: Sat 06 Dec 2025 01:02:15 +0000 Manifest this update: Sat 06 Dec 2025 01:02:15 +0000 Manifest next update: Sun 07 Dec 2025 01:02:15 +0000 Files and hashes: 1: NPdSlbuVtVRThE8y1uOVCdO-zkU.crl (hash: 7NkW/+/gTIpZfW/A54618GU2gaYmdIGLo16pMSO74u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:52:41:da:05:67:e7:dd:d3:6f:43:e4:a0:de:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f75295bb95b55453844f32d6e39509d3bece45 Validity Not Before: Dec 6 01:02:15 2025 GMT Not After : Dec 7 01:02:15 2025 GMT Subject: CN=34f8ade465bdc40cc010ebbc297dcde27aebbc34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:f2:c6:42:ca:78:e6:9f:4d:b6:9f:3d:cd:f8: e4:28:bc:b2:14:a2:fa:01:ab:1c:3d:78:4e:78:e1: 02:2e:55:26:34:ea:a6:47:39:0b:f8:19:14:ce:db: ae:dd:84:69:0e:27:89:02:c1:c7:4c:c9:af:9a:81: eb:a4:95:20:ab:ae:99:4d:76:51:fd:b8:bc:4f:e1: 4c:99:ab:46:ad:26:05:05:61:d2:b7:fa:1b:a8:8f: 55:e0:3d:34:d9:74:1a:e6:4f:c0:ca:68:46:50:5f: 62:1f:9e:b7:6b:a6:a0:b3:5c:19:aa:0a:35:f2:fa: f1:1c:32:04:12:99:5b:bf:98:7d:e2:72:f3:5c:72: 99:d8:f1:4e:33:ae:4e:78:86:a4:49:d9:37:e8:c9: 70:21:c2:9f:e2:b1:a5:06:29:b9:9d:d1:18:87:1e: 75:26:08:0a:a4:84:67:d7:f9:14:bd:ff:49:cb:42: b9:54:d2:cb:fd:31:e8:2e:5b:5b:4e:a4:3a:83:9d: df:a9:b7:04:9b:2d:ad:bb:cd:b6:07:86:d7:66:11: 48:d9:14:e2:a1:f8:23:68:e5:25:11:f6:a4:38:1c: 56:c2:09:c1:ba:8e:df:2a:42:ee:fc:7e:e0:6e:3b: ad:1d:bf:02:69:e9:dc:d7:a8:fb:aa:26:3d:a7:5d: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F8:AD:E4:65:BD:C4:0C:C0:10:EB:BC:29:7D:CD:E2:7A:EB:BC:34 X509v3 Authority Key Identifier: keyid:34:F7:52:95:BB:95:B5:54:53:84:4F:32:D6:E3:95:09:D3:BE:CE:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPdSlbuVtVRThE8y1uOVCdO-zkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/9dc3e0-8de0-494b-8ff5-d95e5a63a48e/1/NPdSlbuVtVRThE8y1uOVCdO-zkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ef:0f:cc:33:c8:21:e2:1c:77:e4:4c:1e:32:92:4f:67:6b: cc:22:6a:7c:2b:96:b1:2f:b9:5a:39:99:7f:c0:38:68:59:a8: 4a:51:0b:08:f5:03:82:66:8c:a8:1b:09:20:e4:67:4a:87:16: 82:f0:82:d1:74:03:da:0e:70:7c:db:f4:62:5b:ae:20:7f:50: 2b:46:79:5d:1b:ca:db:ae:e8:e7:ec:fb:31:df:9c:a0:b6:0f: ee:9d:7a:81:38:84:bc:2b:20:c4:73:05:b3:d6:5a:9d:f1:6e: e9:55:b9:22:1a:b8:94:46:3f:b4:a7:e0:eb:68:d9:88:09:17: 3c:30:41:bb:f6:38:a6:e9:1d:ec:cc:fc:01:29:b4:7d:fd:d5: a4:b3:b8:99:96:b5:3a:e3:8d:23:20:14:94:a2:1c:40:5d:c3: 37:07:7a:7e:59:79:d3:56:19:26:88:79:ec:4c:38:5e:26:ae: 31:79:21:91:cc:a8:f0:0e:26:f9:59:6b:96:b4:36:5a:65:18: 8e:6f:b9:4b:00:34:9a:6e:43:d6:17:ad:08:d3:a5:d7:03:e9: 6e:49:f0:3b:c9:ee:49:4e:46:c5:d7:3d:5d:05:59:46:2b:5f: a7:7c:79:e1:64:71:e1:77:63:45:af:a1:32:bb:7e:8e:12:5f: e1:7b:3e:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlJB2gVn593Tb0PkoN4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0Zjc1Mjk1YmI5NWI1NTQ1Mzg0NGYzMmQ2ZTM5NTA5ZDNi ZWNlNDUwHhcNMjUxMjA2MDEwMjE1WhcNMjUxMjA3MDEwMjE1WjAzMTEwLwYDVQQD EygzNGY4YWRlNDY1YmRjNDBjYzAxMGViYmMyOTdkY2RlMjdhZWJiYzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PLGQsp45p9Ntp89zfjkKLyyFKL6 AascPXhOeOECLlUmNOqmRzkL+BkUztuu3YRpDieJAsHHTMmvmoHrpJUgq66ZTXZR /bi8T+FMmatGrSYFBWHSt/obqI9V4D002XQa5k/AymhGUF9iH563a6ags1wZqgo1 8vrxHDIEEplbv5h94nLzXHKZ2PFOM65OeIakSdk36MlwIcKf4rGlBim5ndEYhx51 JggKpIRn1/kUvf9Jy0K5VNLL/THoLltbTqQ6g53fqbcEmy2tu822B4bXZhFI2RTi ofgjaOUlEfakOBxWwgnBuo7fKkLu/H7gbjutHb8Caenc16j7qiY9p10kAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDT4reRlvcQMwBDrvCl9zeJ667w0MB8GA1UdIwQY MBaAFDT3UpW7lbVUU4RPMtbjlQnTvs5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUt ZDk1ZTVhNjNhNDhlLzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85ZGMzZTAtOGRlMC00OTRiLThmZjUtZDk1ZTVhNjNhNDhl LzEvTlBkU2xidVZ0VlJUaEU4eTF1T1ZDZE8temtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+8PzDPI IeIcd+RMHjKST2drzCJqfCuWsS+5WjmZf8A4aFmoSlELCPUDgmaMqBsJIORnSocW gvCC0XQD2g5wfNv0YluuIH9QK0Z5XRvK267o5+z7Md+coLYP7p16gTiEvCsgxHMF s9ZanfFu6VW5Ihq4lEY/tKfg62jZiAkXPDBBu/Y4pukd7Mz8ASm0ff3VpLO4mZa1 OuONIyAUlKIcQF3DNwd6fll501YZJoh57Ew4XiauMXkhkcyo8A4m+VlrlrQ2WmUY jm+5SwA0mm5D1hetCNOl1wPpbknwO8nuSU5Gxdc9XQVZRitfp3x54WRx4XdjRa+h Mrt+jhJf4Xs+vA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:17:04 2025 by rpki-client