This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft File: npTVvz231nNNzxvmItX97i_sO48.mft (raw, json) Hash identifier: Wt+2qMRQKPHcKHTKj24sp2uXqdvqwApSAe66cALvKAU= Subject key identifier: AD:CC:78:4C:6E:6A:89:C9:1A:F4:0F:40:88:59:FF:FB:FC:08:CB:FA Authority key identifier: 9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F Certificate issuer: /CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f Certificate serial: 019AF31CCB30507634D0BD2E5F6925453C0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft Manifest number: 0820 Signing time: Sat 06 Dec 2025 10:02:21 +0000 Manifest this update: Sat 06 Dec 2025 10:02:21 +0000 Manifest next update: Sun 07 Dec 2025 10:02:21 +0000 Files and hashes: 1: NixiWYmD-vroRsSm1dMfYuXBZWQ.roa (hash: CO9r6UJIKKxiHIlAzYOgJDFF6Cx5kTVMmonckxBJgDA=) 2: npTVvz231nNNzxvmItX97i_sO48.crl (hash: Ej5MY3lqcDZpf0AFs9On1MzLJZWrpSu/ELr4eWHs44Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cb:30:50:76:34:d0:bd:2e:5f:69:25:45:3c:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e94d5bf3db7d6734dcf1be622d5fdee2fec3b8f Validity Not Before: Dec 6 10:02:21 2025 GMT Not After : Dec 7 10:02:21 2025 GMT Subject: CN=adcc784c6e6a89c91af40f408859fffbfc08cbfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:71:f1:92:18:fb:2e:5d:87:74:71:d5:2c: cf:e1:49:ec:a1:9c:70:e6:63:05:90:16:63:e4:e5: 94:30:59:1b:05:7d:dd:6d:f0:f4:66:c8:b1:66:d8: 8c:2c:ba:51:dc:8a:00:14:67:2f:ef:cf:e0:95:7e: 7a:14:6b:ee:90:f7:e3:28:13:8b:ef:ae:22:f4:fe: b4:38:67:9f:d1:5e:6c:e0:3d:9d:63:c2:07:90:f6: 0b:83:41:4f:5e:db:15:e4:ed:d9:43:42:c3:86:1f: cb:77:fd:df:ec:5f:e6:0d:a2:6d:3e:9e:8a:1f:17: ee:1f:7c:c4:5e:ef:02:34:1b:d4:f5:25:ca:60:c0: eb:d4:0e:9c:81:1a:72:b2:07:5a:4f:db:9e:2f:42: 0a:81:22:ae:bc:1a:af:23:be:74:4c:d4:4b:bd:a6: f8:90:6a:83:3e:4c:4b:2d:0e:f7:97:ca:c5:a0:e9: ff:54:cf:16:ea:85:2d:4c:1e:f4:cd:cc:93:d8:ca: f7:a6:5e:7a:97:c1:59:35:a3:fd:fe:60:bf:54:27: d1:79:f3:23:79:89:dd:27:b3:0e:6a:f2:31:03:ef: f6:c2:cb:76:95:f6:5f:6c:c2:89:7e:1d:eb:d3:5f: 78:db:32:cd:1b:bf:ff:b5:70:40:9b:83:63:97:99: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CC:78:4C:6E:6A:89:C9:1A:F4:0F:40:88:59:FF:FB:FC:08:CB:FA X509v3 Authority Key Identifier: keyid:9E:94:D5:BF:3D:B7:D6:73:4D:CF:1B:E6:22:D5:FD:EE:2F:EC:3B:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npTVvz231nNNzxvmItX97i_sO48.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1383aa-108b-46ef-ac9e-9cee23a60566/1/npTVvz231nNNzxvmItX97i_sO48.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:04:19:63:a6:5b:64:92:26:2f:76:14:93:53:51:a1:e0:78: 4f:b6:64:1b:db:c5:8f:ae:95:b1:db:bd:ff:32:e7:c0:39:0f: 5b:28:cc:18:0d:c6:3c:d7:19:fe:25:8a:c7:bd:55:a8:1b:fc: 74:84:65:f6:3a:e1:87:f6:33:70:33:a5:ef:4f:3b:c4:90:14: 3d:7d:90:4d:36:fb:18:9e:76:fb:4f:f5:b6:ab:ff:48:2f:a3: b6:56:79:9c:0e:21:e1:bc:1f:4e:3e:3f:77:aa:28:56:7f:c8: b9:dc:d3:c1:ef:3b:1e:95:7b:a6:3e:35:0e:4c:5e:6d:dd:7f: 55:f8:ed:20:03:c2:6a:8e:0b:7c:fa:77:d6:a8:87:a0:ae:3f: 02:f3:78:dd:84:36:de:d7:38:a4:d0:61:82:88:cf:52:09:27: 7c:65:df:c8:2c:c6:5e:09:62:9e:30:d1:1a:2c:c1:b5:fd:29: b4:c0:7e:c7:ea:a3:22:6d:44:0a:39:42:b0:e0:02:3b:8e:79: 6f:4b:c8:87:71:01:b3:0d:b5:7c:df:90:01:a1:92:89:c6:58: 9d:cc:4c:25:e3:54:62:d6:fa:e0:d8:0a:15:23:39:c1:13:4d: e5:82:93:20:a5:47:e9:61:cd:b4:2a:4d:70:0a:d5:8c:be:de: d6:00:89:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMswUHY00L0uX2klRTwMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTRkNWJmM2RiN2Q2NzM0ZGNmMWJlNjIyZDVmZGVlMmZl YzNiOGYwHhcNMjUxMjA2MTAwMjIxWhcNMjUxMjA3MTAwMjIxWjAzMTEwLwYDVQQD EyhhZGNjNzg0YzZlNmE4OWM5MWFmNDBmNDA4ODU5ZmZmYmZjMDhjYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApihx8ZIY+y5dh3Rx1SzP4UnsoZxw 5mMFkBZj5OWUMFkbBX3dbfD0ZsixZtiMLLpR3IoAFGcv78/glX56FGvukPfjKBOL 764i9P60OGef0V5s4D2dY8IHkPYLg0FPXtsV5O3ZQ0LDhh/Ld/3f7F/mDaJtPp6K HxfuH3zEXu8CNBvU9SXKYMDr1A6cgRpysgdaT9ueL0IKgSKuvBqvI750TNRLvab4 kGqDPkxLLQ73l8rFoOn/VM8W6oUtTB70zcyT2Mr3pl56l8FZNaP9/mC/VCfRefMj eYndJ7MOavIxA+/2wst2lfZfbMKJfh3r01942zLNG7//tXBAm4Njl5l/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3MeExuaonJGvQPQIhZ//v8CMv6MB8GA1UdIwQY MBaAFJ6U1b89t9ZzTc8b5iLV/e4v7DuPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUt OWNlZTIzYTYwNTY2LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xMzgzYWEtMTA4Yi00NmVmLWFjOWUtOWNlZTIzYTYwNTY2 LzEvbnBUVnZ6MjMxbk5Oenh2bUl0WDk3aV9zTzQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagQZY6Zb ZJImL3YUk1NRoeB4T7ZkG9vFj66Vsdu9/zLnwDkPWyjMGA3GPNcZ/iWKx71VqBv8 dIRl9jrhh/YzcDOl7087xJAUPX2QTTb7GJ52+0/1tqv/SC+jtlZ5nA4h4bwfTj4/ d6ooVn/IudzTwe87HpV7pj41Dkxebd1/VfjtIAPCao4LfPp31qiHoK4/AvN43YQ2 3tc4pNBhgojPUgknfGXfyCzGXglinjDRGizBtf0ptMB+x+qjIm1ECjlCsOACO455 b0vIh3EBsw21fN+QAaGSicZYncxMJeNUYtb64NgKFSM5wRNN5YKTIKVH6WHNtCpN cArVjL7e1gCJTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:10:14 2025 by rpki-client