This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json) Hash identifier: 9X1hNypm4vWrzgSzVOR5Np1DK9Xrj/krDMQFtwuJSOM= Subject key identifier: FE:3B:51:DF:B7:AF:38:3B:8C:BF:C8:69:86:70:5E:E9:85:DA:FD:A1 Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae Certificate serial: 019AF31BB3C8761E80F64B010F473F7DD6DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft Manifest number: 0E28 Signing time: Sat 06 Dec 2025 10:01:10 +0000 Manifest this update: Sat 06 Dec 2025 10:01:10 +0000 Manifest next update: Sun 07 Dec 2025 10:01:10 +0000 Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: qW66QgDuFzcSpHkAItNZHMx5OWBM/eP0+Ne9HAMblfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:b3:c8:76:1e:80:f6:4b:01:0f:47:3f:7d:d6:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae Validity Not Before: Dec 6 10:01:10 2025 GMT Not After : Dec 7 10:01:10 2025 GMT Subject: CN=fe3b51dfb7af383b8cbfc86986705ee985dafda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:93:5b:bf:d9:47:d6:e1:f3:48:89:d9:19:c4: 6b:af:80:e0:91:ee:90:35:4f:19:57:10:92:e7:68: b7:12:38:4e:3f:65:e9:8f:8f:e1:e4:f7:7e:e1:70: a9:b2:be:13:f4:98:2e:23:f1:22:aa:57:c4:40:4f: 11:9a:3f:c9:8e:dd:d9:f0:dd:a0:43:3f:59:57:77: 3d:fd:08:ef:7a:f3:45:e2:c9:b1:ab:77:10:d2:3d: ef:90:bc:47:ea:22:3c:b2:05:d4:29:99:87:a7:29: 11:bb:5a:d5:6d:74:8f:0b:81:37:3c:3b:ca:4f:27: 1f:9a:46:e4:55:32:95:1b:af:db:23:d5:fd:8c:4f: 80:17:3e:a3:9a:14:1e:71:32:df:fe:9d:3e:0a:49: 9c:62:ea:30:d3:2f:4a:cc:fb:15:b9:54:85:63:ac: de:ef:de:b9:eb:9e:03:ef:ea:11:e8:06:26:31:76: c8:df:81:07:60:07:fb:d6:4e:cb:76:bf:ab:0c:39: 54:47:1a:48:7e:d1:da:5a:55:dd:ab:0a:1a:43:d2: 5a:a2:7d:7d:c0:e3:64:62:bd:25:e2:dc:2f:a4:2d: f3:e7:29:fc:4f:96:71:5e:05:69:1f:f1:f4:10:12: df:16:3e:ec:fe:0b:bc:d2:c6:48:55:14:1a:6c:cf: 26:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:3B:51:DF:B7:AF:38:3B:8C:BF:C8:69:86:70:5E:E9:85:DA:FD:A1 X509v3 Authority Key Identifier: keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:32:f0:e8:b1:d5:95:f8:40:11:24:ab:7d:37:c1:9a:a3:36: 27:6a:7d:cf:c1:89:ed:cf:16:27:b1:a3:0d:68:c1:63:d4:e0: 97:01:23:ad:d6:13:3e:65:35:66:31:41:51:6f:ea:2a:81:a1: 01:cd:57:15:8e:08:a7:3f:c0:96:45:cf:04:7e:44:ca:59:92: 6f:01:a5:87:da:0a:80:5b:d3:d3:7d:62:05:cb:42:d1:fb:e5: dd:24:93:2a:1a:6a:72:31:37:3c:3b:14:3a:c1:27:d8:3b:76: 9f:77:c3:42:70:85:af:11:33:1d:b5:16:a0:db:9b:43:e2:0b: 8d:a2:eb:0a:e3:b1:7a:a0:64:3c:c5:fa:9d:7a:e5:05:df:cb: dd:21:e9:38:ee:fb:8d:9a:f5:7e:ab:32:f5:e1:c0:cb:3d:de: 4e:b6:2a:ef:b8:d3:5b:c1:83:7c:35:b8:54:0d:aa:67:17:73: db:7e:45:14:4d:cd:eb:30:8d:30:c3:81:e6:1c:e4:16:1d:38: 1b:d2:0d:52:88:7a:b7:55:58:ab:67:25:6f:af:cd:61:81:ad: 30:10:ac:10:cc:a0:45:32:97:7c:46:b6:5e:be:04:2c:41:fa: 7b:4d:46:09:02:f3:cc:39:c6:ea:fc:88:f2:5e:58:81:d3:15: 06:36:6e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG7PIdh6A9ksBD0c/fdbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTM2YTk2N2NlNTFmZDM0MTA5NDc0Njk5NmJjZWYxNmFj YmVmYWUwHhcNMjUxMjA2MTAwMTEwWhcNMjUxMjA3MTAwMTEwWjAzMTEwLwYDVQQD EyhmZTNiNTFkZmI3YWYzODNiOGNiZmM4Njk4NjcwNWVlOTg1ZGFmZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pNbv9lH1uHzSInZGcRrr4Dgke6Q NU8ZVxCS52i3EjhOP2Xpj4/h5Pd+4XCpsr4T9JguI/EiqlfEQE8Rmj/Jjt3Z8N2g Qz9ZV3c9/QjvevNF4smxq3cQ0j3vkLxH6iI8sgXUKZmHpykRu1rVbXSPC4E3PDvK TycfmkbkVTKVG6/bI9X9jE+AFz6jmhQecTLf/p0+CkmcYuow0y9KzPsVuVSFY6ze 7965654D7+oR6AYmMXbI34EHYAf71k7Ldr+rDDlURxpIftHaWlXdqwoaQ9Jaon19 wONkYr0l4twvpC3z5yn8T5ZxXgVpH/H0EBLfFj7s/gu80sZIVRQabM8mrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP47Ud+3rzg7jL/IaYZwXumF2v2hMB8GA1UdIwQY MBaAFJ6TapZ85R/TQQlHRplrzvFqy++uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2Mt MzM2MGNkZWRiMzVmLzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2MtMzM2MGNkZWRiMzVm LzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDLw6LHV lfhAESSrfTfBmqM2J2p9z8GJ7c8WJ7GjDWjBY9TglwEjrdYTPmU1ZjFBUW/qKoGh Ac1XFY4Ipz/AlkXPBH5EylmSbwGlh9oKgFvT031iBctC0fvl3SSTKhpqcjE3PDsU OsEn2Dt2n3fDQnCFrxEzHbUWoNubQ+ILjaLrCuOxeqBkPMX6nXrlBd/L3SHpOO77 jZr1fqsy9eHAyz3eTrYq77jTW8GDfDW4VA2qZxdz235FFE3N6zCNMMOB5hzkFh04 G9INUoh6t1VYq2clb6/NYYGtMBCsEMygRTKXfEa2Xr4ELEH6e01GCQLzzDnG6vyI 8l5YgdMVBjZuBA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:10 2025 by rpki-client