This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft File: npNqlnzlH9NBCUdGmWvO8WrL764.mft (raw, json) Hash identifier: FuayD0FSt9/HWUKXLBTXsLrR1/SiEcQ7clf10qngQNo= Subject key identifier: 25:54:84:42:C3:13:71:EA:E0:26:4B:8E:9F:54:B4:EA:BE:FC:9E:A5 Authority key identifier: 9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE Certificate issuer: /CN=9e936a967ce51fd341094746996bcef16acbefae Certificate serial: 019B2D0B66728FE483B5B2A070FC6DB86DF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft Manifest number: 0E46 Signing time: Wed 17 Dec 2025 16:01:20 +0000 Manifest this update: Wed 17 Dec 2025 16:01:20 +0000 Manifest next update: Thu 18 Dec 2025 16:01:20 +0000 Files and hashes: 1: npNqlnzlH9NBCUdGmWvO8WrL764.crl (hash: MfPhIFWRDPNq5aDWp6SbzzZP3vDY6/iRX9uy1cY4Z+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:66:72:8f:e4:83:b5:b2:a0:70:fc:6d:b8:6d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e936a967ce51fd341094746996bcef16acbefae Validity Not Before: Dec 17 16:01:20 2025 GMT Not After : Dec 18 16:01:20 2025 GMT Subject: CN=25548442c31371eae0264b8e9f54b4eabefc9ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:4d:da:2b:da:8c:75:3d:4c:91:c1:1d:d4: cd:25:80:c4:7c:ae:7f:2e:8a:2a:a9:39:47:32:a4: 26:7d:90:fe:03:72:54:dd:f9:84:16:7f:0e:d6:8e: 1e:1a:17:2b:a9:88:75:25:5a:78:e1:65:36:aa:60: 86:8a:3b:1e:7a:f3:0d:26:5e:ee:04:1a:da:de:59: 0f:e6:d4:b7:c0:22:2e:58:c0:84:92:83:40:01:10: f7:c7:dd:cc:f5:64:3d:12:e5:74:95:a0:a7:ac:c1: 16:a3:81:fd:59:fc:d6:b2:56:30:35:8e:44:3e:c1: 66:be:f9:47:04:6e:bf:dc:75:34:2f:6c:8c:2c:b2: c0:b0:3e:9f:77:ed:9b:52:4c:9b:be:04:13:08:b4: 9d:a5:e7:e9:89:86:e7:a0:68:5b:1f:c6:a5:7c:ed: a6:b8:e4:d9:d4:00:7b:6d:bc:88:25:39:f8:16:9d: 69:2e:30:3a:61:01:2b:b4:1c:80:9c:02:2a:66:70: aa:2e:02:7b:de:fb:43:33:9a:e8:9a:7b:2a:54:d3: 15:89:c9:91:f5:39:75:52:1c:7d:d3:b4:45:26:3f: 9c:32:eb:e8:59:fa:d9:d4:d3:f3:30:af:9d:61:b2: 72:8e:64:6c:6c:f1:60:ad:aa:c9:ae:ee:ba:0b:ee: c0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:54:84:42:C3:13:71:EA:E0:26:4B:8E:9F:54:B4:EA:BE:FC:9E:A5 X509v3 Authority Key Identifier: keyid:9E:93:6A:96:7C:E5:1F:D3:41:09:47:46:99:6B:CE:F1:6A:CB:EF:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npNqlnzlH9NBCUdGmWvO8WrL764.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d25ed0-fddc-4b28-b47c-3360cdedb35f/1/npNqlnzlH9NBCUdGmWvO8WrL764.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:93:1c:42:9b:3c:ec:ea:c6:cb:f0:87:27:55:01:0f:b1:54: 09:78:c5:cd:a5:d9:e0:9f:42:33:69:fb:db:2b:ff:c3:06:ea: 90:74:d0:5f:2b:bc:eb:1f:18:85:84:8d:c6:2a:ba:db:ca:47: a9:99:81:7f:c3:28:f8:e5:58:5f:1c:ec:25:35:ef:59:f4:bf: 77:5d:6b:ab:5b:19:36:27:15:39:55:5c:25:f8:25:c5:c1:e8: 42:94:b3:03:1e:81:c6:28:a0:01:0c:b6:7a:72:c2:2a:1c:d6: 29:52:51:d1:34:92:a2:b2:c1:95:a6:50:96:9d:47:ed:96:a0: c1:4c:db:12:30:a2:62:ca:2a:e2:66:41:d8:cf:4f:ad:2b:41: 96:85:f7:07:50:29:e1:ba:75:7f:31:9a:9a:75:82:fe:3d:1c: 0c:7e:ef:65:c1:99:1e:fe:d7:e0:cd:ba:75:2c:3c:73:23:d8: 94:8d:20:28:3d:93:b7:86:88:c3:17:c0:81:a3:fe:75:f3:4c: a9:6a:b1:3f:05:be:a7:3a:ea:fa:5d:e0:31:ce:80:95:39:f5: c1:2c:7f:6c:81:39:b1:0a:34:30:50:93:74:a9:97:84:1d:85: c7:ea:72:6b:e4:16:77:15:91:37:af:b0:c3:28:16:54:32:3c: b5:a5:71:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC2Zyj+SDtbKgcPxtuG35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTM2YTk2N2NlNTFmZDM0MTA5NDc0Njk5NmJjZWYxNmFj YmVmYWUwHhcNMjUxMjE3MTYwMTIwWhcNMjUxMjE4MTYwMTIwWjAzMTEwLwYDVQQD EygyNTU0ODQ0MmMzMTM3MWVhZTAyNjRiOGU5ZjU0YjRlYWJlZmM5ZWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUNN2ivajHU9TJHBHdTNJYDEfK5/ LooqqTlHMqQmfZD+A3JU3fmEFn8O1o4eGhcrqYh1JVp44WU2qmCGijseevMNJl7u BBra3lkP5tS3wCIuWMCEkoNAARD3x93M9WQ9EuV0laCnrMEWo4H9WfzWslYwNY5E PsFmvvlHBG6/3HU0L2yMLLLAsD6fd+2bUkybvgQTCLSdpefpiYbnoGhbH8alfO2m uOTZ1AB7bbyIJTn4Fp1pLjA6YQErtByAnAIqZnCqLgJ73vtDM5romnsqVNMVicmR 9Tl1Uhx907RFJj+cMuvoWfrZ1NPzMK+dYbJyjmRsbPFgrarJru66C+7AnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVUhELDE3Hq4CZLjp9UtOq+/J6lMB8GA1UdIwQY MBaAFJ6TapZ85R/TQQlHRplrzvFqy++uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2Mt MzM2MGNkZWRiMzVmLzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kMjVlZDAtZmRkYy00YjI4LWI0N2MtMzM2MGNkZWRiMzVm LzEvbnBOcWxuemxIOU5CQ1VkR21Xdk84V3JMNzY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZMcQps8 7OrGy/CHJ1UBD7FUCXjFzaXZ4J9CM2n72yv/wwbqkHTQXyu86x8YhYSNxiq628pH qZmBf8Mo+OVYXxzsJTXvWfS/d11rq1sZNicVOVVcJfglxcHoQpSzAx6BxiigAQy2 enLCKhzWKVJR0TSSorLBlaZQlp1H7ZagwUzbEjCiYsoq4mZB2M9PrStBloX3B1Ap 4bp1fzGamnWC/j0cDH7vZcGZHv7X4M26dSw8cyPYlI0gKD2Tt4aIwxfAgaP+dfNM qWqxPwW+pzrq+l3gMc6AlTn1wSx/bIE5sQo0MFCTdKmXhB2Fx+pya+QWdxWRN6+w wygWVDI8taVxEQ== -----END CERTIFICATE-----Generated at Wed Dec 17 22:37:13 2025 by rpki-client