This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft File: NPuMu3pio_Drqk5fRqvjHiXRfP0.mft (raw, json) Hash identifier: cDQO0YRhbtYvA4wBw5/lA5iNmZ5f+1E1J/uJeNLDRBc= Subject key identifier: 5B:3E:45:CB:8E:7B:C1:9E:9C:73:AE:59:3A:78:C0:44:3E:8B:8B:33 Authority key identifier: 34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD Certificate issuer: /CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd Certificate serial: 019B27775DEECE988C8680947B3F8767763A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft Manifest number: 06A1 Signing time: Tue 16 Dec 2025 14:01:32 +0000 Manifest this update: Tue 16 Dec 2025 14:01:32 +0000 Manifest next update: Wed 17 Dec 2025 14:01:32 +0000 Files and hashes: 1: NPuMu3pio_Drqk5fRqvjHiXRfP0.crl (hash: ONQYHJCxJaL7golDM92L8i27jIUuHSaV3Zyuys1A1M0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:5d:ee:ce:98:8c:86:80:94:7b:3f:87:67:76:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fb8cbb7a62a3f0ebaa4e5f46abe31e25d17cfd Validity Not Before: Dec 16 14:01:32 2025 GMT Not After : Dec 17 14:01:32 2025 GMT Subject: CN=5b3e45cb8e7bc19e9c73ae593a78c0443e8b8b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9d:96:91:46:49:66:81:10:ba:12:23:4d:92: 95:1c:9b:aa:3b:7e:a5:23:ed:b0:fa:49:a2:b7:9c: 11:39:8d:9c:79:75:ec:72:e9:5a:12:9c:4f:e0:75: 18:8c:ca:0a:1b:cb:72:d2:8e:99:a3:e2:a9:f9:e1: d1:e6:39:37:ab:c4:1a:81:cf:35:cc:18:91:60:2e: 31:46:eb:d0:a8:13:f7:59:c8:a2:90:62:42:df:4e: df:3c:ac:22:a2:9b:c7:c8:9f:d1:9a:19:e6:f5:29: 04:2c:90:18:10:22:8b:76:df:04:f1:3d:21:28:91: f5:f9:a9:e2:f8:16:78:70:04:70:44:a0:ae:99:11: 37:aa:98:27:d8:49:cd:7c:9c:bd:7b:65:08:90:fa: e7:1b:99:4c:fd:00:84:7b:11:18:b7:d4:d0:7b:48: 67:6a:71:d0:25:50:da:e1:fa:c7:50:d8:4b:bf:a9: 08:cb:8b:3b:f0:7a:01:a8:3b:1d:9a:b7:4b:e6:47: de:af:e7:f9:1b:03:41:9c:51:52:f5:bb:66:25:e2: a4:b4:4b:8f:58:2a:f1:31:4b:75:0b:5f:2f:69:88: 9a:62:51:50:b3:55:8b:c5:0d:02:33:68:e7:8d:57: 77:6b:6a:20:eb:86:df:b6:5d:cf:63:02:cf:d9:25: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3E:45:CB:8E:7B:C1:9E:9C:73:AE:59:3A:78:C0:44:3E:8B:8B:33 X509v3 Authority Key Identifier: keyid:34:FB:8C:BB:7A:62:A3:F0:EB:AA:4E:5F:46:AB:E3:1E:25:D1:7C:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPuMu3pio_Drqk5fRqvjHiXRfP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/8ce83c-ccc8-45dd-b67e-a79d09644779/1/NPuMu3pio_Drqk5fRqvjHiXRfP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3a:21:1e:3d:fa:9f:8b:4d:ab:4d:0b:8e:1c:5f:ad:72:3e: 44:5d:b7:61:ea:63:b0:12:29:ed:a1:78:f8:33:67:4c:dc:57: bc:45:02:1e:52:e9:50:7e:16:4e:ff:8d:50:e9:5e:0c:3e:a3: 90:ed:8a:4a:13:07:56:c7:c4:12:0f:a1:38:05:de:54:e0:a9: 1c:d6:c7:73:8f:75:4d:4e:a5:9c:5d:f3:de:a1:9f:4f:36:94: 39:00:20:97:35:8d:1c:11:de:5b:65:31:58:ec:8d:df:7c:90: 6c:38:b9:63:42:93:59:61:74:65:45:e5:b8:f2:dd:86:5b:17: 64:dd:ed:55:4b:ca:48:c8:ed:77:ec:c9:3a:c9:5a:93:bf:7b: 56:e9:b0:48:56:4f:f2:71:d4:61:e5:c0:04:96:45:91:c3:cb: 70:0a:31:eb:9a:e0:87:47:61:37:cd:54:81:1c:67:88:3c:6b: 71:1b:92:17:77:2e:48:7b:5d:dd:80:81:9f:0b:90:27:51:b0: 9d:b0:0a:8d:9b:84:e0:41:9f:7d:8e:86:29:4b:08:15:63:9b: f5:70:f9:90:e3:f0:86:54:23:d1:a7:31:fc:1a:12:a6:97:05: bd:7c:c5:c9:9e:51:d2:fd:eb:af:f3:df:90:a4:5d:6a:27:cd: 15:25:3e:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnd13uzpiMhoCUez+HZ3Y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmI4Y2JiN2E2MmEzZjBlYmFhNGU1ZjQ2YWJlMzFlMjVk MTdjZmQwHhcNMjUxMjE2MTQwMTMyWhcNMjUxMjE3MTQwMTMyWjAzMTEwLwYDVQQD Eyg1YjNlNDVjYjhlN2JjMTllOWM3M2FlNTkzYTc4YzA0NDNlOGI4YjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp2WkUZJZoEQuhIjTZKVHJuqO36l I+2w+kmit5wROY2ceXXsculaEpxP4HUYjMoKG8ty0o6Zo+Kp+eHR5jk3q8Qagc81 zBiRYC4xRuvQqBP3WciikGJC307fPKwiopvHyJ/Rmhnm9SkELJAYECKLdt8E8T0h KJH1+ani+BZ4cARwRKCumRE3qpgn2EnNfJy9e2UIkPrnG5lM/QCEexEYt9TQe0hn anHQJVDa4frHUNhLv6kIy4s78HoBqDsdmrdL5kfer+f5GwNBnFFS9btmJeKktEuP WCrxMUt1C18vaYiaYlFQs1WLxQ0CM2jnjVd3a2og64bftl3PYwLP2SU0NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFs+RcuOe8GenHOuWTp4wEQ+i4szMB8GA1UdIwQY MBaAFDT7jLt6YqPw66pOX0ar4x4l0Xz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlB1TXUzcGlvX0RycWs1ZlJxdmpIaVhSZlAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84Y2U4M2MtY2NjOC00NWRkLWI2N2Ut YTc5ZDA5NjQ0Nzc5LzEvTlB1TXUzcGlvX0RycWs1ZlJxdmpIaVhSZlAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS84Y2U4M2MtY2NjOC00NWRkLWI2N2UtYTc5ZDA5NjQ0Nzc5 LzEvTlB1TXUzcGlvX0RycWs1ZlJxdmpIaVhSZlAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDohHj36 n4tNq00LjhxfrXI+RF23YepjsBIp7aF4+DNnTNxXvEUCHlLpUH4WTv+NUOleDD6j kO2KShMHVsfEEg+hOAXeVOCpHNbHc491TU6lnF3z3qGfTzaUOQAglzWNHBHeW2Ux WOyN33yQbDi5Y0KTWWF0ZUXluPLdhlsXZN3tVUvKSMjtd+zJOslak797VumwSFZP 8nHUYeXABJZFkcPLcAox65rgh0dhN81UgRxniDxrcRuSF3cuSHtd3YCBnwuQJ1Gw nbAKjZuE4EGffY6GKUsIFWOb9XD5kOPwhlQj0acx/BoSppcFvXzFyZ5R0v3rr/Pf kKRdaifNFSU+YQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:57 2025 by rpki-client