This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft (raw, json) Hash identifier: cj6SD++d4cZNnggT1xfwPHGgM0lSOc+whyYPlDKb+08= Subject key identifier: DC:75:F8:46:51:32:19:56:B7:05:24:F9:F1:C4:5A:C8:DB:A9:B2:45 Authority key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F Certificate issuer: /CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Certificate serial: 019AF3F815095FBCC83863ED2267ACC7318F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft Manifest number: 1780 Signing time: Sat 06 Dec 2025 14:01:52 +0000 Manifest this update: Sat 06 Dec 2025 14:01:52 +0000 Manifest next update: Sun 07 Dec 2025 14:01:52 +0000 Files and hashes: 1: 1eZC9enfXbKkbChbya2s-NBXR10.roa (hash: K8gL7gYOdUPnWfON7y82NF9djuzcQAO7yPjvMnV4HWA=) 2: 4C1hs3Awu1pUWnx11isTd7urO8g.roa (hash: NHlupIJQHDTwRScv0dlfz2lFTerJ3fgzUZ9KeBTbFHo=) 3: 4aaliOpCta1xxwdPdgm9XgmQVe4.roa (hash: 50PVROIOCSd7qW0XXvFqQMxjDosAhVmRwG7IVPmy7ik=) 4: LNJOsnr56BpDhx0zCSJoGF_8kg4.roa (hash: ipKdM/rgGFJqpM5XZ1watukNv4jI5z2rHAUKNiP8l9M=) 5: NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl (hash: PvhnzQyF3gYXOcehlMeohsFRnpy4tNX9NY2dqy4aVf8=) 6: P4RQICIsv2ynDFNy1pTdbhvIXok.roa (hash: 3BspGo/InWWElD0+8Z5QOqYWItS4j6gIXyuD2KZuZ58=) 7: ibQsYiMOU1D97Z6dBw2Z2nuJoA0.roa (hash: paBGRr0SKtx93/jOWaEGPMAan4qkVxtM/IYXrSHwl6Y=) 8: jBgv17Pl-Vh_L1PF3KmB8kI2bak.roa (hash: yIwLWwTP6qcl+lhvdLDbXrkIo53nDQZcaNGlgxGXrqE=) 9: xlTjepejuGlW3CGUnuf8jiI_Sb8.roa (hash: xnJVidZPq3qTfXPcYiZGHTVkjYmciZFHEO03/ve53hw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f8:15:09:5f:bc:c8:38:63:ed:22:67:ac:c7:31:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f Validity Not Before: Dec 6 14:01:52 2025 GMT Not After : Dec 7 14:01:52 2025 GMT Subject: CN=dc75f84651321956b70524f9f1c45ac8dba9b245 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:95:22:1f:4c:98:3b:31:ee:b5:6e:89:fa:43: a1:61:a2:eb:1e:b1:89:da:79:41:bc:cf:4a:49:53: b4:86:f4:cb:d9:07:7f:68:53:b0:cb:a9:cf:d5:c3: 72:d4:7d:f5:d5:1e:53:48:3c:91:3a:4a:4d:38:12: 3e:65:d6:57:d2:6d:e3:c8:ad:fc:65:71:62:10:24: c0:d1:ff:0e:a7:ce:9e:b2:8c:01:8e:7a:cb:53:10: 07:fe:57:99:b0:f0:95:24:46:0d:0a:b9:8d:8d:db: aa:f2:22:26:95:ee:9f:86:24:50:48:55:77:bd:f4: db:fd:68:38:1f:b2:5e:00:c7:40:8f:9c:7d:f7:c2: 20:b9:5c:7b:09:91:d9:94:a2:27:3b:92:89:2b:81: 07:17:d3:a4:f5:36:31:bf:11:74:96:c6:22:43:2a: 23:c1:16:74:c0:a0:50:50:56:62:4b:29:86:eb:26: 46:b1:2c:d8:6b:02:5a:c7:a9:4b:66:ea:b9:c2:1a: eb:30:6d:87:4b:02:ea:ad:4b:f3:6b:12:ab:05:33: cc:a1:41:57:f5:36:14:4f:a4:6c:9f:e6:a9:62:70: 99:4b:12:6a:5e:1b:bd:11:07:df:5b:df:81:a9:d9: 87:ed:89:9b:73:48:95:73:1d:76:95:cf:a6:2c:fe: 31:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:75:F8:46:51:32:19:56:B7:05:24:F9:F1:C4:5A:C8:DB:A9:B2:45 X509v3 Authority Key Identifier: keyid:36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9a:88:95:3a:7e:ed:4c:f8:d3:46:95:16:e6:af:dc:13:47: 91:f5:eb:0c:be:80:dd:12:10:3d:b1:0c:71:4b:92:51:e8:db: b2:73:38:6d:e1:77:3a:89:a3:27:35:9d:11:62:81:8b:60:7d: 6d:b3:86:bc:c1:f0:42:27:79:a1:f7:04:b4:55:50:46:78:e7: 88:c3:ed:4e:ef:da:f3:90:53:62:8e:be:06:4e:51:73:a0:30: e4:ed:b5:e6:e4:c3:99:8d:b1:96:0a:a8:93:15:78:20:79:ed: 0f:a1:5e:00:b6:38:79:75:1c:65:6e:b3:6e:2e:55:fa:8c:43: 55:f2:e4:ad:6e:57:36:37:e1:d4:37:44:92:8c:99:98:b2:d6: a1:ba:34:b1:0a:da:c9:1b:c6:b8:09:e2:c4:ed:38:db:b5:e4: 8a:8f:b2:b6:28:e4:f6:17:84:ae:87:0f:ac:8d:59:20:d6:11: 60:49:44:00:8b:65:3a:cc:dd:20:48:2b:0b:16:b5:7c:57:b9: fe:62:c8:6b:97:31:c4:af:c5:37:17:c5:64:7f:5d:24:05:a2: 6b:04:25:e0:e0:b2:fb:64:cb:ba:96:b9:09:78:33:54:d7:92: ea:d2:f5:ab:06:f8:10:fe:22:70:5a:b4:6e:a0:96:03:ca:21: cb:a4:2b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz+BUJX7zIOGPtImesxzGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2OTRmY2M2YmY2YTg3NDBmYTc4MTQ2NDFmZDlkNmVjOGQ4 NjJlNWYwHhcNMjUxMjA2MTQwMTUyWhcNMjUxMjA3MTQwMTUyWjAzMTEwLwYDVQQD EyhkYzc1Zjg0NjUxMzIxOTU2YjcwNTI0ZjlmMWM0NWFjOGRiYTliMjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4JUiH0yYOzHutW6J+kOhYaLrHrGJ 2nlBvM9KSVO0hvTL2Qd/aFOwy6nP1cNy1H311R5TSDyROkpNOBI+ZdZX0m3jyK38 ZXFiECTA0f8Op86esowBjnrLUxAH/leZsPCVJEYNCrmNjduq8iImle6fhiRQSFV3 vfTb/Wg4H7JeAMdAj5x998IguVx7CZHZlKInO5KJK4EHF9Ok9TYxvxF0lsYiQyoj wRZ0wKBQUFZiSymG6yZGsSzYawJax6lLZuq5whrrMG2HSwLqrUvzaxKrBTPMoUFX 9TYUT6Rsn+apYnCZSxJqXhu9EQffW9+BqdmH7Ymbc0iVcx12lc+mLP4x9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNx1+EZRMhlWtwUk+fHEWsjbqbJFMB8GA1UdIwQY MBaAFDaU/Ma/aodA+ngUZB/Z1uyNhi5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUt MGQzZmNlNDI5YmRlLzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hOGRkOWUtNzFmMi00Zjc3LWI1NzUtMGQzZmNlNDI5YmRl LzEvTnBUOHhyOXFoMEQ2ZUJSa0g5blc3STJHTGw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF5qIlTp+ 7Uz400aVFuav3BNHkfXrDL6A3RIQPbEMcUuSUejbsnM4beF3OomjJzWdEWKBi2B9 bbOGvMHwQid5ofcEtFVQRnjniMPtTu/a85BTYo6+Bk5Rc6Aw5O215uTDmY2xlgqo kxV4IHntD6FeALY4eXUcZW6zbi5V+oxDVfLkrW5XNjfh1DdEkoyZmLLWobo0sQra yRvGuAnixO0427Xkio+ytijk9heErocPrI1ZINYRYElEAItlOszdIEgrCxa1fFe5 /mLIa5cxxK/FNxfFZH9dJAWiawQl4OCy+2TLupa5CXgzVNeS6tL1qwb4EP4icFq0 bqCWA8ohy6Qr9A== -----END CERTIFICATE-----Generated at Sat Dec 6 17:37:01 2025 by rpki-client