This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
File:                     NpL-31nGDTJU43qcjs3hHJuhKCo.mft (raw, json)
Hash identifier:          yTunUjtxDgKyp2ZFuJ7C3Y4TJL26DNhW/b4vdheQSxc=
Subject key identifier:   E6:DF:DF:9D:05:8E:5D:08:06:AD:04:10:9D:BE:44:90:DD:23:F3:AD
Authority key identifier: 36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A
Certificate issuer:       /CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
Certificate serial:       019AF1D18B446EE28BF3D3F55309765AD0F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
Manifest number:          180C
Signing time:             Sat 06 Dec 2025 04:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 04:00:32 +0000
Manifest next update:     Sun 07 Dec 2025 04:00:32 +0000
Files and hashes:         1: 1-GJhYiuUUrP8RhmBh0USv-VEBfA.roa (hash: yv0HSZPQLPjAOK0Qjg6MUOpe4+d1qLZAv2u1ddULbTs=)
                          2: 8zzToX2_MSbXjPU6GvHQQ_9Dvvk.roa (hash: wilJSEirQsqEx26ndpfgfkDVvj+zVkzSkCh5uXU9fHI=)
                          3: NpL-31nGDTJU43qcjs3hHJuhKCo.crl (hash: swqI6mEBgMXBKd8MkZ8aonP4H1rSMSdO+bbvPB0jMjg=)
                          4: bHL_tTznnHPbHP4F0hJKIReYm6M.roa (hash: R72+H7qsqTY9GklcA/NGuJeZ8wkSyMWhn933bwOHpJE=)
                          5: q8AP7H93ZbNKPWz_Zh0y6fK8m7g.roa (hash: Jd2YHA+NTHYb6+qWLH1KGDGjnXW6xUSmZVAZe2REuGQ=)
                          6: rf6L0TwRlHBLPhVKaPDEKnbqT_w.roa (hash: AzTZWJBoZdwqFymIdorc82U7WjpDv54tYnTW1K3fl6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d1:8b:44:6e:e2:8b:f3:d3:f5:53:09:76:5a:d0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3692fedf59c60d3254e37a9c8ecde11c9ba1282a
        Validity
            Not Before: Dec  6 04:00:32 2025 GMT
            Not After : Dec  7 04:00:32 2025 GMT
        Subject: CN=e6dfdf9d058e5d0806ad04109dbe4490dd23f3ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:3f:71:24:0d:02:4e:d3:b1:cd:ab:4e:e5:
                    8e:6f:6d:b1:66:84:b6:c6:66:5a:7b:58:da:87:fd:
                    07:7a:b7:a3:56:62:1c:24:c0:02:dc:f9:4e:9b:7f:
                    19:8a:9c:fb:57:8e:bb:89:92:90:44:02:8f:71:d8:
                    1b:73:be:8f:7f:da:9b:04:f8:52:5d:ca:df:19:4f:
                    7b:31:27:44:f3:c5:c2:35:98:86:c0:53:64:c3:ee:
                    3c:f8:63:49:48:ab:8e:96:1a:33:45:0e:12:a7:f0:
                    cc:40:2c:25:38:f9:f1:19:0e:12:15:02:d3:97:f4:
                    6e:e3:50:86:53:63:7c:70:2f:1a:62:64:f4:c7:93:
                    b1:8a:56:e0:09:0e:96:e7:94:e2:56:97:93:41:12:
                    e4:29:aa:59:32:5e:e8:93:da:96:70:1e:01:d6:cb:
                    98:8b:09:f2:09:22:24:d8:fb:44:9b:96:fa:3c:7b:
                    cc:0d:b7:93:a9:82:39:44:bb:2c:e9:a1:47:ce:8e:
                    e2:01:79:95:e9:37:c3:66:22:6a:18:97:de:b0:b2:
                    00:ff:6d:9f:33:b9:49:86:9d:91:b7:d9:59:58:ec:
                    9b:ee:e7:c7:e6:5e:4b:a2:20:f0:a3:93:2d:e8:6f:
                    7f:93:73:01:66:a5:97:03:41:30:53:a2:ad:99:67:
                    9b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DF:DF:9D:05:8E:5D:08:06:AD:04:10:9D:BE:44:90:DD:23:F3:AD
            X509v3 Authority Key Identifier:
                keyid:36:92:FE:DF:59:C6:0D:32:54:E3:7A:9C:8E:CD:E1:1C:9B:A1:28:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpL-31nGDTJU43qcjs3hHJuhKCo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/5c5ad0-d2da-40db-95d1-e7be5e30ad2d/1/NpL-31nGDTJU43qcjs3hHJuhKCo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ea:28:6e:dc:8b:bc:2e:72:8a:aa:94:e0:be:14:d5:1e:ee:
         9d:47:9a:63:de:08:86:14:d9:bf:1a:a6:0a:d3:94:14:c8:9d:
         1d:80:9c:aa:03:41:d3:aa:c8:35:3c:de:fd:ee:5b:68:6f:5c:
         3d:e9:0d:e7:91:ec:12:5e:e7:15:8e:c5:59:c1:5a:4c:d8:8c:
         60:ad:3f:1f:af:88:04:71:e8:65:0d:59:45:89:c5:3e:fa:88:
         6c:85:79:e9:0e:33:77:36:fa:1c:20:08:55:f9:cd:42:bb:1a:
         bb:e0:35:eb:1a:c4:4f:2b:5f:46:7a:2a:26:cc:fe:1c:e6:2f:
         78:3e:48:29:09:7a:75:6f:e2:52:62:a8:fc:0e:19:17:cd:2c:
         cc:d3:ef:29:c6:b1:74:f6:fb:27:6c:28:f3:73:77:81:6e:29:
         4c:5a:c3:1b:bd:5f:4b:71:7a:2c:a0:6c:88:fb:d9:5a:9f:4e:
         ba:2b:f9:4c:3d:5b:0f:7c:59:d8:5a:2c:f2:1a:f4:15:af:c0:
         43:13:2b:c1:69:e0:c1:ce:39:5a:64:89:94:a0:83:cd:45:7e:
         cf:29:b5:db:82:3d:59:01:b4:e1:fa:23:62:a9:55:85:94:57:
         43:d6:c0:8a:9a:0d:08:49:90:33:c3:e3:89:10:f0:be:30:cc:
         cd:58:2b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:07:38 2025 by rpki-client