This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft File: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft (raw, json) Hash identifier: M8EJNP2EuI9p3o/N2FrUH1M7FHFYpp1L3ajbGUb0B74= Subject key identifier: 04:23:92:C1:DB:5A:C0:7D:78:DF:C8:65:76:11:ED:0F:9A:DF:EF:84 Authority key identifier: 35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 Certificate issuer: /CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Certificate serial: 019AF5E566504D9E0E01496D07A23818EF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 23:00:43 +0000 Manifest this update: Sat 06 Dec 2025 23:00:43 +0000 Manifest next update: Sun 07 Dec 2025 23:00:43 +0000 Files and hashes: 1: NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl (hash: z1JohfuXf4V1zjlaecVt+hja6mfnavIxGN95HSHCR9E=) 2: gPqZz-ULbWxNpVtGrAcbURafLCM.roa (hash: bhtp8MkxjHqH+uI5CHLafEhg4ALYqQQHfi1+8hAlks8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:66:50:4d:9e:0e:01:49:6d:07:a2:38:18:ef:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3512a8a6df9978de7227003b1fd3f0e2b9e59cc7 Validity Not Before: Dec 6 23:00:43 2025 GMT Not After : Dec 7 23:00:43 2025 GMT Subject: CN=042392c1db5ac07d78dfc8657611ed0f9adfef84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:26:76:f6:f7:90:f7:c5:1a:bf:65:93:82:ca: 97:32:99:63:e7:ae:37:93:48:af:b7:51:61:a1:66: 44:ca:1a:d2:9a:60:f1:51:db:bc:5c:94:a4:8b:75: a6:34:5a:83:c6:9f:6d:f8:bc:0f:34:65:e2:31:c1: 8a:9c:00:98:01:80:57:76:c7:f7:2e:9e:d9:8c:4d: db:3b:03:ae:bd:88:f0:73:3c:db:0d:7e:2f:fc:ae: a0:3a:06:ea:1f:ce:ca:67:c7:47:fc:3e:14:8b:0a: 47:0d:de:2f:42:b0:23:42:36:2a:0b:12:41:a6:d3: 93:1f:7e:35:b1:0b:e4:30:2d:0a:fb:f8:c0:fd:f7: f8:53:c4:79:2f:89:e6:28:16:df:08:a8:36:2c:de: 00:e5:ec:82:fe:ab:9a:40:05:5d:12:8c:5f:df:7e: 72:d0:fd:f0:50:c7:07:d6:15:b2:df:47:bf:b9:51: 3d:7f:c3:d9:b8:9e:0b:19:e5:fe:ac:7c:10:6a:cf: 11:77:15:a8:bf:ef:28:6d:57:e5:8b:43:f5:0e:e4: 49:96:69:49:11:ea:b0:f9:24:3a:bb:bd:e7:16:10: ca:11:eb:ae:e2:51:76:63:fa:ad:d6:9a:86:02:df: 9c:c0:aa:4c:a5:07:f9:8a:66:ca:a2:9a:f5:66:14: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:23:92:C1:DB:5A:C0:7D:78:DF:C8:65:76:11:ED:0F:9A:DF:EF:84 X509v3 Authority Key Identifier: keyid:35:12:A8:A6:DF:99:78:DE:72:27:00:3B:1F:D3:F0:E2:B9:E5:9C:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0d95ca-baf5-4689-9b5b-747e75e55461/1/NRKopt-ZeN5yJwA7H9Pw4rnlnMc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:fa:78:7d:64:ee:0a:18:3f:16:d8:bc:6a:b1:2a:8a:93:9a: 9f:63:f1:34:82:c6:1a:e3:9c:ef:c8:47:a0:9d:4f:39:aa:b2: 06:46:cf:f9:d1:4f:41:44:70:13:07:d1:5d:1b:62:e2:ad:b1: 5b:14:e8:ea:36:98:d5:5d:b0:96:77:e9:1b:bc:42:df:43:9e: dd:cf:04:5f:83:3a:c5:50:00:78:a4:96:89:3c:a4:41:6c:83: 34:45:4e:b8:83:70:eb:2d:37:50:98:31:73:38:82:83:17:ee: 12:84:49:9e:9f:12:56:c8:a8:1d:c6:50:05:88:5e:d2:fa:fa: de:79:7f:e6:dd:60:6a:51:a8:83:6d:ae:76:e5:d7:02:2a:4e: 11:35:6f:7b:3c:54:73:ac:a3:48:0a:d5:93:4f:5d:8a:c0:82: ef:c3:36:09:e5:e5:5d:50:b3:ac:97:c0:68:af:75:2b:2a:06: 84:d5:bb:45:09:35:ea:0a:97:2a:55:d7:f7:16:b9:99:6a:e6: a5:95:95:af:6d:02:6d:ce:f4:f5:45:7c:6c:96:06:90:91:49: a6:58:cc:b0:5d:2e:85:ad:6a:30:1d:73:15:06:cd:f1:56:2f: f0:11:98:f3:91:10:c9:ad:1a:99:71:68:f9:12:67:0a:dd:10: 98:07:0e:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15WZQTZ4OAUltB6I4GO+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MTJhOGE2ZGY5OTc4ZGU3MjI3MDAzYjFmZDNmMGUyYjll NTljYzcwHhcNMjUxMjA2MjMwMDQzWhcNMjUxMjA3MjMwMDQzWjAzMTEwLwYDVQQD EygwNDIzOTJjMWRiNWFjMDdkNzhkZmM4NjU3NjExZWQwZjlhZGZlZjg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SZ29veQ98Uav2WTgsqXMplj5643 k0ivt1FhoWZEyhrSmmDxUdu8XJSki3WmNFqDxp9t+LwPNGXiMcGKnACYAYBXdsf3 Lp7ZjE3bOwOuvYjwczzbDX4v/K6gOgbqH87KZ8dH/D4UiwpHDd4vQrAjQjYqCxJB ptOTH341sQvkMC0K+/jA/ff4U8R5L4nmKBbfCKg2LN4A5eyC/quaQAVdEoxf335y 0P3wUMcH1hWy30e/uVE9f8PZuJ4LGeX+rHwQas8RdxWov+8obVfli0P1DuRJlmlJ Eeqw+SQ6u73nFhDKEeuu4lF2Y/qt1pqGAt+cwKpMpQf5imbKopr1ZhT/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQjksHbWsB9eN/IZXYR7Q+a3++EMB8GA1UdIwQY MBaAFDUSqKbfmXjecicAOx/T8OK55ZzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWIt NzQ3ZTc1ZTU1NDYxLzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8wZDk1Y2EtYmFmNS00Njg5LTliNWItNzQ3ZTc1ZTU1NDYx LzEvTlJLb3B0LVplTjV5SndBN0g5UHc0cm5sbk1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPp4fWTu Chg/Fti8arEqipOan2PxNILGGuOc78hHoJ1POaqyBkbP+dFPQURwEwfRXRti4q2x WxTo6jaY1V2wlnfpG7xC30Oe3c8EX4M6xVAAeKSWiTykQWyDNEVOuINw6y03UJgx cziCgxfuEoRJnp8SVsioHcZQBYhe0vr63nl/5t1galGog22uduXXAipOETVvezxU c6yjSArVk09disCC78M2CeXlXVCzrJfAaK91KyoGhNW7RQk16gqXKlXX9xa5mWrm pZWVr20Cbc709UV8bJYGkJFJpljMsF0uha1qMB1zFQbN8VYv8BGY85EQya0amXFo +RJnCt0QmAcO/w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:16 2025 by rpki-client