This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft File: NPwYIZBVFuYYMg6eRxoTsqqslv8.mft (raw, json) Hash identifier: prfPvczqQieYAn1VCDbQkFeKleE4N2c4h9TxL4+VSnQ= Subject key identifier: E5:0F:EA:54:53:73:C5:5D:98:51:A7:C2:62:0F:17:C3:79:D3:F0:08 Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff Certificate serial: 019AF19B8B06D8FD12F859BE57A0E000ACD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:33 +0000 Manifest this update: Sat 06 Dec 2025 03:01:33 +0000 Manifest next update: Sun 07 Dec 2025 03:01:33 +0000 Files and hashes: 1: NPwYIZBVFuYYMg6eRxoTsqqslv8.crl (hash: /+pQecTQHGRVnv1TszxHtUvYB+K9SYiCVGKnXQy4e+s=) 2: rYKTx0nL3KpouO_aEG54Y81fax4.roa (hash: U8k6Z6wFvQxh2jmlJpmKkiKIDJ2daF7abfgpCSFD+Kw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8b:06:d8:fd:12:f8:59:be:57:a0:e0:00:ac:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff Validity Not Before: Dec 6 03:01:33 2025 GMT Not After : Dec 7 03:01:33 2025 GMT Subject: CN=e50fea545373c55d9851a7c2620f17c379d3f008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:a0:8d:70:f5:f6:31:14:ac:e8:f7:a0:0d: 41:1a:8d:b6:63:b2:4f:a0:8e:27:4c:8f:2f:ff:27: 26:de:3a:22:f9:6f:18:81:72:d5:bb:3c:0d:62:db: 72:02:eb:71:e9:32:fa:74:f3:1f:dc:2e:c3:bb:17: e7:25:b2:7f:9d:8b:eb:d9:9c:ae:86:f0:d4:ff:c7: 67:0e:4f:b8:eb:23:d4:41:d3:15:96:03:53:4e:7c: 94:d9:d6:1e:c2:2f:68:7d:ab:21:6c:3e:58:07:00: 5b:65:44:42:f8:48:b1:dc:6b:b3:a6:ec:67:cd:33: 5f:f4:a3:dd:e2:67:77:bf:72:bd:49:19:5a:50:15: 06:49:c0:2c:40:25:4d:e0:4d:9b:0f:bf:31:b0:c2: a8:4d:ea:32:e3:c5:65:b5:55:fd:bb:5b:49:69:2b: f2:67:97:8d:d4:df:d4:c9:41:32:75:13:3c:33:d0: a9:f4:af:b8:70:86:89:b3:1f:c5:93:a6:26:cc:85: 75:59:00:43:1d:8c:03:02:40:27:2b:23:c6:64:3c: a0:64:c4:85:69:5a:f5:c5:f4:9e:38:bd:ba:ce:ec: ed:c1:68:01:0c:03:26:04:b0:d1:9c:fc:7e:50:69: 01:91:a0:0e:af:18:b6:c0:58:fe:99:81:77:46:e9: 30:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0F:EA:54:53:73:C5:5D:98:51:A7:C2:62:0F:17:C3:79:D3:F0:08 X509v3 Authority Key Identifier: keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:c8:4e:bc:da:4c:41:22:0a:3f:00:c0:a2:44:95:8e:8b:79: 2c:9d:22:b0:1d:2a:9b:02:ae:d7:75:8d:01:b8:40:8c:45:eb: 7a:22:c1:b5:bf:38:28:c0:52:72:cd:e3:04:33:61:61:79:93: 4d:6a:d2:71:a1:e3:a5:27:04:65:11:cf:0d:df:c6:88:2d:66: 20:b6:b4:1d:69:4d:91:b8:7e:d4:af:9b:45:30:1d:f9:4a:7f: fd:c6:f8:3a:3a:65:d1:bc:4e:39:d6:61:52:20:54:95:bc:46: b1:2b:d6:a0:da:77:e8:52:47:bc:e8:bb:d0:56:0d:19:b1:51: df:ad:80:84:4a:35:ac:2f:a5:72:57:83:f6:4d:4a:fd:d3:e7: 75:19:c1:e4:ad:95:a4:f5:4c:56:87:af:59:b7:7f:f8:88:48: 98:1e:e4:a2:70:8c:b8:27:1b:85:64:1e:1e:14:f5:7b:87:44: a5:c8:ae:2a:0e:33:78:aa:0b:73:61:de:2b:30:fb:a6:c2:24: 25:05:eb:2e:41:2d:00:f9:5e:11:b5:fa:57:61:8f:69:02:69: 45:03:a9:72:46:9c:99:82:03:90:2c:c5:e3:9b:63:72:07:26: af:60:ab:e4:76:6b:ba:a5:bd:1c:5a:8c:9f:e6:8a:fe:91:26: 17:6a:15:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm4sG2P0S+Fm+V6DgAKzUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmMxODIxOTA1NTE2ZTYxODMyMGU5ZTQ3MWExM2IyYWFh Yzk2ZmYwHhcNMjUxMjA2MDMwMTMzWhcNMjUxMjA3MDMwMTMzWjAzMTEwLwYDVQQD EyhlNTBmZWE1NDUzNzNjNTVkOTg1MWE3YzI2MjBmMTdjMzc5ZDNmMDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNKgjXD19jEUrOj3oA1BGo22Y7JP oI4nTI8v/ycm3joi+W8YgXLVuzwNYttyAutx6TL6dPMf3C7DuxfnJbJ/nYvr2Zyu hvDU/8dnDk+46yPUQdMVlgNTTnyU2dYewi9ofashbD5YBwBbZURC+Eix3Guzpuxn zTNf9KPd4md3v3K9SRlaUBUGScAsQCVN4E2bD78xsMKoTeoy48VltVX9u1tJaSvy Z5eN1N/UyUEydRM8M9Cp9K+4cIaJsx/Fk6YmzIV1WQBDHYwDAkAnKyPGZDygZMSF aVr1xfSeOL26zuztwWgBDAMmBLDRnPx+UGkBkaAOrxi2wFj+mYF3RukwEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUP6lRTc8VdmFGnwmIPF8N50/AIMB8GA1UdIwQY MBaAFDT8GCGQVRbmGDIOnkcaE7KqrJb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEt ODE1ZWVhMzNiMzViLzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEtODE1ZWVhMzNiMzVi LzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8hOvNpM QSIKPwDAokSVjot5LJ0isB0qmwKu13WNAbhAjEXreiLBtb84KMBScs3jBDNhYXmT TWrScaHjpScEZRHPDd/GiC1mILa0HWlNkbh+1K+bRTAd+Up//cb4Ojpl0bxOOdZh UiBUlbxGsSvWoNp36FJHvOi70FYNGbFR362AhEo1rC+lcleD9k1K/dPndRnB5K2V pPVMVoevWbd/+IhImB7konCMuCcbhWQeHhT1e4dEpciuKg4zeKoLc2HeKzD7psIk JQXrLkEtAPleEbX6V2GPaQJpRQOpckacmYIDkCzF45tjcgcmr2Cr5HZruqW9HFqM n+aK/pEmF2oVBA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:29:46 2025 by rpki-client