This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft File: t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft (raw, json) Hash identifier: dNh/hs9Uzf0RFFgka5PwC/HgVBCqC+zXR4/FE38UCAw= Subject key identifier: BA:44:53:DF:57:6A:36:09:1A:06:A3:67:82:73:87:6F:DE:BF:EC:92 Authority key identifier: B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56 Certificate issuer: /CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656 Certificate serial: 019B2B8AD2EDC85295E4A9B4ED8EA3DCBA9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft Manifest number: 0BE3 Signing time: Wed 17 Dec 2025 09:01:16 +0000 Manifest this update: Wed 17 Dec 2025 09:01:16 +0000 Manifest next update: Thu 18 Dec 2025 09:01:16 +0000 Files and hashes: 1: 7HgZFirs9to5YNlgGjCrLE4fFdw.roa (hash: gvtNC6tdiAxQLr0n4eBnmWFLLNsQSfj98rKVj8SvSuA=) 2: GFzeRaBmyIOkrDv5Yl4eeRJ9yBo.roa (hash: rZYvabv/j2AaljGdwS148ssayLuXys6DbuYJ6bJxVGw=) 3: t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl (hash: XjeGQE4uvODTxxIKYgT3WeZDPnnjm3W6NMvr8b2IgXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:d2:ed:c8:52:95:e4:a9:b4:ed:8e:a3:dc:ba:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7e34f57d007166def4dd881d8f7d5b6ed95e656 Validity Not Before: Dec 17 09:01:16 2025 GMT Not After : Dec 18 09:01:16 2025 GMT Subject: CN=ba4453df576a36091a06a3678273876fdebfec92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:c2:b5:6b:08:da:e8:95:8b:dc:e1:36:24: 38:bb:81:e0:89:ff:69:48:ac:18:0a:97:8b:0b:84: f9:21:05:6d:ad:f5:3a:de:04:a9:13:0e:8d:0f:42: 8b:0d:12:cb:53:7d:7a:2f:90:b0:f5:02:9d:e4:ec: da:2c:d8:11:51:fd:2b:49:87:23:b3:65:d7:45:89: 2d:27:7b:6b:be:c0:9b:a3:d2:f9:66:2e:33:21:9f: 29:43:f7:45:43:e9:93:99:9b:35:61:1c:fe:89:d6: 63:d0:25:c4:61:fa:a0:d2:84:c9:34:ec:5b:77:5d: e8:9a:5f:72:63:ec:4e:62:52:8c:f8:87:f2:f0:b9: 0c:44:b2:bc:79:d6:da:d1:3a:3d:ab:68:8d:9f:fe: cc:3b:79:4d:ff:5d:15:61:0f:c3:9c:4d:77:fc:21: b6:c6:bc:d5:a5:f8:8f:2c:31:09:c2:2b:32:6e:95: 99:0c:68:91:16:18:5a:e8:7a:09:43:65:0d:fb:d5: 03:6b:a9:9d:15:1f:4c:65:ef:35:53:15:96:a0:1b: 32:90:f6:11:a6:41:2e:17:b7:54:60:36:0c:5b:7a: 15:54:a6:67:fb:fe:53:5e:97:7c:a3:63:65:52:4c: 6b:f9:4d:0c:61:97:21:2f:bc:17:8f:ca:53:ee:a5: 2e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:44:53:DF:57:6A:36:09:1A:06:A3:67:82:73:87:6F:DE:BF:EC:92 X509v3 Authority Key Identifier: keyid:B7:E3:4F:57:D0:07:16:6D:EF:4D:D8:81:D8:F7:D5:B6:ED:95:E6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-NPV9AHFm3vTdiB2PfVtu2V5lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e5d580-eee8-463e-84a8-eaccb8b42dc9/1/t-NPV9AHFm3vTdiB2PfVtu2V5lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d9:a5:0f:3c:35:06:1d:5e:b3:86:d1:8b:94:55:55:ec:8d: d9:7f:53:95:4e:ad:20:de:09:b8:35:93:d5:08:47:8e:f8:0f: 06:1d:0c:21:e6:73:77:3d:d8:9e:2e:e5:ba:72:7e:03:7f:36: 6e:4d:28:be:1a:15:96:48:73:69:10:f2:f4:8d:06:4d:54:09: 55:3f:0d:e0:1b:7f:13:26:67:7a:51:37:44:73:07:03:c2:e2: 47:2c:76:cb:68:94:a5:53:64:a5:aa:c0:42:c0:42:c2:7d:0f: 73:44:7a:07:33:07:15:49:3a:f5:7f:fe:4f:f1:50:e9:ff:1c: 28:41:77:8d:38:77:85:90:32:ee:89:c4:f1:59:7b:09:2f:4b: 26:5e:6f:e6:3c:32:5a:d5:9d:ac:c5:a5:88:26:cc:6d:26:74: 3e:37:d4:75:08:cd:68:92:99:30:6f:e0:4f:4f:44:11:e2:4c: a9:88:c9:16:7e:9d:c6:dd:17:54:c1:6a:59:a4:27:8d:86:00: b3:a2:20:45:75:b6:90:45:26:93:f0:06:7f:54:a9:ae:2b:23: eb:9a:92:2f:87:a2:73:04:38:1f:b0:a9:cd:06:41:35:d0:06: c0:0d:c2:5b:8f:5c:49:a8:fa:b0:1b:fa:99:51:3d:77:0b:55: 55:ca:7a:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsritLtyFKV5Km07Y6j3LqcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3ZTM0ZjU3ZDAwNzE2NmRlZjRkZDg4MWQ4ZjdkNWI2ZWQ5 NWU2NTYwHhcNMjUxMjE3MDkwMTE2WhcNMjUxMjE4MDkwMTE2WjAzMTEwLwYDVQQD EyhiYTQ0NTNkZjU3NmEzNjA5MWEwNmEzNjc4MjczODc2ZmRlYmZlYzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmDCtWsI2uiVi9zhNiQ4u4Hgif9p SKwYCpeLC4T5IQVtrfU63gSpEw6ND0KLDRLLU316L5Cw9QKd5OzaLNgRUf0rSYcj s2XXRYktJ3trvsCbo9L5Zi4zIZ8pQ/dFQ+mTmZs1YRz+idZj0CXEYfqg0oTJNOxb d13oml9yY+xOYlKM+Ify8LkMRLK8edba0To9q2iNn/7MO3lN/10VYQ/DnE13/CG2 xrzVpfiPLDEJwisybpWZDGiRFhha6HoJQ2UN+9UDa6mdFR9MZe81UxWWoBsykPYR pkEuF7dUYDYMW3oVVKZn+/5TXpd8o2NlUkxr+U0MYZchL7wXj8pT7qUuoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpEU99XajYJGgajZ4Jzh2/ev+ySMB8GA1UdIwQY MBaAFLfjT1fQBxZt703Ygdj31bbtleZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgt ZWFjY2I4YjQyZGM5LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lNWQ1ODAtZWVlOC00NjNlLTg0YTgtZWFjY2I4YjQyZGM5 LzEvdC1OUFY5QUhGbTN2VGRpQjJQZlZ0dTJWNWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXNmlDzw1 Bh1es4bRi5RVVeyN2X9TlU6tIN4JuDWT1QhHjvgPBh0MIeZzdz3Yni7lunJ+A382 bk0ovhoVlkhzaRDy9I0GTVQJVT8N4Bt/EyZnelE3RHMHA8LiRyx2y2iUpVNkparA QsBCwn0Pc0R6BzMHFUk69X/+T/FQ6f8cKEF3jTh3hZAy7onE8Vl7CS9LJl5v5jwy WtWdrMWliCbMbSZ0PjfUdQjNaJKZMG/gT09EEeJMqYjJFn6dxt0XVMFqWaQnjYYA s6IgRXW2kEUmk/AGf1Sprisj65qSL4eicwQ4H7CpzQZBNdAGwA3CW49cSaj6sBv6 mVE9dwtVVcp6qw== -----END CERTIFICATE-----Generated at Wed Dec 17 13:44:02 2025 by rpki-client