This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
File:                     npM_LOV8dMv5_6UJaF1qy9jFOZg.mft (raw, json)
Hash identifier:          //gGlL3E/pa2oPcyI1YA7vNiT0MtcDqLwf1N9Ejcajc=
Subject key identifier:   DA:4B:79:7E:37:1C:FE:C7:D0:B6:BF:81:AA:2A:31:7D:90:FE:E9:46
Authority key identifier: 9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98
Certificate issuer:       /CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
Certificate serial:       019AF2090B095F36FF1895A3FABAF49558F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
Manifest number:          0937
Signing time:             Sat 06 Dec 2025 05:01:10 +0000
Manifest this update:     Sat 06 Dec 2025 05:01:10 +0000
Manifest next update:     Sun 07 Dec 2025 05:01:10 +0000
Files and hashes:         1: npM_LOV8dMv5_6UJaF1qy9jFOZg.crl (hash: MlTaqbu0Db08DzVsukSauTwPcHUFFSAY7oVuZk1JLAA=)
                          2: yRFwTpF8uIi1_BjVUC-RFgZjVto.roa (hash: mNA1Sl4UbZtF2SriucljnpKsQkjCoecRg9zlE7G/VLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f2:09:0b:09:5f:36:ff:18:95:a3:fa:ba:f4:95:58:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e933f2ce57c74cbf9ffa509685d6acbd8c53998
        Validity
            Not Before: Dec  6 05:01:10 2025 GMT
            Not After : Dec  7 05:01:10 2025 GMT
        Subject: CN=da4b797e371cfec7d0b6bf81aa2a317d90fee946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:50:d6:f3:b7:45:c2:23:64:34:d8:ba:0c:fa:
                    c1:65:ea:26:4a:98:22:cd:01:e7:3c:1a:a0:2f:f6:
                    14:53:08:79:28:cc:60:1b:69:bc:bb:27:1d:98:4f:
                    f1:b0:90:76:ae:12:bc:38:65:28:d2:f0:53:5a:7d:
                    2a:c4:df:19:97:6f:66:82:cc:06:c0:27:48:94:a5:
                    e2:a0:54:f7:d8:67:f5:62:40:77:b7:9c:ec:e4:97:
                    6e:da:40:85:46:76:4f:1b:a4:01:85:b6:e5:68:66:
                    6c:5c:7d:a3:87:ba:c6:b8:7d:9a:64:9a:a3:c4:7b:
                    d1:e6:d5:3d:32:74:a9:df:b4:31:6e:59:52:1e:40:
                    c3:83:fe:ed:02:d2:8a:32:c5:19:69:b9:8a:e0:af:
                    8b:f4:91:a7:f8:e9:2e:65:56:92:4b:20:89:68:51:
                    bd:d6:1f:90:7b:e3:19:53:9b:4b:71:1f:2f:62:5f:
                    e1:75:3a:a8:e2:4d:24:93:82:d4:48:29:75:cc:44:
                    ba:45:2d:b4:0c:ba:ea:cf:ca:ed:0a:44:a9:90:8d:
                    73:19:27:16:d2:a3:80:6b:91:14:b0:bb:da:ed:54:
                    e7:57:2d:12:b9:5b:e8:c4:4c:c2:27:75:3b:cd:ee:
                    db:45:5b:bf:0c:9b:20:43:02:45:91:36:ad:5e:bf:
                    56:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4B:79:7E:37:1C:FE:C7:D0:B6:BF:81:AA:2A:31:7D:90:FE:E9:46
            X509v3 Authority Key Identifier:
                keyid:9E:93:3F:2C:E5:7C:74:CB:F9:FF:A5:09:68:5D:6A:CB:D8:C5:39:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npM_LOV8dMv5_6UJaF1qy9jFOZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/5f2e48-feba-4273-8e49-8259805c644c/1/npM_LOV8dMv5_6UJaF1qy9jFOZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:ad:8c:e1:b5:81:07:9a:f4:c7:4a:c4:95:27:cb:5e:5e:
         19:37:2b:9a:1f:f0:a8:88:15:af:32:d2:f5:46:cd:74:ff:71:
         fb:2c:ee:b2:b9:b1:af:46:40:22:63:3d:09:2a:11:e6:a9:29:
         a3:54:81:20:20:4c:c6:84:23:57:31:28:f8:ca:45:39:42:94:
         e1:b5:4e:62:f1:a4:7d:25:4b:5f:1c:7d:d7:62:21:47:c0:dd:
         7a:89:56:9a:ad:0b:59:01:92:17:31:18:53:10:d8:8a:87:25:
         08:37:86:59:18:7b:65:7c:5a:ce:5c:66:2b:4d:77:aa:96:b0:
         60:de:c1:59:68:d9:b1:ae:9b:d4:25:21:1d:d6:cc:22:6f:7e:
         eb:fa:b0:b8:a7:5b:74:fe:8d:2d:a9:d5:2f:b4:28:66:81:43:
         40:f0:b3:c9:b5:88:b7:35:eb:92:91:d4:ce:49:41:65:8a:9e:
         88:ce:c4:f0:c9:fb:d8:f8:c5:9d:70:21:f6:69:b6:70:aa:01:
         28:be:2f:f7:f7:ce:07:c5:fd:0e:dd:96:fe:86:9f:09:62:e2:
         12:54:1b:f9:85:15:84:c5:7e:4d:31:33:1b:ed:02:d6:bd:1a:
         ae:38:85:7c:96:21:ac:b9:e4:1e:35:81:55:2a:5f:1c:cc:01:
         ff:bd:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:26:06 2025 by rpki-client