This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft File: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft (raw, json) Hash identifier: 1Inrvwouac5hDgxPwvmG5gO/qL4KiTKM9SRFJo1nn54= Subject key identifier: D7:38:8B:9D:37:18:BB:2B:6F:76:4B:C3:4E:E6:88:FE:19:A0:B1:D7 Authority key identifier: 34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02 Certificate issuer: /CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402 Certificate serial: 019AF12DD7153B06AB1B59094CC6E6D0ECB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft Manifest number: 02AD Signing time: Sat 06 Dec 2025 01:01:44 +0000 Manifest this update: Sat 06 Dec 2025 01:01:44 +0000 Manifest next update: Sun 07 Dec 2025 01:01:44 +0000 Files and hashes: 1: BC_CdjOB6RULGEZF7J94_vrGJec.roa (hash: JFygJvgYc7Kvmd7DMd2rl7uXMvNHWTmTg/wiD9RDlO4=) 2: NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl (hash: fBSOagUjiOfNgFJD1t0Ei1KI9fXLQuDenMZuWEVqoQw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d7:15:3b:06:ab:1b:59:09:4c:c6:e6:d0:ec:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f4fb7d6a8cb87dd9da06d766a0838cf3560402 Validity Not Before: Dec 6 01:01:44 2025 GMT Not After : Dec 7 01:01:44 2025 GMT Subject: CN=d7388b9d3718bb2b6f764bc34ee688fe19a0b1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:0a:7f:75:19:f4:ae:8e:35:6f:9c:2a:05: 77:f3:d1:ef:d6:fe:e4:36:f1:bd:f6:c7:12:1f:6e: ee:91:15:69:7c:42:8f:2c:ea:5a:4c:59:31:a2:d0: 96:e5:f2:ee:e0:48:d1:ee:00:c4:2f:8e:15:da:c9: 74:73:bf:3c:40:c5:17:11:ed:c4:58:c3:d1:00:62: 25:fa:00:3b:a3:31:8f:0b:69:b3:c8:b5:4c:cc:4e: 0a:c3:39:66:8f:39:c5:5d:4b:4b:bc:f1:90:f8:28: 74:ee:4d:67:0a:fa:76:92:b0:7b:94:35:39:73:48: eb:6b:99:ff:d0:e8:f9:75:99:77:d8:db:ed:6a:76: ba:66:87:34:5b:66:c0:00:26:3b:bb:58:d4:51:fc: c2:91:a8:32:b7:ca:45:8e:d9:29:2b:9e:c4:e0:24: 1d:53:e4:6b:5d:b9:27:e1:42:7e:1b:d4:5a:56:ca: 75:a5:d7:3a:99:3a:05:d6:dc:35:5c:65:c7:73:88: d4:69:47:d5:ce:c5:f8:3d:7e:32:aa:c8:45:5b:e1: 17:48:a7:cf:4f:d4:ff:92:c3:ef:d8:af:90:23:3d: 3e:4d:93:a1:9a:74:bd:db:18:0c:00:92:7f:5d:9e: 44:e9:20:ad:45:4d:72:67:04:06:bf:a8:6b:ef:7a: c3:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:38:8B:9D:37:18:BB:2B:6F:76:4B:C3:4E:E6:88:FE:19:A0:B1:D7 X509v3 Authority Key Identifier: keyid:34:F4:FB:7D:6A:8C:B8:7D:D9:DA:06:D7:66:A0:83:8C:F3:56:04:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/acbc65-811a-4209-b6b0-ae355b2ae6ef/1/NPT7fWqMuH3Z2gbXZqCDjPNWBAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:e7:5d:3d:da:c0:f4:99:7b:24:88:b0:16:d6:6a:1f:62:cb: 54:88:bd:2d:46:2d:47:d0:3a:fe:50:83:3d:86:06:e0:33:b5: ac:61:25:a7:2d:44:99:ca:2d:7c:1a:76:8f:be:38:c1:f8:2c: 78:a6:36:ea:94:07:6e:22:c0:f8:5c:c1:8d:f7:93:85:e4:95: ae:11:75:88:4b:e8:6e:6d:e0:1d:43:8b:ea:22:5d:68:17:99: c7:5a:1c:25:9e:54:5f:7e:20:f5:21:dd:c3:dd:d0:09:79:cd: 8d:9d:e0:bd:4c:6a:b8:3d:d1:0b:2f:02:ab:1e:fe:4e:a6:d2: 7b:87:0d:3c:be:5f:0a:cf:dd:89:82:d6:c7:cf:25:dc:af:2d: e6:a9:35:40:9f:1b:e5:0a:62:58:1f:7d:d6:69:63:c3:32:b8: aa:f0:78:65:78:24:ba:71:c4:f9:22:54:09:63:32:ab:80:03: 36:c0:e7:36:66:4b:b2:b0:61:d1:ce:02:22:cd:75:a6:17:c5: e4:c7:65:d2:24:ee:ef:1c:55:a4:5e:e5:75:ad:5e:cd:37:1d: ea:93:4a:9f:30:2b:33:af:00:df:db:e3:0a:45:c4:9b:ae:db: 78:1f:93:95:bf:f7:02:9c:d9:ff:91:a3:ed:a7:22:03:94:ca: 98:99:a2:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdcVOwarG1kJTMbm0Oy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjRmYjdkNmE4Y2I4N2RkOWRhMDZkNzY2YTA4MzhjZjM1 NjA0MDIwHhcNMjUxMjA2MDEwMTQ0WhcNMjUxMjA3MDEwMTQ0WjAzMTEwLwYDVQQD EyhkNzM4OGI5ZDM3MThiYjJiNmY3NjRiYzM0ZWU2ODhmZTE5YTBiMWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+gKf3UZ9K6ONW+cKgV389Hv1v7k NvG99scSH27ukRVpfEKPLOpaTFkxotCW5fLu4EjR7gDEL44V2sl0c788QMUXEe3E WMPRAGIl+gA7ozGPC2mzyLVMzE4KwzlmjznFXUtLvPGQ+Ch07k1nCvp2krB7lDU5 c0jra5n/0Oj5dZl32Nvtana6Zoc0W2bAACY7u1jUUfzCkagyt8pFjtkpK57E4CQd U+RrXbkn4UJ+G9RaVsp1pdc6mToF1tw1XGXHc4jUaUfVzsX4PX4yqshFW+EXSKfP T9T/ksPv2K+QIz0+TZOhmnS92xgMAJJ/XZ5E6SCtRU1yZwQGv6hr73rDSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNc4i503GLsrb3ZLw07miP4ZoLHXMB8GA1UdIwQY MBaAFDT0+31qjLh92doG12agg4zzVgQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAt YWUzNTViMmFlNmVmLzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hY2JjNjUtODExYS00MjA5LWI2YjAtYWUzNTViMmFlNmVm LzEvTlBUN2ZXcU11SDNaMmdiWFpxQ0RqUE5XQkFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAROddPdrA 9Jl7JIiwFtZqH2LLVIi9LUYtR9A6/lCDPYYG4DO1rGElpy1EmcotfBp2j744wfgs eKY26pQHbiLA+FzBjfeTheSVrhF1iEvobm3gHUOL6iJdaBeZx1ocJZ5UX34g9SHd w93QCXnNjZ3gvUxquD3RCy8Cqx7+TqbSe4cNPL5fCs/diYLWx88l3K8t5qk1QJ8b 5QpiWB991mljwzK4qvB4ZXgkunHE+SJUCWMyq4ADNsDnNmZLsrBh0c4CIs11phfF 5Mdl0iTu7xxVpF7lda1ezTcd6pNKnzArM68A39vjCkXEm67beB+Tlb/3ApzZ/5Gj 7aciA5TKmJmirQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:12 2025 by rpki-client