This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json) Hash identifier: zjFWbKJw6rKgZoR+O/QAxmE6HlRG8TOkyUs/u+41gX8= Subject key identifier: D5:B6:9F:30:53:12:1D:FD:71:5F:94:59:BE:30:E8:9E:7E:3F:24:BC Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0 Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0 Certificate serial: 019AF2ADDEC70C92F15A22E03CC38870F79A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft Manifest number: 0708 Signing time: Sat 06 Dec 2025 08:01:12 +0000 Manifest this update: Sat 06 Dec 2025 08:01:12 +0000 Manifest next update: Sun 07 Dec 2025 08:01:12 +0000 Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: 5ewirT6BUsQTEqdwzwF1xa1Sti+JawTyi9cnW67zraw=) 2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:de:c7:0c:92:f1:5a:22:e0:3c:c3:88:70:f7:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0 Validity Not Before: Dec 6 08:01:12 2025 GMT Not After : Dec 7 08:01:12 2025 GMT Subject: CN=d5b69f3053121dfd715f9459be30e89e7e3f24bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:35:5d:dd:54:22:e6:ff:1d:71:cc:36:c5: e7:d6:02:d4:8b:01:dd:f3:e1:5d:12:79:92:27:3a: aa:7c:c6:c9:82:9e:98:b7:7b:ea:73:bd:3b:72:ea: 19:0c:7a:c2:3e:9e:bb:d4:26:8e:fa:21:84:df:e5: f2:4a:c2:51:51:5c:c8:89:9a:c3:03:b6:dc:02:44: e3:41:8d:e1:dd:51:6a:31:d8:3c:83:31:c0:49:46: 4f:49:09:11:4e:2b:95:7b:08:64:b2:bf:9d:a7:a4: b1:c2:6d:01:5b:16:31:82:cc:05:b0:eb:a4:a8:f1: dc:e8:09:17:dd:9d:f2:07:3a:16:db:44:7f:15:c9: 81:41:50:a0:59:20:25:15:ef:f3:11:21:66:7f:5a: 78:68:e6:79:a3:d3:92:76:90:86:be:cf:c9:86:5a: 5a:3f:8a:9d:07:00:8b:0a:71:34:7a:af:4e:41:df: 38:b5:19:9b:e5:2c:e8:f4:a4:99:70:c1:d2:4c:32: e8:40:ef:b3:06:fa:a6:2b:27:e9:67:a3:ea:c3:db: 27:3b:93:fe:78:98:00:44:b0:24:61:b3:0c:52:87: 8a:32:ad:f5:a5:a1:61:69:8a:29:85:e6:99:55:24: f1:d5:15:1b:00:5a:c2:be:a4:a7:1b:73:ba:7d:7b: ef:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:9F:30:53:12:1D:FD:71:5F:94:59:BE:30:E8:9E:7E:3F:24:BC X509v3 Authority Key Identifier: keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b4:7f:d0:ae:43:ae:ff:ba:2f:2e:f4:1f:57:a8:31:0c:a7: 74:cc:76:12:0b:82:0a:ee:2c:b4:c5:ec:14:9e:68:7b:e9:08: 00:d8:af:95:6f:13:ed:a0:fb:f2:2c:42:5c:96:12:e2:20:2e: 1b:8b:36:cf:4d:16:5c:e6:0e:3e:15:34:50:f6:b0:45:f0:27: bd:5a:5c:3b:57:b7:d4:8d:23:0a:f7:8f:db:4c:c2:b4:21:35: d1:3c:57:5e:ed:7e:ce:37:82:51:cb:ce:be:6c:e0:95:17:ea: 7a:4a:f7:d5:a7:34:42:e8:53:90:6d:07:9b:17:cb:df:dc:d1: 20:c2:74:93:89:69:8b:c9:06:66:e9:ad:32:d2:04:e6:80:60: 6f:57:d3:29:f1:34:d9:a5:67:17:74:f3:e1:cb:27:78:96:d2: d2:29:6a:48:4d:0e:7a:0c:b0:70:5c:01:af:8c:9a:c4:a0:9b: 9e:61:0c:49:fb:87:78:75:16:0a:e9:98:42:d7:e7:6f:b5:d3: 32:6a:00:8d:30:45:73:56:6b:95:b7:7a:d2:6a:3b:27:65:a4: 32:87:2e:24:54:9a:27:36:52:e9:ea:3e:a4:ab:b0:2f:fd:2e: 90:74:50:e3:53:9a:f7:90:60:93:34:01:c2:91:dc:df:d5:aa: 61:8e:1b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrd7HDJLxWiLgPMOIcPeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGU1MzAxNGJmMDM4YWRlMGQ3N2FlNjc4ZmY2ZGYzNGNh NTNkYzAwHhcNMjUxMjA2MDgwMTEyWhcNMjUxMjA3MDgwMTEyWjAzMTEwLwYDVQQD EyhkNWI2OWYzMDUzMTIxZGZkNzE1Zjk0NTliZTMwZTg5ZTdlM2YyNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfQ1Xd1UIub/HXHMNsXn1gLUiwHd 8+FdEnmSJzqqfMbJgp6Yt3vqc707cuoZDHrCPp671CaO+iGE3+XySsJRUVzIiZrD A7bcAkTjQY3h3VFqMdg8gzHASUZPSQkRTiuVewhksr+dp6Sxwm0BWxYxgswFsOuk qPHc6AkX3Z3yBzoW20R/FcmBQVCgWSAlFe/zESFmf1p4aOZ5o9OSdpCGvs/Jhlpa P4qdBwCLCnE0eq9OQd84tRmb5Szo9KSZcMHSTDLoQO+zBvqmKyfpZ6Pqw9snO5P+ eJgARLAkYbMMUoeKMq31paFhaYopheaZVSTx1RUbAFrCvqSnG3O6fXvv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW2nzBTEh39cV+UWb4w6J5+PyS8MB8GA1UdIwQY MBaAFDQOUwFL8Dit4Nd65nj/bfNMpT3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDct ZTE0ODIzNWI3NzIzLzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDctZTE0ODIzNWI3NzIz LzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsLR/0K5D rv+6Ly70H1eoMQyndMx2EguCCu4stMXsFJ5oe+kIANivlW8T7aD78ixCXJYS4iAu G4s2z00WXOYOPhU0UPawRfAnvVpcO1e31I0jCveP20zCtCE10TxXXu1+zjeCUcvO vmzglRfqekr31ac0QuhTkG0HmxfL39zRIMJ0k4lpi8kGZumtMtIE5oBgb1fTKfE0 2aVnF3Tz4csneJbS0ilqSE0OegywcFwBr4yaxKCbnmEMSfuHeHUWCumYQtfnb7XT MmoAjTBFc1Zrlbd60mo7J2WkMocuJFSaJzZS6eo+pKuwL/0ukHRQ41Oa95BgkzQB wpHc39WqYY4bdA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:26 2025 by rpki-client