This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json) Hash identifier: BcOHiX56DhL0PhkAQ7W9AjGtAE92tps4AMhUgoFPXFQ= Subject key identifier: EB:28:D5:99:57:C2:0D:F8:A9:A4:93:16:DE:4D:71:6A:77:C0:E6:F5 Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877 Certificate serial: 019AF19AB8C84F493E4E4A08177C5CC62CFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft Manifest number: 1263 Signing time: Sat 06 Dec 2025 03:00:40 +0000 Manifest this update: Sat 06 Dec 2025 03:00:40 +0000 Manifest next update: Sun 07 Dec 2025 03:00:40 +0000 Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=) 2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: wx6V8UI6t8ZEGEZ7rA67n8QrvYIjnLXIfx5X9BCoWoo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b8:c8:4f:49:3e:4e:4a:08:17:7c:5c:c6:2c:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1a573915153de82890eae1303067fa68b2877 Validity Not Before: Dec 6 03:00:40 2025 GMT Not After : Dec 7 03:00:40 2025 GMT Subject: CN=eb28d59957c20df8a9a49316de4d716a77c0e6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:66:8e:1f:31:c4:c7:57:e2:17:ab:e7:cc: c2:e5:98:c1:9e:e5:9b:34:6a:a4:96:36:35:bf:2a: 5f:e9:06:f4:90:ad:71:f4:a4:ef:99:80:dd:6a:39: 21:d2:32:b1:82:88:6d:c5:f8:7c:b8:60:73:9d:92: bd:75:6d:f1:aa:aa:13:2a:5e:16:f3:36:ca:75:98: 11:8a:65:22:74:30:9c:80:4e:dc:4b:fb:2b:33:52: d4:cf:a5:b3:c0:d7:60:21:dd:b6:8b:d1:46:94:0a: b7:4e:9d:d7:dc:d1:d5:e2:a3:39:ab:a6:6f:65:e0: 35:cd:65:c0:6d:96:44:52:a2:c7:70:37:c7:60:d0: 88:39:b7:1f:df:dd:e3:3d:47:74:4d:28:25:35:91: 3c:07:8e:6c:d6:45:af:d8:47:df:40:b0:64:b5:76: 7e:4b:da:14:d9:b6:ee:96:88:6c:e5:21:94:71:87: b1:46:2c:53:23:78:de:40:5b:93:48:d3:6e:9a:18: 95:ea:88:91:f5:47:4d:df:bc:7e:91:61:e9:75:2d: 76:16:85:d8:4d:77:e9:82:1c:e8:a6:4c:b1:af:36: 89:89:e6:ab:9e:2b:ef:0d:89:06:dc:56:48:17:dc: 22:da:8f:b2:51:e7:87:b8:07:7c:b0:17:e9:68:c2: 09:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:28:D5:99:57:C2:0D:F8:A9:A4:93:16:DE:4D:71:6A:77:C0:E6:F5 X509v3 Authority Key Identifier: keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:36:dc:ed:11:36:26:1b:47:f6:fd:cc:e9:a1:46:2a:06:91: 55:33:fc:0d:c7:b7:fa:7d:b7:7a:e5:df:07:30:0b:c5:c5:3f: cf:73:8b:02:a8:92:80:4d:61:f6:00:a0:c7:34:76:9e:e0:00: a8:33:8e:84:fb:b3:7d:7a:e6:f1:aa:73:c1:a6:e9:a0:1c:1b: 64:5e:98:d6:a5:be:e7:10:62:3b:59:8e:66:80:70:50:79:84: 66:59:3c:90:82:0e:81:b5:36:bf:82:0a:a1:f5:69:31:a2:72: ab:bd:16:47:0c:8f:f0:68:cf:dc:00:b7:f1:0b:a8:81:cf:b5: 37:cc:4b:c4:40:84:e0:30:3d:a8:a2:5f:ae:d1:49:f1:40:f5: 9d:41:21:cb:f0:30:60:37:7c:ab:c5:cc:79:94:d1:5a:7d:72: 46:a1:fd:a8:b8:94:94:cf:ed:cc:f1:e3:19:bf:9c:c0:0c:e0: 21:60:de:f5:fe:8e:7c:30:e2:b8:42:df:f3:6c:44:77:a3:33: 5b:4c:1a:2a:96:91:c7:5c:8d:b3:78:bb:c4:19:c9:08:ec:f3: 58:68:05:5b:ca:29:1d:4e:8a:46:d4:66:dd:86:99:bd:84:df: 6f:ca:e4:e9:33:8c:20:0f:02:28:19:e8:63:11:ab:cd:8f:50: 92:a3:07:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrjIT0k+TkoIF3xcxiz6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFhNTczOTE1MTUzZGU4Mjg5MGVhZTEzMDMwNjdmYTY4 YjI4NzcwHhcNMjUxMjA2MDMwMDQwWhcNMjUxMjA3MDMwMDQwWjAzMTEwLwYDVQQD EyhlYjI4ZDU5OTU3YzIwZGY4YTlhNDkzMTZkZTRkNzE2YTc3YzBlNmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppdmjh8xxMdX4her58zC5ZjBnuWb NGqkljY1vypf6Qb0kK1x9KTvmYDdajkh0jKxgohtxfh8uGBznZK9dW3xqqoTKl4W 8zbKdZgRimUidDCcgE7cS/srM1LUz6WzwNdgId22i9FGlAq3Tp3X3NHV4qM5q6Zv ZeA1zWXAbZZEUqLHcDfHYNCIObcf393jPUd0TSglNZE8B45s1kWv2EffQLBktXZ+ S9oU2bbulohs5SGUcYexRixTI3jeQFuTSNNumhiV6oiR9UdN37x+kWHpdS12FoXY TXfpghzopkyxrzaJiearnivvDYkG3FZIF9wi2o+yUeeHuAd8sBfpaMIJDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOso1ZlXwg34qaSTFt5NcWp3wOb1MB8GA1UdIwQY MBaAFDXxpXORUVPegokOrhMDBn+miyh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAt MzI5MjExMDI5YTFhLzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAtMzI5MjExMDI5YTFh LzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFDbc7RE2 JhtH9v3M6aFGKgaRVTP8Dce3+n23euXfBzALxcU/z3OLAqiSgE1h9gCgxzR2nuAA qDOOhPuzfXrm8apzwabpoBwbZF6Y1qW+5xBiO1mOZoBwUHmEZlk8kIIOgbU2v4IK ofVpMaJyq70WRwyP8GjP3AC38Quogc+1N8xLxECE4DA9qKJfrtFJ8UD1nUEhy/Aw YDd8q8XMeZTRWn1yRqH9qLiUlM/tzPHjGb+cwAzgIWDe9f6OfDDiuELf82xEd6Mz W0waKpaRx1yNs3i7xBnJCOzzWGgFW8opHU6KRtRm3YaZvYTfb8rk6TOMIA8CKBno YxGrzY9QkqMHsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:21 2025 by rpki-client