This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json) Hash identifier: vee5aPL+cw/l+44XDeCbRXLeZcAaALWO0dguHZADucU= Subject key identifier: 34:9F:F5:13:77:2A:84:6B:74:22:59:F1:F6:22:0B:21:9E:F3:3A:DF Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Certificate serial: 019AF19AD2782AA63B111327E8DBD6101044 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft Manifest number: 176E Signing time: Sat 06 Dec 2025 03:00:46 +0000 Manifest this update: Sat 06 Dec 2025 03:00:46 +0000 Manifest next update: Sun 07 Dec 2025 03:00:46 +0000 Files and hashes: 1: L8fPujIKsBi6jtF3wpi92LaR5sM.roa (hash: meNehvqkmBkNG6v4QZ+r0ymGAotj7DbJNLEAKS/pf5I=) 2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: 7qDK4Lr1naJKy/1B5vCwECJqm2oyRvjB92ceF7ED+ZU=) 3: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:d2:78:2a:a6:3b:11:13:27:e8:db:d6:10:10:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Validity Not Before: Dec 6 03:00:46 2025 GMT Not After : Dec 7 03:00:46 2025 GMT Subject: CN=349ff513772a846b742259f1f6220b219ef33adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:21:b9:9d:5e:53:ee:48:af:cf:30:c0:57: 54:43:1c:dd:12:f4:49:19:a9:bf:7d:69:25:fa:79: 42:3b:cd:30:b7:7e:36:dc:af:26:df:7a:2c:37:8c: fb:d5:92:62:68:b2:c1:32:67:92:f4:ee:97:53:4f: f6:3e:81:b6:c6:bd:d3:32:6c:b6:93:e8:26:16:26: f7:e2:cd:db:0d:17:e3:9e:ea:bb:3d:b9:82:a0:98: 7f:a5:58:22:14:d4:d4:a9:c7:4c:78:09:1b:35:50: 59:25:ef:90:e7:7c:04:51:f6:46:1e:f0:fe:b1:5d: 2f:2f:05:d2:ce:1b:8d:c9:bd:8f:83:e9:9c:b1:24: b3:5b:af:97:84:8f:5a:ce:5d:0c:a8:43:d3:91:1e: 34:fc:b9:72:3e:0e:1c:6c:58:6c:65:93:ad:e0:00: dc:d8:2b:5d:2e:fd:29:92:b8:3b:e9:ea:36:dd:82: fc:45:9d:80:17:d1:b2:36:0d:1f:d3:6e:ae:79:e1: 2f:77:01:bd:da:0e:43:66:cc:5e:64:b8:71:2b:69: 80:9e:77:cc:30:6e:8e:71:df:36:7d:b4:59:f6:20: 8e:91:20:8f:53:d1:a7:8d:bf:03:06:2c:6f:43:e8: 20:7d:8b:9e:75:d6:25:01:05:4b:64:6a:25:8e:76: 5a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:F5:13:77:2A:84:6B:74:22:59:F1:F6:22:0B:21:9E:F3:3A:DF X509v3 Authority Key Identifier: keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1b:11:87:d2:7c:80:d8:b1:ca:85:c3:fe:9d:d6:b4:d3:a7: 2f:c2:66:7c:1b:1e:0c:c9:b1:93:db:6b:74:ef:5c:ac:72:4b: 31:ac:2f:5b:0a:9a:23:d4:b3:9d:b4:c6:0f:12:6a:f0:9a:b0: 7a:ee:9c:03:67:53:57:86:50:70:30:1b:7e:d5:5e:6b:05:12: 70:cf:42:32:5e:f3:ca:03:61:e8:20:2e:0a:3c:64:ce:71:c0: 3b:cb:69:59:ba:ce:03:9e:19:1a:f2:54:41:36:be:42:f7:07: 3a:4f:71:ec:43:24:6a:ce:90:4a:36:17:99:a5:54:1b:f5:f5: 83:80:cb:9e:6d:c1:3e:ce:f8:ee:5f:bf:2f:7c:92:a8:97:66: 26:79:47:01:60:e2:4b:5a:6b:1e:28:9c:92:a6:13:8d:a0:c9: 2d:ef:68:e1:d9:fb:0c:13:2b:fc:c3:cb:56:b7:86:df:7c:cc: 0e:ab:71:1a:5f:66:1c:95:4a:42:be:34:71:29:93:ba:00:03: ba:18:24:a2:0a:5e:b1:22:2d:5d:ff:d0:b3:82:4f:b5:5e:9a: 17:1b:96:d7:c5:d4:f4:02:f9:90:34:36:1e:76:33:ba:fb:54: 9c:cf:5b:6e:92:ba:66:16:f7:6f:cb:53:53:d4:e6:72:cb:6b: ca:4c:19:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmtJ4KqY7ERMn6NvWEBBEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw NjcyMDgwHhcNMjUxMjA2MDMwMDQ2WhcNMjUxMjA3MDMwMDQ2WjAzMTEwLwYDVQQD EygzNDlmZjUxMzc3MmE4NDZiNzQyMjU5ZjFmNjIyMGIyMTllZjMzYWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8huZ1eU+5Ir88wwFdUQxzdEvRJ Gam/fWkl+nlCO80wt3423K8m33osN4z71ZJiaLLBMmeS9O6XU0/2PoG2xr3TMmy2 k+gmFib34s3bDRfjnuq7PbmCoJh/pVgiFNTUqcdMeAkbNVBZJe+Q53wEUfZGHvD+ sV0vLwXSzhuNyb2Pg+mcsSSzW6+XhI9azl0MqEPTkR40/LlyPg4cbFhsZZOt4ADc 2CtdLv0pkrg76eo23YL8RZ2AF9GyNg0f026ueeEvdwG92g5DZsxeZLhxK2mAnnfM MG6Ocd82fbRZ9iCOkSCPU9Gnjb8DBixvQ+ggfYueddYlAQVLZGoljnZalwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSf9RN3KoRrdCJZ8fYiCyGe8zrfMB8GA1UdIwQY MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhsRh9J8 gNixyoXD/p3WtNOnL8JmfBseDMmxk9trdO9crHJLMawvWwqaI9SznbTGDxJq8Jqw eu6cA2dTV4ZQcDAbftVeawUScM9CMl7zygNh6CAuCjxkznHAO8tpWbrOA54ZGvJU QTa+QvcHOk9x7EMkas6QSjYXmaVUG/X1g4DLnm3BPs747l+/L3ySqJdmJnlHAWDi S1prHiickqYTjaDJLe9o4dn7DBMr/MPLVreG33zMDqtxGl9mHJVKQr40cSmTugAD uhgkogpesSItXf/Qs4JPtV6aFxuW18XU9AL5kDQ2HnYzuvtUnM9bbpK6Zhb3b8tT U9TmcstrykwZ4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:54:40 2025 by rpki-client