This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json) Hash identifier: DdedBfpbHZAxIg5/6bpwJ5WLSLCf50AOtq5p76cveO0= Subject key identifier: 53:9D:81:5B:B0:2F:CB:08:8C:D0:24:A5:A0:C2:C3:86:9B:02:55:3F Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26 Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26 Certificate serial: 019AF276762269814365A9802AF8711B2A2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft Manifest number: 02F5 Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: TpALuejgz4M7aGMH06aHIcdkwDaAnCcXx+aThDU4rUE=) 2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:76:22:69:81:43:65:a9:80:2a:f8:71:1b:2a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26 Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=539d815bb02fcb088cd024a5a0c2c3869b02553f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d5:68:8e:f4:47:f9:3b:dc:88:4b:67:fe:d7: f1:5c:a8:67:1b:b1:65:8b:f9:06:19:b6:8d:46:9a: ca:d3:78:ac:f2:a4:f0:ed:c9:56:bb:3b:0e:a6:8e: f1:37:ed:6c:c0:60:32:6d:71:dc:c7:31:70:e6:69: 87:2c:a7:ce:ee:71:48:9e:ce:6f:46:e0:75:f8:fd: c2:84:30:45:41:39:43:a9:75:9b:a8:90:fa:10:45: 8e:e3:07:7a:10:88:08:19:2b:66:05:e4:31:e5:a3: 70:b2:79:05:70:80:b8:d1:de:ae:c7:f9:1b:2f:fa: 29:c1:ca:4d:c6:1f:09:70:5e:08:60:44:82:30:10: eb:a6:e2:2f:9d:ff:f8:7f:a0:96:13:1b:cf:d5:83: 9b:31:e8:b6:31:0c:c7:f9:cd:5e:fa:2a:60:07:0d: 8c:73:9f:e6:a2:c4:2a:a6:1d:a8:73:5e:4f:3b:ec: 75:17:de:7d:5f:b1:47:ba:57:a9:be:be:50:71:c6: e6:69:eb:19:f8:4f:b3:5f:61:07:a3:2a:70:dc:dd: 02:4b:57:02:da:76:eb:3a:14:13:81:9d:12:f7:3b: a8:0f:83:09:73:b7:dd:de:f0:37:4d:35:04:74:bf: 65:d0:84:24:7e:3b:21:4d:b6:90:9c:49:1e:f2:87: d1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:9D:81:5B:B0:2F:CB:08:8C:D0:24:A5:A0:C2:C3:86:9B:02:55:3F X509v3 Authority Key Identifier: keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:08:61:52:a2:96:5e:77:86:b8:7a:a5:ef:1a:aa:46:ed:0b: ba:94:54:b9:41:23:75:0d:28:96:56:08:63:0a:cb:1b:d0:e5: c8:d7:15:bb:24:ea:95:01:01:f6:f6:c7:82:00:e2:6d:99:67: 0a:0a:38:0f:a9:83:93:1c:55:1a:c6:5c:36:7b:33:f2:29:a4: 8a:5a:58:b1:46:11:d6:ff:d1:b6:e8:1e:4c:9f:02:86:96:6e: 74:b1:c7:af:4c:f1:49:ec:c4:2b:6f:54:c6:29:23:30:e7:43: 0d:ce:79:41:30:a6:18:04:e7:1e:81:7a:5a:53:d1:2d:29:38: 23:1f:6d:0d:65:54:1b:4c:2c:31:4e:ed:a3:e7:91:ca:43:02: 03:04:bf:cc:0d:15:fd:11:78:85:dd:94:7f:7c:b1:be:b9:72: d0:7c:56:64:58:30:c3:ab:4c:18:e9:05:65:13:26:97:1d:33: 11:cd:2c:82:08:29:26:27:9b:12:e4:ea:97:6e:78:3d:e4:eb: 2e:0e:1e:47:20:9c:8c:a5:70:9b:03:96:4d:68:8e:3b:a5:bb: 1c:db:ee:87:74:b5:47:11:ce:d2:93:f8:e6:28:a2:3c:33:8c: b8:86:58:29:1c:fc:7f:93:dd:af:05:dd:a7:36:e1:8a:16:c7: 92:aa:cc:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnYiaYFDZamAKvhxGyouMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjE0N2FjMWNmNzdkNWM4ZmIyYWY3NGZhZDNiNzNiNWQx MzdiMjYwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD Eyg1MzlkODE1YmIwMmZjYjA4OGNkMDI0YTVhMGMyYzM4NjliMDI1NTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtVojvRH+TvciEtn/tfxXKhnG7Fl i/kGGbaNRprK03is8qTw7clWuzsOpo7xN+1swGAybXHcxzFw5mmHLKfO7nFIns5v RuB1+P3ChDBFQTlDqXWbqJD6EEWO4wd6EIgIGStmBeQx5aNwsnkFcIC40d6ux/kb L/opwcpNxh8JcF4IYESCMBDrpuIvnf/4f6CWExvP1YObMei2MQzH+c1e+ipgBw2M c5/mosQqph2oc15PO+x1F959X7FHulepvr5QccbmaesZ+E+zX2EHoypw3N0CS1cC 2nbrOhQTgZ0S9zuoD4MJc7fd3vA3TTUEdL9l0IQkfjshTbaQnEke8ofR6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOdgVuwL8sIjNAkpaDCw4abAlU/MB8GA1UdIwQY MBaAFDSxR6wc931cj7KvdPrTtztdE3smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQt YjEzNzE3NTAzMDEwLzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQtYjEzNzE3NTAzMDEw LzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQhhUqKW XneGuHql7xqqRu0LupRUuUEjdQ0ollYIYwrLG9DlyNcVuyTqlQEB9vbHggDibZln Cgo4D6mDkxxVGsZcNnsz8imkilpYsUYR1v/RtugeTJ8ChpZudLHHr0zxSezEK29U xikjMOdDDc55QTCmGATnHoF6WlPRLSk4Ix9tDWVUG0wsMU7to+eRykMCAwS/zA0V /RF4hd2Uf3yxvrly0HxWZFgww6tMGOkFZRMmlx0zEc0sgggpJiebEuTql254PeTr Lg4eRyCcjKVwmwOWTWiOO6W7HNvuh3S1RxHO0pP45iiiPDOMuIZYKRz8f5PdrwXd pzbhihbHkqrMIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:15 2025 by rpki-client