This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft File: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft (raw, json) Hash identifier: SQh1R+Fjno8B39Y1bYSX91ZsD+CwiR3DKJHoNd08gLM= Subject key identifier: 5B:BA:DF:61:79:6C:40:4D:16:23:3E:E4:78:DE:55:98:2B:47:30:49 Authority key identifier: 34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 Certificate issuer: /CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Certificate serial: 019B5BD277B3A45FDFBE9B97FD98FE5E3FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft Manifest number: 17A5 Signing time: Fri 26 Dec 2025 18:01:18 +0000 Manifest this update: Fri 26 Dec 2025 18:01:18 +0000 Manifest next update: Sat 27 Dec 2025 18:01:18 +0000 Files and hashes: 1: L8fPujIKsBi6jtF3wpi92LaR5sM.roa (hash: meNehvqkmBkNG6v4QZ+r0ymGAotj7DbJNLEAKS/pf5I=) 2: NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl (hash: MVPTuxhn/tCTRyBO2yfdYE1p19IkYwoV1MyB14cpzn8=) 3: b8jz-r7vQjjddqF3VDNwuYawYD8.roa (hash: yCjopkBeip/l25CGjiD85cwH+WcbGXggMR2Gr3nUOLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:77:b3:a4:5f:df:be:9b:97:fd:98:fe:5e:3f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=345fb3feb15c03c4d34d9ff444d9ad7e30067208 Validity Not Before: Dec 26 18:01:18 2025 GMT Not After : Dec 27 18:01:18 2025 GMT Subject: CN=5bbadf61796c404d16233ee478de55982b473049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ef:ba:fc:16:d5:02:b4:48:c4:45:83:24:ef: ce:cb:57:3c:a4:ce:5c:aa:b8:10:f7:68:4e:5b:47: 6c:34:67:69:b0:85:b8:b2:30:74:fb:e2:a6:e2:7a: 64:db:56:4d:bf:33:ef:cc:3c:9f:26:ec:d7:ea:dd: 8b:27:58:86:e1:80:99:13:38:54:50:09:e3:dd:d3: 00:24:2a:45:58:7f:21:d0:72:d6:8f:2d:fc:88:99: 70:f5:fe:e0:82:15:74:68:a1:ca:9d:5d:79:0b:c9: 91:96:d9:58:bb:08:ff:19:d0:49:17:23:47:63:b2: 26:1e:0a:e7:1d:e9:83:8b:45:91:f9:97:3b:d2:f2: 25:f4:b6:03:f0:96:1b:21:56:5b:20:33:94:97:16: cf:5b:ec:a0:18:1d:9b:75:a7:68:3b:4a:9f:e7:66: 52:66:f8:d4:7a:c5:1c:fd:27:80:3b:c7:8b:84:1b: f3:9d:0a:27:3d:00:dc:44:9f:e3:74:cb:b3:76:f6: f3:e3:0e:be:6e:3e:f0:b5:bd:92:86:70:f7:f6:f1: f2:80:22:f6:61:97:ac:35:32:39:df:31:00:92:6e: f2:85:3a:f4:06:c9:af:d6:29:1a:92:f7:15:59:61: f0:91:ac:99:c4:ed:3c:78:a2:2f:1e:1b:7b:29:93: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:DF:61:79:6C:40:4D:16:23:3E:E4:78:DE:55:98:2B:47:30:49 X509v3 Authority Key Identifier: keyid:34:5F:B3:FE:B1:5C:03:C4:D3:4D:9F:F4:44:D9:AD:7E:30:06:72:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a442c5-d14f-429f-a515-bc54b1211b60/1/NF-z_rFcA8TTTZ_0RNmtfjAGcgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:8d:33:6d:2a:9e:1d:fe:b5:83:e7:0c:66:48:62:a2:a9:12: 80:90:b2:06:b3:c8:00:86:2c:c4:ea:a7:22:2a:7a:79:b0:22: c6:ce:2c:15:07:14:95:97:48:b3:e5:e1:e4:6e:44:cc:9b:5d: 74:93:9e:c8:04:6d:61:25:8f:96:4b:eb:81:d6:77:7a:2f:98: 17:59:39:2d:6f:49:ca:bb:6b:10:da:24:3f:c9:9e:73:3e:a4: 18:42:a5:b8:4d:0e:d5:a6:43:dc:40:24:fa:83:28:06:ca:46: 9c:d6:67:1d:64:1f:b1:5a:07:b2:ad:ab:0c:71:4c:8f:e5:a2: ed:51:7b:16:89:ac:d7:59:7b:90:fd:28:f0:3d:0f:c2:01:fa: 25:ce:5a:ea:16:9c:01:0f:2f:cd:7e:48:44:73:38:cc:4d:b1: 26:b1:74:1c:03:2e:79:36:27:38:fb:a9:df:fc:a5:0d:61:ba: f9:31:06:8c:77:c4:e7:4e:38:4a:b6:5b:79:85:07:d3:0a:14: c7:19:72:76:84:8d:0b:65:dc:db:6a:f0:26:fc:f1:c2:74:74: 18:ef:ef:8d:f3:af:98:35:91:5a:72:f3:bc:91:3b:36:57:82: b5:e8:ca:2b:a6:7e:1b:cb:c4:89:f9:00:d4:3e:d2:5b:11:fc: ac:c5:b6:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0nezpF/fvpuX/Zj+Xj/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0NWZiM2ZlYjE1YzAzYzRkMzRkOWZmNDQ0ZDlhZDdlMzAw NjcyMDgwHhcNMjUxMjI2MTgwMTE4WhcNMjUxMjI3MTgwMTE4WjAzMTEwLwYDVQQD Eyg1YmJhZGY2MTc5NmM0MDRkMTYyMzNlZTQ3OGRlNTU5ODJiNDczMDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu+6/BbVArRIxEWDJO/Oy1c8pM5c qrgQ92hOW0dsNGdpsIW4sjB0++Km4npk21ZNvzPvzDyfJuzX6t2LJ1iG4YCZEzhU UAnj3dMAJCpFWH8h0HLWjy38iJlw9f7gghV0aKHKnV15C8mRltlYuwj/GdBJFyNH Y7ImHgrnHemDi0WR+Zc70vIl9LYD8JYbIVZbIDOUlxbPW+ygGB2bdadoO0qf52ZS ZvjUesUc/SeAO8eLhBvznQonPQDcRJ/jdMuzdvbz4w6+bj7wtb2ShnD39vHygCL2 YZesNTI53zEAkm7yhTr0Bsmv1ikakvcVWWHwkayZxO08eKIvHht7KZMFUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu632F5bEBNFiM+5HjeVZgrRzBJMB8GA1UdIwQY MBaAFDRfs/6xXAPE002f9ETZrX4wBnIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUt YmM1NGIxMjExYjYwLzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hNDQyYzUtZDE0Zi00MjlmLWE1MTUtYmM1NGIxMjExYjYw LzEvTkYtel9yRmNBOFRUVFpfMFJObXRmakFHY2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY0zbSqe Hf61g+cMZkhioqkSgJCyBrPIAIYsxOqnIip6ebAixs4sFQcUlZdIs+Xh5G5EzJtd dJOeyARtYSWPlkvrgdZ3ei+YF1k5LW9JyrtrENokP8mecz6kGEKluE0O1aZD3EAk +oMoBspGnNZnHWQfsVoHsq2rDHFMj+Wi7VF7Foms11l7kP0o8D0PwgH6Jc5a6hac AQ8vzX5IRHM4zE2xJrF0HAMueTYnOPup3/ylDWG6+TEGjHfE5044SrZbeYUH0woU xxlydoSNC2Xc22rwJvzxwnR0GO/vjfOvmDWRWnLzvJE7NleCtejKK6Z+G8vEifkA 1D7SWxH8rMW2ow== -----END CERTIFICATE-----Generated at Fri Dec 26 21:22:54 2025 by rpki-client