This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json) Hash identifier: kwECL7LK6HyAM8z+ZggRAixmlfoKwQwdolSqE/NKa9w= Subject key identifier: 64:AA:F3:58:30:36:EE:AB:86:BD:96:93:0F:4B:BA:ED:34:85:84:85 Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf Certificate serial: 019B5908612BC60A22F07584B6F4A9C0E0A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 05:01:19 +0000 Manifest this update: Fri 26 Dec 2025 05:01:19 +0000 Manifest next update: Sat 27 Dec 2025 05:01:19 +0000 Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: eesw7gk7znZz4hOsKZerCjHvt5H9uQ4yEvNDJsn4/Po=) 2: WTiY2Qk1x-geaQsrR6enC5adAMQ.roa (hash: jOYBpT27U7g6ol8yiuxnI6V37MSFQ9qLOBM0L34PdCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:61:2b:c6:0a:22:f0:75:84:b6:f4:a9:c0:e0:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf Validity Not Before: Dec 26 05:01:19 2025 GMT Not After : Dec 27 05:01:19 2025 GMT Subject: CN=64aaf3583036eeab86bd96930f4bbaed34858485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:01:1a:c9:eb:1b:25:94:3b:56:28:1f:36:c2: 1e:e9:1e:93:2e:f4:47:69:d7:36:14:20:87:af:59: 9d:f8:df:7b:a2:bc:62:26:1c:60:c6:e7:21:5e:cd: cc:62:7d:4b:e4:ec:59:b9:59:a8:dd:2f:e6:89:1c: 3e:4f:a6:04:76:3c:39:0a:f8:fe:82:40:76:2e:84: b2:da:79:a6:dd:ab:fe:71:9d:e2:eb:99:54:82:86: 23:40:b9:bf:07:fc:2c:83:9f:7a:c0:f8:ae:ab:a9: 04:bd:06:e4:c1:e3:96:b1:64:09:ca:a2:60:b4:68: 89:92:b7:d5:a1:e0:59:16:18:f1:53:23:1e:a6:04: 80:90:be:f9:af:77:bd:72:70:a8:8a:b2:e9:88:d4: 36:39:47:b5:b6:22:ea:c6:11:37:85:13:59:60:f9: b9:53:3b:a9:ea:f8:67:e4:17:70:9b:ea:2e:64:b6: e6:63:54:3b:c6:33:c8:d3:ba:43:b2:dd:ef:05:7a: 6f:06:64:ec:03:33:39:3a:b9:fd:a7:b5:c1:83:db: 2f:2a:d2:5c:a8:1a:1c:42:37:52:8e:44:f2:d9:65: 74:01:04:97:76:d8:dc:d4:27:69:51:69:8c:6f:2a: 1d:d0:97:6c:83:33:8c:e2:40:5e:91:0b:82:ec:e4: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AA:F3:58:30:36:EE:AB:86:BD:96:93:0F:4B:BA:ED:34:85:84:85 X509v3 Authority Key Identifier: keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:31:bc:9d:d9:2e:81:47:1e:7c:01:43:0b:9d:71:80:f8:05: ba:65:33:d2:c7:fe:ac:8f:27:57:1e:bd:2a:dd:08:94:dd:97: e4:0f:0c:61:6c:de:7b:3b:23:50:0e:5b:05:ac:20:c5:c9:2b: 53:c0:0c:da:c7:c6:20:17:f5:8d:73:25:18:16:34:7a:b0:24: 41:e1:23:54:62:6c:a0:d3:ae:ed:e0:6f:cc:d9:de:ec:b6:1c: 39:ef:d0:11:32:6e:3f:95:55:f9:4b:bb:cd:fe:1f:97:0c:73: 98:a1:47:f7:bd:8e:b9:cb:b8:98:06:e3:e0:c1:64:a2:91:3e: 65:10:68:72:3f:9e:77:ba:57:65:74:fa:73:0e:aa:72:95:c0: 91:07:3b:4f:22:09:e9:aa:5c:55:5b:bb:d0:8f:38:00:ce:19: d4:00:c8:c1:b7:9a:e3:09:89:c2:47:8e:36:77:02:f9:52:e3: 9e:b6:50:23:4d:0a:a9:ce:76:25:fb:51:65:e7:91:13:ad:c5: 74:8e:ae:cf:7d:f1:cb:81:38:50:80:a0:26:70:8b:94:39:43: bb:f0:99:5d:32:c1:78:45:87:60:64:ab:0b:43:ce:79:fb:c2: bb:63:9b:81:b6:e0:31:3d:ad:e0:95:7e:ca:0f:be:d7:c7:96: e9:e4:17:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCGErxgoi8HWEtvSpwOClMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1YjFjY2U0ZDViYWQ4ZDljMmVkY2E0MDBlMmJmYzU0YTI0 MTg1YmYwHhcNMjUxMjI2MDUwMTE5WhcNMjUxMjI3MDUwMTE5WjAzMTEwLwYDVQQD Eyg2NGFhZjM1ODMwMzZlZWFiODZiZDk2OTMwZjRiYmFlZDM0ODU4NDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQEayesbJZQ7VigfNsIe6R6TLvRH adc2FCCHr1md+N97orxiJhxgxuchXs3MYn1L5OxZuVmo3S/miRw+T6YEdjw5Cvj+ gkB2LoSy2nmm3av+cZ3i65lUgoYjQLm/B/wsg596wPiuq6kEvQbkweOWsWQJyqJg tGiJkrfVoeBZFhjxUyMepgSAkL75r3e9cnCoirLpiNQ2OUe1tiLqxhE3hRNZYPm5 Uzup6vhn5Bdwm+ouZLbmY1Q7xjPI07pDst3vBXpvBmTsAzM5Orn9p7XBg9svKtJc qBocQjdSjkTy2WV0AQSXdtjc1CdpUWmMbyod0JdsgzOM4kBekQuC7OQzbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSq81gwNu6rhr2Wkw9Luu00hYSFMB8GA1UdIwQY MBaAFDWxzOTVutjZwu3KQA4r/FSiQYW/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEt Y2ZkM2I1M2RjNDU2LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zMDMxODQtOWY3ZS00NTgzLTgwYmEtY2ZkM2I1M2RjNDU2 LzEvTmJITTVOVzYyTm5DN2NwQURpdjhWS0pCaGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDG8ndku gUcefAFDC51xgPgFumUz0sf+rI8nVx69Kt0IlN2X5A8MYWzeezsjUA5bBawgxckr U8AM2sfGIBf1jXMlGBY0erAkQeEjVGJsoNOu7eBvzNne7LYcOe/QETJuP5VV+Uu7 zf4flwxzmKFH972Oucu4mAbj4MFkopE+ZRBocj+ed7pXZXT6cw6qcpXAkQc7TyIJ 6apcVVu70I84AM4Z1ADIwbea4wmJwkeONncC+VLjnrZQI00Kqc52JftRZeeRE63F dI6uz33xy4E4UICgJnCLlDlDu/CZXTLBeEWHYGSrC0POefvCu2ObgbbgMT2t4JV+ yg++18eW6eQXPg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:54 2025 by rpki-client