This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft File: NLFHrBz3fVyPsq90-tO3O10TeyY.mft (raw, json) Hash identifier: LND/NdfkC9hJlCUTC01u6dmkfby6tseiiEpFZjyBPIU= Subject key identifier: D7:90:98:6D:B4:B1:DD:5D:D3:25:A6:20:DC:B4:DB:52:40:D0:30:79 Authority key identifier: 34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26 Certificate issuer: /CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26 Certificate serial: 019B134AE02AA2D060B8834876EA7D0DEE33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft Manifest number: 0306 Signing time: Fri 12 Dec 2025 16:00:32 +0000 Manifest this update: Fri 12 Dec 2025 16:00:32 +0000 Manifest next update: Sat 13 Dec 2025 16:00:32 +0000 Files and hashes: 1: NLFHrBz3fVyPsq90-tO3O10TeyY.crl (hash: jjQaHfHXq4OIUNbx+4f8XLWB9pm/z6527LpJB2yg1Jc=) 2: THnq9fycftVoi9SRyG2RAgjh-xM.roa (hash: CvE6vZRBpMVjaRZR6SZYXH1U/C4JGawX5FU1BEkF3Yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:4a:e0:2a:a2:d0:60:b8:83:48:76:ea:7d:0d:ee:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b147ac1cf77d5c8fb2af74fad3b73b5d137b26 Validity Not Before: Dec 12 16:00:32 2025 GMT Not After : Dec 13 16:00:32 2025 GMT Subject: CN=d790986db4b1dd5dd325a620dcb4db5240d03079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a0:4b:71:7b:69:a4:ce:92:90:36:17:33:24: d9:4e:48:15:f7:72:04:94:f9:8c:8b:66:73:38:60: ac:64:b5:b4:21:4d:15:35:39:e8:86:97:71:77:fc: 0c:98:01:63:5b:55:04:cf:c7:b9:fb:4c:e0:b8:04: 4e:e1:3d:25:c2:37:7c:87:42:02:96:aa:3e:3f:5d: a0:e9:02:00:78:5a:09:7a:cc:31:73:97:4f:a2:72: 4d:20:ef:ba:25:4f:a2:d7:c6:76:f1:bf:51:e2:c2: 10:f2:bd:a8:bb:a7:9b:06:55:03:20:94:83:ee:8e: c8:d6:3c:3a:9d:57:f7:e1:1e:7c:a9:75:ee:6d:4b: 19:ea:29:68:21:3d:37:50:91:c7:b9:e8:3f:65:b0: ab:28:76:d4:9a:fb:a9:91:1a:fe:e3:08:a6:30:9a: 08:c2:db:bc:21:ca:67:d5:87:5e:c5:57:dd:51:0e: e6:3d:94:f6:28:f0:c3:aa:2d:fe:c9:46:80:4d:58: 73:d3:09:d8:9f:65:b5:6f:b6:8b:61:85:fc:97:40: c3:23:0b:41:d6:1c:87:5a:df:6d:04:60:57:d6:18: 18:e9:ac:e6:88:97:f0:2a:7f:31:eb:8b:29:9f:07: 06:1e:a0:49:0f:d0:05:b8:ee:6e:d7:38:b8:fa:9a: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:90:98:6D:B4:B1:DD:5D:D3:25:A6:20:DC:B4:DB:52:40:D0:30:79 X509v3 Authority Key Identifier: keyid:34:B1:47:AC:1C:F7:7D:5C:8F:B2:AF:74:FA:D3:B7:3B:5D:13:7B:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLFHrBz3fVyPsq90-tO3O10TeyY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cb78e7-3455-4bae-b544-b13717503010/1/NLFHrBz3fVyPsq90-tO3O10TeyY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7d:dc:3a:38:2e:71:80:f7:05:ea:d5:ab:f3:d3:5e:99:64: 2a:5a:7a:f2:a3:23:e7:ae:d7:a4:c2:71:6d:03:92:ea:3b:b5: 51:36:25:33:4f:51:38:b5:d3:6c:33:51:38:b9:c5:36:f8:19: be:77:8e:5d:0b:b3:94:4a:ba:64:96:64:c8:16:05:43:b2:e1: 86:34:27:de:5e:ad:61:ed:07:69:f1:f6:71:f1:3a:83:87:ef: cc:52:31:e3:c1:a9:46:2f:53:e9:84:bc:89:b6:da:22:da:56: 21:aa:9a:54:65:e2:8b:eb:b5:b8:e6:f4:14:f7:95:11:a6:f0: 28:14:be:00:54:50:60:ca:98:35:7e:b2:5c:00:0b:fa:d5:c2: 0d:2c:8b:bd:58:e7:69:7a:de:3c:83:8f:8b:1c:97:03:64:ef: d6:62:31:3d:80:81:e1:62:2b:a7:e7:30:22:53:0d:d4:06:5e: af:1c:16:5f:b0:36:c0:b6:8d:4a:9f:49:54:33:26:1e:34:ce: f8:da:77:69:32:66:54:b0:b1:69:ea:6e:2a:de:62:c0:f1:29: 3b:da:6b:31:09:b8:6d:f7:dd:7a:a3:f3:44:b8:5c:3c:64:81: 5c:7d:ba:2b:f2:8d:2e:1a:8a:f2:c6:7c:25:83:27:a4:ef:6c: d7:c4:3a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTSuAqotBguINIdup9De4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjE0N2FjMWNmNzdkNWM4ZmIyYWY3NGZhZDNiNzNiNWQx MzdiMjYwHhcNMjUxMjEyMTYwMDMyWhcNMjUxMjEzMTYwMDMyWjAzMTEwLwYDVQQD EyhkNzkwOTg2ZGI0YjFkZDVkZDMyNWE2MjBkY2I0ZGI1MjQwZDAzMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aBLcXtppM6SkDYXMyTZTkgV93IE lPmMi2ZzOGCsZLW0IU0VNTnohpdxd/wMmAFjW1UEz8e5+0zguARO4T0lwjd8h0IC lqo+P12g6QIAeFoJeswxc5dPonJNIO+6JU+i18Z28b9R4sIQ8r2ou6ebBlUDIJSD 7o7I1jw6nVf34R58qXXubUsZ6iloIT03UJHHueg/ZbCrKHbUmvupkRr+4wimMJoI wtu8Icpn1YdexVfdUQ7mPZT2KPDDqi3+yUaATVhz0wnYn2W1b7aLYYX8l0DDIwtB 1hyHWt9tBGBX1hgY6azmiJfwKn8x64spnwcGHqBJD9AFuO5u1zi4+ppnywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeQmG20sd1d0yWmINy021JA0DB5MB8GA1UdIwQY MBaAFDSxR6wc931cj7KvdPrTtztdE3smMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQt YjEzNzE3NTAzMDEwLzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jYjc4ZTctMzQ1NS00YmFlLWI1NDQtYjEzNzE3NTAzMDEw LzEvTkxGSHJCejNmVnlQc3E5MC10TzNPMTBUZXlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH3cOjgu cYD3BerVq/PTXplkKlp68qMj567XpMJxbQOS6ju1UTYlM09ROLXTbDNROLnFNvgZ vneOXQuzlEq6ZJZkyBYFQ7LhhjQn3l6tYe0HafH2cfE6g4fvzFIx48GpRi9T6YS8 ibbaItpWIaqaVGXii+u1uOb0FPeVEabwKBS+AFRQYMqYNX6yXAAL+tXCDSyLvVjn aXrePIOPixyXA2Tv1mIxPYCB4WIrp+cwIlMN1AZerxwWX7A2wLaNSp9JVDMmHjTO +Np3aTJmVLCxaepuKt5iwPEpO9prMQm4bffdeqPzRLhcPGSBXH26K/KNLhqK8sZ8 JYMnpO9s18Q6Hg== -----END CERTIFICATE-----Generated at Sat Dec 13 02:19:09 2025 by rpki-client