This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft File: NA5TAUvwOK3g13rmeP9t80ylPcA.mft (raw, json) Hash identifier: vWQsegc3QkArq835sPiYrSt7EbZINMwa2uNMK8OyW+A= Subject key identifier: 6A:07:68:89:4E:1B:A6:43:05:9F:F9:6F:40:E4:A0:D9:0E:96:D4:C6 Authority key identifier: 34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0 Certificate issuer: /CN=340e53014bf038ade0d77ae678ff6df34ca53dc0 Certificate serial: 019B6C578131EE18D913C39A2B53D540D2F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft Manifest number: 0747 Signing time: Mon 29 Dec 2025 23:00:32 +0000 Manifest this update: Mon 29 Dec 2025 23:00:32 +0000 Manifest next update: Tue 30 Dec 2025 23:00:32 +0000 Files and hashes: 1: NA5TAUvwOK3g13rmeP9t80ylPcA.crl (hash: w9flE3FdEFPFX7itihx0kjKp/AYba7me9Wdw4geGjOk=) 2: _RGZJkC_maX9Rk5gq7HAO40xyLk.roa (hash: UMn242+aY7D7FSfVsCmwNFJLABV4j5b5GNVt9RDj5KE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:81:31:ee:18:d9:13:c3:9a:2b:53:d5:40:d2:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=340e53014bf038ade0d77ae678ff6df34ca53dc0 Validity Not Before: Dec 29 23:00:32 2025 GMT Not After : Dec 30 23:00:32 2025 GMT Subject: CN=6a0768894e1ba643059ff96f40e4a0d90e96d4c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2f:73:59:6b:12:13:58:85:f1:a2:b7:cc:f8: 94:cd:f8:d6:d0:7b:f0:5b:3a:d5:bf:98:fa:68:fa: 64:de:ab:ab:e3:3f:6a:17:cb:ce:ae:f4:c3:d6:4c: 31:e3:34:62:05:2a:bb:5d:3e:5f:2a:8a:b3:ab:74: a3:65:1a:a0:aa:9d:e4:5d:30:fb:74:be:32:ea:00: f2:a3:3c:6e:96:34:7e:df:ed:5d:cc:77:4e:29:a0: 91:ad:b3:7c:ec:b3:b1:ba:9d:69:5d:70:d1:7e:95: 96:0f:5a:67:79:fc:e3:a9:eb:b7:52:28:46:e5:f9: 77:1c:88:7d:23:c5:7e:59:a0:3b:a7:b2:d0:d9:bf: e7:96:b5:e5:bb:76:d2:10:d1:48:92:0b:95:ea:30: 72:06:55:1f:6f:b3:c0:35:68:db:3e:38:c2:c7:f8: a1:07:1b:00:24:39:1e:0f:31:8f:92:de:83:98:6c: 4d:54:a3:ad:18:81:63:b9:b9:84:94:cb:f5:72:1e: 47:51:4c:6a:f5:c9:ab:69:b8:cb:43:3b:57:15:c2: d2:67:74:d4:3b:1e:25:cd:d6:ec:d3:61:94:b2:23: 92:25:6f:30:42:e9:dc:91:6d:5a:4a:81:1d:e0:3f: ab:ba:57:9d:72:54:2a:f0:17:3b:c8:1d:87:02:87: 1b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:07:68:89:4E:1B:A6:43:05:9F:F9:6F:40:E4:A0:D9:0E:96:D4:C6 X509v3 Authority Key Identifier: keyid:34:0E:53:01:4B:F0:38:AD:E0:D7:7A:E6:78:FF:6D:F3:4C:A5:3D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NA5TAUvwOK3g13rmeP9t80ylPcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e60828-88db-4e3b-9a47-e148235b7723/1/NA5TAUvwOK3g13rmeP9t80ylPcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:5f:af:cf:e2:7e:4d:34:09:99:63:cc:93:11:16:b1:e5:32: 29:75:52:85:21:c5:c7:a4:ac:40:d3:a4:ec:82:20:74:9b:30: 33:ff:ce:58:6a:8d:18:99:4d:c4:af:74:ad:1e:52:6c:df:e8: 62:2e:ff:98:94:b9:1a:63:0a:a1:b8:aa:f6:0d:9e:6f:a7:6e: a9:aa:b8:7b:32:5c:28:af:ea:ac:f3:3e:df:4c:32:27:96:a2: 5d:e0:05:b3:de:2f:f7:35:5d:48:3d:8e:fe:db:0e:09:f5:4f: 10:91:70:8d:88:9c:55:23:58:fc:e9:2b:39:60:d3:74:da:bd: 01:87:6c:d6:b8:a2:93:32:a0:9c:1d:0b:48:a1:09:71:e2:90: 9f:ed:a7:c0:ea:c7:1c:17:42:ca:5a:a7:28:dc:fc:40:99:b0: 46:8f:00:35:8d:c1:2e:c4:b4:f1:e7:ef:e4:a0:8e:ae:a4:b5: ed:bb:71:08:18:d4:e1:20:85:22:be:77:9d:5f:95:ea:1e:52: 8c:16:dc:d7:a5:bc:c3:c2:27:26:87:05:a7:1f:62:ce:e2:c8: ed:e8:f7:f2:83:3d:40:56:1f:c9:aa:76:80:2b:da:3b:af:e2: d2:67:0d:9c:46:02:eb:e3:b8:2f:ee:7f:28:40:7d:ef:c7:3b: 0a:34:25:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV4Ex7hjZE8OaK1PVQNL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0MGU1MzAxNGJmMDM4YWRlMGQ3N2FlNjc4ZmY2ZGYzNGNh NTNkYzAwHhcNMjUxMjI5MjMwMDMyWhcNMjUxMjMwMjMwMDMyWjAzMTEwLwYDVQQD Eyg2YTA3Njg4OTRlMWJhNjQzMDU5ZmY5NmY0MGU0YTBkOTBlOTZkNGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy9zWWsSE1iF8aK3zPiUzfjW0Hvw WzrVv5j6aPpk3qur4z9qF8vOrvTD1kwx4zRiBSq7XT5fKoqzq3SjZRqgqp3kXTD7 dL4y6gDyozxuljR+3+1dzHdOKaCRrbN87LOxup1pXXDRfpWWD1pnefzjqeu3UihG 5fl3HIh9I8V+WaA7p7LQ2b/nlrXlu3bSENFIkguV6jByBlUfb7PANWjbPjjCx/ih BxsAJDkeDzGPkt6DmGxNVKOtGIFjubmElMv1ch5HUUxq9cmrabjLQztXFcLSZ3TU Ox4lzdbs02GUsiOSJW8wQunckW1aSoEd4D+ruledclQq8Bc7yB2HAocbYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoHaIlOG6ZDBZ/5b0DkoNkOltTGMB8GA1UdIwQY MBaAFDQOUwFL8Dit4Nd65nj/bfNMpT3AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDct ZTE0ODIzNWI3NzIzLzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNjA4MjgtODhkYi00ZTNiLTlhNDctZTE0ODIzNWI3NzIz LzEvTkE1VEFVdndPSzNnMTNybWVQOXQ4MHlsUGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1+vz+J+ TTQJmWPMkxEWseUyKXVShSHFx6SsQNOk7IIgdJswM//OWGqNGJlNxK90rR5SbN/o Yi7/mJS5GmMKobiq9g2eb6duqaq4ezJcKK/qrPM+30wyJ5aiXeAFs94v9zVdSD2O /tsOCfVPEJFwjYicVSNY/OkrOWDTdNq9AYds1riikzKgnB0LSKEJceKQn+2nwOrH HBdCylqnKNz8QJmwRo8ANY3BLsS08efv5KCOrqS17btxCBjU4SCFIr53nV+V6h5S jBbc16W8w8InJocFpx9izuLI7ej38oM9QFYfyap2gCvaO6/i0mcNnEYC6+O4L+5/ KEB978c7CjQl5g== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:14 2025 by rpki-client