This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft File: NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft (raw, json) Hash identifier: CMMJPOEeMyf58jvwQ1SX2jzx8heWkiJOcvuGbYnnJ4Y= Subject key identifier: 23:06:9A:5B:F6:26:B7:F1:08:B1:38:FF:3C:4C:E6:52:E8:87:AF:21 Authority key identifier: 35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 Certificate issuer: /CN=35f1a573915153de82890eae1303067fa68b2877 Certificate serial: 019B390F236516C1E75E992EC674C1E00A1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft Manifest number: 1288 Signing time: Sat 20 Dec 2025 00:00:51 +0000 Manifest this update: Sat 20 Dec 2025 00:00:51 +0000 Manifest next update: Sun 21 Dec 2025 00:00:51 +0000 Files and hashes: 1: 64AufSKo0ctGsskBfGJHYgegDUM.roa (hash: TxQbijMyiwaYhEgR6gv3I6pa/f1D2b/JYXZHussR2b4=) 2: NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl (hash: ODbrIc82WL55xoMOnWhS4QuItwBx/gveIHgYuUsiM/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:23:65:16:c1:e7:5e:99:2e:c6:74:c1:e0:0a:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35f1a573915153de82890eae1303067fa68b2877 Validity Not Before: Dec 20 00:00:51 2025 GMT Not After : Dec 21 00:00:51 2025 GMT Subject: CN=23069a5bf626b7f108b138ff3c4ce652e887af21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:04:a2:31:b2:4e:c1:37:8f:e4:f6:21:c0:9d: 8a:93:cd:7e:36:4f:5f:2a:49:ae:f8:e6:d6:50:78: 65:4f:19:5f:3a:bc:20:dc:fb:4d:35:dd:e5:ce:71: e6:f5:4a:a5:7b:03:9d:24:c3:87:71:9c:b7:53:c6: 7a:19:ea:ee:01:66:fb:65:44:ee:61:ad:53:ff:a0: 53:e9:d2:5e:93:28:56:c5:2d:3c:0e:21:ee:81:75: 7d:a8:6b:90:bb:ed:9f:82:41:ec:3b:a5:58:5b:36: 1f:73:e3:de:93:89:21:3a:36:59:ed:a0:cd:41:d8: b4:52:1e:40:07:46:8d:7f:c8:cf:95:e9:97:1a:ff: 41:9a:39:93:c8:ad:a6:1d:44:12:04:11:79:65:72: 39:3c:68:4c:6f:0f:56:f3:91:ec:1b:9b:1a:9a:90: 1e:d8:ed:7f:06:aa:64:c3:c2:7c:4c:55:0d:07:cf: 97:a1:5b:57:2b:55:06:ab:59:3d:0b:e5:0e:34:52: 80:23:19:6e:e8:cc:48:4c:01:fc:05:d1:e9:f0:85: 01:bf:23:b8:d6:5b:94:01:81:84:0a:51:73:49:03: fa:07:5a:77:00:c0:fd:6b:02:5e:33:e5:26:7f:07: ea:89:30:43:77:df:fb:19:6f:6d:b3:54:0f:1a:ac: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:06:9A:5B:F6:26:B7:F1:08:B1:38:FF:3C:4C:E6:52:E8:87:AF:21 X509v3 Authority Key Identifier: keyid:35:F1:A5:73:91:51:53:DE:82:89:0E:AE:13:03:06:7F:A6:8B:28:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfGlc5FRU96CiQ6uEwMGf6aLKHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/da8b6b-19fa-4976-baa0-329211029a1a/1/NfGlc5FRU96CiQ6uEwMGf6aLKHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3e:68:93:64:03:9a:d1:2d:23:9e:56:02:85:33:b2:4f:29: 0c:0d:46:c1:1d:61:2a:e9:d5:eb:85:9c:a8:1c:d5:b6:c4:08: 07:00:a2:aa:2b:7f:43:e6:2d:f8:c1:20:ba:b9:08:57:0c:2f: 68:a3:74:e9:1c:32:a2:a8:5e:a5:8f:64:c6:59:e2:8a:00:1f: d8:ec:32:61:d7:af:b8:b7:ac:9e:39:75:4f:e7:ad:37:0a:4a: ad:f5:d6:26:b5:32:00:e5:37:55:62:75:30:69:2d:56:eb:6d: 15:51:23:47:d3:39:00:c4:8c:ac:96:08:11:27:12:3b:2a:bf: 55:fc:13:b7:d8:ef:13:24:e9:34:30:2d:99:ca:29:c5:e6:6c: 8e:f7:fd:12:ba:da:85:e8:bc:5d:a8:d4:96:9d:53:8e:77:80: 22:7c:c2:f2:3f:05:8e:e0:80:9a:16:10:87:62:c7:3f:14:2d: b2:b7:7b:01:a7:15:fb:29:19:0b:42:4a:38:82:00:a5:9d:c7: f9:69:22:b0:1a:a0:b8:89:b2:ad:91:2c:f8:e3:13:98:6d:a6: a5:a7:13:9b:d0:e6:d9:66:5f:aa:a3:1f:d8:9e:0f:b0:b3:fa: 6e:25:be:3e:27:04:fb:86:23:5e:3f:00:c7:e3:68:54:c9:af: c0:31:58:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DyNlFsHnXpkuxnTB4AodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1ZjFhNTczOTE1MTUzZGU4Mjg5MGVhZTEzMDMwNjdmYTY4 YjI4NzcwHhcNMjUxMjIwMDAwMDUxWhcNMjUxMjIxMDAwMDUxWjAzMTEwLwYDVQQD EygyMzA2OWE1YmY2MjZiN2YxMDhiMTM4ZmYzYzRjZTY1MmU4ODdhZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QSiMbJOwTeP5PYhwJ2Kk81+Nk9f Kkmu+ObWUHhlTxlfOrwg3PtNNd3lznHm9UqlewOdJMOHcZy3U8Z6GeruAWb7ZUTu Ya1T/6BT6dJekyhWxS08DiHugXV9qGuQu+2fgkHsO6VYWzYfc+Pek4khOjZZ7aDN Qdi0Uh5AB0aNf8jPlemXGv9BmjmTyK2mHUQSBBF5ZXI5PGhMbw9W85HsG5sampAe 2O1/Bqpkw8J8TFUNB8+XoVtXK1UGq1k9C+UONFKAIxlu6MxITAH8BdHp8IUBvyO4 1luUAYGEClFzSQP6B1p3AMD9awJeM+UmfwfqiTBDd9/7GW9ts1QPGqyEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMGmlv2JrfxCLE4/zxM5lLoh68hMB8GA1UdIwQY MBaAFDXxpXORUVPegokOrhMDBn+miyh3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAt MzI5MjExMDI5YTFhLzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kYThiNmItMTlmYS00OTc2LWJhYTAtMzI5MjExMDI5YTFh LzEvTmZHbGM1RlJVOTZDaVE2dUV3TUdmNmFMS0hjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID5ok2QD mtEtI55WAoUzsk8pDA1GwR1hKunV64WcqBzVtsQIBwCiqit/Q+Yt+MEgurkIVwwv aKN06RwyoqhepY9kxlniigAf2OwyYdevuLesnjl1T+etNwpKrfXWJrUyAOU3VWJ1 MGktVuttFVEjR9M5AMSMrJYIEScSOyq/VfwTt9jvEyTpNDAtmcopxeZsjvf9Erra hei8XajUlp1TjneAInzC8j8FjuCAmhYQh2LHPxQtsrd7AacV+ykZC0JKOIIApZ3H +WkisBqguImyrZEs+OMTmG2mpacTm9Dm2WZfqqMf2J4PsLP6biW+PicE+4YjXj8A x+NoVMmvwDFYKA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:56 2025 by rpki-client