This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json) Hash identifier: an4cwBA37+naiYSJPOb/5AgGi8rzjOP8WZLN8BPWrrw= Subject key identifier: BF:51:94:09:F7:55:85:83:8E:00:09:DB:55:E1:0C:80:15:73:F7:03 Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e Certificate serial: 019AF50AE97202AE906FD43718E8BE8E9860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:02:04 +0000 Manifest this update: Sat 06 Dec 2025 19:02:04 +0000 Manifest next update: Sun 07 Dec 2025 19:02:04 +0000 Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: QmGWlIroLGNZQj0ORlyznX0V+EP9nXs/FrOvSPawQcQ=) 2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e9:72:02:ae:90:6f:d4:37:18:e8:be:8e:98:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e Validity Not Before: Dec 6 19:02:04 2025 GMT Not After : Dec 7 19:02:04 2025 GMT Subject: CN=bf519409f75585838e0009db55e10c801573f703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5c:5a:5a:00:c1:10:9e:58:03:c8:7e:89:1a: e5:5a:26:cf:63:ef:6e:4f:ca:32:8e:84:1a:12:b5: 4b:6c:73:11:e1:80:9a:b1:ad:75:c9:df:a3:8d:7c: 22:73:a7:1b:07:39:0a:d2:66:cb:39:39:ff:77:89: bf:6a:ab:9f:ac:2e:8d:ec:cb:43:07:81:cd:bb:31: b9:94:b1:b0:ee:da:55:c3:16:b8:f6:a9:cc:bd:ab: b1:c2:14:d1:dd:2e:1b:1a:4a:69:46:a7:34:77:2c: 09:50:48:e9:52:64:a7:a7:6d:7d:86:f6:b0:4c:e4: f4:39:0a:bb:0d:c5:6e:03:07:c6:b3:61:33:d7:9a: 69:1a:1d:f0:ad:60:17:af:d8:e0:bd:98:1e:75:aa: da:42:9f:4d:a8:2c:4e:ab:b6:74:48:c8:b3:24:27: da:67:59:e9:bd:4c:61:f9:e3:de:3f:4b:46:15:7a: 78:38:a9:91:d3:df:11:80:47:a3:0d:71:d6:c1:be: f8:70:f4:51:f1:a7:df:da:88:fb:80:db:9f:23:4c: fe:6d:6d:8d:65:03:e7:23:85:06:40:9a:ad:57:ac: 5c:83:ea:df:5c:cd:be:16:9b:74:39:d9:b6:73:26: eb:19:d6:41:4f:dd:fc:bb:d4:a4:5a:3b:a8:5e:b4: 70:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:51:94:09:F7:55:85:83:8E:00:09:DB:55:E1:0C:80:15:73:F7:03 X509v3 Authority Key Identifier: keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:18:18:60:d6:21:4b:73:4e:7b:c5:1c:04:ff:82:26:0b:f4: 5f:b8:48:81:8d:12:23:23:ae:c1:64:20:b8:38:2d:8e:96:51: 0f:d8:14:6b:34:75:7d:30:96:d9:fb:a6:74:df:0c:7a:96:42: e3:21:b7:77:43:59:45:e3:83:d6:b4:95:a9:9d:05:fb:35:06: c3:ce:59:d4:27:54:a5:9d:e9:55:8f:84:dc:21:60:f5:71:ac: 03:bc:38:ec:b5:07:dc:e3:75:57:3c:e6:ac:e2:1a:87:c3:a4: e3:d8:8b:97:41:50:39:3b:c5:e2:4b:c7:1b:54:ed:ee:af:44: 1a:52:ca:14:c4:0e:f4:95:21:46:9f:91:49:6c:8f:13:f9:4b: 65:6a:62:8f:dc:87:71:a5:2b:61:19:7c:3e:32:ff:12:af:c7: 5f:ed:bc:2d:f9:c4:65:5e:46:f2:37:55:ff:b7:73:0e:f1:3c: 31:f3:83:b9:65:98:91:a6:9c:e9:17:0e:fc:f1:44:0d:10:ea: d1:4c:47:80:13:36:7d:7f:03:30:c3:1a:43:e0:3e:cf:6d:92: 92:48:dc:99:f3:40:e2:41:c2:73:0b:9d:33:7b:50:53:f6:71: e2:4e:ea:5d:14:81:31:ef:c5:77:57:3e:a8:f7:dd:f6:14:2c: dc:7a:e9:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CulyAq6Qb9Q3GOi+jphgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWZkMzU3YzNmYjhlYTMwZTEyMDc4MjNiNjQ2ZTEyNTMx ODM4MGUwHhcNMjUxMjA2MTkwMjA0WhcNMjUxMjA3MTkwMjA0WjAzMTEwLwYDVQQD EyhiZjUxOTQwOWY3NTU4NTgzOGUwMDA5ZGI1NWUxMGM4MDE1NzNmNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFxaWgDBEJ5YA8h+iRrlWibPY+9u T8oyjoQaErVLbHMR4YCasa11yd+jjXwic6cbBzkK0mbLOTn/d4m/aqufrC6N7MtD B4HNuzG5lLGw7tpVwxa49qnMvauxwhTR3S4bGkppRqc0dywJUEjpUmSnp219hvaw TOT0OQq7DcVuAwfGs2Ez15ppGh3wrWAXr9jgvZgedaraQp9NqCxOq7Z0SMizJCfa Z1npvUxh+ePeP0tGFXp4OKmR098RgEejDXHWwb74cPRR8aff2oj7gNufI0z+bW2N ZQPnI4UGQJqtV6xcg+rfXM2+Fpt0Odm2cybrGdZBT938u9SkWjuoXrRwwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9RlAn3VYWDjgAJ21XhDIAVc/cDMB8GA1UdIwQY MBaAFDSf01fD+46jDhIHgjtkbhJTGDgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTIt MWU4NGYwOGMxZGNiLzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTItMWU4NGYwOGMxZGNi LzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBgYYNYh S3NOe8UcBP+CJgv0X7hIgY0SIyOuwWQguDgtjpZRD9gUazR1fTCW2fumdN8MepZC 4yG3d0NZReOD1rSVqZ0F+zUGw85Z1CdUpZ3pVY+E3CFg9XGsA7w47LUH3ON1Vzzm rOIah8Ok49iLl0FQOTvF4kvHG1Tt7q9EGlLKFMQO9JUhRp+RSWyPE/lLZWpij9yH caUrYRl8PjL/Eq/HX+28LfnEZV5G8jdV/7dzDvE8MfODuWWYkaac6RcO/PFEDRDq 0UxHgBM2fX8DMMMaQ+A+z22SkkjcmfNA4kHCcwudM3tQU/Zx4k7qXRSBMe/Fd1c+ qPfd9hQs3HrpUg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:58 2025 by rpki-client