This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json) Hash identifier: IBtzBx6YsmIWBsOxLAhYMi6EAM+sPVXXFXag0SsAG8U= Subject key identifier: 95:6E:17:3F:59:49:39:87:0E:95:47:B9:DA:CB:C7:5E:5E:4A:11:DA Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Certificate serial: 019AF2401F13E4A86054055DFAC8D39E8395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft Manifest number: 0959 Signing time: Sat 06 Dec 2025 06:01:19 +0000 Manifest this update: Sat 06 Dec 2025 06:01:19 +0000 Manifest next update: Sun 07 Dec 2025 06:01:19 +0000 Files and hashes: 1: 1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa (hash: dCtfEERTL+DVPDzOeI+W+YlER3CfocSmb5i2ct7B3hg=) 2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: WzwlYgHWl/gAhmGg5QYuEAWPb6/ZFrw5fLTuO0P5Hvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1f:13:e4:a8:60:54:05:5d:fa:c8:d3:9e:83:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Validity Not Before: Dec 6 06:01:19 2025 GMT Not After : Dec 7 06:01:19 2025 GMT Subject: CN=956e173f594939870e9547b9dacbc75e5e4a11da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0c:1f:a2:fd:a9:b4:f7:90:c6:28:62:ae:f8: a8:de:32:0d:36:36:29:0d:35:34:97:b9:18:6c:af: 89:8c:8f:cd:5d:e1:12:d2:83:69:75:db:9f:f8:7e: f3:cb:05:2e:eb:83:72:b9:ea:a2:cd:65:30:7c:0d: c6:b6:65:80:27:1f:ad:a1:c2:0d:1d:db:50:c8:19: 03:01:02:08:9f:8d:08:32:58:ed:18:55:90:f3:7f: 0d:ca:95:43:18:50:08:3a:86:e0:bd:d1:51:2f:5b: 84:dc:e7:bc:5e:ae:7f:cd:8f:be:8b:bc:ad:eb:c8: 1f:c6:00:c4:a5:55:49:17:59:3c:dd:5d:29:f2:11: bf:32:b9:61:57:a8:13:59:b0:e1:e7:8d:3e:28:4d: 8a:6c:9c:a2:cd:66:b3:b6:b6:2c:be:eb:5e:de:c0: be:f2:98:03:f7:35:e2:73:ce:81:b4:d6:a4:41:6d: ff:e1:60:b8:94:68:2c:ee:f6:5d:63:0a:cc:91:dc: f2:12:f5:93:f4:e5:3a:b3:a9:6f:58:56:ce:eb:21: d1:cf:ff:ac:bb:3a:8f:32:b4:5c:07:71:62:32:ed: fb:f5:f7:f9:bc:14:f6:f4:9d:a6:d5:21:d2:ba:43: 40:69:52:1a:1f:63:b4:f7:b7:44:f2:c9:a8:c5:fe: 58:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6E:17:3F:59:49:39:87:0E:95:47:B9:DA:CB:C7:5E:5E:4A:11:DA X509v3 Authority Key Identifier: keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:96:84:8d:2e:f6:84:a5:8a:ad:69:5a:89:04:36:9c:f9:e6: 01:20:88:7b:e8:9c:ad:f7:6d:15:dd:26:eb:24:90:ff:16:ac: c9:1f:d3:6b:b0:ec:a1:fc:8a:9d:76:9d:66:68:5a:1d:04:f2: f9:7a:f0:6d:cf:90:93:6b:2c:eb:72:34:a0:8f:d7:c1:3f:02: 72:e5:16:e1:02:ce:9e:bd:fa:09:b1:bf:91:80:6f:d7:44:96: 29:d5:25:48:db:3e:5c:6d:ef:a0:ca:e4:a0:8c:c8:b6:3b:8e: a9:b2:45:33:14:27:cf:08:43:84:61:76:d2:8e:df:3b:90:1c: 9c:ab:3e:23:4b:d7:a2:5e:47:5f:a8:1d:96:1d:0c:45:e4:34: a7:9e:a4:b4:a6:98:c2:f5:ed:b2:e4:a7:7a:c3:db:f2:6d:8a: da:4e:64:40:57:6a:25:b1:8c:77:e4:aa:4c:ed:17:7e:eb:28: bf:9b:d5:fd:b8:8f:23:fc:ad:1d:d3:29:bd:9d:bc:5b:fe:c3: 10:37:c8:54:22:bb:8c:be:eb:a2:9a:e5:d1:79:10:57:30:30: 39:58:d4:02:13:47:41:9b:88:30:7c:ce:e1:7d:61:78:8f:08: d1:c9:08:1c:7d:c4:b5:7c:5f:25:20:41:29:b8:af:54:fc:ac: f4:cd:c2:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQB8T5KhgVAVd+sjTnoOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj YzI4NGEwHhcNMjUxMjA2MDYwMTE5WhcNMjUxMjA3MDYwMTE5WjAzMTEwLwYDVQQD Eyg5NTZlMTczZjU5NDkzOTg3MGU5NTQ3YjlkYWNiYzc1ZTVlNGExMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgwfov2ptPeQxihirvio3jINNjYp DTU0l7kYbK+JjI/NXeES0oNpdduf+H7zywUu64NyueqizWUwfA3GtmWAJx+tocIN HdtQyBkDAQIIn40IMljtGFWQ838NypVDGFAIOobgvdFRL1uE3Oe8Xq5/zY++i7yt 68gfxgDEpVVJF1k83V0p8hG/MrlhV6gTWbDh540+KE2KbJyizWaztrYsvute3sC+ 8pgD9zXic86BtNakQW3/4WC4lGgs7vZdYwrMkdzyEvWT9OU6s6lvWFbO6yHRz/+s uzqPMrRcB3FiMu379ff5vBT29J2m1SHSukNAaVIaH2O097dE8smoxf5YXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJVuFz9ZSTmHDpVHudrLx15eShHaMB8GA1UdIwQY MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt ZGQ1ZmZkNTMxNTcxLzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpaEjS72 hKWKrWlaiQQ2nPnmASCIe+icrfdtFd0m6ySQ/xasyR/Ta7DsofyKnXadZmhaHQTy +Xrwbc+Qk2ss63I0oI/XwT8CcuUW4QLOnr36CbG/kYBv10SWKdUlSNs+XG3voMrk oIzItjuOqbJFMxQnzwhDhGF20o7fO5AcnKs+I0vXol5HX6gdlh0MReQ0p56ktKaY wvXtsuSnesPb8m2K2k5kQFdqJbGMd+SqTO0Xfusov5vV/biPI/ytHdMpvZ28W/7D EDfIVCK7jL7roprl0XkQVzAwOVjUAhNHQZuIMHzO4X1heI8I0ckIHH3EtXxfJSBB KbivVPys9M3CGA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:28:56 2025 by rpki-client