This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft File: NjSXIAQAsPGq56h_yjbwd-DtYs4.mft (raw, json) Hash identifier: /2NruO2qU4V8H4gpxdhlW3sdCCheffpc5rQ8fJhLP5Q= Subject key identifier: 86:C1:29:D2:4B:F7:6E:70:A7:C1:75:AA:F2:BE:1B:D6:DE:38:73:D6 Authority key identifier: 36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE Certificate issuer: /CN=363497200400b0f1aae7a87fca36f077e0ed62ce Certificate serial: 019AF1D24D4F9657BF326C3B6B3B5940D837 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft Manifest number: 10D6 Signing time: Sat 06 Dec 2025 04:01:22 +0000 Manifest this update: Sat 06 Dec 2025 04:01:22 +0000 Manifest next update: Sun 07 Dec 2025 04:01:22 +0000 Files and hashes: 1: LXHGZAjXqV3BVckN7vOFelHq2Tc.roa (hash: M+8avj4WOOMDQtO8QC9UxKExN0zGnS4KkBKl/qQeGUg=) 2: NjSXIAQAsPGq56h_yjbwd-DtYs4.crl (hash: F2EnwrISNbQpwgKG0qfxg/qnpJvMXbdjb07v9v1iuII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:4d:4f:96:57:bf:32:6c:3b:6b:3b:59:40:d8:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363497200400b0f1aae7a87fca36f077e0ed62ce Validity Not Before: Dec 6 04:01:22 2025 GMT Not After : Dec 7 04:01:22 2025 GMT Subject: CN=86c129d24bf76e70a7c175aaf2be1bd6de3873d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:63:71:58:6d:59:84:45:2c:e5:dd:5e:f3: d3:1c:58:75:63:c6:d2:7c:fc:61:14:f1:c2:3f:b2: 64:2f:80:4e:4d:fb:fd:8a:a6:5d:62:85:1e:3c:f7: 80:5b:40:fc:c0:6e:60:8c:b0:65:ce:84:7a:66:b0: 31:ae:29:6f:b8:93:db:bc:62:77:20:46:29:e8:c1: b7:cf:a7:52:65:d2:c9:65:d5:d9:4d:5b:6e:84:b0: e2:16:a1:a8:d5:8a:3d:ef:b7:23:80:9c:cc:93:d2: db:42:55:80:73:87:2f:89:b9:8c:d1:7a:d1:49:c3: 17:7b:c0:bb:8c:b5:fb:a2:bb:d5:e8:56:97:de:51: 06:a1:8f:75:f5:02:ef:b0:bb:21:a4:29:fb:9a:5f: 9a:49:dd:2d:b7:2b:01:3f:da:96:a6:a9:88:bf:15: 31:f0:a5:0d:d9:88:9d:e6:1b:85:c1:07:64:a2:da: a3:09:44:90:0b:08:73:f6:1a:77:ec:79:53:68:f0: 6c:35:90:26:e9:00:1d:fa:41:09:4d:42:c8:58:af: 59:d6:00:0a:17:3b:03:c8:99:ec:a4:03:b0:01:74: d5:73:03:b9:0c:82:23:90:48:16:1f:df:74:1e:05: cc:ea:38:7b:44:8e:f1:91:65:19:23:c6:7c:59:b6: 2f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C1:29:D2:4B:F7:6E:70:A7:C1:75:AA:F2:BE:1B:D6:DE:38:73:D6 X509v3 Authority Key Identifier: keyid:36:34:97:20:04:00:B0:F1:AA:E7:A8:7F:CA:36:F0:77:E0:ED:62:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjSXIAQAsPGq56h_yjbwd-DtYs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0de0b4-c99a-4360-a44a-19a1999d9d7e/1/NjSXIAQAsPGq56h_yjbwd-DtYs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:18:03:b2:a7:89:fc:46:09:43:0f:d9:6d:01:ae:34:97:f0: ca:90:a4:10:5d:47:e4:c6:0a:31:c6:71:9d:35:46:90:4d:3e: 05:4f:aa:93:be:b6:03:ea:48:3e:33:c2:40:11:cf:5e:61:36: d1:1b:92:74:eb:9d:09:3c:09:32:e0:06:92:78:6b:fb:c8:61: 52:86:bb:ff:34:bd:84:53:bf:2e:18:49:10:87:fa:bc:dc:8e: f0:ff:32:91:80:cc:fd:df:79:76:ae:52:76:b5:d5:95:6b:cf: 8e:a7:53:97:29:27:0d:87:0f:c8:84:8f:d1:12:67:bf:b9:98: 16:c3:6d:c9:38:de:56:9f:f6:04:04:f1:4e:fd:ef:3b:24:96: 45:0e:78:47:b8:89:08:b0:1b:1f:16:4c:90:2c:97:e8:1c:94: ee:a5:e2:d2:64:78:30:8f:82:24:c8:f5:58:2b:d8:0a:66:59: 7c:2b:52:87:d5:85:03:78:20:b9:6b:b1:8d:ad:0d:f6:91:e4: 1b:c8:53:f4:ce:dd:78:da:55:21:bd:fd:eb:05:2c:04:02:16: 80:69:57:81:de:21:a8:f7:ef:da:39:0f:b0:07:99:ea:5b:36: 92:5f:1a:29:56:f1:98:08:69:cf:1f:9a:05:37:7e:23:44:f5: 5f:fe:ad:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0k1Plle/Mmw7aztZQNg3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzQ5NzIwMDQwMGIwZjFhYWU3YTg3ZmNhMzZmMDc3ZTBl ZDYyY2UwHhcNMjUxMjA2MDQwMTIyWhcNMjUxMjA3MDQwMTIyWjAzMTEwLwYDVQQD Eyg4NmMxMjlkMjRiZjc2ZTcwYTdjMTc1YWFmMmJlMWJkNmRlMzg3M2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFjcVhtWYRFLOXdXvPTHFh1Y8bS fPxhFPHCP7JkL4BOTfv9iqZdYoUePPeAW0D8wG5gjLBlzoR6ZrAxrilvuJPbvGJ3 IEYp6MG3z6dSZdLJZdXZTVtuhLDiFqGo1Yo977cjgJzMk9LbQlWAc4cvibmM0XrR ScMXe8C7jLX7orvV6FaX3lEGoY919QLvsLshpCn7ml+aSd0ttysBP9qWpqmIvxUx 8KUN2Yid5huFwQdkotqjCUSQCwhz9hp37HlTaPBsNZAm6QAd+kEJTULIWK9Z1gAK FzsDyJnspAOwAXTVcwO5DIIjkEgWH990HgXM6jh7RI7xkWUZI8Z8WbYvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbBKdJL925wp8F1qvK+G9beOHPWMB8GA1UdIwQY MBaAFDY0lyAEALDxqueof8o28Hfg7WLOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEt MTlhMTk5OWQ5ZDdlLzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wZGUwYjQtYzk5YS00MzYwLWE0NGEtMTlhMTk5OWQ5ZDdl LzEvTmpTWElBUUFzUEdxNTZoX3lqYndkLUR0WXM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXxgDsqeJ /EYJQw/ZbQGuNJfwypCkEF1H5MYKMcZxnTVGkE0+BU+qk762A+pIPjPCQBHPXmE2 0RuSdOudCTwJMuAGknhr+8hhUoa7/zS9hFO/LhhJEIf6vNyO8P8ykYDM/d95dq5S drXVlWvPjqdTlyknDYcPyISP0RJnv7mYFsNtyTjeVp/2BATxTv3vOySWRQ54R7iJ CLAbHxZMkCyX6ByU7qXi0mR4MI+CJMj1WCvYCmZZfCtSh9WFA3gguWuxja0N9pHk G8hT9M7deNpVIb396wUsBAIWgGlXgd4hqPfv2jkPsAeZ6ls2kl8aKVbxmAhpzx+a BTd+I0T1X/6tgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:54 2025 by rpki-client