This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json) Hash identifier: Y8E58hkVz/kJl3VcX/hxI2ib+A4h9Arzfq5s8oynPaM= Subject key identifier: A6:F8:23:78:43:74:46:E9:09:CA:5C:A3:47:4B:1E:18:53:37:33:C3 Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50 Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50 Certificate serial: 019AF27658E24D1A8BADE2F256AFB0280E79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft Manifest number: 11AC Signing time: Sat 06 Dec 2025 07:00:33 +0000 Manifest this update: Sat 06 Dec 2025 07:00:33 +0000 Manifest next update: Sun 07 Dec 2025 07:00:33 +0000 Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: qIrx8C+IdO73xwwMUSwEZ3za8NqNc/dzqzoChXDXbV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:58:e2:4d:1a:8b:ad:e2:f2:56:af:b0:28:0e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50 Validity Not Before: Dec 6 07:00:33 2025 GMT Not After : Dec 7 07:00:33 2025 GMT Subject: CN=a6f82378437446e909ca5ca3474b1e18533733c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:36:ac:53:df:f8:0d:fd:ad:e6:44:11:67:09: 59:bb:16:fb:90:1c:28:06:6a:15:bf:32:72:a4:a9: de:fe:66:e3:c5:b3:85:23:13:c5:06:73:cb:2e:3d: 7b:29:bb:42:3a:61:a4:9e:48:d5:b3:18:02:d5:48: 96:f5:a5:83:3c:59:99:99:0f:13:00:51:45:ce:48: 40:7a:61:38:f7:97:d9:90:15:47:d7:34:68:e5:b5: fb:e7:23:64:e6:73:ea:e9:dc:3e:14:15:81:67:41: a6:3f:20:5b:28:a1:d2:cc:81:34:7b:ff:f1:7f:2d: 52:45:55:e5:2a:82:17:af:3e:1e:9f:0b:09:f1:0e: 56:0d:cd:c8:ef:06:ca:6e:54:f8:2d:f6:c5:f6:f0: 53:08:ba:de:b0:89:e7:0f:ad:3b:04:46:3e:1e:fe: f1:59:f7:8a:7c:d4:13:58:8b:35:5a:53:68:4c:55: 94:01:db:55:73:5e:bb:97:04:45:4c:56:b7:fd:34: 02:16:3e:e7:45:0b:a9:49:2a:34:31:26:32:19:d0: 76:38:de:f7:ae:57:44:30:1a:fc:17:12:0f:aa:21: 3c:e2:f1:9d:4b:65:9c:6e:eb:36:26:9c:a7:bb:1b: 2a:30:6c:1d:17:c7:0c:68:c1:f2:4a:28:76:8d:b3: c6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:23:78:43:74:46:E9:09:CA:5C:A3:47:4B:1E:18:53:37:33:C3 X509v3 Authority Key Identifier: keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:9a:fc:38:17:0d:e3:03:a3:3a:07:7d:88:4b:9e:15:20:56: 8a:c8:6c:d8:59:c4:4b:bc:51:c4:0d:20:6a:ef:d9:d2:ea:14: 3f:80:28:17:ba:7f:51:6a:fb:b9:ac:65:0e:a1:0c:93:ed:25: 5f:39:2a:4b:a3:55:fe:51:55:d9:32:76:90:a4:24:9d:4a:a3: f5:36:77:d7:52:fc:37:45:1b:8a:72:e6:2c:cb:af:f3:b5:9b: f3:be:bc:23:5a:13:d7:84:80:80:c5:19:c6:a0:38:15:f1:87: 5c:01:05:2a:ef:01:91:61:f8:cc:c9:86:9a:78:d5:5c:fb:2d: 29:f6:43:72:73:12:fe:f3:1d:54:c4:f0:2d:6b:88:e9:8b:35: 3a:aa:ad:67:64:32:9c:91:4c:24:fc:7f:39:23:cb:bb:80:14: c1:5b:72:5e:ab:22:e2:39:b1:dc:59:0a:86:85:f6:86:49:e4: 01:bc:46:59:60:ab:c6:34:ec:c7:01:ae:49:b2:bb:15:d9:87: d1:a3:a4:76:d2:70:f7:dc:2d:41:c6:cc:ab:f0:a1:76:0a:d9: 64:6f:35:e3:92:58:fa:be:7c:ec:01:d6:3a:fb:b5:9b:62:87: eb:eb:d7:6b:0b:55:b9:af:1b:86:b3:b1:1f:7e:53:0f:2e:e6: 2c:70:88:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydljiTRqLreLyVq+wKA55MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2U0YTMyZTA2YTE4NzIzNGUwMTc3ZjJjYmEwNTU2NGNk MWZiNTAwHhcNMjUxMjA2MDcwMDMzWhcNMjUxMjA3MDcwMDMzWjAzMTEwLwYDVQQD EyhhNmY4MjM3ODQzNzQ0NmU5MDljYTVjYTM0NzRiMWUxODUzMzczM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijasU9/4Df2t5kQRZwlZuxb7kBwo BmoVvzJypKne/mbjxbOFIxPFBnPLLj17KbtCOmGknkjVsxgC1UiW9aWDPFmZmQ8T AFFFzkhAemE495fZkBVH1zRo5bX75yNk5nPq6dw+FBWBZ0GmPyBbKKHSzIE0e//x fy1SRVXlKoIXrz4enwsJ8Q5WDc3I7wbKblT4LfbF9vBTCLresInnD607BEY+Hv7x WfeKfNQTWIs1WlNoTFWUAdtVc167lwRFTFa3/TQCFj7nRQupSSo0MSYyGdB2ON73 rldEMBr8FxIPqiE84vGdS2Wcbus2JpynuxsqMGwdF8cMaMHySih2jbPGaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKb4I3hDdEbpCcpco0dLHhhTNzPDMB8GA1UdIwQY MBaAFJ4+SjLgahhyNOAXfyy6BVZM0ftQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMt OGM3OTNjMDYyYTQ5LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMtOGM3OTNjMDYyYTQ5 LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpr8OBcN 4wOjOgd9iEueFSBWishs2FnES7xRxA0gau/Z0uoUP4AoF7p/UWr7uaxlDqEMk+0l XzkqS6NV/lFV2TJ2kKQknUqj9TZ311L8N0UbinLmLMuv87Wb8768I1oT14SAgMUZ xqA4FfGHXAEFKu8BkWH4zMmGmnjVXPstKfZDcnMS/vMdVMTwLWuI6Ys1OqqtZ2Qy nJFMJPx/OSPLu4AUwVtyXqsi4jmx3FkKhoX2hknkAbxGWWCrxjTsxwGuSbK7FdmH 0aOkdtJw99wtQcbMq/ChdgrZZG8145JY+r587AHWOvu1m2KH6+vXawtVua8bhrOx H35TDy7mLHCInA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:02:01 2025 by rpki-client