This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft File: nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft (raw, json) Hash identifier: BCeSB2z3IgKpejzU9CQOHnhUTxaoFaodLtKlgwll27o= Subject key identifier: 26:A5:86:70:08:47:3A:9B:DA:9D:29:3E:7C:4F:85:03:C2:36:19:15 Authority key identifier: 9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C Certificate issuer: /CN=9e3f1579ae176662d663a3834c0fef824cee033c Certificate serial: 019AF61C650DED1CA1425F37DBA316BAAD2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft Manifest number: 0492 Signing time: Sun 07 Dec 2025 00:00:47 +0000 Manifest this update: Sun 07 Dec 2025 00:00:47 +0000 Manifest next update: Mon 08 Dec 2025 00:00:47 +0000 Files and hashes: 1: nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl (hash: ICO+mDzX52wk6g0iQjFKIS9klViHZDBo/NvQGPXyqts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:65:0d:ed:1c:a1:42:5f:37:db:a3:16:ba:ad:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3f1579ae176662d663a3834c0fef824cee033c Validity Not Before: Dec 7 00:00:47 2025 GMT Not After : Dec 8 00:00:47 2025 GMT Subject: CN=26a5867008473a9bda9d293e7c4f8503c2361915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:2d:b1:02:5d:06:e4:28:91:38:21:b4:ed: 28:11:c8:60:7f:58:df:0c:30:2c:6a:98:57:5a:a5: f2:83:d6:9a:47:52:fe:42:3e:89:47:a6:5e:ea:76: af:38:ad:e7:50:34:d4:61:56:d1:94:e3:d2:8e:e9: fc:e1:49:f1:8c:12:31:ed:ac:16:3d:d8:f2:34:04: 8a:db:8f:e6:29:b4:cd:a5:37:09:ab:9e:cb:81:ef: 49:6e:90:e4:0e:c4:e5:ce:ab:6b:7e:46:22:11:ca: e8:78:25:cc:e1:00:1c:d4:1c:24:27:f1:40:90:63: ab:de:26:ac:6e:16:60:b4:dd:25:7a:8d:41:d9:3e: cb:21:01:aa:51:a1:44:25:3b:a1:47:52:d9:39:39: 5b:01:58:29:4e:9a:97:f4:4a:60:ab:41:21:d7:b5: b8:35:07:77:6d:62:c0:18:35:47:cf:b1:87:c1:5d: f9:8f:a3:91:64:11:a7:83:e0:99:6c:f9:07:30:97: b1:52:34:7d:26:38:ce:d7:68:16:2b:33:dd:f0:4d: 4a:82:4b:0c:bd:76:8a:69:be:5d:7a:58:b5:77:ed: 87:fe:db:4e:8d:89:53:0c:61:f3:79:bf:31:6e:2d: 8d:95:93:e5:6f:ca:01:33:d6:d3:24:25:25:80:2d: be:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A5:86:70:08:47:3A:9B:DA:9D:29:3E:7C:4F:85:03:C2:36:19:15 X509v3 Authority Key Identifier: keyid:9E:3F:15:79:AE:17:66:62:D6:63:A3:83:4C:0F:EF:82:4C:EE:03:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj8Vea4XZmLWY6ODTA_vgkzuAzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/962840-5169-4ff3-89f9-480734e38da8/1/nj8Vea4XZmLWY6ODTA_vgkzuAzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:47:41:75:49:f0:6f:cd:75:5e:09:3e:5f:f7:43:f2:a0:f5: f7:c2:83:97:0c:c0:46:36:c9:bf:8b:cf:d9:54:7a:3c:cc:1b: f3:93:17:b3:59:d0:89:4d:1d:7b:84:23:7a:de:a5:7f:b2:d6: d8:48:be:22:3f:2e:bb:3c:37:f2:e4:d7:af:0e:68:4b:4a:2b: 58:f5:21:71:1c:2d:1c:08:a3:79:e5:d2:8a:2a:74:b1:fd:7f: 5e:10:f6:96:4e:04:c1:f5:c8:03:e1:e4:13:f3:02:d3:53:7d: 85:a5:1a:ce:c4:94:d9:00:13:b0:f4:90:12:36:7d:70:35:1a: f6:d5:3e:7e:5e:32:dd:80:e2:be:d1:2b:86:c7:06:f6:6e:da: c1:24:5a:27:e9:df:a6:5f:f4:5d:da:dc:ac:47:68:ab:1c:a1: 4b:40:fe:0b:4a:0c:70:b4:0a:32:00:a5:9c:96:24:28:a8:96: 2c:26:83:88:db:07:81:c1:bf:a9:6d:15:26:6b:40:16:44:d6: 94:3c:a2:8b:f0:bf:65:36:13:14:31:85:cb:f1:50:53:3e:68: 13:ce:a1:4f:4b:0b:dd:1f:51:f9:e5:64:65:fb:3e:83:1a:bf: 42:9f:a3:e8:9a:e5:70:21:ed:83:3b:75:b8:5e:9c:f9:d1:fe: 5b:7a:19:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HGUN7RyhQl8326MWuq0uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2YxNTc5YWUxNzY2NjJkNjYzYTM4MzRjMGZlZjgyNGNl ZTAzM2MwHhcNMjUxMjA3MDAwMDQ3WhcNMjUxMjA4MDAwMDQ3WjAzMTEwLwYDVQQD EygyNmE1ODY3MDA4NDczYTliZGE5ZDI5M2U3YzRmODUwM2MyMzYxOTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVEtsQJdBuQokTghtO0oEchgf1jf DDAsaphXWqXyg9aaR1L+Qj6JR6Ze6navOK3nUDTUYVbRlOPSjun84UnxjBIx7awW PdjyNASK24/mKbTNpTcJq57Lge9JbpDkDsTlzqtrfkYiEcroeCXM4QAc1BwkJ/FA kGOr3iasbhZgtN0leo1B2T7LIQGqUaFEJTuhR1LZOTlbAVgpTpqX9Epgq0Eh17W4 NQd3bWLAGDVHz7GHwV35j6ORZBGng+CZbPkHMJexUjR9JjjO12gWKzPd8E1KgksM vXaKab5deli1d+2H/ttOjYlTDGHzeb8xbi2NlZPlb8oBM9bTJCUlgC2+7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCalhnAIRzqb2p0pPnxPhQPCNhkVMB8GA1UdIwQY MBaAFJ4/FXmuF2Zi1mOjg0wP74JM7gM8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5Zjkt NDgwNzM0ZTM4ZGE4LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS85NjI4NDAtNTE2OS00ZmYzLTg5ZjktNDgwNzM0ZTM4ZGE4 LzEvbmo4VmVhNFhabUxXWTZPRFRBX3Zna3p1QXp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0dBdUnw b811Xgk+X/dD8qD198KDlwzARjbJv4vP2VR6PMwb85MXs1nQiU0de4Qjet6lf7LW 2Ei+Ij8uuzw38uTXrw5oS0orWPUhcRwtHAijeeXSiip0sf1/XhD2lk4EwfXIA+Hk E/MC01N9haUazsSU2QATsPSQEjZ9cDUa9tU+fl4y3YDivtErhscG9m7awSRaJ+nf pl/0XdrcrEdoqxyhS0D+C0oMcLQKMgClnJYkKKiWLCaDiNsHgcG/qW0VJmtAFkTW lDyii/C/ZTYTFDGFy/FQUz5oE86hT0sL3R9R+eVkZfs+gxq/Qp+j6JrlcCHtgzt1 uF6c+dH+W3oZqg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:48:57 2025 by rpki-client