This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft File: NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft (raw, json) Hash identifier: +tsxxGz6ZEAszPhsX80xnqIR2k6wCwUAldOzkWZAzH4= Subject key identifier: 58:FD:66:70:B9:32:7E:72:1A:7C:E9:B9:5A:4B:35:F7:C9:EB:9B:3E Authority key identifier: 36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3 Certificate issuer: /CN=36310a959489d1ac5b8796af626e07c3f1c171f3 Certificate serial: 019AF12DF29314DC79C4B4B48B9608249D4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl (hash: vlCwKZ9ML0oh/bFCVpw8iSC7dqyVQECnywb9OfO7HGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f2:93:14:dc:79:c4:b4:b4:8b:96:08:24:9d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36310a959489d1ac5b8796af626e07c3f1c171f3 Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=58fd6670b9327e721a7ce9b95a4b35f7c9eb9b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:82:72:93:e9:86:8e:e9:1a:7d:50:59:11:84: bd:05:e1:f9:93:83:13:58:b7:63:0c:56:12:9b:16: f3:11:f2:20:9a:47:e0:19:10:6e:2a:77:cc:07:90: 97:10:a0:18:b7:32:9b:e4:93:6e:25:b1:d3:aa:d4: 8c:41:07:ee:68:30:f0:d0:09:4c:33:75:08:24:35: e6:40:6a:38:57:29:00:c6:ab:60:bd:24:cd:94:30: 43:7d:ec:fe:af:36:05:32:ff:fb:0a:08:d8:22:c5: dc:22:50:a0:20:6d:7e:35:ee:06:34:e3:bc:86:8a: 83:7a:af:ca:33:12:ad:32:26:99:7c:4c:c9:c9:68: 1b:39:5e:b9:e1:4e:16:6a:a4:70:11:66:2e:d9:51: a1:b8:4b:50:dd:2d:11:d4:ea:00:6b:21:a2:ca:ed: 4f:af:10:60:50:23:1e:a6:9f:ab:e9:27:a0:d3:11: b2:f5:06:66:a7:e6:34:d1:c3:36:6f:89:ec:8d:b5: 2c:3f:28:73:36:07:1e:e7:8e:28:de:67:1d:a0:c1: d8:39:39:8a:43:38:07:84:75:6c:40:34:be:4c:54: 5c:cc:7f:11:64:e0:16:f5:d7:3f:8c:d4:5f:6d:3a: a5:8c:73:86:f1:29:3c:15:2a:dc:a7:8c:bc:6c:20: 15:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:66:70:B9:32:7E:72:1A:7C:E9:B9:5A:4B:35:F7:C9:EB:9B:3E X509v3 Authority Key Identifier: keyid:36:31:0A:95:94:89:D1:AC:5B:87:96:AF:62:6E:07:C3:F1:C1:71:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjEKlZSJ0axbh5avYm4Hw_HBcfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/93f6df-c3f5-4013-a7fc-bd5c3bc11cfa/1/NjEKlZSJ0axbh5avYm4Hw_HBcfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:0c:4a:53:4d:83:de:04:fe:3e:24:2b:b0:07:ff:cc:e8:8d: e7:45:37:c7:23:77:db:be:f6:ea:11:91:dd:b6:fc:bb:c2:37: c3:c0:c6:dc:7b:f7:3a:87:13:9f:3d:47:e8:38:03:1c:88:80: 9f:ca:32:ea:00:83:c5:8b:f9:dc:f4:02:26:80:af:3b:63:d3: 3a:6e:29:0c:0d:f5:92:0a:57:4d:9d:39:32:2d:6e:f7:e9:d4: d5:5a:02:cb:2a:d9:04:81:ed:76:63:74:92:90:96:3e:bf:5e: 65:70:62:b4:2e:45:90:46:5e:ce:35:f8:23:1a:cd:25:1b:e2: 01:3c:64:83:ca:ee:77:5d:df:06:b0:b2:1b:45:f7:39:84:3f: d8:6e:66:4f:7f:9d:95:ff:af:c7:32:ba:76:f5:b1:c4:e9:1e: 1c:e4:0c:67:71:1c:3b:fb:c9:3d:be:89:e9:d1:93:3d:7b:a0: af:7d:47:24:1e:fa:3c:a4:f6:f8:a7:1f:d0:f3:92:c1:6a:48: 92:f2:96:bf:83:3f:2e:03:5c:ec:20:d2:c6:66:1d:32:25:02: 1f:96:60:a2:15:75:f6:9d:d7:f3:d7:85:1a:64:62:42:81:71: 3b:86:b1:5d:ae:4f:11:45:75:f1:7d:6b:78:43:de:55:81:45: bd:42:64:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfKTFNx5xLS0i5YIJJ1KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzEwYTk1OTQ4OWQxYWM1Yjg3OTZhZjYyNmUwN2MzZjFj MTcxZjMwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD Eyg1OGZkNjY3MGI5MzI3ZTcyMWE3Y2U5Yjk1YTRiMzVmN2M5ZWI5YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1oJyk+mGjukafVBZEYS9BeH5k4MT WLdjDFYSmxbzEfIgmkfgGRBuKnfMB5CXEKAYtzKb5JNuJbHTqtSMQQfuaDDw0AlM M3UIJDXmQGo4VykAxqtgvSTNlDBDfez+rzYFMv/7CgjYIsXcIlCgIG1+Ne4GNOO8 hoqDeq/KMxKtMiaZfEzJyWgbOV654U4WaqRwEWYu2VGhuEtQ3S0R1OoAayGiyu1P rxBgUCMepp+r6Seg0xGy9QZmp+Y00cM2b4nsjbUsPyhzNgce544o3mcdoMHYOTmK QzgHhHVsQDS+TFRczH8RZOAW9dc/jNRfbTqljHOG8Sk8FSrcp4y8bCAVdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj9ZnC5Mn5yGnzpuVpLNffJ65s+MB8GA1UdIwQY MBaAFDYxCpWUidGsW4eWr2JuB8PxwXHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMt YmQ1YzNiYzExY2ZhLzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi85M2Y2ZGYtYzNmNS00MDEzLWE3ZmMtYmQ1YzNiYzExY2Zh LzEvTmpFS2xaU0owYXhiaDVhdlltNEh3X0hCY2ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwxKU02D 3gT+PiQrsAf/zOiN50U3xyN327726hGR3bb8u8I3w8DG3Hv3OocTnz1H6DgDHIiA n8oy6gCDxYv53PQCJoCvO2PTOm4pDA31kgpXTZ05Mi1u9+nU1VoCyyrZBIHtdmN0 kpCWPr9eZXBitC5FkEZezjX4IxrNJRviATxkg8rud13fBrCyG0X3OYQ/2G5mT3+d lf+vxzK6dvWxxOkeHOQMZ3EcO/vJPb6J6dGTPXugr31HJB76PKT2+Kcf0POSwWpI kvKWv4M/LgNc7CDSxmYdMiUCH5ZgohV19p3X89eFGmRiQoFxO4axXa5PEUV18X1r eEPeVYFFvUJkuA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:12 2025 by rpki-client