This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json) Hash identifier: 51RGUW6gSHdRddrM654p0yRlXAfgnh2H+6wocMHmxwc= Subject key identifier: D8:0A:83:53:7B:68:C3:68:AF:C3:CD:2E:FD:8A:A9:80:99:4D:3B:4A Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91 Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391 Certificate serial: 019AF209A40B3878E71422A84A9CBD12C332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:49 +0000 Manifest this update: Sat 06 Dec 2025 05:01:49 +0000 Manifest next update: Sun 07 Dec 2025 05:01:49 +0000 Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=) 2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: XglQpX/WNRQFLErYl3kGxtgkX4CaVBEY8q6PIl8DOWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:a4:0b:38:78:e7:14:22:a8:4a:9c:bd:12:c3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391 Validity Not Before: Dec 6 05:01:49 2025 GMT Not After : Dec 7 05:01:49 2025 GMT Subject: CN=d80a83537b68c368afc3cd2efd8aa980994d3b4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c8:d7:29:4f:8b:3b:6d:d9:3c:52:3f:94:cd: 7a:93:f3:9f:46:63:06:c2:6b:e4:68:a4:fe:95:9d: c6:c3:89:59:13:3f:cd:3b:98:b8:33:d1:f3:cf:29: 97:8b:5c:01:09:5d:3e:19:ea:97:10:49:fa:d1:7a: 13:6d:cb:e5:7f:c7:59:65:53:15:fa:e2:02:d7:f6: f0:ec:68:2a:67:5a:c9:6b:6e:23:eb:ed:81:56:38: ef:05:0d:4a:19:70:0a:0a:dd:c5:70:88:cc:2b:d1: 17:83:ab:8e:00:80:0d:74:e7:9f:6a:7b:b3:04:f5: 06:b4:2e:50:7e:3d:d9:8e:e1:a5:7f:2c:44:74:cb: 25:0c:2b:78:44:04:98:6c:c2:cc:eb:29:a8:b5:46: 4d:d5:17:40:06:18:51:ee:34:38:ca:87:43:eb:5a: a7:78:6d:c0:48:4f:bf:85:5a:ac:ba:ce:95:64:8f: f6:2b:12:dc:5b:77:08:4e:31:06:5a:51:f5:04:4e: d3:59:98:7d:e0:47:bf:ef:a6:a1:a0:fc:5a:0e:0f: f0:21:24:e3:53:65:90:9a:59:92:5a:5f:d7:9d:bd: c7:57:99:75:ef:f2:49:3d:cd:9c:70:ce:0a:dd:a2: dd:0b:f0:65:d2:86:eb:cb:74:1b:58:0d:bf:33:13: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:0A:83:53:7B:68:C3:68:AF:C3:CD:2E:FD:8A:A9:80:99:4D:3B:4A X509v3 Authority Key Identifier: keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:54:4d:3c:fd:ff:0b:a6:aa:45:c2:8d:be:fa:a1:29:08:11: 50:6b:cb:e3:48:b6:21:41:f6:a0:59:86:76:82:64:c4:ee:72: cf:9e:a7:3d:64:d4:e6:bd:19:79:78:c3:0c:fa:69:5e:bc:c0: 86:17:94:3f:92:6e:89:92:31:2a:fb:f7:5c:08:60:c2:14:6c: b4:36:10:0f:28:42:ab:37:c7:d5:03:dc:9a:92:60:c0:c7:a9: 91:9f:4c:e8:24:05:60:e0:35:f7:77:10:1a:7b:af:f4:08:06: de:e4:cc:65:4d:c8:39:ca:b9:12:b6:4a:a3:92:8f:15:82:3b: 6a:51:5a:df:63:8d:e3:3a:b0:24:0f:b4:9d:bf:28:d1:1a:38: a6:4e:16:6e:06:0d:f5:a6:f5:76:07:9c:b9:f3:fa:63:1c:5a: 26:ee:16:fe:75:ef:2a:4d:bc:11:3e:76:97:49:35:51:3e:80: 04:df:21:3e:df:24:b2:66:c4:fc:e0:2a:62:8a:ab:e2:a9:b9: 88:90:83:7d:5c:8c:98:5a:f1:6d:75:9e:e7:e6:f3:6b:24:33: 25:fb:ea:ec:83:8b:c9:55:cf:64:8f:73:04:df:b3:3d:c0:f0: 70:e7:52:08:53:8d:26:c0:0d:0c:c2:b4:e2:66:31:84:ce:1a: 6c:2f:00:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaQLOHjnFCKoSpy9EsMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjM2MzkwNjBmZjg3YTc3ZmM2N2E2ZTAzYzBjNGRkMmFl NGMzOTEwHhcNMjUxMjA2MDUwMTQ5WhcNMjUxMjA3MDUwMTQ5WjAzMTEwLwYDVQQD EyhkODBhODM1MzdiNjhjMzY4YWZjM2NkMmVmZDhhYTk4MDk5NGQzYjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMjXKU+LO23ZPFI/lM16k/OfRmMG wmvkaKT+lZ3Gw4lZEz/NO5i4M9HzzymXi1wBCV0+GeqXEEn60XoTbcvlf8dZZVMV +uIC1/bw7GgqZ1rJa24j6+2BVjjvBQ1KGXAKCt3FcIjMK9EXg6uOAIANdOefanuz BPUGtC5Qfj3ZjuGlfyxEdMslDCt4RASYbMLM6ymotUZN1RdABhhR7jQ4yodD61qn eG3ASE+/hVqsus6VZI/2KxLcW3cITjEGWlH1BE7TWZh94Ee/76ahoPxaDg/wISTj U2WQmlmSWl/Xnb3HV5l17/JJPc2ccM4K3aLdC/Bl0obry3QbWA2/MxMQlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgKg1N7aMNor8PNLv2KqYCZTTtKMB8GA1UdIwQY MBaAFJsjY5Bg/4enf8Z6bgPAxN0q5MORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMt NWFmYzNhNGZlNTQyLzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMtNWFmYzNhNGZlNTQy LzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1RNPP3/ C6aqRcKNvvqhKQgRUGvL40i2IUH2oFmGdoJkxO5yz56nPWTU5r0ZeXjDDPppXrzA hheUP5JuiZIxKvv3XAhgwhRstDYQDyhCqzfH1QPcmpJgwMepkZ9M6CQFYOA193cQ Gnuv9AgG3uTMZU3IOcq5ErZKo5KPFYI7alFa32ON4zqwJA+0nb8o0Ro4pk4WbgYN 9ab1dgecufP6YxxaJu4W/nXvKk28ET52l0k1UT6ABN8hPt8ksmbE/OAqYoqr4qm5 iJCDfVyMmFrxbXWe5+bzayQzJfvq7IOLyVXPZI9zBN+zPcDwcOdSCFONJsANDMK0 4mYxhM4abC8A2g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:12 2025 by rpki-client