This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: iF0z691W5DFQEzE9H5RtamwBeEUCXqt3ANxmWBTcTTE= Subject key identifier: 49:D2:51:F6:E9:78:9F:21:1D:3F:DC:21:9A:FF:A2:17:97:E3:B4:D4 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019AF1D1E8D436627CDA76338F7EFB397480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 13B3 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 2: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 3: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 4: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 5: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: 7eoqsm8Mcdzeu4yK6BNq6GNJVFmvq27gccc0rdhfLxo=) 7: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 8: iVFWKpRKrZrvXfyBPCiicWzEtLc.roa (hash: ySfsYFD8sJUIiFlWUtE2uw6TxmR7ZrKTk3Ot39sI2WQ=) 9: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 10: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 11: nqKarluaIBxurSOLKoj0fda_I6o.roa (hash: 0igWebpYrmPU5dIZIocnzzs4+9GsDMulHYWmTIL37ig=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e8:d4:36:62:7c:da:76:33:8f:7e:fb:39:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=49d251f6e9789f211d3fdc219affa21797e3b4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ab:96:8f:63:24:06:f8:4d:d6:e7:44:63:d6: e8:89:1f:d3:70:9c:a2:f7:05:6f:c2:62:af:19:a2: 60:4b:8b:67:d6:16:a0:05:39:a6:32:07:c9:54:f0: 25:81:64:85:3e:76:db:21:4e:68:c7:72:03:b7:4d: a2:68:90:43:29:19:60:ad:d1:ec:cb:47:4a:8e:8a: 8e:11:fe:b2:17:7f:bc:05:cb:f0:e6:65:e1:e9:c2: d2:2f:58:bd:c3:69:85:a2:f5:45:53:3d:62:c5:52: 7c:a6:41:9f:d5:75:8a:f6:31:0d:a9:c0:5e:09:72: 32:c9:b8:df:48:b3:d5:be:c9:88:d4:b1:87:91:19: 34:d0:1b:34:80:04:04:f3:59:8b:39:ca:23:53:28: 99:cc:27:ec:33:c9:12:05:c9:1c:1f:83:99:a5:3e: 07:df:99:90:28:19:6d:8b:70:d1:8b:6c:1d:ec:2d: d8:bf:01:91:e9:85:20:f7:35:04:f2:ad:79:be:94: 16:14:7b:46:bb:d3:aa:56:2e:16:ab:cf:91:59:51: 9f:53:a1:4e:72:bd:94:48:2b:cf:2d:a1:e3:03:3a: 9e:d6:a8:e9:ed:75:e3:db:b3:9f:bb:0d:28:ab:97: 0f:ff:1a:98:bb:6c:01:97:83:34:49:90:65:8c:9b: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:51:F6:E9:78:9F:21:1D:3F:DC:21:9A:FF:A2:17:97:E3:B4:D4 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d1:5e:65:f7:ed:4f:42:78:d2:7e:e1:33:bc:b7:cc:49:16: a6:6a:14:fd:6d:60:94:3b:c1:48:83:66:15:d8:73:d9:1e:3a: fa:b8:ec:8f:95:a1:b5:e6:ce:19:62:8f:f7:aa:33:f4:ba:c2: dc:91:c7:d2:0b:12:8f:ed:67:60:b7:d1:90:3b:01:b3:76:e5: d4:4e:e2:28:8e:c7:c1:3a:ac:33:a3:a0:d5:17:13:35:d7:71: 7e:9e:b3:bd:89:e7:eb:c4:4b:de:29:db:12:e4:16:67:51:3f: 04:6a:53:f3:2e:9b:d1:34:fd:8d:fd:6c:b5:9d:57:c4:d3:cd: 78:bd:8c:db:70:4e:c5:d9:2c:6f:e4:2d:d4:ca:59:ed:52:97: b6:b3:6a:1e:b4:0e:fa:85:32:db:94:77:1d:8b:1b:95:f4:d6: d7:41:48:ab:b5:85:05:cb:6c:1e:89:81:bc:82:f6:1d:f7:8a: d8:6f:4d:40:77:62:94:25:94:95:14:f8:4d:95:51:83:2d:33: d0:f0:f6:8b:83:b2:0f:60:a9:16:87:cd:fb:0f:e3:ca:4b:e6: 7c:95:51:cb:0b:a3:ab:60:e8:9e:3d:b5:bf:9b:a3:b8:e7:5f: b0:49:2d:1e:96:10:6b:fa:72:7b:e2:4e:cb:c6:15:87:cb:8e: a0:82:70:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ejUNmJ82nYzj377OXSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg0OWQyNTFmNmU5Nzg5ZjIxMWQzZmRjMjE5YWZmYTIxNzk3ZTNiNGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuauWj2MkBvhN1udEY9boiR/TcJyi 9wVvwmKvGaJgS4tn1hagBTmmMgfJVPAlgWSFPnbbIU5ox3IDt02iaJBDKRlgrdHs y0dKjoqOEf6yF3+8Bcvw5mXh6cLSL1i9w2mFovVFUz1ixVJ8pkGf1XWK9jENqcBe CXIyybjfSLPVvsmI1LGHkRk00Bs0gAQE81mLOcojUyiZzCfsM8kSBckcH4OZpT4H 35mQKBlti3DRi2wd7C3YvwGR6YUg9zUE8q15vpQWFHtGu9OqVi4Wq8+RWVGfU6FO cr2USCvPLaHjAzqe1qjp7XXj27Ofuw0oq5cP/xqYu2wBl4M0SZBljJuCfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnSUfbpeJ8hHT/cIZr/oheX47TUMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdFeZfft T0J40n7hM7y3zEkWpmoU/W1glDvBSINmFdhz2R46+rjsj5WhtebOGWKP96oz9LrC 3JHH0gsSj+1nYLfRkDsBs3bl1E7iKI7HwTqsM6Og1RcTNddxfp6zvYnn68RL3inb EuQWZ1E/BGpT8y6b0TT9jf1stZ1XxNPNeL2M23BOxdksb+Qt1MpZ7VKXtrNqHrQO +oUy25R3HYsblfTW10FIq7WFBctsHomBvIL2HfeK2G9NQHdilCWUlRT4TZVRgy0z 0PD2i4OyD2CpFofN+w/jykvmfJVRywujq2Donj21v5ujuOdfsEktHpYQa/pye+JO y8YVh8uOoIJwxA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:15 2025 by rpki-client