This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json) Hash identifier: iWXPaoI9C8Wz1wNFQDCBqnPKt3cp7ME6UlM2iaTxOfw= Subject key identifier: FD:69:4F:C8:63:38:7C:91:F5:E2:A3:78:0F:F9:9B:74:63:10:CE:0B Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa Certificate serial: 019B2741517CD84B43DCE7B0705B01A4D0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft Manifest number: 0460 Signing time: Tue 16 Dec 2025 13:02:30 +0000 Manifest this update: Tue 16 Dec 2025 13:02:30 +0000 Manifest next update: Wed 17 Dec 2025 13:02:30 +0000 Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: xl+krLV5sS5j4YyRE0R4e9j0IJnLXwl1lP+Bi6hfIx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:41:51:7c:d8:4b:43:dc:e7:b0:70:5b:01:a4:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa Validity Not Before: Dec 16 13:02:30 2025 GMT Not After : Dec 17 13:02:30 2025 GMT Subject: CN=fd694fc863387c91f5e2a3780ff99b746310ce0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6d:22:23:c2:6b:c6:03:58:e1:33:bb:8e:59: f2:38:17:0a:e8:95:d0:bc:7e:b5:97:cf:ef:7f:0e: c2:3c:d8:2b:2e:69:39:09:39:a9:b7:b2:03:e6:5e: 77:66:4d:7c:10:a4:cd:6b:e4:d2:1c:33:33:ea:c9: 25:f5:19:6b:4a:24:b1:e2:03:4d:5a:ab:c3:29:a4: 41:96:60:65:58:44:5c:ff:2c:51:24:03:98:06:ea: 7d:02:6a:12:a8:f2:87:c1:6d:7d:1a:6f:cb:d1:53: 9b:c2:e3:c4:cc:0f:01:33:03:a6:98:c6:a4:9d:04: f1:9f:30:7c:b6:6d:09:10:35:26:ef:a6:e8:ef:c5: 58:58:ef:ff:0f:0d:48:cd:93:73:7e:29:8e:04:f0: 49:10:03:c0:0e:b9:13:0c:b2:ba:d0:85:eb:de:9f: 33:cb:93:98:75:1d:6d:4a:f4:ec:f7:3f:0b:64:f2: 2b:c2:a7:9d:5c:b9:e9:47:e9:61:66:36:47:07:ce: 62:d8:95:74:7f:da:ca:ab:01:12:18:15:dd:02:e2: 21:87:03:c0:d4:61:a5:19:fc:75:17:45:8a:59:0b: f6:7a:6d:5b:45:f7:0f:84:dc:20:ee:ad:58:ef:1e: fe:ec:dd:0f:d5:7e:6a:19:ae:b4:0d:d2:7b:07:c7: 85:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:69:4F:C8:63:38:7C:91:F5:E2:A3:78:0F:F9:9B:74:63:10:CE:0B X509v3 Authority Key Identifier: keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cd:b0:51:85:f6:f6:c6:4e:1a:4e:9b:25:51:c8:dc:4d:04: 79:52:2b:d5:30:d3:14:39:60:f1:7e:88:ad:40:e7:da:41:38: 45:54:0f:ff:ef:7c:d4:9a:d6:b1:e2:fc:30:fc:a4:16:3e:d4: 4b:36:d2:f4:67:6c:26:ba:ff:8a:92:5b:c7:49:86:0b:36:da: 43:18:12:d4:84:b5:6d:2e:b5:09:3a:14:6c:17:26:75:9e:96: 6b:93:a1:11:8d:ec:4f:de:c6:83:c0:09:51:d4:a0:f4:eb:53: 9c:8f:fb:34:22:5c:78:bd:7f:cc:f3:22:22:6a:17:3d:5c:91: ce:fe:cd:e3:80:af:7c:f9:d3:42:8c:c4:a1:31:87:18:b6:2a: d1:99:d4:32:1f:3c:31:d6:fc:f8:7c:2d:ef:f5:1f:71:db:8a: 27:27:b4:c9:47:26:65:fa:01:da:2d:94:bb:01:64:2b:f6:0f: 59:1c:2d:c4:75:0b:92:cb:08:87:fd:96:cf:99:15:de:3a:36: e0:51:66:dc:1e:75:5a:c4:ab:e8:1f:98:cb:3a:96:d7:23:c0: 4e:7e:ac:81:a3:e7:8c:ef:93:4b:8d:cf:0f:f1:74:0f:86:27: 5c:2a:8f:56:73:c0:2d:21:aa:9b:64:63:11:7b:a4:ca:ce:0f: 02:90:60:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQVF82EtD3OewcFsBpNC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz MjNlYWEwHhcNMjUxMjE2MTMwMjMwWhcNMjUxMjE3MTMwMjMwWjAzMTEwLwYDVQQD EyhmZDY5NGZjODYzMzg3YzkxZjVlMmEzNzgwZmY5OWI3NDYzMTBjZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW0iI8JrxgNY4TO7jlnyOBcK6JXQ vH61l8/vfw7CPNgrLmk5CTmpt7ID5l53Zk18EKTNa+TSHDMz6skl9RlrSiSx4gNN WqvDKaRBlmBlWERc/yxRJAOYBup9AmoSqPKHwW19Gm/L0VObwuPEzA8BMwOmmMak nQTxnzB8tm0JEDUm76bo78VYWO//Dw1IzZNzfimOBPBJEAPADrkTDLK60IXr3p8z y5OYdR1tSvTs9z8LZPIrwqedXLnpR+lhZjZHB85i2JV0f9rKqwESGBXdAuIhhwPA 1GGlGfx1F0WKWQv2em1bRfcPhNwg7q1Y7x7+7N0P1X5qGa60DdJ7B8eFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1pT8hjOHyR9eKjeA/5m3RjEM4LMB8GA1UdIwQY MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG82wUYX2 9sZOGk6bJVHI3E0EeVIr1TDTFDlg8X6IrUDn2kE4RVQP/+981JrWseL8MPykFj7U SzbS9GdsJrr/ipJbx0mGCzbaQxgS1IS1bS61CToUbBcmdZ6Wa5OhEY3sT97Gg8AJ UdSg9OtTnI/7NCJceL1/zPMiImoXPVyRzv7N44CvfPnTQozEoTGHGLYq0ZnUMh88 Mdb8+Hwt7/UfcduKJye0yUcmZfoB2i2UuwFkK/YPWRwtxHULkssIh/2Wz5kV3jo2 4FFm3B51WsSr6B+YyzqW1yPATn6sgaPnjO+TS43PD/F0D4YnXCqPVnPALSGqm2Rj EXukys4PApBgEQ== -----END CERTIFICATE-----Generated at Tue Dec 16 18:02:26 2025 by rpki-client