This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json) Hash identifier: 4wclWDe4t1RnBCEMbuMt1dKr1RtQ2x0kBRMRds0Vz1I= Subject key identifier: A2:2C:17:41:AC:4F:AE:E8:EF:E6:A1:4E:E7:35:07:DB:27:3C:C4:37 Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3 Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3 Certificate serial: 019AF3892292B8493FB2E096555C44A2E913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 12:00:42 +0000 Manifest this update: Sat 06 Dec 2025 12:00:42 +0000 Manifest next update: Sun 07 Dec 2025 12:00:42 +0000 Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: Mxoc1Wr48hFW6hIk5Ee3UuunHLpRHHGgAEzbs8ROA00=) 2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:22:92:b8:49:3f:b2:e0:96:55:5c:44:a2:e9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3 Validity Not Before: Dec 6 12:00:42 2025 GMT Not After : Dec 7 12:00:42 2025 GMT Subject: CN=a22c1741ac4faee8efe6a14ee73507db273cc437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:0c:27:18:a4:bb:b1:28:18:15:7e:bb:8b: ab:46:2e:04:4c:12:e0:cf:e2:c3:b4:3b:0b:18:05: db:2b:ed:df:39:e3:3e:d3:14:96:bc:62:d2:40:09: 7d:c2:0b:17:68:99:b5:dd:6c:be:0f:43:c0:1a:5d: 01:00:e5:f1:2b:ec:78:cf:f3:ee:92:ea:a9:a2:cf: e5:92:0d:5a:9a:cb:b8:69:96:f8:64:a0:bc:3c:18: 9a:a4:a6:2b:71:71:18:34:7c:03:0e:3d:30:e5:ed: f9:25:74:76:eb:ad:1e:59:fc:67:29:f8:ee:85:25: 14:c8:2c:55:48:04:e0:fa:1e:b6:4c:73:37:dc:74: 42:ce:19:31:b7:d2:7d:b2:48:fd:90:a1:d8:c0:df: 64:3e:d4:a5:e5:6a:ff:5c:df:eb:05:b0:8b:63:e7: 15:37:ef:9f:a1:21:87:93:7a:43:12:1d:cd:2a:be: 12:60:40:cd:75:f8:80:5a:28:79:c1:40:a6:38:be: f3:13:7d:c0:53:91:57:4b:03:54:fd:7c:41:08:1f: 13:71:a5:97:02:16:85:bc:b7:8f:4d:82:d3:fa:37: 61:e2:7f:82:c8:f2:75:91:11:d6:6c:96:06:41:bd: 78:b0:3e:84:f5:ed:8a:93:0b:a5:9e:e4:42:55:94: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:2C:17:41:AC:4F:AE:E8:EF:E6:A1:4E:E7:35:07:DB:27:3C:C4:37 X509v3 Authority Key Identifier: keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bb:05:48:95:2f:94:7f:8f:bc:20:71:14:94:ca:f2:2f:f7: 8c:9d:e7:bd:bc:3b:bb:fe:92:88:59:a2:16:59:2c:18:11:32: 26:68:60:5e:2b:a7:36:a1:c6:58:87:a1:b8:e4:b3:9b:bc:d0: 28:ad:8a:4a:ad:2a:6f:f4:39:08:b7:47:d1:02:52:41:05:99: 07:3f:4f:76:83:85:2d:97:48:ff:d0:0c:90:f9:13:e5:14:a9: c1:21:75:9c:26:83:4e:e3:bf:01:d7:2f:47:92:b5:4e:b0:07: 6f:ef:b3:d5:9e:ae:f8:e9:45:8a:bc:76:72:6a:4c:bb:b7:7b: 7a:d3:77:ab:54:9f:dc:df:d1:78:8e:b0:c7:c4:1e:13:8c:03: 2a:43:26:b3:4b:01:a7:1d:f9:8c:0e:e4:7f:f7:be:59:90:18: 74:cf:85:6f:36:2c:dd:ab:a0:58:2b:ce:a1:e0:28:f4:9e:c9: c6:ba:35:4b:b3:95:e4:dc:83:26:ef:6c:d6:03:44:ed:fb:fc: cc:71:87:89:c2:07:e1:b8:90:ec:05:af:22:1c:70:48:ae:e5: e7:12:f3:b7:73:f0:4d:a3:5c:8d:12:f3:0d:2e:4a:c3:8b:f6: ae:d6:b3:fc:68:eb:08:ed:e2:ce:dc:61:b7:55:98:73:21:5a: 73:b2:d8:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziSKSuEk/suCWVVxEoukTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzU0OGVkNDYyODk2NjI0ODIwNGMyZmU2OTA2NWYwZDdi NTI3YTMwHhcNMjUxMjA2MTIwMDQyWhcNMjUxMjA3MTIwMDQyWjAzMTEwLwYDVQQD EyhhMjJjMTc0MWFjNGZhZWU4ZWZlNmExNGVlNzM1MDdkYjI3M2NjNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44IMJxiku7EoGBV+u4urRi4ETBLg z+LDtDsLGAXbK+3fOeM+0xSWvGLSQAl9wgsXaJm13Wy+D0PAGl0BAOXxK+x4z/Pu kuqpos/lkg1amsu4aZb4ZKC8PBiapKYrcXEYNHwDDj0w5e35JXR2660eWfxnKfju hSUUyCxVSATg+h62THM33HRCzhkxt9J9skj9kKHYwN9kPtSl5Wr/XN/rBbCLY+cV N++foSGHk3pDEh3NKr4SYEDNdfiAWih5wUCmOL7zE33AU5FXSwNU/XxBCB8TcaWX AhaFvLePTYLT+jdh4n+CyPJ1kRHWbJYGQb14sD6E9e2KkwulnuRCVZTl+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKIsF0GsT67o7+ahTuc1B9snPMQ3MB8GA1UdIwQY MBaAFDY1SO1GKJZiSCBML+aQZfDXtSejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2Yt OTVjNGU5NGFkMGE5LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2YtOTVjNGU5NGFkMGE5 LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAabsFSJUv lH+PvCBxFJTK8i/3jJ3nvbw7u/6SiFmiFlksGBEyJmhgXiunNqHGWIehuOSzm7zQ KK2KSq0qb/Q5CLdH0QJSQQWZBz9PdoOFLZdI/9AMkPkT5RSpwSF1nCaDTuO/Adcv R5K1TrAHb++z1Z6u+OlFirx2cmpMu7d7etN3q1Sf3N/ReI6wx8QeE4wDKkMms0sB px35jA7kf/e+WZAYdM+FbzYs3augWCvOoeAo9J7Jxro1S7OV5NyDJu9s1gNE7fv8 zHGHicIH4biQ7AWvIhxwSK7l5xLzt3PwTaNcjRLzDS5Kw4v2rtaz/GjrCO3iztxh t1WYcyFac7LYyQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:08 2025 by rpki-client