This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft File: njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json) Hash identifier: J5C+U1uTllZZVSA+EsKsooj9dyuKOTBNQNiyA5ZUwEA= Subject key identifier: C2:07:08:E3:A2:B9:08:EC:6B:D7:ED:CD:7C:D1:09:54:25:3B:4A:41 Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Certificate serial: 019B3B6B3DE547F5DBA88E819DD11BD0AD8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft Manifest number: 1747 Signing time: Sat 20 Dec 2025 11:00:42 +0000 Manifest this update: Sat 20 Dec 2025 11:00:42 +0000 Manifest next update: Sun 21 Dec 2025 11:00:42 +0000 Files and hashes: 1: GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa (hash: 1cVanJIyzbdaXi+XNYZJuMmXonQvqhc1hNQx9fPiOlY=) 2: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=) 3: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=) 4: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=) 5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: uW9rndEmG6wusxwhWJst0cpFAXghvexPJL4lT7L/BDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:3d:e5:47:f5:db:a8:8e:81:9d:d1:1b:d0:ad:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Validity Not Before: Dec 20 11:00:42 2025 GMT Not After : Dec 21 11:00:42 2025 GMT Subject: CN=c20708e3a2b908ec6bd7edcd7cd10954253b4a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:22:dd:9f:6e:32:b0:e9:3d:94:76:20:38:80: 19:68:4f:e0:9b:a4:d1:21:9f:34:22:be:3e:da:55: 5f:da:81:01:8d:a8:15:09:11:95:98:cd:92:4c:86: 55:3a:0e:7c:8c:ae:f3:d5:d9:4c:bf:46:97:f7:aa: e0:67:3f:18:ad:59:51:49:b3:62:04:0d:ec:28:0b: 6c:83:1f:b6:3d:3e:db:d5:54:59:c2:09:0c:c5:9d: 3c:df:9c:eb:44:2a:be:9b:cd:a3:f3:fb:80:96:47: f4:94:3e:12:61:70:32:7b:4c:41:82:96:b2:d3:47: 62:a2:25:55:c7:6a:bb:95:c6:50:f7:73:0f:b3:da: 03:84:69:08:5d:a4:e6:fd:66:59:eb:96:23:dc:53: 42:8f:d7:92:41:22:f6:80:56:bb:bd:cc:99:cb:0e: bf:93:40:16:f2:7d:ca:db:e4:84:97:94:70:0f:90: 4d:a6:fc:51:05:4a:59:cb:df:3e:8c:0c:ec:42:84: 73:82:7b:cb:73:0a:de:1c:7f:dc:a0:6e:9c:27:3c: a1:88:0d:b3:41:96:48:3c:57:b8:b5:c6:bc:d4:06: 40:04:78:72:ad:fb:fc:01:e5:35:fd:4f:62:21:0a: a5:b8:f5:fd:55:03:bd:06:8d:9a:64:91:ca:5b:37: cc:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:07:08:E3:A2:B9:08:EC:6B:D7:ED:CD:7C:D1:09:54:25:3B:4A:41 X509v3 Authority Key Identifier: keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:65:4a:ec:fd:a3:1e:1d:a7:8d:5c:a7:4e:f6:0a:12:70:dd: ac:9f:35:5a:47:ed:b4:ef:17:5b:fd:60:e2:4f:8e:e7:c2:01: 73:27:9b:e5:ad:34:04:66:0f:37:d9:10:47:5b:c1:83:6f:b8: 3b:09:a6:43:69:1d:00:b0:69:c4:ac:9e:40:b8:b2:45:92:cb: cf:87:70:de:cf:bb:66:41:f0:08:a9:a4:fe:59:de:77:04:21: 81:7d:73:38:7f:1e:26:3f:cf:3c:ec:f4:74:49:08:14:e9:13: ca:ee:c1:8a:bc:b3:a8:46:95:9d:2d:64:01:6a:e9:6b:ea:fc: 49:a3:8e:a9:58:65:bc:fb:cb:ee:7e:c7:86:39:31:c9:07:fc: 1b:1e:31:77:52:9b:27:cf:be:2d:87:45:37:28:ca:b5:cc:f4: 89:ae:3d:5f:d3:8a:d2:26:0f:30:72:db:65:b8:bb:e5:52:ef: 44:0c:8b:f2:0a:24:44:a4:57:c1:2d:fa:55:43:e1:31:79:8d: f7:a5:c7:c5:4f:c0:04:a3:6d:86:94:11:7a:83:e3:9c:c4:b9: b5:97:f5:50:81:10:04:45:5e:30:cd:c4:1b:bd:33:36:4b:1a: e8:06:dc:40:3d:a0:07:dd:cc:ab:9f:0c:55:0c:93:a8:3a:eb: 5c:a0:1c:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7az3lR/XbqI6BndEb0K2KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4 MjRjMjgwHhcNMjUxMjIwMTEwMDQyWhcNMjUxMjIxMTEwMDQyWjAzMTEwLwYDVQQD EyhjMjA3MDhlM2EyYjkwOGVjNmJkN2VkY2Q3Y2QxMDk1NDI1M2I0YTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCLdn24ysOk9lHYgOIAZaE/gm6TR IZ80Ir4+2lVf2oEBjagVCRGVmM2STIZVOg58jK7z1dlMv0aX96rgZz8YrVlRSbNi BA3sKAtsgx+2PT7b1VRZwgkMxZ0835zrRCq+m82j8/uAlkf0lD4SYXAye0xBgpay 00dioiVVx2q7lcZQ93MPs9oDhGkIXaTm/WZZ65Yj3FNCj9eSQSL2gFa7vcyZyw6/ k0AW8n3K2+SEl5RwD5BNpvxRBUpZy98+jAzsQoRzgnvLcwreHH/coG6cJzyhiA2z QZZIPFe4tca81AZABHhyrfv8AeU1/U9iIQqluPX9VQO9Bo2aZJHKWzfMqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIHCOOiuQjsa9ftzXzRCVQlO0pBMB8GA1UdIwQY MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt YTc4MzQxMzA5OWQzLzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWVK7P2j Hh2njVynTvYKEnDdrJ81WkfttO8XW/1g4k+O58IBcyeb5a00BGYPN9kQR1vBg2+4 OwmmQ2kdALBpxKyeQLiyRZLLz4dw3s+7ZkHwCKmk/lnedwQhgX1zOH8eJj/PPOz0 dEkIFOkTyu7BiryzqEaVnS1kAWrpa+r8SaOOqVhlvPvL7n7HhjkxyQf8Gx4xd1Kb J8++LYdFNyjKtcz0ia49X9OK0iYPMHLbZbi75VLvRAyL8gokRKRXwS36VUPhMXmN 96XHxU/ABKNthpQReoPjnMS5tZf1UIEQBEVeMM3EG70zNksa6AbcQD2gB93Mq58M VQyTqDrrXKAcAg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:07:39 2025 by rpki-client