This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json) Hash identifier: DxS3ggd2HmRlrywyQlXp5fG6d1TUnREhDTt8IySV0As= Subject key identifier: B5:56:64:79:32:6C:C4:A7:61:1B:63:E2:FF:11:31:F1:54:12:78:D5 Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Certificate serial: 019AF1644A09BD491FEBE5445A0DABB0C062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 02:01:12 +0000 Manifest this update: Sat 06 Dec 2025 02:01:12 +0000 Manifest next update: Sun 07 Dec 2025 02:01:12 +0000 Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: HejR1Ju5VyE1vRC43VneYcpxEu8BM0PpMUBomoUPeds=) 2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:4a:09:bd:49:1f:eb:e5:44:5a:0d:ab:b0:c0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Validity Not Before: Dec 6 02:01:12 2025 GMT Not After : Dec 7 02:01:12 2025 GMT Subject: CN=b5566479326cc4a7611b63e2ff1131f1541278d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:9b:07:b5:19:35:5f:37:28:e8:ba:b2:91: 44:5f:59:97:00:58:da:9a:f4:c7:b2:e8:b5:3d:55: 97:38:22:38:ca:3e:27:ae:f9:31:77:da:31:91:bb: 2c:ba:fe:79:d7:c3:d8:a6:b5:94:45:25:de:41:b9: 55:41:d5:b1:66:e8:56:b5:d7:ab:6f:8d:53:a2:d9: 27:fc:15:36:a7:8a:4e:9b:bd:ca:14:21:95:05:3a: 5f:25:84:7e:56:5d:fe:f2:f7:1b:44:56:9c:31:65: 66:2c:31:b0:7d:27:f6:dd:53:10:26:80:cd:43:32: 75:79:f0:87:67:26:3c:26:1a:ed:a2:11:e2:bd:eb: da:fe:41:3f:92:aa:60:26:8a:9a:44:3c:82:29:8e: 65:72:9c:f3:11:b3:96:cc:68:09:88:fd:7a:70:57: 37:75:f9:f2:4b:16:19:04:15:85:d0:a3:27:19:2d: b6:ec:33:9d:5b:be:4b:a7:39:a3:54:1b:ff:9a:8e: e2:ae:7a:ac:43:48:3a:e5:d6:12:4a:b7:5d:84:43: 60:9f:9b:bc:99:f1:fd:30:53:ec:cf:78:67:92:74: 86:18:ee:fb:94:ae:fb:2f:85:fa:bb:f1:41:1e:65: 55:75:5f:7d:55:0e:74:7c:ec:c4:ce:8b:11:61:9a: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:56:64:79:32:6C:C4:A7:61:1B:63:E2:FF:11:31:F1:54:12:78:D5 X509v3 Authority Key Identifier: keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:06:b8:23:54:1d:7b:a2:08:ba:f2:ab:25:1f:7b:d4:f3:3f: 3e:1e:f3:05:42:14:b0:6e:7e:be:2d:34:c8:00:74:6f:46:a2: 82:8e:6c:aa:5c:95:d9:a2:3a:1b:ab:b7:f1:de:21:6e:0f:5c: 5a:cd:8f:d5:c7:15:b0:2a:5d:1a:11:85:43:1f:20:0f:d7:5f: d8:ed:ef:ef:e3:e0:4a:25:96:9b:7e:e1:98:cf:4e:4f:8c:f5: 45:2a:3b:fe:d1:88:9f:d7:e5:71:71:0b:be:3e:94:69:a5:2e: 59:c3:cb:8e:95:1b:a0:35:6f:8c:1a:53:50:7f:74:37:dd:73: 43:fd:8e:4a:16:57:9d:2e:2a:ee:e7:bd:ab:05:73:c0:03:be: 3d:5d:88:df:e0:fe:f9:40:42:69:ef:75:79:f7:50:5e:e1:77: 2d:f8:4c:7e:6e:36:b9:31:7b:31:b5:d5:37:ed:43:01:7d:f6: 84:67:0c:e2:04:83:a5:09:de:db:3b:dc:17:49:e1:14:e2:a8: 39:7e:de:f0:3a:41:79:19:a7:c8:a2:da:7c:31:c4:bc:5b:f5: 03:0f:74:d7:71:67:fc:21:a6:91:db:f8:2c:44:10:d6:fa:c3: 05:09:a3:7e:ca:d1:80:a8:0c:72:3b:78:dd:ab:58:57:56:ef: 61:41:6b:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZEoJvUkf6+VEWg2rsMBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5 ZTA1ZjYwHhcNMjUxMjA2MDIwMTEyWhcNMjUxMjA3MDIwMTEyWjAzMTEwLwYDVQQD EyhiNTU2NjQ3OTMyNmNjNGE3NjExYjYzZTJmZjExMzFmMTU0MTI3OGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YmbB7UZNV83KOi6spFEX1mXAFja mvTHsui1PVWXOCI4yj4nrvkxd9oxkbssuv5518PYprWURSXeQblVQdWxZuhWtder b41Totkn/BU2p4pOm73KFCGVBTpfJYR+Vl3+8vcbRFacMWVmLDGwfSf23VMQJoDN QzJ1efCHZyY8JhrtohHiveva/kE/kqpgJoqaRDyCKY5lcpzzEbOWzGgJiP16cFc3 dfnySxYZBBWF0KMnGS227DOdW75LpzmjVBv/mo7irnqsQ0g65dYSSrddhENgn5u8 mfH9MFPsz3hnknSGGO77lK77L4X6u/FBHmVVdV99VQ50fOzEzosRYZoMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLVWZHkybMSnYRtj4v8RMfFUEnjVMB8GA1UdIwQY MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4 LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyQa4I1Qd e6IIuvKrJR971PM/Ph7zBUIUsG5+vi00yAB0b0aigo5sqlyV2aI6G6u38d4hbg9c Ws2P1ccVsCpdGhGFQx8gD9df2O3v7+PgSiWWm37hmM9OT4z1RSo7/tGIn9flcXEL vj6UaaUuWcPLjpUboDVvjBpTUH90N91zQ/2OShZXnS4q7ue9qwVzwAO+PV2I3+D+ +UBCae91efdQXuF3LfhMfm42uTF7MbXVN+1DAX32hGcM4gSDpQne2zvcF0nhFOKo OX7e8DpBeRmnyKLafDHEvFv1Aw9013Fn/CGmkdv4LEQQ1vrDBQmjfsrRgKgMcjt4 3atYV1bvYUFrEw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:37:07 2025 by rpki-client