This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json) Hash identifier: ++k5FQczBjPQ3x+BhDwA/zTOFGoUg2M1GVPZ2D5s/5Q= Subject key identifier: 90:91:A8:0D:C5:55:69:CE:30:A4:FA:A5:AF:AF:90:D8:9E:9D:1C:79 Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c Certificate serial: 019AF12CFDAD04A6C2EA4147930B3625F31E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft Manifest number: 03D2 Signing time: Sat 06 Dec 2025 01:00:48 +0000 Manifest this update: Sat 06 Dec 2025 01:00:48 +0000 Manifest next update: Sun 07 Dec 2025 01:00:48 +0000 Files and hashes: 1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=) 2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: Mlsqx/udieV+iz61HzRGiixWOq6FIx1sZ3khpEBokgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:fd:ad:04:a6:c2:ea:41:47:93:0b:36:25:f3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c Validity Not Before: Dec 6 01:00:48 2025 GMT Not After : Dec 7 01:00:48 2025 GMT Subject: CN=9091a80dc55569ce30a4faa5afaf90d89e9d1c79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f2:2c:8d:85:cd:8e:3b:3a:c1:f8:72:72:7e: ad:81:d9:a7:d3:79:07:cf:5a:e4:40:21:11:02:13: ec:3b:5e:0f:68:a7:ee:c8:00:8a:13:c8:aa:49:f2: 21:c9:9c:1a:0b:78:d5:c1:13:f0:80:78:6b:d8:27: 81:03:b2:8f:ca:b2:f8:40:18:b1:cb:c8:20:b2:b4: 77:d8:33:50:c0:6f:d3:47:fe:35:8c:8f:46:f0:3d: a3:2d:4d:71:ad:4d:fd:8e:c5:bd:80:7d:d3:69:a7: 1f:07:74:d0:ef:43:d9:e8:8e:1f:56:aa:5d:4e:c4: 2b:e6:0b:ae:85:c5:61:d8:ec:d9:77:82:3e:c8:a3: 55:1a:2c:39:52:3a:52:00:cb:ef:a9:3f:4c:c1:36: b7:bc:27:d7:36:60:de:24:cc:de:81:0e:47:a4:41: 99:4c:47:a7:3b:28:e0:a9:ff:3b:c3:06:e9:09:7e: 7a:f4:02:c3:1b:f8:c6:cf:93:4e:94:62:ed:60:71: 32:b0:3a:11:67:45:f7:b0:7b:dc:81:02:48:52:b5: 12:02:25:c3:28:d3:16:b3:a3:ed:5f:d0:85:e3:30: c4:db:d5:46:cf:2d:7d:f0:3f:fe:2a:b2:df:a7:2f: 6b:bf:42:49:2e:69:92:ba:18:97:53:ec:22:f7:5a: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:91:A8:0D:C5:55:69:CE:30:A4:FA:A5:AF:AF:90:D8:9E:9D:1C:79 X509v3 Authority Key Identifier: keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:12:ef:32:06:78:af:b5:58:d6:20:93:df:24:e0:9a:3f:c7: 71:e3:33:06:6a:e5:2b:98:db:69:c2:ac:de:2e:3e:62:6c:a0: c2:90:15:b4:98:c0:a6:2e:2a:81:43:23:df:f3:12:ce:85:b6: b5:a7:16:7d:6e:12:ce:ef:7d:34:3a:c9:b5:a3:30:28:d0:88: 7c:5f:ac:39:40:13:fc:ed:b8:d7:31:63:4d:fa:95:14:b5:bf: fe:28:17:cc:6e:5c:24:10:fc:45:96:9d:9d:fd:a6:dd:89:f2: 1c:c6:64:48:43:45:b2:5a:41:c6:3b:b4:36:51:e7:db:64:2e: ec:06:03:27:d0:61:ad:42:ee:14:6c:fa:a7:2f:ee:cc:51:2f: ac:e1:32:98:79:fe:1c:02:17:40:76:21:42:8c:a9:58:37:da: 83:29:dc:4f:66:85:d3:a8:9d:b6:84:aa:43:81:4e:08:95:ad: bf:27:5c:25:ea:10:07:2f:5e:39:ff:85:86:37:56:74:58:5e: 81:52:56:45:ef:c1:f3:e0:27:aa:b4:8c:5f:73:84:e0:41:a9: 7f:da:44:7f:2d:0f:e0:b0:25:3b:4c:57:41:7a:3b:ed:58:a4: 5a:f2:e5:dc:01:0c:3e:5c:a4:a3:51:fe:a4:bb:ad:cd:49:16: db:7e:b7:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLP2tBKbC6kFHkws2JfMeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2NiNWM2YTA1Y2RkNDgxZjMwNGMwY2Q5NWU4NmQ3MjJk OTZkM2MwHhcNMjUxMjA2MDEwMDQ4WhcNMjUxMjA3MDEwMDQ4WjAzMTEwLwYDVQQD Eyg5MDkxYTgwZGM1NTU2OWNlMzBhNGZhYTVhZmFmOTBkODllOWQxYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/IsjYXNjjs6wfhycn6tgdmn03kH z1rkQCERAhPsO14PaKfuyACKE8iqSfIhyZwaC3jVwRPwgHhr2CeBA7KPyrL4QBix y8ggsrR32DNQwG/TR/41jI9G8D2jLU1xrU39jsW9gH3TaacfB3TQ70PZ6I4fVqpd TsQr5guuhcVh2OzZd4I+yKNVGiw5UjpSAMvvqT9MwTa3vCfXNmDeJMzegQ5HpEGZ TEenOyjgqf87wwbpCX569ALDG/jGz5NOlGLtYHEysDoRZ0X3sHvcgQJIUrUSAiXD KNMWs6PtX9CF4zDE29VGzy198D/+KrLfpy9rv0JJLmmSuhiXU+wi91pcKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCRqA3FVWnOMKT6pa+vkNienRx5MB8GA1UdIwQY MBaAFDY8tcagXN1IHzBMDNlehtci2W08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYt YmEzYzY0ZTE0YTFkLzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYtYmEzYzY0ZTE0YTFk LzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRLvMgZ4 r7VY1iCT3yTgmj/HceMzBmrlK5jbacKs3i4+YmygwpAVtJjApi4qgUMj3/MSzoW2 tacWfW4Szu99NDrJtaMwKNCIfF+sOUAT/O241zFjTfqVFLW//igXzG5cJBD8RZad nf2m3YnyHMZkSENFslpBxju0NlHn22Qu7AYDJ9BhrULuFGz6py/uzFEvrOEymHn+ HAIXQHYhQoypWDfagyncT2aF06idtoSqQ4FOCJWtvydcJeoQBy9eOf+FhjdWdFhe gVJWRe/B8+AnqrSMX3OE4EGpf9pEfy0P4LAlO0xXQXo77VikWvLl3AEMPlyko1H+ pLutzUkW23632w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:05 2025 by rpki-client