This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft File: NJHAkpom6NmRn0lXz3p2RPaA3So.mft (raw, json) Hash identifier: M3iswCgbdosj2TRqkxMSL+OG2k4dDgwDhlFdhZceT4U= Subject key identifier: 0E:BE:4A:0E:BA:A6:A7:F9:C2:0E:3D:BA:12:E9:76:5E:36:1C:3F:37 Authority key identifier: 34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A Certificate issuer: /CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a Certificate serial: 019AF0F5D56D42CADFD009182D48385EF232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft Manifest number: 3E Signing time: Sat 06 Dec 2025 00:00:34 +0000 Manifest this update: Sat 06 Dec 2025 00:00:34 +0000 Manifest next update: Sun 07 Dec 2025 00:00:34 +0000 Files and hashes: 1: NJHAkpom6NmRn0lXz3p2RPaA3So.crl (hash: Zt3hLecIPZlYZ6oSMtsk2Y48GCBmEcmNLUxiCfD8tnA=) 2: iJgfeJgucg1akdh9sLRBuxTGJvU.roa (hash: zNeKFlxClPmXZ5JB+RO0fxOfsZksD0cJ7YYmWLj6gAw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:d5:6d:42:ca:df:d0:09:18:2d:48:38:5e:f2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3491c0929a26e8d9919f4957cf7a7644f680dd2a Validity Not Before: Dec 6 00:00:34 2025 GMT Not After : Dec 7 00:00:34 2025 GMT Subject: CN=0ebe4a0ebaa6a7f9c20e3dba12e9765e361c3f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:ae:ad:75:38:92:85:64:e2:bf:32:83:d0: 0d:c5:e8:5c:0f:26:ea:37:c6:c9:86:8d:5a:cc:38: b1:c5:41:a5:9c:dd:19:2b:97:5d:28:6e:4f:a9:46: 70:58:6d:67:5c:4d:ea:66:f7:c6:ee:b3:4f:2b:d0: da:96:7f:17:53:38:37:61:cb:37:09:7d:7b:ac:dc: b7:32:37:bf:44:98:66:44:88:e0:a9:0a:9a:ba:c6: 42:6d:06:cd:f2:17:3f:24:56:c9:08:a4:95:19:17: 95:b5:36:48:9f:15:cb:1c:2d:7d:f6:ab:73:d1:68: 4f:83:d3:24:9f:85:bb:dd:9f:c6:3f:da:d5:35:98: 7c:3f:32:bd:c9:38:e8:34:3c:b0:d4:41:53:b9:d3: 32:46:13:5f:47:03:fe:dd:24:c9:e6:99:46:a9:46: ca:2d:40:8b:8d:a7:02:99:55:83:2c:c0:87:37:46: 8a:77:77:dd:34:15:8c:69:0e:d7:7e:e7:6c:ae:47: 95:ec:0a:17:c3:42:90:3e:cf:47:03:94:3b:6d:34: 8d:99:a9:cd:80:49:4d:ca:53:3a:83:e1:11:07:ea: d5:71:26:42:cc:0f:82:d0:5e:16:02:90:43:7f:39: 82:72:b6:21:e1:1e:ad:3d:fa:72:4b:aa:ae:1c:2f: df:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BE:4A:0E:BA:A6:A7:F9:C2:0E:3D:BA:12:E9:76:5E:36:1C:3F:37 X509v3 Authority Key Identifier: keyid:34:91:C0:92:9A:26:E8:D9:91:9F:49:57:CF:7A:76:44:F6:80:DD:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJHAkpom6NmRn0lXz3p2RPaA3So.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/175bf7-6147-4389-8afc-69108f7e6771/1/NJHAkpom6NmRn0lXz3p2RPaA3So.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:68:b1:89:1d:b1:fb:85:07:d2:76:5a:70:e4:92:4c:4f:e3: d4:57:28:f3:c6:ca:e2:f4:81:37:ef:6b:2e:56:80:7d:14:b2: 12:71:0b:28:9f:38:ab:c3:a1:f0:f6:d3:94:7d:69:bf:86:10: 42:23:b6:ba:1f:aa:2c:b9:0d:a1:61:7d:ef:97:c6:32:e5:f7: 96:7e:4e:e4:5b:79:15:54:99:6a:85:d3:49:bd:cd:d1:e2:20: b8:d9:9b:d4:0f:18:d0:e3:5e:a2:bf:c1:1f:b1:24:06:a4:3d: 5b:f0:11:52:4f:20:02:4c:b1:84:d4:3d:ca:d9:74:86:3f:93: f7:3a:6e:c9:5f:89:0c:70:77:55:2b:11:30:98:f3:b4:80:ef: 6b:d3:cd:ce:b4:29:61:8f:9b:93:c7:71:ec:d0:be:7b:7a:7b: 4b:b8:d0:ed:a7:fc:a7:17:ed:d5:7a:9a:80:4a:02:f4:13:e7: a1:1d:ac:1c:4a:d6:38:4c:40:04:6a:b9:b9:58:d1:0b:68:2f: 31:9e:4d:1b:0c:73:f4:62:d8:38:03:14:2a:36:03:f2:86:3e: 96:5b:d1:17:08:dd:8e:0f:5a:cf:c9:f3:3c:e4:1f:26:d4:11: e8:7e:53:ba:98:46:25:a0:6f:5a:e7:9e:51:cc:f0:44:8f:25: e9:78:66:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9dVtQsrf0AkYLUg4XvIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTFjMDkyOWEyNmU4ZDk5MTlmNDk1N2NmN2E3NjQ0ZjY4 MGRkMmEwHhcNMjUxMjA2MDAwMDM0WhcNMjUxMjA3MDAwMDM0WjAzMTEwLwYDVQQD EygwZWJlNGEwZWJhYTZhN2Y5YzIwZTNkYmExMmU5NzY1ZTM2MWMzZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/murXU4koVk4r8yg9ANxehcDybq N8bJho1azDixxUGlnN0ZK5ddKG5PqUZwWG1nXE3qZvfG7rNPK9Daln8XUzg3Ycs3 CX17rNy3Mje/RJhmRIjgqQqausZCbQbN8hc/JFbJCKSVGReVtTZInxXLHC199qtz 0WhPg9Mkn4W73Z/GP9rVNZh8PzK9yTjoNDyw1EFTudMyRhNfRwP+3STJ5plGqUbK LUCLjacCmVWDLMCHN0aKd3fdNBWMaQ7XfudsrkeV7AoXw0KQPs9HA5Q7bTSNmanN gElNylM6g+ERB+rVcSZCzA+C0F4WApBDfzmCcrYh4R6tPfpyS6quHC/fqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6+Sg66pqf5wg49uhLpdl42HD83MB8GA1UdIwQY MBaAFDSRwJKaJujZkZ9JV896dkT2gN0qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpIQWtwb202Tm1SbjBsWHozcDJSUGFBM1NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNzViZjctNjE0Ny00Mzg5LThhZmMt NjkxMDhmN2U2NzcxLzEvTkpIQWtwb202Tm1SbjBsWHozcDJSUGFBM1NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNzViZjctNjE0Ny00Mzg5LThhZmMtNjkxMDhmN2U2Nzcx LzEvTkpIQWtwb202Tm1SbjBsWHozcDJSUGFBM1NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2ixiR2x +4UH0nZacOSSTE/j1Fco88bK4vSBN+9rLlaAfRSyEnELKJ84q8Oh8PbTlH1pv4YQ QiO2uh+qLLkNoWF975fGMuX3ln5O5Ft5FVSZaoXTSb3N0eIguNmb1A8Y0ONeor/B H7EkBqQ9W/ARUk8gAkyxhNQ9ytl0hj+T9zpuyV+JDHB3VSsRMJjztIDva9PNzrQp YY+bk8dx7NC+e3p7S7jQ7af8pxft1XqagEoC9BPnoR2sHErWOExABGq5uVjRC2gv MZ5NGwxz9GLYOAMUKjYD8oY+llvRFwjdjg9az8nzPOQfJtQR6H5TuphGJaBvWuee UczwRI8l6XhmEw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:42:14 2025 by rpki-client