This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft File: NJWKWNF8q4_5p5FW9mvtWnh5n34.mft (raw, json) Hash identifier: XNRxiSH5M80F5x2cDituSp9yrPPtrn/VrC1uJ3oztgA= Subject key identifier: 97:3E:30:39:19:9E:AA:C7:0E:CB:46:9A:91:D5:9E:9D:C8:1A:46:A3 Authority key identifier: 34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E Certificate issuer: /CN=34958a58d17cab8ff9a79156f66bed5a78799f7e Certificate serial: 019AF50979FC36D69B527D0E54B53784CB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 19:00:30 +0000 Manifest this update: Sat 06 Dec 2025 19:00:30 +0000 Manifest next update: Sun 07 Dec 2025 19:00:30 +0000 Files and hashes: 1: K3t9uiMT3pdcNT-y1LibRFytIdI.roa (hash: GuP3GRBxNbproaFPzzE3XIeahhhTEN2jEs7iFNPrujs=) 2: NJWKWNF8q4_5p5FW9mvtWnh5n34.crl (hash: +f4FnWokAv4sTvSyBGe9MbWHRkATOcdlUSvrxis6kuQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:79:fc:36:d6:9b:52:7d:0e:54:b5:37:84:cb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34958a58d17cab8ff9a79156f66bed5a78799f7e Validity Not Before: Dec 6 19:00:30 2025 GMT Not After : Dec 7 19:00:30 2025 GMT Subject: CN=973e3039199eaac70ecb469a91d59e9dc81a46a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:1e:58:a5:6c:ef:42:e5:7f:2f:0e:ca:85:8c: 44:cf:00:24:84:6b:6b:05:3e:98:a8:56:fe:41:dc: 7e:55:a5:c0:db:79:5d:fb:34:8e:72:4d:05:32:0c: 11:f8:1b:bd:2d:07:64:2e:1a:18:14:c6:d3:a1:3a: 15:62:66:96:64:03:07:9e:cc:fe:e1:e9:ce:ed:74: e6:d3:be:c1:17:eb:dc:2c:69:1a:a7:1c:97:a2:ae: df:df:59:a4:60:bd:36:a1:90:72:ab:55:fb:72:8c: 92:63:0b:f4:3b:2a:75:18:af:28:d4:28:d4:54:a4: 36:35:50:80:b9:0a:3c:3e:c3:e7:e3:80:d5:31:2b: 8c:15:18:d9:c8:8d:e8:a1:59:de:e2:cd:47:9d:a5: 98:bd:6d:79:1a:6d:86:7c:d4:63:fc:aa:37:76:f2: 57:3b:4e:2b:2c:88:f5:38:8d:11:a9:2d:65:bf:d4: 5f:4c:8f:81:25:21:a4:33:8b:08:6e:5a:aa:02:65: f8:0c:cb:d7:21:91:d8:51:20:39:04:c6:d1:48:db: 22:dd:6d:8d:8b:ca:9d:41:c8:00:63:88:5b:59:2e: ee:1e:8c:be:cb:85:c7:e7:24:82:b9:e8:0d:42:27: bb:2e:77:56:7c:ec:69:32:a4:22:52:60:07:34:5a: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3E:30:39:19:9E:AA:C7:0E:CB:46:9A:91:D5:9E:9D:C8:1A:46:A3 X509v3 Authority Key Identifier: keyid:34:95:8A:58:D1:7C:AB:8F:F9:A7:91:56:F6:6B:ED:5A:78:79:9F:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJWKWNF8q4_5p5FW9mvtWnh5n34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d6c525-4a39-4db8-8c5d-46810613538a/1/NJWKWNF8q4_5p5FW9mvtWnh5n34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:d5:0e:f5:24:9d:fa:b0:e1:e6:03:91:62:9b:26:09:db:e6: c9:3c:e4:b4:c8:86:4d:2a:d5:ad:bb:ff:ae:c4:ee:c4:e0:81: 97:9f:ad:a7:bc:37:e1:84:a2:ac:d2:ff:14:d2:26:f8:81:2d: dc:d7:54:60:bf:83:b2:01:17:57:45:53:e6:45:68:4b:3a:8b: a3:08:c8:0d:b0:5b:74:47:d8:8d:89:1c:71:ee:be:70:79:50: 90:35:a2:4d:12:63:56:e3:02:2f:2c:c5:d9:56:c8:9c:65:c3: e0:4a:ec:69:84:ed:67:e5:70:a3:87:5e:6d:db:eb:44:fe:2a: 82:5a:d1:fe:1f:e9:ec:c2:61:53:02:39:cf:04:f1:76:00:10: 95:87:79:da:97:20:58:6c:fb:10:1e:a1:8b:1f:e7:a7:be:74: c8:11:ea:af:92:5e:54:ad:41:5f:68:19:ab:61:c1:8b:92:62: 8d:00:4c:ea:7c:c3:d9:82:9d:d4:c2:c8:bf:42:38:2a:2c:8f: de:b3:4c:2f:e8:5c:ec:af:0f:e0:16:d6:72:be:b1:ea:87:7d: db:f8:56:70:17:35:56:01:ce:ca:08:bf:07:e8:34:92:ce:56: df:d7:bd:6c:19:da:fa:1a:93:4a:5f:c4:b7:c6:05:72:26:4c: c1:10:d6:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CXn8NtabUn0OVLU3hMt9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTU4YTU4ZDE3Y2FiOGZmOWE3OTE1NmY2NmJlZDVhNzg3 OTlmN2UwHhcNMjUxMjA2MTkwMDMwWhcNMjUxMjA3MTkwMDMwWjAzMTEwLwYDVQQD Eyg5NzNlMzAzOTE5OWVhYWM3MGVjYjQ2OWE5MWQ1OWU5ZGM4MWE0NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0R5YpWzvQuV/Lw7KhYxEzwAkhGtr BT6YqFb+Qdx+VaXA23ld+zSOck0FMgwR+Bu9LQdkLhoYFMbToToVYmaWZAMHnsz+ 4enO7XTm077BF+vcLGkapxyXoq7f31mkYL02oZByq1X7coySYwv0Oyp1GK8o1CjU VKQ2NVCAuQo8PsPn44DVMSuMFRjZyI3ooVne4s1HnaWYvW15Gm2GfNRj/Ko3dvJX O04rLIj1OI0RqS1lv9RfTI+BJSGkM4sIblqqAmX4DMvXIZHYUSA5BMbRSNsi3W2N i8qdQcgAY4hbWS7uHoy+y4XH5ySCuegNQie7LndWfOxpMqQiUmAHNFqhqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJc+MDkZnqrHDstGmpHVnp3IGkajMB8GA1UdIwQY MBaAFDSViljRfKuP+aeRVvZr7Vp4eZ9+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQt NDY4MTA2MTM1MzhhLzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9kNmM1MjUtNGEzOS00ZGI4LThjNWQtNDY4MTA2MTM1Mzhh LzEvTkpXS1dORjhxNF81cDVGVzltdnRXbmg1bjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf9UO9SSd +rDh5gORYpsmCdvmyTzktMiGTSrVrbv/rsTuxOCBl5+tp7w34YSirNL/FNIm+IEt 3NdUYL+DsgEXV0VT5kVoSzqLowjIDbBbdEfYjYkcce6+cHlQkDWiTRJjVuMCLyzF 2VbInGXD4ErsaYTtZ+Vwo4debdvrRP4qglrR/h/p7MJhUwI5zwTxdgAQlYd52pcg WGz7EB6hix/np750yBHqr5JeVK1BX2gZq2HBi5JijQBM6nzD2YKd1MLIv0I4KiyP 3rNML+hc7K8P4BbWcr6x6od92/hWcBc1VgHOygi/B+g0ks5W39e9bBna+hqTSl/E t8YFciZMwRDWvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:40:52 2025 by rpki-client