This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft File: NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft (raw, json) Hash identifier: KpWI1n0oZPXU+bxc9SPXEJuMPMRf/iaQDm1p3UeObUo= Subject key identifier: 4C:91:E7:3B:7B:8C:20:DA:6A:F8:6D:01:2D:E2:71:B6:8A:E9:5B:A6 Authority key identifier: 34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51 Certificate issuer: /CN=3490424c688ff519fb9e204d8f1588553455b151 Certificate serial: 019AF2AE028CC64FA43146D0A1C474399C73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft Manifest number: 0650 Signing time: Sat 06 Dec 2025 08:01:21 +0000 Manifest this update: Sat 06 Dec 2025 08:01:21 +0000 Manifest next update: Sun 07 Dec 2025 08:01:21 +0000 Files and hashes: 1: HPg8Ft7vHOJTKGGcMCV_EbNyeNU.roa (hash: 4TmjFkVE8RpewKQV2NBEk3fhlkdiSYaPUvJ9IIqxwAI=) 2: NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl (hash: 7dsQlSDrrI+dey4YplTaqeZuPQjB25jGtc69l50isjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ae:02:8c:c6:4f:a4:31:46:d0:a1:c4:74:39:9c:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3490424c688ff519fb9e204d8f1588553455b151 Validity Not Before: Dec 6 08:01:21 2025 GMT Not After : Dec 7 08:01:21 2025 GMT Subject: CN=4c91e73b7b8c20da6af86d012de271b68ae95ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c6:b0:2f:51:f5:8d:9b:09:ba:5b:55:dc:2c: 74:a4:5c:d9:e8:80:4d:7b:a2:86:d4:ca:dd:cd:f4: 1d:d0:40:54:d8:1e:98:2d:28:f9:6b:3e:ad:08:2c: 5c:c6:32:ff:d0:12:fd:4b:9a:9e:c2:ba:85:02:24: 08:a6:c8:8e:ac:11:9d:bd:d8:b4:bd:34:33:71:6b: 9f:1f:56:68:21:10:7c:67:cb:c8:ab:6a:b9:1c:15: e0:b6:58:a1:09:f1:c7:62:19:c4:54:0a:ba:1f:f1: 29:b5:28:6e:21:75:f4:06:66:35:96:fc:4c:6a:89: 28:09:b3:3a:c5:c2:0d:db:a9:59:58:c7:53:d0:49: 6e:0b:cc:ae:df:53:92:d4:27:17:45:91:80:da:ce: 37:0b:56:8c:55:8f:dd:1d:15:f3:4d:00:f6:5a:cf: 6a:9e:75:2d:34:8c:ea:73:b4:48:17:90:56:56:f0: 08:21:fb:8c:a1:b3:1d:41:11:86:e5:83:90:23:a5: 0f:b2:f1:3c:9a:16:5d:6d:2d:a9:1d:3e:c4:19:8f: 24:da:01:c6:f6:47:15:32:8e:83:50:77:16:67:bc: 76:48:2d:99:9a:b2:7a:d7:5a:cd:16:61:2e:73:c8: cf:76:d7:4f:17:7e:29:55:f9:fd:34:34:ac:fb:de: 62:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:91:E7:3B:7B:8C:20:DA:6A:F8:6D:01:2D:E2:71:B6:8A:E9:5B:A6 X509v3 Authority Key Identifier: keyid:34:90:42:4C:68:8F:F5:19:FB:9E:20:4D:8F:15:88:55:34:55:B1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJBCTGiP9Rn7niBNjxWIVTRVsVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ee2d10-ebb0-41ba-9981-3f06829e0f5c/1/NJBCTGiP9Rn7niBNjxWIVTRVsVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d2:de:43:31:e6:56:28:ae:84:a4:5a:3b:72:08:9f:36:61: 5a:09:5d:8d:30:85:cf:f7:78:44:32:c2:bf:43:e3:17:5c:f7: 6e:54:12:b4:19:7e:1e:96:a3:c4:0b:c1:b6:60:1c:2b:f1:2f: 50:08:53:20:8a:b8:9b:32:2f:c7:bb:36:ab:02:d6:05:b3:d8: 62:76:7d:d8:1a:43:98:23:25:a1:72:64:94:fd:ed:c3:20:08: 21:bc:d5:8c:5c:11:44:71:1a:6f:e0:ec:1f:e4:57:d3:80:68: a8:c5:69:85:ad:75:2f:37:a9:13:ed:31:21:c4:23:8f:58:d8: fe:c2:26:27:72:6b:c2:43:94:a1:b4:f2:3e:13:92:dd:74:dd: 5c:bf:40:35:52:69:56:0c:b6:e3:3d:5a:45:7d:c6:f4:4a:16: 3e:9b:98:2c:b6:fb:cd:75:64:d1:fc:7e:f7:9e:c4:17:f0:8d: 01:93:11:fd:50:a9:04:aa:7f:09:f0:90:9c:f4:4d:3a:01:fe: 36:1a:59:8a:79:c2:74:9d:c9:3c:71:db:7c:78:06:02:1b:de: 79:29:ea:17:39:59:a7:c8:36:5c:bb:88:d2:fd:0c:d6:9e:34: e4:a2:df:fd:c9:aa:7e:4e:a2:13:86:a1:30:48:e1:56:24:30: b4:14:e2:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrgKMxk+kMUbQocR0OZxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTA0MjRjNjg4ZmY1MTlmYjllMjA0ZDhmMTU4ODU1MzQ1 NWIxNTEwHhcNMjUxMjA2MDgwMTIxWhcNMjUxMjA3MDgwMTIxWjAzMTEwLwYDVQQD Eyg0YzkxZTczYjdiOGMyMGRhNmFmODZkMDEyZGUyNzFiNjhhZTk1YmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8awL1H1jZsJultV3Cx0pFzZ6IBN e6KG1MrdzfQd0EBU2B6YLSj5az6tCCxcxjL/0BL9S5qewrqFAiQIpsiOrBGdvdi0 vTQzcWufH1ZoIRB8Z8vIq2q5HBXgtlihCfHHYhnEVAq6H/EptShuIXX0BmY1lvxM aokoCbM6xcIN26lZWMdT0EluC8yu31OS1CcXRZGA2s43C1aMVY/dHRXzTQD2Ws9q nnUtNIzqc7RIF5BWVvAIIfuMobMdQRGG5YOQI6UPsvE8mhZdbS2pHT7EGY8k2gHG 9kcVMo6DUHcWZ7x2SC2ZmrJ611rNFmEuc8jPdtdPF34pVfn9NDSs+95ijQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyR5zt7jCDaavhtAS3icbaK6VumMB8GA1UdIwQY MBaAFDSQQkxoj/UZ+54gTY8ViFU0VbFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEt M2YwNjgyOWUwZjVjLzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9lZTJkMTAtZWJiMC00MWJhLTk5ODEtM2YwNjgyOWUwZjVj LzEvTkpCQ1RHaVA5Um43bmlCTmp4V0lWVFJWc1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNLeQzHm ViiuhKRaO3IInzZhWgldjTCFz/d4RDLCv0PjF1z3blQStBl+HpajxAvBtmAcK/Ev UAhTIIq4mzIvx7s2qwLWBbPYYnZ92BpDmCMloXJklP3twyAIIbzVjFwRRHEab+Ds H+RX04BoqMVpha11LzepE+0xIcQjj1jY/sImJ3JrwkOUobTyPhOS3XTdXL9ANVJp Vgy24z1aRX3G9EoWPpuYLLb7zXVk0fx+957EF/CNAZMR/VCpBKp/CfCQnPRNOgH+ NhpZinnCdJ3JPHHbfHgGAhveeSnqFzlZp8g2XLuI0v0M1p405KLf/cmqfk6iE4ah MEjhViQwtBTivA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:32:05 2025 by rpki-client