This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft File: njXiGCQ9GwYp16OD6v3CBROKGUs.mft (raw, json) Hash identifier: wvwZT1kI8eP27RVrUy704OaZ1o4QsI5ntW4EheViYH4= Subject key identifier: CE:26:AB:BF:1D:0D:2C:BA:26:88:0C:B1:F8:4C:71:DE:44:7E:F6:97 Authority key identifier: 9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B Certificate issuer: /CN=9e35e218243d1b0629d7a383eafdc205138a194b Certificate serial: 019AF19B32CB7F729883277780874B8DF767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft Manifest number: 0AAC Signing time: Sat 06 Dec 2025 03:01:11 +0000 Manifest this update: Sat 06 Dec 2025 03:01:11 +0000 Manifest next update: Sun 07 Dec 2025 03:01:11 +0000 Files and hashes: 1: njXiGCQ9GwYp16OD6v3CBROKGUs.crl (hash: 8WrXTQRqyjP5n0foyKniVsiU1ftg4C/gfYgE9c0ITmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:32:cb:7f:72:98:83:27:77:80:87:4b:8d:f7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e35e218243d1b0629d7a383eafdc205138a194b Validity Not Before: Dec 6 03:01:11 2025 GMT Not After : Dec 7 03:01:11 2025 GMT Subject: CN=ce26abbf1d0d2cba26880cb1f84c71de447ef697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:26:71:45:0c:24:e6:99:c4:27:56:d2:0f: 91:37:3f:ae:df:11:ba:a1:cc:05:35:35:bc:2c:dd: 57:1e:95:a1:01:19:f3:b7:ee:41:4a:28:97:b5:05: 0e:14:65:9c:53:16:84:32:46:3b:de:42:13:a3:71: 10:b3:84:b6:ee:d7:15:24:16:29:19:9c:71:01:f8: 55:f0:6e:e7:18:e4:0e:59:2a:78:c5:08:6c:a6:dc: 51:51:a9:64:54:55:1f:1e:05:a3:34:eb:90:bf:01: 66:d6:61:89:60:11:de:d6:d9:99:cc:a0:98:e0:06: 3a:f5:ed:62:4f:16:cf:24:b8:3a:f5:30:a2:46:e0: 59:b2:27:45:31:47:bc:79:39:c2:a0:89:32:86:f2: fc:ce:03:17:66:77:a6:9a:2e:42:6c:6c:3f:22:ef: 8e:5e:1f:c0:97:f3:c1:dd:5b:d9:31:27:4d:93:55: 39:ab:8d:71:8a:ba:1e:7b:d3:d4:a3:1b:39:54:eb: 64:57:da:85:a7:f3:ed:4c:d6:36:05:49:be:52:d7: e1:2f:80:4d:7d:b5:a4:e5:cc:68:ce:b8:c1:94:ab: 4a:2e:72:e0:44:49:6b:8d:71:a0:ae:d6:99:6d:70: b3:70:ae:3d:22:52:fe:41:9f:7f:e3:bb:10:86:36: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:26:AB:BF:1D:0D:2C:BA:26:88:0C:B1:F8:4C:71:DE:44:7E:F6:97 X509v3 Authority Key Identifier: keyid:9E:35:E2:18:24:3D:1B:06:29:D7:A3:83:EA:FD:C2:05:13:8A:19:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njXiGCQ9GwYp16OD6v3CBROKGUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/538304-0b8e-423f-ae1c-550e5647bbbf/1/njXiGCQ9GwYp16OD6v3CBROKGUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:19:90:29:e2:cf:df:44:c7:37:ce:0e:46:e1:61:50:dc:e0: 3f:ef:c1:80:70:4c:31:e8:29:ad:08:0f:15:a7:76:7a:bd:b5: c4:e0:70:99:01:a8:47:c0:17:42:88:c5:4e:38:6c:f5:55:5d: f8:4b:3d:45:f3:8f:c4:65:3f:ed:2f:f2:b2:58:90:37:86:91: 50:80:e0:f9:e4:af:d2:27:13:d8:f5:1c:9d:cb:a1:3e:e3:73: 1b:a5:3e:4c:aa:14:60:20:26:f5:30:dd:4e:b0:47:cd:7b:93: 2d:0d:e9:1f:70:76:26:22:94:c1:cf:73:85:4e:8d:0d:41:f9: ff:f5:56:10:19:c5:51:41:3c:31:d3:4f:70:56:ef:ec:86:3f: 51:15:20:ac:c3:34:6f:45:a1:20:7d:09:9a:a5:0f:a4:4f:22: 51:d1:88:e2:28:b9:25:22:18:30:e2:3e:77:a0:7e:20:b7:0c: 4e:0a:9d:aa:92:32:61:93:cf:05:b9:65:98:2f:4d:53:2b:7b: f1:61:a8:e7:82:20:8c:e8:dd:a8:68:07:70:d0:45:c5:71:54: 4b:49:f2:0f:ba:5a:08:32:68:7c:48:10:9a:21:30:52:91:8f: bb:b1:5a:53:8b:34:31:b3:dc:3c:6e:a0:b7:ce:38:70:73:98: 97:64:65:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzLLf3KYgyd3gIdLjfdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzVlMjE4MjQzZDFiMDYyOWQ3YTM4M2VhZmRjMjA1MTM4 YTE5NGIwHhcNMjUxMjA2MDMwMTExWhcNMjUxMjA3MDMwMTExWjAzMTEwLwYDVQQD EyhjZTI2YWJiZjFkMGQyY2JhMjY4ODBjYjFmODRjNzFkZTQ0N2VmNjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqsmcUUMJOaZxCdW0g+RNz+u3xG6 ocwFNTW8LN1XHpWhARnzt+5BSiiXtQUOFGWcUxaEMkY73kITo3EQs4S27tcVJBYp GZxxAfhV8G7nGOQOWSp4xQhsptxRUalkVFUfHgWjNOuQvwFm1mGJYBHe1tmZzKCY 4AY69e1iTxbPJLg69TCiRuBZsidFMUe8eTnCoIkyhvL8zgMXZnemmi5CbGw/Iu+O Xh/Al/PB3VvZMSdNk1U5q41xiroee9PUoxs5VOtkV9qFp/PtTNY2BUm+UtfhL4BN fbWk5cxozrjBlKtKLnLgRElrjXGgrtaZbXCzcK49IlL+QZ9/47sQhjYzfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4mq78dDSy6JogMsfhMcd5EfvaXMB8GA1UdIwQY MBaAFJ414hgkPRsGKdejg+r9wgUTihlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMt NTUwZTU2NDdiYmJmLzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81MzgzMDQtMGI4ZS00MjNmLWFlMWMtNTUwZTU2NDdiYmJm LzEvbmpYaUdDUTlHd1lwMTZPRDZ2M0NCUk9LR1VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARmQKeLP 30THN84ORuFhUNzgP+/BgHBMMegprQgPFad2er21xOBwmQGoR8AXQojFTjhs9VVd +Es9RfOPxGU/7S/ysliQN4aRUIDg+eSv0icT2PUcncuhPuNzG6U+TKoUYCAm9TDd TrBHzXuTLQ3pH3B2JiKUwc9zhU6NDUH5//VWEBnFUUE8MdNPcFbv7IY/URUgrMM0 b0WhIH0JmqUPpE8iUdGI4ii5JSIYMOI+d6B+ILcMTgqdqpIyYZPPBbllmC9NUyt7 8WGo54IgjOjdqGgHcNBFxXFUS0nyD7paCDJofEgQmiEwUpGPu7FaU4s0MbPcPG6g t844cHOYl2Rlyw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:32 2025 by rpki-client