This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json) Hash identifier: e+4yztguEjrLPgDB7+jzobwmOJUIMZuLRx2sTk9zdwU= Subject key identifier: 63:B2:4D:44:1F:61:C4:C4:F2:EB:CA:8D:27:9A:26:D6:23:30:F3:40 Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8 Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8 Certificate serial: 019B2FD4DF21A37C300517C6BA4AAFDED2BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft Manifest number: 1099 Signing time: Thu 18 Dec 2025 05:00:38 +0000 Manifest this update: Thu 18 Dec 2025 05:00:38 +0000 Manifest next update: Fri 19 Dec 2025 05:00:38 +0000 Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=) 2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: stBLG2qP3+lureWVXs1ZGykyrduWaTYe83uUDMXxYcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:df:21:a3:7c:30:05:17:c6:ba:4a:af:de:d2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8 Validity Not Before: Dec 18 05:00:38 2025 GMT Not After : Dec 19 05:00:38 2025 GMT Subject: CN=63b24d441f61c4c4f2ebca8d279a26d62330f340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:da:94:e3:e9:49:92:b9:27:56:34:c6:17: df:d0:17:e5:2c:b5:e7:c3:0c:14:3f:b3:e4:c9:ec: 22:ee:52:df:f6:68:02:2d:36:cf:de:73:68:27:6b: 0b:76:63:7b:d9:20:db:59:7a:27:a7:37:32:28:17: 37:2a:8d:2e:16:fd:e2:2c:ca:80:90:49:37:64:46: 2f:7b:d1:73:bb:9c:ac:71:24:1f:f0:9a:54:04:1d: c2:95:ce:33:ea:aa:13:89:0e:64:8b:fc:9b:be:a6: 0d:9f:d0:0c:ed:64:1c:25:0b:ee:6c:3c:e4:e8:d7: 1c:25:77:3f:fb:a2:a4:c0:2a:90:b6:4e:f2:f5:36: ca:f8:f2:a9:b3:75:87:f6:9e:d9:2d:27:e3:08:a2: d6:cc:95:4d:f1:9a:92:a9:7f:c9:30:e3:88:29:4d: 6f:60:88:5a:25:06:f8:21:90:e7:95:7c:29:c2:15: e6:af:d5:d1:6e:03:17:67:cb:75:32:05:29:9d:e6: d8:be:24:81:d2:f8:36:3d:0e:f0:94:69:2a:54:60: 91:1c:2b:20:ac:fe:d5:4c:2d:2e:a9:5f:ee:be:cf: 1e:79:d3:1f:1c:78:4a:c5:60:26:f1:e0:18:e3:ed: fa:95:a6:3a:d9:2b:af:c7:17:00:95:82:f5:e5:bd: bb:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B2:4D:44:1F:61:C4:C4:F2:EB:CA:8D:27:9A:26:D6:23:30:F3:40 X509v3 Authority Key Identifier: keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:4c:33:f8:e3:3a:a1:4a:f4:86:69:61:9a:fb:b5:c0:15:a1: 57:06:0c:4a:a7:00:a7:f8:d7:0a:4b:56:f1:6d:96:6f:78:07: 1a:7f:1f:45:b0:8d:eb:ad:9b:f0:50:26:ac:25:70:aa:50:f0: de:f3:6a:67:27:b5:9c:85:fa:5c:00:d3:f0:ed:67:f6:19:dc: 66:de:3b:b4:22:49:ef:35:2b:fe:c1:84:1e:82:f6:c6:20:cd: 0c:09:c3:b0:02:7f:64:d5:ab:a2:d9:aa:36:b7:ed:88:bf:64: 80:38:ec:0e:68:e2:43:2a:27:a9:46:8a:6e:6d:60:35:4e:e4: 2d:7b:64:93:7f:05:a0:96:9a:ae:4d:74:ed:29:d5:b6:56:b8: 0b:b9:ae:ea:ca:62:9c:a8:83:42:2b:82:33:1a:b3:49:cb:a4: 11:72:99:7e:6e:6d:21:9e:2b:94:1c:4a:34:dd:08:15:57:d4: 5c:72:ef:d6:bc:25:eb:b9:18:66:40:9c:1f:5e:6d:ff:6e:3a: 56:7d:aa:ff:15:a4:92:61:f8:66:3f:0c:b2:ae:7a:cc:89:f4: df:40:a2:3b:b9:79:93:8f:64:d6:50:b8:92:e0:e4:db:90:6e: 84:c0:f7:b4:d5:67:0f:10:16:eb:72:84:6b:48:d9:15:cb:d1: 44:49:b4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1N8ho3wwBRfGukqv3tK7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzk0NDk4ZTQ3OTg3MjljZTk5NTBiZTM0YjQ1OWE5ZWYy OWY1ZTgwHhcNMjUxMjE4MDUwMDM4WhcNMjUxMjE5MDUwMDM4WjAzMTEwLwYDVQQD Eyg2M2IyNGQ0NDFmNjFjNGM0ZjJlYmNhOGQyNzlhMjZkNjIzMzBmMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOralOPpSZK5J1Y0xhff0BflLLXn wwwUP7Pkyewi7lLf9mgCLTbP3nNoJ2sLdmN72SDbWXonpzcyKBc3Ko0uFv3iLMqA kEk3ZEYve9Fzu5yscSQf8JpUBB3Clc4z6qoTiQ5ki/ybvqYNn9AM7WQcJQvubDzk 6NccJXc/+6KkwCqQtk7y9TbK+PKps3WH9p7ZLSfjCKLWzJVN8ZqSqX/JMOOIKU1v YIhaJQb4IZDnlXwpwhXmr9XRbgMXZ8t1MgUpnebYviSB0vg2PQ7wlGkqVGCRHCsg rP7VTC0uqV/uvs8eedMfHHhKxWAm8eAY4+36laY62SuvxxcAlYL15b27WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOyTUQfYcTE8uvKjSeaJtYjMPNAMB8GA1UdIwQY MBaAFJ45RJjkeYcpzplQvjS0WanvKfXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQt ZmE1ZWY0ZjUzZmJiLzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQtZmE1ZWY0ZjUzZmJi LzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARUwz+OM6 oUr0hmlhmvu1wBWhVwYMSqcAp/jXCktW8W2Wb3gHGn8fRbCN662b8FAmrCVwqlDw 3vNqZye1nIX6XADT8O1n9hncZt47tCJJ7zUr/sGEHoL2xiDNDAnDsAJ/ZNWrotmq NrftiL9kgDjsDmjiQyonqUaKbm1gNU7kLXtkk38FoJaark107SnVtla4C7mu6spi nKiDQiuCMxqzScukEXKZfm5tIZ4rlBxKNN0IFVfUXHLv1rwl67kYZkCcH15t/246 Vn2q/xWkkmH4Zj8Msq56zIn030CiO7l5k49k1lC4kuDk25BuhMD3tNVnDxAW63KE a0jZFcvRREm0uw== -----END CERTIFICATE-----Generated at Thu Dec 18 08:37:52 2025 by rpki-client