This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft File: NJYux3ZGK3bmOugVW7J7nYx-f94.mft (raw, json) Hash identifier: kdCH8aKOkghecbL6m8yG8eAFxSw6eXTM7hyQGsThyC0= Subject key identifier: B9:27:FD:E0:92:23:54:F2:9F:D6:41:D8:C5:E8:9B:64:AC:98:E7:5C Authority key identifier: 34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE Certificate issuer: /CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde Certificate serial: 019AF35256D4794BF317524E3CF7C920047E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft Manifest number: 10D1 Signing time: Sat 06 Dec 2025 11:00:50 +0000 Manifest this update: Sat 06 Dec 2025 11:00:50 +0000 Manifest next update: Sun 07 Dec 2025 11:00:50 +0000 Files and hashes: 1: NJYux3ZGK3bmOugVW7J7nYx-f94.crl (hash: 01fCflnvxDwNkmgzzYStx/aM84PNvImkFcOW37Wzam8=) 2: raSmxoHnzmzGBzTkG0MLkl3VZgs.roa (hash: lXV0TrwdE+JtNBRnmGgOqwwu3Hr9XSo7ebZyvtagFuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:56:d4:79:4b:f3:17:52:4e:3c:f7:c9:20:04:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34962ec776462b76e63ae8155bb27b9d8c7e7fde Validity Not Before: Dec 6 11:00:50 2025 GMT Not After : Dec 7 11:00:50 2025 GMT Subject: CN=b927fde0922354f29fd641d8c5e89b64ac98e75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:bb:36:c6:70:bf:c1:38:88:93:98:29:d0: e5:84:3c:be:48:5d:c0:dc:60:0e:70:36:3f:ac:11: 1f:50:87:6a:6a:17:a5:f2:54:eb:47:5b:4a:72:3f: a6:65:40:45:86:03:7d:da:59:06:a6:18:04:83:68: 80:d1:96:c5:b1:d1:2c:6f:47:dd:fe:d2:77:2c:1e: be:03:3c:a6:cf:6c:94:b1:18:e5:5e:cf:d6:58:6d: e6:6f:05:07:e1:5d:6b:36:88:64:6f:0c:a6:95:c5: 96:5a:d2:5d:ad:57:3a:6c:50:7a:73:65:76:06:0c: c6:ed:26:5a:d1:bd:f4:f3:8d:73:04:21:25:95:33: 22:55:45:fa:e9:38:9f:b1:ac:78:40:fb:40:c7:21: 07:0e:00:b7:59:a3:94:85:62:01:aa:fa:59:19:ea: 19:e8:9e:d8:0a:f1:48:8b:1c:e3:fd:f0:3b:10:63: fa:95:02:8c:fb:29:aa:6c:b0:c0:3b:d1:33:30:c6: 06:0a:6c:b5:08:4f:6f:c4:40:ac:0e:e2:b0:f0:f3: e5:a3:b9:5d:dc:eb:63:23:fd:c1:2f:eb:ff:03:a5: f4:43:de:28:d5:53:47:7b:bb:4f:5c:33:f3:83:a1: 60:26:25:4e:3b:56:2d:c4:a1:ee:8c:fd:71:4c:c3: c3:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:27:FD:E0:92:23:54:F2:9F:D6:41:D8:C5:E8:9B:64:AC:98:E7:5C X509v3 Authority Key Identifier: keyid:34:96:2E:C7:76:46:2B:76:E6:3A:E8:15:5B:B2:7B:9D:8C:7E:7F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJYux3ZGK3bmOugVW7J7nYx-f94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/82af7c-8606-4f9b-a052-4f3bea9fb95c/1/NJYux3ZGK3bmOugVW7J7nYx-f94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a3:b9:ba:23:55:dd:72:38:88:bf:40:15:1e:d8:7a:10:df: 42:24:d3:13:e2:63:2a:bc:1b:d8:c6:45:e3:a9:4a:49:e7:4a: eb:f6:29:4a:19:b7:1f:c0:21:52:74:33:5b:35:e0:5e:7f:71: 13:e9:93:6b:aa:69:14:5d:05:47:9c:ac:08:c4:91:94:ff:c0: 07:85:cb:22:3d:f7:73:5c:00:22:99:a0:7f:74:ca:f4:b4:fc: 19:66:a7:da:ae:30:4b:1e:fb:28:29:af:b7:bd:22:96:9e:7d: dd:d3:48:5c:68:f2:d4:34:13:a1:4c:93:95:ee:37:e4:f3:a0: c8:79:10:f5:9e:5c:d9:53:bd:00:68:6d:96:1a:37:7d:98:10: 52:87:e1:ca:61:99:1d:a8:0a:02:8c:d5:e3:e2:44:86:ef:71: f3:c3:85:cc:43:55:bf:01:aa:18:fc:80:78:ea:96:36:54:b9: f3:b5:b5:82:a2:f0:58:cf:2d:79:2e:a3:18:7e:b1:07:26:f4: a7:6f:ff:08:34:8f:ba:1c:fb:5f:5f:a1:d9:80:b2:3e:23:3d: 5e:ce:21:bd:1a:80:5f:02:29:2c:49:ae:ea:71:25:0f:ec:af: 07:bf:15:72:80:57:d7:66:e3:b2:89:90:51:74:5e:16:32:10: da:93:76:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUlbUeUvzF1JOPPfJIAR+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTYyZWM3NzY0NjJiNzZlNjNhZTgxNTViYjI3YjlkOGM3 ZTdmZGUwHhcNMjUxMjA2MTEwMDUwWhcNMjUxMjA3MTEwMDUwWjAzMTEwLwYDVQQD EyhiOTI3ZmRlMDkyMjM1NGYyOWZkNjQxZDhjNWU4OWI2NGFjOThlNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHO7NsZwv8E4iJOYKdDlhDy+SF3A 3GAOcDY/rBEfUIdqahel8lTrR1tKcj+mZUBFhgN92lkGphgEg2iA0ZbFsdEsb0fd /tJ3LB6+Azymz2yUsRjlXs/WWG3mbwUH4V1rNohkbwymlcWWWtJdrVc6bFB6c2V2 BgzG7SZa0b30841zBCEllTMiVUX66Tifsax4QPtAxyEHDgC3WaOUhWIBqvpZGeoZ 6J7YCvFIixzj/fA7EGP6lQKM+ymqbLDAO9EzMMYGCmy1CE9vxECsDuKw8PPlo7ld 3OtjI/3BL+v/A6X0Q94o1VNHe7tPXDPzg6FgJiVOO1YtxKHujP1xTMPDrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkn/eCSI1Tyn9ZB2MXom2SsmOdcMB8GA1UdIwQY MBaAFDSWLsd2Rit25jroFVuye52Mfn/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTIt NGYzYmVhOWZiOTVjLzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC84MmFmN2MtODYwNi00ZjliLWEwNTItNGYzYmVhOWZiOTVj LzEvTkpZdXgzWkdLM2JtT3VnVlc3SjduWXgtZjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqO5uiNV 3XI4iL9AFR7YehDfQiTTE+JjKrwb2MZF46lKSedK6/YpShm3H8AhUnQzWzXgXn9x E+mTa6ppFF0FR5ysCMSRlP/AB4XLIj33c1wAIpmgf3TK9LT8GWan2q4wSx77KCmv t70ilp593dNIXGjy1DQToUyTle435POgyHkQ9Z5c2VO9AGhtlho3fZgQUofhymGZ HagKAozV4+JEhu9x88OFzENVvwGqGPyAeOqWNlS587W1gqLwWM8teS6jGH6xByb0 p2//CDSPuhz7X1+h2YCyPiM9Xs4hvRqAXwIpLEmu6nElD+yvB78VcoBX12bjsomQ UXReFjIQ2pN2tw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:48:56 2025 by rpki-client