This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json) Hash identifier: eEb7TsJ7PjPm+wxmEm89X8bWnDCiTPuuEONkfQ0caWE= Subject key identifier: 7E:91:57:07:46:8E:69:C3:75:1D:B7:D8:85:0F:29:F2:A2:9A:E7:C8 Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3 Certificate serial: 019AF12E3C066AF27668087A1290C0436E6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft Manifest number: 14A2 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: LwsLtkVEA+0K/gQClRhFfM0HTBvLAjzKHlb9n1YPDvQ=) 2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3c:06:6a:f2:76:68:08:7a:12:90:c0:43:6e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3 Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=7e915707468e69c3751db7d8850f29f2a29ae7c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cb:0d:e3:d6:f8:ad:e3:d1:d9:42:e9:c7:39: 1e:17:06:d3:f9:3b:82:6a:fa:e9:19:9d:4b:ae:dd: 2a:4a:ff:61:77:b2:cf:4d:7e:2d:25:49:70:82:d8: 65:02:9e:10:11:42:d8:6b:0f:2b:48:4b:53:8a:bd: 31:e4:14:11:a1:af:da:76:e8:c2:59:ad:68:63:44: e8:8d:d1:46:2c:4f:cf:b8:b5:6a:34:db:6a:5d:92: c8:68:50:29:55:2b:98:55:e9:a5:2b:5e:16:3e:84: 2c:48:76:26:a9:6b:d4:a4:ff:94:a2:bb:8d:6b:c7: e8:e0:04:03:77:a4:82:0e:d3:a8:53:7b:fb:4f:59: b5:d5:61:9f:25:b4:0f:1d:8a:46:a5:5e:8b:cc:ae: bf:d2:c9:5c:41:da:d3:f5:db:f6:1d:a7:45:4d:0a: 73:28:3b:e3:8c:e6:85:ca:56:ff:92:d1:b1:46:d5: 9b:3a:cb:a9:17:f2:f4:3b:b5:30:93:c9:9e:11:87: 93:56:db:6d:c6:2e:35:3d:89:0f:e9:6f:69:26:61: fd:6c:d1:8b:c7:74:be:7f:81:4b:fb:ae:1c:22:1e: 8a:5c:08:09:ca:39:e5:6e:e9:03:c8:a9:4f:d3:dc: 0b:87:b9:37:39:82:d3:04:13:38:b8:98:71:a8:44: 9d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:91:57:07:46:8E:69:C3:75:1D:B7:D8:85:0F:29:F2:A2:9A:E7:C8 X509v3 Authority Key Identifier: keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:08:93:50:a0:ea:29:84:88:42:1f:25:f4:10:06:03:7a:90: 88:31:b0:e7:32:59:18:0f:54:40:1e:81:2e:e7:a6:92:50:8d: e2:72:52:d2:74:c0:5c:9e:f9:ae:a3:c2:a0:53:88:5b:86:9e: dc:1f:23:83:32:51:10:d0:60:61:a5:ef:da:d7:f5:aa:55:f7: 3f:ed:9e:06:5d:9d:91:53:03:4e:1f:f3:44:02:06:b4:d0:49: ad:a8:77:32:ee:c1:3e:ef:69:09:ac:fc:fa:15:b3:54:79:32: 65:84:3d:36:e3:05:e4:01:c8:8c:8f:42:c7:84:e2:aa:b7:a3: 6c:15:62:6a:ec:ac:2b:41:6c:74:14:c3:cf:77:29:10:8b:b2: 16:c7:83:be:bf:29:b1:53:f6:6e:27:40:b3:5f:2f:c0:64:48: 3a:98:f1:ff:2d:9d:e7:2d:53:64:f6:4b:b9:a7:1f:28:cb:63: 05:6a:7f:df:b7:f6:2f:7c:89:0c:52:cd:72:e8:1e:43:e7:99: 0f:54:f3:6c:71:66:a4:fd:1f:b5:2d:21:ed:f8:69:bc:e2:bc: f8:f9:36:b4:e3:0b:a2:ee:58:06:e7:ad:1f:78:d9:e8:47:7d: 34:c8:cb:76:35:53:74:8c:01:d8:a0:ef:94:8c:10:c2:f6:3e: aa:50:5b:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLjwGavJ2aAh6EpDAQ25rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWMwMmIzMGFkYmYxMGY3MWY5YmUwZjQ2NDQ0MjQ0OTgy NjNkZjMwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD Eyg3ZTkxNTcwNzQ2OGU2OWMzNzUxZGI3ZDg4NTBmMjlmMmEyOWFlN2M4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MsN49b4rePR2ULpxzkeFwbT+TuC avrpGZ1Lrt0qSv9hd7LPTX4tJUlwgthlAp4QEULYaw8rSEtTir0x5BQRoa/adujC Wa1oY0TojdFGLE/PuLVqNNtqXZLIaFApVSuYVemlK14WPoQsSHYmqWvUpP+UoruN a8fo4AQDd6SCDtOoU3v7T1m11WGfJbQPHYpGpV6LzK6/0slcQdrT9dv2HadFTQpz KDvjjOaFylb/ktGxRtWbOsupF/L0O7Uwk8meEYeTVtttxi41PYkP6W9pJmH9bNGL x3S+f4FL+64cIh6KXAgJyjnlbukDyKlP09wLh7k3OYLTBBM4uJhxqESdJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6RVwdGjmnDdR232IUPKfKimufIMB8GA1UdIwQY MBaAFDScArMK2/EPcfm+D0ZEQkSYJj3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGIt NDMzNDAzZDMwYTgzLzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGItNDMzNDAzZDMwYTgz LzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQiTUKDq KYSIQh8l9BAGA3qQiDGw5zJZGA9UQB6BLuemklCN4nJS0nTAXJ75rqPCoFOIW4ae 3B8jgzJRENBgYaXv2tf1qlX3P+2eBl2dkVMDTh/zRAIGtNBJrah3Mu7BPu9pCaz8 +hWzVHkyZYQ9NuMF5AHIjI9Cx4TiqrejbBViauysK0FsdBTDz3cpEIuyFseDvr8p sVP2bidAs18vwGRIOpjx/y2d5y1TZPZLuacfKMtjBWp/37f2L3yJDFLNcugeQ+eZ D1TzbHFmpP0ftS0h7fhpvOK8+Pk2tOMLou5YBuetH3jZ6Ed9NMjLdjVTdIwB2KDv lIwQwvY+qlBbkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:38:27 2025 by rpki-client