This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json) Hash identifier: QblAZEWv0nFGEbMPGY36rIc6pV28PFCEAn+yKDb88dI= Subject key identifier: B8:10:D1:77:B0:0D:7B:A1:54:6E:0A:C7:41:24:78:95:52:14:21:23 Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019AF276B8E5AE26F98EA743C352174ED7F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft Manifest number: 1786 Signing time: Sat 06 Dec 2025 07:00:57 +0000 Manifest this update: Sat 06 Dec 2025 07:00:57 +0000 Manifest next update: Sun 07 Dec 2025 07:00:57 +0000 Files and hashes: 1: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=) 2: LVx4HKgcWIAx396vyIJnNE4ePuI.roa (hash: rjwIawjDoeXdj1yVpjEk4qjdVOMdb4bDHb4QfVsqSaE=) 3: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=) 4: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: MdIN0yT3MLCwbB3Qo698Ksu8n8UaynWmnp0+UTo7pbM=) 5: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=) 6: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=) 7: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:b8:e5:ae:26:f9:8e:a7:43:c3:52:17:4e:d7:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Dec 6 07:00:57 2025 GMT Not After : Dec 7 07:00:57 2025 GMT Subject: CN=b810d177b00d7ba1546e0ac74124789552142123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7a:14:25:5a:1b:98:59:5a:2d:1d:1f:59:b6: 42:c5:1e:65:5a:90:f2:25:16:17:77:7b:5f:59:c8: 04:92:34:bb:33:b5:4c:c9:82:c6:71:3c:e0:ca:fc: c2:e7:f6:40:26:7b:13:4a:04:5e:eb:3d:73:c2:93: 0b:e2:e1:f6:cf:54:c7:02:75:a9:12:c3:b4:85:c1: 05:59:3e:2c:69:6f:f1:43:d9:a2:4c:3d:e8:10:e8: e4:5c:e6:8b:e6:79:a1:27:6f:95:ac:56:e2:92:0f: ea:a0:d2:b4:43:57:09:1b:b4:c2:1d:65:61:8e:9d: 17:bd:be:03:e2:86:94:1c:09:fd:08:1d:26:05:02: 15:79:3a:17:82:94:24:b9:ad:4d:d8:9e:1e:c2:bb: 75:3f:d5:89:51:93:d6:ee:9b:04:41:79:36:c5:5d: 9e:54:72:6e:87:8e:56:84:d8:9e:27:ea:5f:9e:bb: da:1b:a6:03:50:9d:01:e2:06:be:42:62:a6:ca:d5: 82:af:2c:db:4d:57:0e:0c:b2:d0:26:80:f7:d7:4a: 34:0a:ba:0b:4c:be:4b:16:f9:ec:33:18:1f:51:f6: e7:25:b4:63:2a:e4:eb:8d:03:c6:a8:e8:92:f1:48: e4:c6:d9:91:ea:ff:ce:79:b8:96:1b:bf:05:5f:de: d0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:10:D1:77:B0:0D:7B:A1:54:6E:0A:C7:41:24:78:95:52:14:21:23 X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a7:ed:cb:1f:b7:3d:17:44:da:6f:9e:48:30:e7:82:28:e0: 10:a6:9f:96:9c:63:b9:0c:c5:76:d0:93:77:6b:ee:6c:19:b3: 1a:01:19:78:05:1a:82:cc:5c:a8:c8:de:a4:60:59:a4:72:75: da:9c:bd:61:ba:77:13:74:2e:6f:54:f6:e0:f3:c9:af:95:29: 1f:33:d1:da:28:36:95:ad:bd:e2:7a:83:bf:c7:27:7b:26:9d: 32:9e:2e:e5:b0:d2:1f:8a:4a:f1:27:b4:48:5d:1f:26:b4:a0: a0:e4:86:0e:09:eb:dd:37:57:e5:8b:49:69:e8:32:fe:a3:a7: 30:6e:a8:8e:db:00:f8:a5:9f:73:b4:8d:1c:59:4b:e4:ae:55: f1:3f:69:9e:16:24:36:c3:07:27:b7:5e:c0:8a:6c:1a:97:e7: 50:25:d2:e2:6c:da:a2:a6:cb:10:a8:91:13:71:cd:82:f0:d3: f4:f9:d6:2f:1c:0c:d8:fa:d9:1c:8b:f2:09:4d:c1:2f:84:f5: 63:3e:d2:0a:e4:ed:20:89:8d:8a:3e:52:2e:1d:9a:23:5d:3b: 1f:84:0e:a0:99:0e:91:2e:e1:b3:bf:87:88:f8:ea:d0:8a:82: d2:76:c8:34:0c:24:d7:c3:e6:73:4f:0e:2d:2c:ca:da:fd:4e: 77:74:37:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydrjlrib5jqdDw1IXTtfyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjUxMjA2MDcwMDU3WhcNMjUxMjA3MDcwMDU3WjAzMTEwLwYDVQQD EyhiODEwZDE3N2IwMGQ3YmExNTQ2ZTBhYzc0MTI0Nzg5NTUyMTQyMTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXoUJVobmFlaLR0fWbZCxR5lWpDy JRYXd3tfWcgEkjS7M7VMyYLGcTzgyvzC5/ZAJnsTSgRe6z1zwpML4uH2z1THAnWp EsO0hcEFWT4saW/xQ9miTD3oEOjkXOaL5nmhJ2+VrFbikg/qoNK0Q1cJG7TCHWVh jp0Xvb4D4oaUHAn9CB0mBQIVeToXgpQkua1N2J4ewrt1P9WJUZPW7psEQXk2xV2e VHJuh45WhNieJ+pfnrvaG6YDUJ0B4ga+QmKmytWCryzbTVcODLLQJoD310o0CroL TL5LFvnsMxgfUfbnJbRjKuTrjQPGqOiS8UjkxtmR6v/OebiWG78FX97QYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgQ0XewDXuhVG4Kx0EkeJVSFCEjMB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB6ftyx+3 PRdE2m+eSDDngijgEKaflpxjuQzFdtCTd2vubBmzGgEZeAUagsxcqMjepGBZpHJ1 2py9Ybp3E3Qub1T24PPJr5UpHzPR2ig2la294nqDv8cneyadMp4u5bDSH4pK8Se0 SF0fJrSgoOSGDgnr3TdX5YtJaegy/qOnMG6ojtsA+KWfc7SNHFlL5K5V8T9pnhYk NsMHJ7dewIpsGpfnUCXS4mzaoqbLEKiRE3HNgvDT9PnWLxwM2PrZHIvyCU3BL4T1 Yz7SCuTtIImNij5SLh2aI107H4QOoJkOkS7hs7+HiPjq0IqC0nbINAwk18Pmc08O LSzK2v1Od3Q3fg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:34 2025 by rpki-client