This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json) Hash identifier: La5TKWsyMgeC7R2eMNoQym3pW6argcnByokCybVvOKE= Subject key identifier: 26:4C:9F:8D:EB:13:89:ED:0B:49:01:AB:38:B1:CF:47:39:E3:4B:BC Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Certificate serial: 019AF12EF9330BF63329391F7BC8C24BB92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft Manifest number: 1380 Signing time: Sat 06 Dec 2025 01:02:58 +0000 Manifest this update: Sat 06 Dec 2025 01:02:58 +0000 Manifest next update: Sun 07 Dec 2025 01:02:58 +0000 Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=) 2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: q9m9tJo8IBQj8ShIezgH7WkWfehicXxTyZd4ax7GoxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f9:33:0b:f6:33:29:39:1f:7b:c8:c2:4b:b9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Validity Not Before: Dec 6 01:02:58 2025 GMT Not After : Dec 7 01:02:58 2025 GMT Subject: CN=264c9f8deb1389ed0b4901ab38b1cf4739e34bbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:15:87:c6:87:52:81:dd:dd:58:43:bf:81:73: 4e:79:a7:40:55:03:20:10:4d:6f:d6:6a:d0:02:98: eb:40:11:40:f3:94:09:b3:12:a4:63:7f:d0:8b:e1: 36:8d:29:dc:86:4c:23:9f:3a:9a:9b:32:e6:c9:4e: ab:f0:9b:a1:1e:03:90:66:6f:28:84:57:71:a5:41: 3e:e0:c7:15:26:51:b0:16:13:73:5d:a7:6e:b4:7d: 1f:58:60:57:12:81:b3:b5:99:ec:d6:18:6a:91:1e: 02:5b:f9:88:63:ac:30:7c:48:b3:7e:e5:58:56:13: fd:78:0a:bf:1b:5b:ac:7a:14:8f:df:f6:03:18:72: 29:62:3f:09:53:b4:52:2f:36:d6:1c:c3:c8:7c:f1: 57:07:8a:ea:e4:0e:d4:ca:9f:54:42:cb:81:bd:23: d0:51:06:fd:3f:5f:fd:80:cb:97:53:20:85:d1:e8: f5:91:af:b9:39:a9:20:06:6d:d2:4c:60:a5:d0:51: 10:7c:a9:21:e7:76:8b:26:9e:20:61:5b:81:b2:37: ba:2a:93:20:5d:b4:06:14:ec:9a:34:ab:f2:f3:7a: e0:cd:f2:41:ea:81:b7:59:f3:fe:1b:64:b3:d6:53: 5b:47:2a:0a:97:aa:f3:27:b6:6a:a3:cb:e7:b3:9a: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4C:9F:8D:EB:13:89:ED:0B:49:01:AB:38:B1:CF:47:39:E3:4B:BC X509v3 Authority Key Identifier: keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:f5:53:a3:33:ab:69:f1:b0:0f:86:85:03:20:a6:74:ab:89: d8:fa:f9:e3:98:7b:32:01:6c:f2:07:79:3e:b5:60:c2:16:31: 52:6b:ad:09:d2:bb:d5:d8:0f:3d:02:d9:f0:2e:4a:7a:a2:e1: 2e:e2:a5:ff:a0:0d:e9:fd:37:57:ad:94:8b:55:25:e1:eb:ae: 7c:a3:7a:45:b1:ae:b9:00:08:39:b7:f7:a1:08:2a:54:18:d4: 10:e2:ec:1e:80:5f:09:f4:4c:1f:01:25:29:23:21:10:b5:c4: 9f:c9:ba:22:72:10:da:f7:93:2f:11:1d:db:bc:c2:07:29:83: a0:9a:23:69:e2:23:4b:55:95:0c:2b:3c:91:46:be:ab:1f:fa: 08:bf:65:7c:92:ad:73:94:ed:93:38:d0:56:eb:52:7b:27:9a: a5:38:00:b6:97:ab:11:4d:ce:7a:62:7c:98:98:99:7e:1e:31: f6:8b:59:ba:c1:8e:1f:04:35:3c:a2:10:c7:af:01:76:21:3d: 7d:85:4e:df:1f:d0:75:8c:38:f5:ef:38:15:15:0e:54:26:e3: 32:00:ca:09:ac:4b:ea:6b:5a:b2:38:b2:74:2f:cc:5a:65:c3: 58:30:1b:d9:7d:57:4b:11:52:b4:5b:19:89:d6:51:d4:ad:90: a8:c5:e3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLvkzC/YzKTkfe8jCS7ksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj ZWJjNjIwHhcNMjUxMjA2MDEwMjU4WhcNMjUxMjA3MDEwMjU4WjAzMTEwLwYDVQQD EygyNjRjOWY4ZGViMTM4OWVkMGI0OTAxYWIzOGIxY2Y0NzM5ZTM0YmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhWHxodSgd3dWEO/gXNOeadAVQMg EE1v1mrQApjrQBFA85QJsxKkY3/Qi+E2jSnchkwjnzqamzLmyU6r8JuhHgOQZm8o hFdxpUE+4McVJlGwFhNzXadutH0fWGBXEoGztZns1hhqkR4CW/mIY6wwfEizfuVY VhP9eAq/G1usehSP3/YDGHIpYj8JU7RSLzbWHMPIfPFXB4rq5A7Uyp9UQsuBvSPQ UQb9P1/9gMuXUyCF0ej1ka+5OakgBm3STGCl0FEQfKkh53aLJp4gYVuBsje6KpMg XbQGFOyaNKvy83rgzfJB6oG3WfP+G2Sz1lNbRyoKl6rzJ7Zqo8vns5piswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZMn43rE4ntC0kBqzixz0c540u8MB8GA1UdIwQY MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/VTozOr afGwD4aFAyCmdKuJ2Pr545h7MgFs8gd5PrVgwhYxUmutCdK71dgPPQLZ8C5KeqLh LuKl/6AN6f03V62Ui1Ul4euufKN6RbGuuQAIObf3oQgqVBjUEOLsHoBfCfRMHwEl KSMhELXEn8m6InIQ2veTLxEd27zCBymDoJojaeIjS1WVDCs8kUa+qx/6CL9lfJKt c5TtkzjQVutSeyeapTgAtperEU3OemJ8mJiZfh4x9otZusGOHwQ1PKIQx68BdiE9 fYVO3x/QdYw49e84FRUOVCbjMgDKCaxL6mtasjiydC/MWmXDWDAb2X1XSxFStFsZ idZR1K2QqMXjXA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:46 2025 by rpki-client