This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json)
Hash identifier: R10c2xe7yDLZtplukiYu0nRyaHKi8NSnLAvAD5JJdic=
Subject key identifier: 10:4D:88:3C:E8:15:9E:77:0F:54:1E:C6:5D:6B:21:26:5D:3F:0D:89
Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Certificate serial: 019BF80881F47A1137BC0625D6E167CE1D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
Manifest number: 1409
Signing time: Mon 26 Jan 2026 02:01:05 +0000
Manifest this update: Mon 26 Jan 2026 02:01:05 +0000
Manifest next update: Tue 27 Jan 2026 02:01:05 +0000
Files and hashes: 1: 2V-Naz0jnwf8V8dIgYhxF_-rK-o.roa (hash: XdSVxHJfUXdEh13NSWMZmFTpZfOjmyPDnSsH+zDSqy0=)
2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: 5kRwWH/vnUfETYs879ot5IjnwHqYrhLTQdOFmFN/MbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:08:81:f4:7a:11:37:bc:06:25:d6:e1:67:ce:1d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62
Validity
Not Before: Jan 26 02:01:05 2026 GMT
Not After : Jan 27 02:01:05 2026 GMT
Subject: CN=104d883ce8159e770f541ec65d6b21265d3f0d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:b1:64:56:6c:e4:ea:f5:15:e2:a8:b7:19:
d2:32:55:1a:52:a3:68:1a:9e:72:ee:8e:2c:fa:2d:
37:c5:5d:ea:52:e5:85:00:5a:dc:73:93:ef:61:f3:
84:84:4e:54:d0:c3:87:49:e3:1b:f5:65:ee:dc:66:
21:f9:b8:ca:cd:11:d5:2e:d0:21:30:0b:87:e3:08:
7f:b7:18:a0:52:f9:9f:7d:5a:1c:57:9e:81:df:15:
da:3d:14:e0:62:7b:64:14:bf:98:ca:df:9b:59:96:
1f:12:91:d7:53:68:43:e3:a6:6c:d9:0c:ae:53:b2:
7a:f0:f7:43:75:e7:9a:5f:2d:c0:4d:3f:dc:a1:94:
c8:1a:85:b6:0b:c4:b3:51:61:f4:be:b5:f9:b3:90:
8f:b0:73:e0:81:58:1d:83:d9:a8:76:a4:47:6c:1f:
36:ae:33:17:4a:fd:18:54:26:00:3f:5e:7b:40:ff:
4f:1e:b5:f2:f9:cd:b8:0f:a9:98:87:6f:3a:08:ed:
61:24:d8:1f:4e:a4:f1:2f:33:1a:97:ca:91:4e:40:
b5:a1:51:9f:58:9d:ae:5b:32:65:62:54:35:af:a0:
5c:c3:27:fa:55:52:32:34:4b:6f:61:bd:18:de:bb:
30:3b:8f:1b:b0:a3:45:7c:5f:a2:3a:ea:2a:fc:e9:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4D:88:3C:E8:15:9E:77:0F:54:1E:C6:5D:6B:21:26:5D:3F:0D:89
X509v3 Authority Key Identifier:
keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:04:0e:30:f9:48:6d:be:ec:d4:0e:6e:7d:df:65:47:5a:3f:
93:86:5c:93:d0:39:e7:31:12:7e:bb:cd:3f:3d:ba:d9:93:c7:
c2:5e:86:6e:19:89:69:13:50:f1:27:cd:4b:45:1a:6e:77:95:
22:cd:e1:36:8b:32:14:29:f5:3a:2c:57:df:5b:ae:19:4e:48:
63:5c:66:51:6c:bb:a5:53:c2:7a:d1:7c:7e:bf:ac:65:bb:a2:
f8:ac:11:6d:47:df:ff:78:3b:f0:83:c9:17:a7:b3:f8:59:b2:
f4:f5:7e:76:dd:b5:88:f4:92:49:0d:42:e3:63:f8:1a:34:4f:
8a:26:0c:d3:f0:d9:df:8c:62:89:79:ff:40:33:e1:41:1a:74:
df:c1:ad:cb:bd:5d:4f:ff:84:83:d5:cd:cd:0f:f5:c2:96:a4:
05:8c:90:03:e5:ec:63:8d:de:5d:24:33:6e:36:cd:ce:3c:c2:
f0:fb:47:a2:a1:b2:76:e1:fd:a2:0d:a1:4a:b2:ca:5c:30:88:
c2:ff:ce:32:e0:49:55:da:37:d5:08:62:ff:58:6f:a6:a2:83:
81:17:fd:b2:6b:43:bb:c1:05:36:2c:37:51:4c:30:43:37:74:
25:f0:64:37:3d:db:34:59:05:2f:47:00:7a:9c:3a:a3:4d:cc:
7b:07:35:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:20 2026 by rpki-client