This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft File: njQ_BMJ9FUVaqlzapFadN6iJUNc.mft (raw, json) Hash identifier: hrI6qFd1Pzu7R9kMgAGPjcpAbMl/PpuXZU2FPuoSw5w= Subject key identifier: 55:16:ED:75:05:D2:55:F5:A8:97:1E:93:DD:33:0F:CA:6D:B9:43:49 Authority key identifier: 9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7 Certificate issuer: /CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7 Certificate serial: 019AF23FF3855F893E3686671A6B3C2B3E48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft Manifest number: 1490 Signing time: Sat 06 Dec 2025 06:01:08 +0000 Manifest this update: Sat 06 Dec 2025 06:01:08 +0000 Manifest next update: Sun 07 Dec 2025 06:01:08 +0000 Files and hashes: 1: MspHMRx79y2hbQhEiM4afU6NUCQ.roa (hash: Umb9OOhu/lMtmCnjDzYDKJVcT/aByAqAtDT/npY6pzk=) 2: njQ_BMJ9FUVaqlzapFadN6iJUNc.crl (hash: DuQmKem28fbxdgcVgtGvOjfUYhUt51ScviEoHdVX9Ts=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:f3:85:5f:89:3e:36:86:67:1a:6b:3c:2b:3e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e343f04c27d15455aaa5cdaa4569d37a88950d7 Validity Not Before: Dec 6 06:01:08 2025 GMT Not After : Dec 7 06:01:08 2025 GMT Subject: CN=5516ed7505d255f5a8971e93dd330fca6db94349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:3c:9f:98:db:e1:8a:a1:44:20:8c:57:0c: 5b:29:09:d3:bd:4d:e9:3f:cf:8c:08:af:41:74:8f: 8e:d5:62:16:73:0a:43:38:9c:3b:52:1f:8c:ab:9c: c6:ba:5d:60:19:6c:23:0a:05:31:05:dc:28:49:63: 8e:1d:46:26:73:00:04:16:54:34:46:9c:85:6e:3a: aa:a6:a1:c5:c5:08:03:c4:d2:f5:21:80:47:a4:0a: f4:fa:92:e3:8e:18:57:f8:3f:0f:ad:8f:0b:30:fa: 56:eb:75:cc:92:0e:89:c4:21:81:f2:30:46:b0:b1: 76:6f:70:5f:be:54:8b:dd:22:cc:3b:20:d2:bb:9f: 7a:e8:99:d8:7e:ed:df:76:05:42:70:f4:59:5b:6f: 99:dc:e8:62:10:86:58:d4:d8:0f:d0:22:ab:19:fa: c7:7f:5d:1e:1e:6b:89:08:e0:5b:05:c8:8f:c9:c0: 05:14:d8:b5:b1:17:66:24:1a:d5:25:f7:b8:80:b0: 9a:d4:26:b6:f6:4b:29:f3:73:97:b2:ad:7b:87:33: 50:a4:fe:4b:6c:ea:80:8b:56:44:9b:18:31:33:c9: e6:6c:84:d2:e4:a8:66:0d:cd:6c:f7:70:05:39:35: 6c:75:42:53:fc:a2:32:53:07:fd:4a:09:4b:63:91: ce:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:16:ED:75:05:D2:55:F5:A8:97:1E:93:DD:33:0F:CA:6D:B9:43:49 X509v3 Authority Key Identifier: keyid:9E:34:3F:04:C2:7D:15:45:5A:AA:5C:DA:A4:56:9D:37:A8:89:50:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njQ_BMJ9FUVaqlzapFadN6iJUNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/333034-e737-436d-b149-3119d3332282/1/njQ_BMJ9FUVaqlzapFadN6iJUNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:0a:a1:23:be:dc:04:ef:07:a5:85:4b:cd:7f:32:13:d8:0e: 29:87:54:7d:09:73:9c:80:cd:c9:41:b7:e3:79:2e:9d:0d:4f: 68:43:81:7a:ee:89:eb:4f:55:33:5a:0e:02:bb:ae:e4:cc:a3: 91:c7:5a:fd:fe:95:c1:e2:68:a5:e5:e9:0e:5f:d2:22:e7:85: b7:55:7b:2f:74:08:f8:f0:ac:48:bc:7d:59:75:1b:6d:85:e1: 5a:3c:9e:a5:98:09:88:2e:95:a1:63:96:4d:0b:5a:84:be:b0: 67:b4:01:05:e7:70:ec:ce:2e:53:9b:b8:a7:90:d6:5e:ce:df: cf:06:55:18:57:f4:02:f3:9b:d8:18:70:bf:c6:91:b6:af:73: e9:2d:55:bb:7b:c0:17:f5:e0:e4:f9:da:fb:e9:69:f0:43:ef: 24:00:58:a0:d9:4c:96:bd:b4:88:58:4e:a2:e9:0a:fa:e1:84: d1:66:5a:d6:12:97:6a:0b:e8:ff:b1:a8:a6:96:36:ff:c8:20: 26:0b:ca:81:50:93:b5:82:85:9f:46:a4:e9:c1:6e:0c:46:b8: f9:13:bc:40:36:e2:8f:6a:a8:49:37:fb:e0:7c:6e:ac:57:d3: cb:d2:7f:e3:95:72:52:6c:55:4a:b0:f2:76:e9:36:31:f4:a9: 6b:98:27:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/OFX4k+NoZnGms8Kz5IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzQzZjA0YzI3ZDE1NDU1YWFhNWNkYWE0NTY5ZDM3YTg4 OTUwZDcwHhcNMjUxMjA2MDYwMTA4WhcNMjUxMjA3MDYwMTA4WjAzMTEwLwYDVQQD Eyg1NTE2ZWQ3NTA1ZDI1NWY1YTg5NzFlOTNkZDMzMGZjYTZkYjk0MzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Cw8n5jb4YqhRCCMVwxbKQnTvU3p P8+MCK9BdI+O1WIWcwpDOJw7Uh+Mq5zGul1gGWwjCgUxBdwoSWOOHUYmcwAEFlQ0 RpyFbjqqpqHFxQgDxNL1IYBHpAr0+pLjjhhX+D8PrY8LMPpW63XMkg6JxCGB8jBG sLF2b3BfvlSL3SLMOyDSu5966JnYfu3fdgVCcPRZW2+Z3OhiEIZY1NgP0CKrGfrH f10eHmuJCOBbBciPycAFFNi1sRdmJBrVJfe4gLCa1Ca29ksp83OXsq17hzNQpP5L bOqAi1ZEmxgxM8nmbITS5KhmDc1s93AFOTVsdUJT/KIyUwf9SglLY5HOvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFUW7XUF0lX1qJcek90zD8ptuUNJMB8GA1UdIwQY MBaAFJ40PwTCfRVFWqpc2qRWnTeoiVDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDkt MzExOWQzMzMyMjgyLzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zMzMwMzQtZTczNy00MzZkLWIxNDktMzExOWQzMzMyMjgy LzEvbmpRX0JNSjlGVVZhcWx6YXBGYWRONmlKVU5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgqhI77c BO8HpYVLzX8yE9gOKYdUfQlznIDNyUG343kunQ1PaEOBeu6J609VM1oOAruu5Myj kcda/f6VweJopeXpDl/SIueFt1V7L3QI+PCsSLx9WXUbbYXhWjyepZgJiC6VoWOW TQtahL6wZ7QBBedw7M4uU5u4p5DWXs7fzwZVGFf0AvOb2Bhwv8aRtq9z6S1Vu3vA F/Xg5Pna++lp8EPvJABYoNlMlr20iFhOoukK+uGE0WZa1hKXagvo/7GoppY2/8gg JgvKgVCTtYKFn0ak6cFuDEa4+RO8QDbij2qoSTf74HxurFfTy9J/45VyUmxVSrDy duk2MfSpa5gnHA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:32:43 2025 by rpki-client