This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft File: NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft (raw, json) Hash identifier: Lr3xhGGSBsFHRyj0ltDUdDVOEPDZ8EdvSsef4umHevk= Subject key identifier: FF:AE:FD:46:6A:A5:E4:96:52:02:85:C9:F2:9D:67:09:92:B8:11:31 Authority key identifier: 36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0 Certificate issuer: /CN=36368aac0f4a28c8a31760f06b578dae453146f0 Certificate serial: 019AF509B1F2C5E1A27831CC0849EB5EAE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 19:00:44 +0000 Manifest this update: Sat 06 Dec 2025 19:00:44 +0000 Manifest next update: Sun 07 Dec 2025 19:00:44 +0000 Files and hashes: 1: NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl (hash: QVD2V2M7R+tJZEe/DjrjNPzDCzueLxp5OnShn2j3EMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b1:f2:c5:e1:a2:78:31:cc:08:49:eb:5e:ae:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36368aac0f4a28c8a31760f06b578dae453146f0 Validity Not Before: Dec 6 19:00:44 2025 GMT Not After : Dec 7 19:00:44 2025 GMT Subject: CN=ffaefd466aa5e496520285c9f29d670992b81131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b2:5d:5f:13:42:1f:d0:1b:fc:ad:74:6d:ef: bc:67:cb:ed:83:09:67:fd:1c:3e:63:b9:12:84:20: 73:bf:64:c9:11:a3:1c:35:42:10:3f:19:22:ee:bd: f4:9e:b8:6f:2a:76:c3:15:aa:a4:6d:5a:2b:c1:f3: bd:d7:f6:8b:76:a6:00:df:58:b4:52:17:56:18:fc: 96:a1:91:be:37:d9:84:58:81:35:df:18:d0:e9:26: f2:7f:ba:6c:5c:59:a5:2d:5e:ac:d0:6d:f6:9e:b1: 1b:bc:79:e4:d6:b2:a3:65:00:6f:bc:ff:8e:bf:b5: 42:cb:07:8b:94:32:20:11:01:ca:a6:2c:78:93:15: 0d:60:5a:d6:c8:f7:28:8e:e5:c1:cd:02:62:22:18: a6:de:fc:12:31:79:78:ae:d3:a9:eb:17:2e:71:68: 93:e6:24:25:0a:9a:f3:50:e1:8a:d3:1c:56:d4:e7: 1c:5b:ad:89:7a:0c:47:e2:0d:cb:6d:3a:e8:9a:d7: b4:cf:a2:99:ed:ac:6e:bd:26:a6:3b:d7:be:6a:a1: c5:19:4f:cb:f4:09:95:92:fb:7a:16:88:8f:fd:e7: 49:d2:0a:64:f5:fd:88:8d:d7:0b:19:f0:d2:ce:91: 8c:db:ce:4c:f3:89:44:d5:8e:21:86:fa:fd:45:78: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AE:FD:46:6A:A5:E4:96:52:02:85:C9:F2:9D:67:09:92:B8:11:31 X509v3 Authority Key Identifier: keyid:36:36:8A:AC:0F:4A:28:C8:A3:17:60:F0:6B:57:8D:AE:45:31:46:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjaKrA9KKMijF2Dwa1eNrkUxRvA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/61315a-ad02-4768-b78d-50247f12ce74/1/NjaKrA9KKMijF2Dwa1eNrkUxRvA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:7a:18:20:23:e9:e1:cc:09:db:2b:b2:94:84:49:75:26:e0: 74:f8:57:6d:22:4b:83:74:ff:3e:52:93:d1:05:e1:15:ca:3f: 24:7f:39:cb:90:6f:91:5a:cf:a4:0b:be:f2:b5:90:cb:2c:02: 4f:7e:fa:c8:52:e7:34:98:b8:50:ef:8f:e5:37:23:51:a5:57: 85:18:12:5a:42:78:93:3d:e8:8b:ed:1f:a4:12:b2:50:1d:38: 70:1b:1c:74:2d:6f:95:25:e3:ab:3e:5e:68:e7:45:db:20:5e: 0f:9e:12:6d:38:be:e6:85:5c:32:39:9a:91:02:18:2b:07:5c: 10:47:fd:c0:c0:a9:1c:16:af:2c:14:01:0e:47:b8:0f:45:80: fb:4b:58:d5:93:b7:19:1a:cf:05:e4:f7:ff:26:18:94:08:49: 8b:b8:cc:e6:8a:11:c3:99:2c:26:66:d2:d4:1b:86:36:64:0e: 6a:05:4b:58:ed:fc:ff:a2:ae:d4:7e:39:78:22:02:98:e6:df: ce:6a:2a:08:bd:a7:5c:b1:af:e7:75:3b:5f:63:7b:75:d6:fc: 4b:7b:d0:6e:a0:5d:0f:69:05:f1:86:30:4e:56:cc:a5:f7:76: b8:16:33:4e:dc:35:84:d6:82:0e:b8:f9:99:68:fa:cb:ad:ac: fb:5d:76:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CbHyxeGieDHMCEnrXq5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzY4YWFjMGY0YTI4YzhhMzE3NjBmMDZiNTc4ZGFlNDUz MTQ2ZjAwHhcNMjUxMjA2MTkwMDQ0WhcNMjUxMjA3MTkwMDQ0WjAzMTEwLwYDVQQD EyhmZmFlZmQ0NjZhYTVlNDk2NTIwMjg1YzlmMjlkNjcwOTkyYjgxMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrJdXxNCH9Ab/K10be+8Z8vtgwln /Rw+Y7kShCBzv2TJEaMcNUIQPxki7r30nrhvKnbDFaqkbVorwfO91/aLdqYA31i0 UhdWGPyWoZG+N9mEWIE13xjQ6Sbyf7psXFmlLV6s0G32nrEbvHnk1rKjZQBvvP+O v7VCyweLlDIgEQHKpix4kxUNYFrWyPcojuXBzQJiIhim3vwSMXl4rtOp6xcucWiT 5iQlCprzUOGK0xxW1OccW62JegxH4g3LbTromte0z6KZ7axuvSamO9e+aqHFGU/L 9AmVkvt6FoiP/edJ0gpk9f2IjdcLGfDSzpGM285M84lE1Y4hhvr9RXhC3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+u/UZqpeSWUgKFyfKdZwmSuBExMB8GA1UdIwQY MBaAFDY2iqwPSijIoxdg8GtXja5FMUbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQt NTAyNDdmMTJjZTc0LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC82MTMxNWEtYWQwMi00NzY4LWI3OGQtNTAyNDdmMTJjZTc0 LzEvTmphS3JBOUtLTWlqRjJEd2ExZU5ya1V4UnZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHoYICPp 4cwJ2yuylIRJdSbgdPhXbSJLg3T/PlKT0QXhFco/JH85y5BvkVrPpAu+8rWQyywC T376yFLnNJi4UO+P5TcjUaVXhRgSWkJ4kz3oi+0fpBKyUB04cBscdC1vlSXjqz5e aOdF2yBeD54SbTi+5oVcMjmakQIYKwdcEEf9wMCpHBavLBQBDke4D0WA+0tY1ZO3 GRrPBeT3/yYYlAhJi7jM5ooRw5ksJmbS1BuGNmQOagVLWO38/6Ku1H45eCICmObf zmoqCL2nXLGv53U7X2N7ddb8S3vQbqBdD2kF8YYwTlbMpfd2uBYzTtw1hNaCDrj5 mWj6y62s+112fQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:55:13 2025 by rpki-client