This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json) Hash identifier: GN2Q/cjlbK86U4X9xW8sITbfpJHl+pI0FfodUtLWKUQ= Subject key identifier: 85:A7:A1:75:31:AE:ED:A0:D2:82:3F:41:BD:5E:96:75:CC:BE:72:7F Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Certificate serial: 019AF3895EA665132E1256D13BA896F22983 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:57 +0000 Manifest this update: Sat 06 Dec 2025 12:00:57 +0000 Manifest next update: Sun 07 Dec 2025 12:00:57 +0000 Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=) 2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: AXoXiQjUPNhKwbGusDvZlFk3+GvKGEYDT+NjqxJumRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:5e:a6:65:13:2e:12:56:d1:3b:a8:96:f2:29:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b Validity Not Before: Dec 6 12:00:57 2025 GMT Not After : Dec 7 12:00:57 2025 GMT Subject: CN=85a7a17531aeeda0d2823f41bd5e9675ccbe727f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:3a:58:19:0f:a0:73:90:51:b9:b7:b8:b8: d0:cd:c7:94:9e:95:71:76:ba:aa:97:86:98:24:6b: ce:95:36:33:66:07:34:c9:05:00:b3:17:3a:3b:0c: 12:e8:e4:83:a9:1b:51:e9:60:d9:99:cf:61:7d:70: b2:8b:6e:5e:94:e7:90:c3:b1:77:ad:c2:04:df:57: 79:b5:65:86:a6:91:27:8c:f4:8e:07:31:aa:ab:95: 7b:ee:52:5f:1a:d1:7e:1d:6a:33:ed:68:8c:7a:95: 8f:2c:9d:75:d8:26:e9:29:ec:4a:a9:cf:ff:af:9d: df:f4:f3:87:76:9a:ee:b3:ab:77:3e:34:56:78:f4: b0:e6:d5:00:0f:37:da:4f:04:71:d0:dd:5f:04:cf: a7:2a:42:1f:75:98:ff:13:e9:ae:22:63:50:48:bc: eb:85:f7:f7:ca:e5:bc:aa:f5:f6:e4:d7:98:aa:54: 20:0a:24:88:94:49:46:97:ab:75:ae:10:1c:bb:9d: 76:7b:24:b9:39:0c:d6:ee:66:14:e8:2e:6e:17:3e: 22:cc:1a:b9:8c:16:76:f5:88:40:3e:26:aa:60:5f: ac:df:19:e5:b1:e2:e6:04:4e:76:16:b3:c3:c9:84: fe:b8:56:04:88:f0:54:ab:52:cf:78:c7:29:0b:a9: f0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A7:A1:75:31:AE:ED:A0:D2:82:3F:41:BD:5E:96:75:CC:BE:72:7F X509v3 Authority Key Identifier: keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:ac:33:2f:30:15:8a:91:52:7a:67:f3:7e:6f:35:a8:ad:bf: 7e:67:8f:ff:ee:5e:f6:36:2f:ce:1f:6d:7d:7f:bc:dc:e5:fb: e7:e5:fd:de:fa:01:52:b9:41:21:01:aa:4a:77:b4:29:33:8d: c5:d6:e0:24:95:cb:82:03:b6:e1:a8:33:6d:b3:88:6d:2e:94: 5f:a9:e6:2f:be:61:67:d5:b9:da:ff:90:48:17:fa:04:52:39: 5e:dc:75:43:fd:38:e4:4a:8b:81:ab:ce:e5:f2:26:2c:80:c5: db:4a:6c:71:10:63:a4:7a:69:8b:22:88:8d:2b:68:f3:21:89: b2:46:da:9a:ef:a5:da:0e:71:ea:0a:b7:37:8d:84:b7:f3:b5: 1e:7a:37:09:44:cc:7f:8e:9c:b8:48:a8:2c:04:bc:86:9f:21: 2c:fa:8c:2c:63:f4:8d:f6:dd:05:ed:e2:63:92:21:a5:25:61: e2:53:50:9f:ee:6d:aa:9c:27:2c:3c:bc:cb:47:29:1d:e4:59: 55:50:b0:1e:e4:47:cd:e4:68:f0:17:29:55:90:f3:95:af:ab: 58:ef:96:c9:42:bc:29:b6:3b:fb:04:4e:f3:4d:ae:0a:40:9d: c2:88:e2:2d:87:70:5a:a0:05:48:9c:cc:fe:d5:47:7d:80:50: 1d:79:c9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziV6mZRMuElbRO6iW8imDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzJhZWYwMDY3YzRmMGJhMjBlZTY2NjM0NDAwMDViMWIz Yjg4N2IwHhcNMjUxMjA2MTIwMDU3WhcNMjUxMjA3MTIwMDU3WjAzMTEwLwYDVQQD Eyg4NWE3YTE3NTMxYWVlZGEwZDI4MjNmNDFiZDVlOTY3NWNjYmU3MjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzs6WBkPoHOQUbm3uLjQzceUnpVx drqql4aYJGvOlTYzZgc0yQUAsxc6OwwS6OSDqRtR6WDZmc9hfXCyi25elOeQw7F3 rcIE31d5tWWGppEnjPSOBzGqq5V77lJfGtF+HWoz7WiMepWPLJ112CbpKexKqc// r53f9POHdprus6t3PjRWePSw5tUADzfaTwRx0N1fBM+nKkIfdZj/E+muImNQSLzr hff3yuW8qvX25NeYqlQgCiSIlElGl6t1rhAcu512eyS5OQzW7mYU6C5uFz4izBq5 jBZ29YhAPiaqYF+s3xnlseLmBE52FrPDyYT+uFYEiPBUq1LPeMcpC6nw0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWnoXUxru2g0oI/Qb1elnXMvnJ/MB8GA1UdIwQY MBaAFJ4yrvAGfE8Log7mZjRAAFsbO4h7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYt YzMxYzZkODY5MWQwLzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy84YzI4NzQtZWJiYS00Yzc3LTk2YzYtYzMxYzZkODY5MWQw LzEvbmpLdThBWjhUd3VpRHVabU5FQUFXeHM3aUhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeawzLzAV ipFSemfzfm81qK2/fmeP/+5e9jYvzh9tfX+83OX75+X93voBUrlBIQGqSne0KTON xdbgJJXLggO24agzbbOIbS6UX6nmL75hZ9W52v+QSBf6BFI5Xtx1Q/045EqLgavO 5fImLIDF20pscRBjpHppiyKIjSto8yGJskbamu+l2g5x6gq3N42Et/O1Hno3CUTM f46cuEioLAS8hp8hLPqMLGP0jfbdBe3iY5IhpSVh4lNQn+5tqpwnLDy8y0cpHeRZ VVCwHuRHzeRo8BcpVZDzla+rWO+WyUK8KbY7+wRO802uCkCdwojiLYdwWqAFSJzM /tVHfYBQHXnJEw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:21:26 2025 by rpki-client