This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json) Hash identifier: H5YR0M0Ju+jWcg1Oo74v/lILLFns0Kh22hGDyRnrR+0= Subject key identifier: 8B:DC:5B:42:4F:FA:EE:88:B3:86:BC:FA:F7:E0:11:98:70:06:87:5F Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa Certificate serial: 019AF23F7CCC9505A7F9A9D79FD62FE69150 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=) 2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: rHzXOwESs0ZGxguNfZmrCFZm8YZv32Br39wGobrslxU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7c:cc:95:05:a7:f9:a9:d7:9f:d6:2f:e6:91:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=8bdc5b424ffaee88b386bcfaf7e011987006875f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:69:52:25:72:7e:3b:60:d6:14:c5:ff:e2: 4d:12:32:04:62:72:c6:32:b5:d0:52:f7:28:38:5e: 49:35:84:76:48:2b:a7:ac:d0:61:7e:b3:58:0a:b5: 4d:96:97:5d:cf:45:58:59:33:ce:5c:a6:8e:68:85: 4e:ab:a0:48:d5:84:7c:4c:aa:c7:9d:ef:ad:57:ee: 32:ed:c7:3f:cd:b1:10:50:18:69:e7:5a:75:ea:d5: 0f:cd:cf:9e:90:8b:fb:67:85:20:69:31:c6:2d:55: 12:c4:bf:a0:6d:9c:d6:57:ae:0e:c3:b0:4f:08:53: 2d:55:54:65:36:91:2d:bc:33:bf:fc:d2:b9:51:a8: d4:2b:91:d7:72:83:ac:50:e1:4a:00:7d:57:4f:e2: 02:b0:56:6a:a0:94:c0:90:81:27:a8:49:44:75:9b: ba:ca:2e:d9:bc:81:4e:e3:2c:e5:7a:21:81:60:0e: 51:14:bb:e5:cb:63:56:9f:3b:fb:73:53:f0:87:ae: c7:02:9f:39:92:d0:82:1f:5d:98:e6:64:65:a6:ed: 73:c3:c2:f9:60:2e:c7:06:db:68:98:23:d5:be:b9: 02:f7:a3:14:76:9f:34:c5:28:50:6a:ff:28:17:9c: a8:49:a4:fa:55:67:20:aa:67:35:63:99:12:c3:e5: 2d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DC:5B:42:4F:FA:EE:88:B3:86:BC:FA:F7:E0:11:98:70:06:87:5F X509v3 Authority Key Identifier: keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0b:31:9a:35:31:e6:40:2b:ce:76:c8:ce:49:ef:f2:65:3f: 85:ce:02:f1:91:05:6e:56:f1:27:ec:3b:e3:bd:ff:b6:97:7f: dd:be:1d:92:78:dd:90:c3:1b:fd:bf:ff:bb:66:db:cb:88:06: 96:1b:4d:9b:5f:21:41:b5:7b:fc:2a:b5:1a:c2:69:df:1e:bf: 59:a3:96:58:f8:25:f3:25:18:bd:55:d5:31:c1:74:ff:42:2d: 82:4e:93:4f:ce:6a:86:b8:97:5d:ae:d1:2b:84:a3:1a:ae:16: 7c:89:41:59:2b:85:95:3e:27:b8:71:50:7e:5c:cd:8b:6e:8e: a4:21:22:d6:38:28:63:e6:40:0a:67:3a:97:2f:4b:5a:2d:18: 51:51:9c:1e:da:ef:2a:29:98:e6:09:a0:77:45:59:42:8b:e4: 59:9f:98:5d:13:3a:e9:42:24:a1:38:c2:61:fc:e2:a3:97:4a: 72:a9:5a:32:bc:97:8d:2d:1d:79:2f:3d:f7:0e:47:1c:69:a3: c8:e6:4a:63:ba:92:21:b1:df:50:41:3b:0e:1e:26:78:61:8e: 87:d9:7d:8e:cf:c2:bb:37:0b:b2:c8:91:7f:7d:c9:b5:99:cd: f1:6b:a3:07:d9:88:50:de:22:d3:23:a5:53:75:e8:b6:4b:b6: 76:77:10:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3zMlQWn+anXn9Yv5pFQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTIxNTk4YjZhMjYxYWE0YzNlNjcxNDRhYzg3NjAzMzI1 M2UwYWEwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD Eyg4YmRjNWI0MjRmZmFlZTg4YjM4NmJjZmFmN2UwMTE5ODcwMDY4NzVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE5pUiVyfjtg1hTF/+JNEjIEYnLG MrXQUvcoOF5JNYR2SCunrNBhfrNYCrVNlpddz0VYWTPOXKaOaIVOq6BI1YR8TKrH ne+tV+4y7cc/zbEQUBhp51p16tUPzc+ekIv7Z4UgaTHGLVUSxL+gbZzWV64Ow7BP CFMtVVRlNpEtvDO//NK5UajUK5HXcoOsUOFKAH1XT+ICsFZqoJTAkIEnqElEdZu6 yi7ZvIFO4yzleiGBYA5RFLvly2NWnzv7c1Pwh67HAp85ktCCH12Y5mRlpu1zw8L5 YC7HBttomCPVvrkC96MUdp80xShQav8oF5yoSaT6VWcgqmc1Y5kSw+Ut/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvcW0JP+u6Is4a8+vfgEZhwBodfMB8GA1UdIwQY MBaAFDSSFZi2omGqTD5nFErIdgMyU+CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAt NDJlMDAyZGFkOWFlLzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAtNDJlMDAyZGFkOWFl LzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqAsxmjUx 5kArznbIzknv8mU/hc4C8ZEFblbxJ+w7473/tpd/3b4dknjdkMMb/b//u2bby4gG lhtNm18hQbV7/Cq1GsJp3x6/WaOWWPgl8yUYvVXVMcF0/0Itgk6TT85qhriXXa7R K4SjGq4WfIlBWSuFlT4nuHFQflzNi26OpCEi1jgoY+ZACmc6ly9LWi0YUVGcHtrv KimY5gmgd0VZQovkWZ+YXRM66UIkoTjCYfzio5dKcqlaMryXjS0deS899w5HHGmj yOZKY7qSIbHfUEE7Dh4meGGOh9l9js/CuzcLssiRf33JtZnN8WujB9mIUN4i0yOl U3Xotku2dncQqg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:10:03 2025 by rpki-client