This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json) Hash identifier: 9OuGdho8nLSpbjjMQ4gKDAKqfgFMeGLMYEZDHkkRB8E= Subject key identifier: 28:B9:C8:C6:0D:88:F5:7C:61:92:35:96:F8:18:DD:F4:B6:1E:30:37 Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5 Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5 Certificate serial: 019AF61C371B799AB8FC3BA3D75F08302C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft Manifest number: 13F6 Signing time: Sun 07 Dec 2025 00:00:35 +0000 Manifest this update: Sun 07 Dec 2025 00:00:35 +0000 Manifest next update: Mon 08 Dec 2025 00:00:35 +0000 Files and hashes: 1: 1-nnyIMUn3fhhCGC-D-gP0F3cqEo.roa (hash: nfA7AP7Kn3mops0IdhqDXV8NM9fBW2I0VcSnl9x1rKI=) 2: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: j3JOmlqy1VlK1jPrJp2GT2DZidI8HL3tLWUQkHNIWQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:37:1b:79:9a:b8:fc:3b:a3:d7:5f:08:30:2c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5 Validity Not Before: Dec 7 00:00:35 2025 GMT Not After : Dec 8 00:00:35 2025 GMT Subject: CN=28b9c8c60d88f57c61923596f818ddf4b61e3037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:46:db:45:a6:cd:6c:dd:a0:0c:ad:99:b8:42: c3:51:aa:f3:02:87:95:d6:57:25:c8:24:67:8c:0f: 8c:0c:40:cb:dd:5f:0e:ac:04:b4:9e:34:58:0a:c6: 8c:12:36:3c:a1:42:d4:99:aa:bf:14:ea:15:18:6c: 8e:73:bb:c9:1e:aa:b5:48:12:ce:64:d5:76:13:bc: 54:e1:89:fa:08:00:c7:7d:89:85:7e:5b:5e:61:39: ef:fb:bc:50:5a:66:1d:73:85:f9:0a:78:6e:61:ff: aa:62:13:9e:52:90:31:e5:45:5d:53:31:60:d9:d6: f0:c3:23:16:2d:4b:02:26:9e:7f:81:23:9e:a1:f0: b3:52:58:8c:ea:d7:04:64:0a:dd:a2:a6:2a:4a:c4: ab:2c:03:78:5e:df:75:50:d2:31:e6:77:16:70:51: 52:4e:a3:c7:bc:4f:e2:c6:65:e1:e5:2a:de:b8:2c: cd:18:42:31:0e:c5:35:ce:79:6b:4e:47:d9:df:87: 8c:01:a3:b5:d6:0e:56:7f:35:23:07:55:37:97:9c: a9:d8:dc:87:5f:59:d2:d6:e0:34:6d:e1:29:3d:ad: 5c:d0:96:35:aa:f0:4f:5e:2b:a3:80:00:7f:c4:84: 04:99:2c:b3:7a:e0:b5:96:5b:56:89:64:4e:f7:48: 29:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B9:C8:C6:0D:88:F5:7C:61:92:35:96:F8:18:DD:F4:B6:1E:30:37 X509v3 Authority Key Identifier: keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:15:7b:95:a8:7d:65:7f:13:10:b2:e3:85:50:37:c7:f3:b2: f4:75:ef:96:96:fa:13:ce:58:eb:dc:54:f5:74:94:e4:06:63: 45:d7:bf:ad:12:67:3e:cb:c4:ef:af:41:8c:26:a7:a7:a8:91: 46:1c:47:dd:53:1e:65:b7:46:49:b5:6e:1d:25:41:8a:2d:fd: 29:9e:d4:c6:3f:17:f1:16:69:17:d9:ba:a2:ae:fc:94:6d:0c: 2d:47:5b:95:6b:85:4f:b4:62:5c:23:17:59:70:51:10:30:11: f1:72:ba:39:10:39:cd:94:69:94:83:9e:58:c9:4b:29:cb:17: 61:87:a7:ac:db:a6:24:89:60:06:40:9d:2c:be:b1:5c:f9:9f: 68:cb:0e:47:fe:18:39:bd:ad:40:0f:f6:9b:fb:21:23:08:68: 0f:5a:ae:8a:44:e3:9d:bf:ff:41:c8:80:99:f8:89:b6:a8:b6: b8:67:8c:53:78:1f:40:2a:46:8f:99:09:44:31:4f:71:75:32: 03:1f:69:ae:94:e6:de:54:ca:21:78:ba:79:14:4d:a1:ff:82: cc:86:2c:a8:91:ff:fc:89:d7:f8:b2:e6:05:1d:1a:18:d0:69: 64:c7:a4:9b:6f:ec:52:4b:14:a3:4b:4a:57:91:dc:71:64:2f: d9:9c:b0:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDcbeZq4/Duj118IMCxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzE5YmNkNDc0N2VkNWIyMDJiYjU3OGFjYjM5MGQxNmZj NDExYTUwHhcNMjUxMjA3MDAwMDM1WhcNMjUxMjA4MDAwMDM1WjAzMTEwLwYDVQQD EygyOGI5YzhjNjBkODhmNTdjNjE5MjM1OTZmODE4ZGRmNGI2MWUzMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kbbRabNbN2gDK2ZuELDUarzAoeV 1lclyCRnjA+MDEDL3V8OrAS0njRYCsaMEjY8oULUmaq/FOoVGGyOc7vJHqq1SBLO ZNV2E7xU4Yn6CADHfYmFflteYTnv+7xQWmYdc4X5CnhuYf+qYhOeUpAx5UVdUzFg 2dbwwyMWLUsCJp5/gSOeofCzUliM6tcEZArdoqYqSsSrLAN4Xt91UNIx5ncWcFFS TqPHvE/ixmXh5SreuCzNGEIxDsU1znlrTkfZ34eMAaO11g5WfzUjB1U3l5yp2NyH X1nS1uA0beEpPa1c0JY1qvBPXiujgAB/xIQEmSyzeuC1lltWiWRO90gp8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCi5yMYNiPV8YZI1lvgY3fS2HjA3MB8GA1UdIwQY MBaAFDYxm81HR+1bICu1eKyzkNFvxBGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEt MjQ1NWY5ZjUyMTZmLzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEtMjQ1NWY5ZjUyMTZm LzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRV7lah9 ZX8TELLjhVA3x/Oy9HXvlpb6E85Y69xU9XSU5AZjRde/rRJnPsvE769BjCanp6iR RhxH3VMeZbdGSbVuHSVBii39KZ7Uxj8X8RZpF9m6oq78lG0MLUdblWuFT7RiXCMX WXBREDAR8XK6ORA5zZRplIOeWMlLKcsXYYenrNumJIlgBkCdLL6xXPmfaMsOR/4Y Ob2tQA/2m/shIwhoD1quikTjnb//QciAmfiJtqi2uGeMU3gfQCpGj5kJRDFPcXUy Ax9prpTm3lTKIXi6eRRNof+CzIYsqJH//InX+LLmBR0aGNBpZMekm2/sUksUo0tK V5HccWQv2Zywmg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:49:15 2025 by rpki-client