This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json) Hash identifier: 1HwPUPKeZwFFCKxojzYccKwTh4rUnWY/o+Pdl09i8RE= Subject key identifier: 64:C8:38:AF:49:80:FE:A0:70:FE:64:B7:5A:22:C9:3D:96:BB:C2:9F Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86 Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86 Certificate serial: 019B49950907E831BB96CA030F5DEBA7846F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft Manifest number: 108D Signing time: Tue 23 Dec 2025 05:01:02 +0000 Manifest this update: Tue 23 Dec 2025 05:01:02 +0000 Manifest next update: Wed 24 Dec 2025 05:01:02 +0000 Files and hashes: 1: Symg0jAPVS-ti1ruCDzymyj_CR0.roa (hash: GUIXVLB8gdm1fu+e7gBbFfA+4MoEzWz7SkljoSB1b/4=) 2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: xGjeShPymDH9UV4AVxBxScX5+fS8j638CjxADoXyCq8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:95:09:07:e8:31:bb:96:ca:03:0f:5d:eb:a7:84:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86 Validity Not Before: Dec 23 05:01:02 2025 GMT Not After : Dec 24 05:01:02 2025 GMT Subject: CN=64c838af4980fea070fe64b75a22c93d96bbc29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:03:71:0e:b4:ae:b9:0f:25:4b:99:17:e5:a1: f8:6b:96:c2:8a:a9:8c:57:9f:03:d1:11:d9:78:03: 6a:0b:ba:c2:51:38:d6:30:7b:ed:8b:a4:db:96:9a: ae:ff:f6:48:f9:cb:3f:30:46:16:25:52:1f:47:96: 23:1a:92:68:f7:22:46:d2:9e:c3:0c:da:ed:2d:50: 37:40:6b:b4:70:25:da:0b:48:3d:b6:ba:9f:4d:5c: 6b:14:53:45:68:8a:97:55:70:25:6c:bf:0e:8e:af: 8b:5a:6a:87:18:b5:9d:fa:8b:37:af:48:83:6c:27: 71:3b:98:df:a9:3b:5d:ef:2c:11:74:69:97:99:80: 16:43:e4:03:22:42:d9:54:2b:30:65:d1:2f:01:7d: 2b:e4:9c:7e:0f:dc:95:60:93:63:d7:02:c5:1a:dc: 54:de:bd:d3:4b:a6:a8:48:12:22:08:d6:16:d4:2e: ec:97:f7:a0:f2:a8:67:c4:cd:d4:f0:8f:af:ac:4f: c9:0e:22:d8:34:dc:c7:d9:56:be:09:c6:b5:e4:51: 48:fc:93:48:1d:aa:51:08:4b:be:1b:f0:36:22:40: 65:f7:98:b8:1b:14:b1:8a:99:c8:a7:94:48:53:b6: 01:8c:53:cc:03:6f:3c:2a:4e:8b:b8:70:f1:a7:16: 85:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C8:38:AF:49:80:FE:A0:70:FE:64:B7:5A:22:C9:3D:96:BB:C2:9F X509v3 Authority Key Identifier: keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:71:0c:36:79:52:33:78:48:44:8e:1a:8b:a0:10:0a:89:2f: 20:f5:35:57:28:d2:c9:5b:76:17:fe:11:49:61:a4:60:1d:97: 2a:ac:81:0c:a0:99:6f:d3:24:30:62:33:78:cb:3e:b1:a1:89: 4c:7f:06:8a:b0:d1:b4:d9:d0:2d:20:cc:12:ec:e6:00:88:f1: d2:54:bd:99:e4:c7:d6:93:8e:20:dc:0b:30:93:6b:86:d4:bf: de:c8:24:0e:e5:bf:9e:b1:19:9f:06:13:e1:1e:64:ba:2e:78: c6:41:00:0f:5f:ff:67:e7:0e:e6:d3:4f:f9:67:f0:26:04:9d: e6:e4:b1:36:1d:42:7f:10:98:fa:59:d1:56:a9:58:94:6e:65: 94:cf:18:6e:ac:4a:60:b7:3c:d5:78:a1:7a:88:d7:68:e6:b1: 51:ac:59:4b:67:4c:e5:01:c7:5a:70:af:0f:c0:45:f6:d1:41: 79:bd:2f:5c:a7:ab:fc:47:9a:07:f4:89:95:1a:d3:82:44:8a: 25:a0:f1:0b:c6:4c:94:8e:2f:23:2b:4d:51:5b:d9:03:d7:db: fc:07:a1:0a:f2:bb:f4:55:40:9d:f2:dc:e2:8f:7b:ec:9c:53: 92:60:f6:d0:0a:dd:d2:05:5a:86:f4:86:18:e7:90:a3:ab:04: 4e:5d:85:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlQkH6DG7lsoDD13rp4RvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2UwMGM2ZDJiMmY5OGQ1MTQ4MmU5NDNiOTc5M2Q0M2Jm M2JjODYwHhcNMjUxMjIzMDUwMTAyWhcNMjUxMjI0MDUwMTAyWjAzMTEwLwYDVQQD Eyg2NGM4MzhhZjQ5ODBmZWEwNzBmZTY0Yjc1YTIyYzkzZDk2YmJjMjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wNxDrSuuQ8lS5kX5aH4a5bCiqmM V58D0RHZeANqC7rCUTjWMHvti6Tblpqu//ZI+cs/MEYWJVIfR5YjGpJo9yJG0p7D DNrtLVA3QGu0cCXaC0g9trqfTVxrFFNFaIqXVXAlbL8Ojq+LWmqHGLWd+os3r0iD bCdxO5jfqTtd7ywRdGmXmYAWQ+QDIkLZVCswZdEvAX0r5Jx+D9yVYJNj1wLFGtxU 3r3TS6aoSBIiCNYW1C7sl/eg8qhnxM3U8I+vrE/JDiLYNNzH2Va+Cca15FFI/JNI HapRCEu+G/A2IkBl95i4GxSxipnIp5RIU7YBjFPMA288Kk6LuHDxpxaFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTIOK9JgP6gcP5kt1oiyT2Wu8KfMB8GA1UdIwQY MBaAFJ4+AMbSsvmNUUgulDuXk9Q787yGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9mZmRiNjktNjgwYS00NjVjLWE0ODkt NjZjMTQ0MjQ4MGRlLzEvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9mZmRiNjktNjgwYS00NjVjLWE0ODktNjZjMTQ0MjQ4MGRl LzEvbmo0QXh0S3ktWTFSU0M2VU81ZVQxRHZ6dklZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHEMNnlS M3hIRI4ai6AQCokvIPU1VyjSyVt2F/4RSWGkYB2XKqyBDKCZb9MkMGIzeMs+saGJ TH8GirDRtNnQLSDMEuzmAIjx0lS9meTH1pOOINwLMJNrhtS/3sgkDuW/nrEZnwYT 4R5kui54xkEAD1//Z+cO5tNP+WfwJgSd5uSxNh1CfxCY+lnRVqlYlG5llM8YbqxK YLc81XiheojXaOaxUaxZS2dM5QHHWnCvD8BF9tFBeb0vXKer/EeaB/SJlRrTgkSK JaDxC8ZMlI4vIytNUVvZA9fb/AehCvK79FVAnfLc4o977JxTkmD20Ard0gVahvSG GOeQo6sETl2Fkw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:50:57 2025 by rpki-client