This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json) Hash identifier: AdILNkJ08SEYoxtLOdtn/0ucYgY+g4N6sXlyh5exIyE= Subject key identifier: 74:67:3E:E7:19:B9:06:C6:42:95:75:C7:57:25:65:08:85:5E:18:97 Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Certificate serial: 019B35D6F7DDE2FD2F55DD935B635AAEC577 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft Manifest number: 097C Signing time: Fri 19 Dec 2025 09:00:39 +0000 Manifest this update: Fri 19 Dec 2025 09:00:39 +0000 Manifest next update: Sat 20 Dec 2025 09:00:39 +0000 Files and hashes: 1: 1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa (hash: dCtfEERTL+DVPDzOeI+W+YlER3CfocSmb5i2ct7B3hg=) 2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: +Z+VsCYJBwNVWipD4ZKg+shm8LQqD94KeSwbg0MGXpU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:f7:dd:e2:fd:2f:55:dd:93:5b:63:5a:ae:c5:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Validity Not Before: Dec 19 09:00:39 2025 GMT Not After : Dec 20 09:00:39 2025 GMT Subject: CN=74673ee719b906c6429575c757256508855e1897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b1:b3:88:42:57:7b:85:67:96:45:f6:fb:d6: 71:b3:8a:65:6d:f7:d9:da:46:7f:99:0e:bd:7c:d2: a0:15:05:a1:b4:65:ce:f9:be:49:85:3d:2c:33:38: b9:c6:27:aa:d1:ea:f8:bc:71:f4:57:18:ba:b2:64: 88:5e:4c:3b:ef:20:6e:b1:4d:df:99:89:66:dd:f8: ff:19:41:67:72:7d:12:8b:cc:db:a7:b9:06:c9:0b: e0:8b:d0:51:2e:13:e5:6d:77:86:eb:97:68:55:34: c2:4a:91:26:80:dc:90:3d:0f:1c:bd:60:61:ba:06: b0:f0:d5:84:34:40:eb:51:f1:b6:e1:34:19:76:9c: 22:9c:13:34:2d:61:f5:21:65:9d:00:a5:9b:a2:90: b8:be:ef:f7:d6:16:e9:ac:dd:81:a0:ba:d9:a1:45: 06:fc:cf:3b:96:a0:fc:64:f1:32:38:f9:0c:99:c1: 64:0a:e7:02:36:c5:8e:00:b7:cb:99:d5:00:10:5d: b6:38:1d:a9:b0:f6:52:c7:d3:bd:d5:4b:63:71:e0: 99:09:75:51:c1:f0:00:3e:34:02:c7:94:2e:0c:b3: 3d:ce:4e:f6:fe:33:e4:3d:4e:bb:93:86:17:77:41: de:4d:28:b9:64:08:90:81:1c:b9:ee:5d:e7:f5:5a: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:67:3E:E7:19:B9:06:C6:42:95:75:C7:57:25:65:08:85:5E:18:97 X509v3 Authority Key Identifier: keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:80:91:50:64:81:e1:b2:b7:3b:ea:83:fb:8e:05:63:0f:c0: f6:a6:50:99:9c:a4:58:4d:12:39:c2:95:df:fe:86:52:fc:ff: c8:5f:92:ca:cb:9e:5c:76:94:bd:6b:35:27:66:bf:e9:fd:32: fa:d9:9e:f0:04:b7:97:c1:5e:ac:2a:0d:cb:9b:57:e8:04:b0: 9f:b1:3e:ad:7d:cb:63:0d:bc:69:40:7e:be:b6:43:3d:cb:b0: 4c:29:01:f1:ae:eb:f4:5f:8d:bd:4c:4c:c9:78:9c:7f:8f:84: a9:81:75:83:f7:a6:73:0d:10:32:f6:cc:ba:b4:c0:77:50:8f: 2b:f2:7e:30:f7:15:8b:91:a3:67:ae:08:9b:53:60:2f:6d:4a: 8f:25:38:bf:0b:cb:09:6e:b2:2c:a4:69:d6:aa:c2:f4:1b:fd: f2:67:d9:f4:18:21:d2:4b:57:ce:1d:c1:8e:7c:b5:6e:fe:0f: c3:21:95:76:c9:4b:e0:45:c8:99:90:c6:43:7e:5b:2c:f8:2b: be:3a:fa:bd:55:57:01:fe:19:db:b4:0c:bb:ca:11:d3:94:ab: ce:26:f2:85:a0:4c:2d:81:37:10:05:45:6c:f8:60:17:71:58: d0:d4:c5:e4:28:cf:62:a6:73:fa:3e:b3:98:90:3a:dc:31:52: 66:bd:57:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vfd4v0vVd2TW2NarsV3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj YzI4NGEwHhcNMjUxMjE5MDkwMDM5WhcNMjUxMjIwMDkwMDM5WjAzMTEwLwYDVQQD Eyg3NDY3M2VlNzE5YjkwNmM2NDI5NTc1Yzc1NzI1NjUwODg1NWUxODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLGziEJXe4VnlkX2+9Zxs4plbffZ 2kZ/mQ69fNKgFQWhtGXO+b5JhT0sMzi5xieq0er4vHH0Vxi6smSIXkw77yBusU3f mYlm3fj/GUFncn0Si8zbp7kGyQvgi9BRLhPlbXeG65doVTTCSpEmgNyQPQ8cvWBh ugaw8NWENEDrUfG24TQZdpwinBM0LWH1IWWdAKWbopC4vu/31hbprN2BoLrZoUUG /M87lqD8ZPEyOPkMmcFkCucCNsWOALfLmdUAEF22OB2psPZSx9O91UtjceCZCXVR wfAAPjQCx5QuDLM9zk72/jPkPU67k4YXd0HeTSi5ZAiQgRy57l3n9VpgBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRnPucZuQbGQpV1x1clZQiFXhiXMB8GA1UdIwQY MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt ZGQ1ZmZkNTMxNTcxLzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4CRUGSB 4bK3O+qD+44FYw/A9qZQmZykWE0SOcKV3/6GUvz/yF+SysueXHaUvWs1J2a/6f0y +tme8AS3l8FerCoNy5tX6ASwn7E+rX3LYw28aUB+vrZDPcuwTCkB8a7r9F+NvUxM yXicf4+EqYF1g/emcw0QMvbMurTAd1CPK/J+MPcVi5GjZ64Im1NgL21KjyU4vwvL CW6yLKRp1qrC9Bv98mfZ9Bgh0ktXzh3Bjny1bv4PwyGVdslL4EXImZDGQ35bLPgr vjr6vVVXAf4Z27QMu8oR05SrzibyhaBMLYE3EAVFbPhgF3FY0NTF5CjPYqZz+j6z mJA63DFSZr1XNg== -----END CERTIFICATE-----Generated at Fri Dec 19 15:50:33 2025 by rpki-client