This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json) Hash identifier: Py2pV6VxvGLScbIw2g31zXujDLN3OBv4YDsUy1w1AII= Subject key identifier: 9E:D8:7B:04:D1:CC:7B:A3:C6:42:A7:55:17:CC:9D:5C:DD:26:B2:0F Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3 Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3 Certificate serial: 019B334402CD49FC87025C308C99388ED0E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:00:53 +0000 Manifest this update: Thu 18 Dec 2025 21:00:53 +0000 Manifest next update: Fri 19 Dec 2025 21:00:53 +0000 Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: RQeDi1it/PGR+WRVCgDciCr7/ubp3LajM0QRTI4loI0=) 2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:02:cd:49:fc:87:02:5c:30:8c:99:38:8e:d0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3 Validity Not Before: Dec 18 21:00:53 2025 GMT Not After : Dec 19 21:00:53 2025 GMT Subject: CN=9ed87b04d1cc7ba3c642a75517cc9d5cdd26b20f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a1:c6:a6:0c:7b:3d:f8:02:e2:b2:07:2d:7b: 91:33:28:f7:4f:67:53:e4:c2:92:15:0c:2f:ee:34: ce:94:71:db:81:22:fa:4b:3e:98:a5:85:ce:2e:68: b5:71:e1:28:90:7c:64:1c:b1:8c:00:28:34:02:0f: 49:c8:6f:bc:7d:b7:14:3e:c8:ee:c6:46:c5:a1:3b: 04:bf:f0:61:8a:7d:3a:e8:fb:7a:4a:58:de:d4:3d: 87:d2:20:1a:32:eb:b1:8c:ed:0d:b9:44:42:0d:94: 5b:98:5a:db:9f:2d:92:7b:69:e8:0a:d8:7b:62:37: dc:77:b6:3b:a5:f2:52:4d:0c:84:2c:9c:11:9f:ef: a0:f0:0d:e7:de:dd:4d:3b:e6:3b:5e:13:58:aa:19: 2b:b1:12:bb:d7:f4:df:0d:42:b3:26:28:7d:f9:8a: 75:d9:01:98:9c:a3:1e:85:20:e4:7c:7e:e4:10:9c: 25:2b:90:a7:a1:21:c0:cf:d6:4c:f4:3f:74:36:b6: a5:01:30:d3:51:0e:43:89:c8:ca:4c:90:b7:7c:5b: 3d:09:fe:cb:8e:6e:09:dd:c4:5b:c4:1b:20:eb:e4: 3f:bb:3c:5d:e8:11:18:42:4c:6b:c5:fd:b0:85:83: 9c:a6:a3:60:92:65:11:10:b6:af:48:d2:90:8a:ea: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:D8:7B:04:D1:CC:7B:A3:C6:42:A7:55:17:CC:9D:5C:DD:26:B2:0F X509v3 Authority Key Identifier: keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:5b:1c:45:cb:7b:d0:18:b9:e8:49:8b:b5:91:19:30:db:a4: 8e:f2:a9:2d:85:a2:42:b1:ab:3d:42:d1:58:f3:ac:35:af:c0: 7c:84:56:6e:c8:59:4a:c4:a6:3c:84:33:13:d6:f1:8a:91:27: dd:c7:79:91:6a:fc:0d:e8:0b:fb:41:6e:b3:de:1f:54:ac:ea: af:8d:91:93:44:1d:e9:5e:64:1b:74:d2:d2:56:af:b1:ed:7d: c3:9c:c1:ec:5e:5d:d3:e8:58:6d:8f:44:ca:51:a9:6f:6f:c3: a8:dc:51:fd:a4:0b:ce:51:df:f2:5e:ad:9a:de:fb:ff:80:05: 6c:13:8d:d2:b1:a7:c8:f9:62:d1:bd:60:09:3b:36:20:cf:03: a3:73:22:2b:2f:26:6c:b8:6a:1f:38:a2:2a:77:6a:78:d1:97: b1:91:4f:1e:5b:7a:6c:84:80:15:85:71:83:c8:e2:72:27:fc: 0b:ec:93:01:cb:91:0a:0c:5c:17:11:ff:3b:39:8b:b4:91:b0: 4d:4e:a8:a5:e1:8e:73:43:9f:03:a0:4e:8f:f0:35:5e:6f:0b: 19:b0:b8:a3:70:8f:1d:51:fb:58:6e:9d:71:84:f2:61:54:b8: 67:2e:f1:ac:06:52:47:d6:0e:2e:09:5e:31:69:15:67:ba:e9: 7f:40:92:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRALNSfyHAlwwjJk4jtDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzU0OGVkNDYyODk2NjI0ODIwNGMyZmU2OTA2NWYwZDdi NTI3YTMwHhcNMjUxMjE4MjEwMDUzWhcNMjUxMjE5MjEwMDUzWjAzMTEwLwYDVQQD Eyg5ZWQ4N2IwNGQxY2M3YmEzYzY0MmE3NTUxN2NjOWQ1Y2RkMjZiMjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKHGpgx7PfgC4rIHLXuRMyj3T2dT 5MKSFQwv7jTOlHHbgSL6Sz6YpYXOLmi1ceEokHxkHLGMACg0Ag9JyG+8fbcUPsju xkbFoTsEv/Bhin066Pt6Slje1D2H0iAaMuuxjO0NuURCDZRbmFrbny2Se2noCth7 Yjfcd7Y7pfJSTQyELJwRn++g8A3n3t1NO+Y7XhNYqhkrsRK71/TfDUKzJih9+Yp1 2QGYnKMehSDkfH7kEJwlK5CnoSHAz9ZM9D90NralATDTUQ5DicjKTJC3fFs9Cf7L jm4J3cRbxBsg6+Q/uzxd6BEYQkxrxf2whYOcpqNgkmURELavSNKQiur+PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7YewTRzHujxkKnVRfMnVzdJrIPMB8GA1UdIwQY MBaAFDY1SO1GKJZiSCBML+aQZfDXtSejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2Yt OTVjNGU5NGFkMGE5LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2YtOTVjNGU5NGFkMGE5 LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1scRct7 0Bi56EmLtZEZMNukjvKpLYWiQrGrPULRWPOsNa/AfIRWbshZSsSmPIQzE9bxipEn 3cd5kWr8DegL+0Fus94fVKzqr42Rk0Qd6V5kG3TS0lavse19w5zB7F5d0+hYbY9E ylGpb2/DqNxR/aQLzlHf8l6tmt77/4AFbBON0rGnyPli0b1gCTs2IM8Do3MiKy8m bLhqHziiKndqeNGXsZFPHlt6bISAFYVxg8jicif8C+yTAcuRCgxcFxH/OzmLtJGw TU6opeGOc0OfA6BOj/A1Xm8LGbC4o3CPHVH7WG6dcYTyYVS4Zy7xrAZSR9YOLgle MWkVZ7rpf0CS+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 04:55:13 2025 by rpki-client