This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json) Hash identifier: QZx5/ovja/ZgGC3jQyr97wOe7tbe9sPyi8s7Z+tGI+o= Subject key identifier: CF:3E:F1:BB:72:42:61:50:00:24:C8:C5:FA:AA:7A:C4:A1:2A:B0:7E Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396 Certificate serial: 019B7835E6A60C3CD49D387A63E3DACCAD9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft Manifest number: 04BA Signing time: Thu 01 Jan 2026 06:19:16 +0000 Manifest this update: Thu 01 Jan 2026 06:19:16 +0000 Manifest next update: Fri 02 Jan 2026 06:19:16 +0000 Files and hashes: 1: 23D13zVh0lxnV6wqT9G8OQpIzbk.roa (hash: 9tKZpVV4QTGwDjEBmfC0cE/pR6rIK/y06jjpKw6H3j4=) 2: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: bNgXYcajGZkiHnCF3tWrYLSK9ATOuZrniTdlHtlLJhY=) 3: Oq5-e3AMF4jP9HrvKm3gSfMs37U.roa (hash: CeqGb9Az/dSfLH7D9mfttr9Apk+Dk9lZZYK56kmAN+U=) 4: lcT96ZzrgNrjwAQX6YLJUQASpVs.roa (hash: +FyKaAXENUvPnj9qcKJs6oAPI3YhDnrLqCeTNqT1FEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:e6:a6:0c:3c:d4:9d:38:7a:63:e3:da:cc:ad:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396 Validity Not Before: Jan 1 06:19:16 2026 GMT Not After : Jan 2 06:19:16 2026 GMT Subject: CN=cf3ef1bb724261500024c8c5faaa7ac4a12ab07e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9d:be:1a:d0:46:08:26:aa:af:68:a3:22:b9: 48:a1:89:94:72:4a:78:1f:38:8b:79:d3:c6:dd:98: 14:73:7a:76:af:43:1d:03:70:e5:ab:36:bb:78:58: 6a:58:4d:d4:77:2b:86:d1:bc:00:76:2e:3d:71:dd: 18:60:44:bd:54:39:c5:4d:a8:5f:f5:4d:f0:72:41: bc:09:76:a5:5c:5f:64:56:eb:9c:0a:dd:7d:62:c7: ff:b8:f5:11:4f:e1:7c:f4:c6:75:8f:0e:47:7b:bf: b2:8c:e3:33:d5:6b:c8:64:13:31:d1:c5:08:49:49: d6:54:2d:57:c3:72:73:ab:49:df:2e:90:69:fa:54: 49:a1:ac:a7:2a:4d:1f:2e:e8:68:43:0d:d0:6a:ae: a9:11:4e:91:26:1b:3e:3a:1b:38:2f:c4:07:ed:e9: e2:e7:fa:5c:34:f7:e7:ea:57:c2:c5:d5:52:a0:0a: 1d:2c:5e:e8:ab:43:0d:f9:3f:e9:96:df:39:be:71: 7e:9b:42:fd:d9:ba:0d:9c:03:be:d5:6f:1d:1e:13: 78:93:42:3c:a1:d2:81:b9:d9:64:7b:da:8f:19:89: 23:de:6b:e7:fc:b3:94:1f:79:e3:6a:b4:f2:d3:5e: 7a:36:4d:03:5e:6a:0a:70:62:f9:53:59:2e:2c:73: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:3E:F1:BB:72:42:61:50:00:24:C8:C5:FA:AA:7A:C4:A1:2A:B0:7E X509v3 Authority Key Identifier: keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3b:b5:c9:e5:fd:55:37:8d:6d:91:e3:0d:f1:cc:e0:5c:0c: a8:7e:06:53:44:26:a2:fd:49:63:bf:25:47:05:00:77:a5:dd: 32:6d:75:15:d9:ec:bd:8d:57:a2:7e:c9:70:68:f6:61:2c:15: 5c:72:8c:78:8b:30:5e:c0:97:8c:24:48:fc:ca:0c:5f:2f:cf: 6d:c9:47:31:40:0d:dc:5d:ea:54:85:4f:db:78:b3:cb:af:db: 2e:b5:52:4b:a0:81:18:51:09:26:a5:ce:1f:68:93:7b:63:fb: 70:e6:7e:90:93:74:37:81:ec:7b:cb:dc:52:a2:8a:aa:c7:c0: 94:32:86:c8:ad:f4:25:5f:d0:16:00:c4:09:ee:21:e3:e5:29: 74:d2:e7:1c:de:2e:f8:a7:92:fa:14:aa:c1:4f:20:3e:41:56: 8e:2c:2a:38:eb:f5:5f:5f:7c:49:e3:ce:ad:4b:8f:df:17:7b: 61:7a:a3:d2:60:ac:28:02:4b:33:64:73:a0:a4:04:59:5e:99: 7c:dd:23:51:7c:27:9e:4c:84:7e:f3:dd:cd:de:22:d1:29:6e: 79:69:9b:97:50:ef:bd:27:60:56:34:ea:e8:75:30:b7:df:ec: ac:0d:2e:1d:92:f6:35:e4:56:d3:4e:56:a7:a7:2b:01:87:f5: ab:9f:83:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4NeamDDzUnTh6Y+PazK2dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi NTEzOTYwHhcNMjYwMTAxMDYxOTE2WhcNMjYwMTAyMDYxOTE2WjAzMTEwLwYDVQQD EyhjZjNlZjFiYjcyNDI2MTUwMDAyNGM4YzVmYWFhN2FjNGExMmFiMDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA552+GtBGCCaqr2ijIrlIoYmUckp4 HziLedPG3ZgUc3p2r0MdA3Dlqza7eFhqWE3UdyuG0bwAdi49cd0YYES9VDnFTahf 9U3wckG8CXalXF9kVuucCt19Ysf/uPURT+F89MZ1jw5He7+yjOMz1WvIZBMx0cUI SUnWVC1Xw3Jzq0nfLpBp+lRJoaynKk0fLuhoQw3Qaq6pEU6RJhs+Ohs4L8QH7eni 5/pcNPfn6lfCxdVSoAodLF7oq0MN+T/plt85vnF+m0L92boNnAO+1W8dHhN4k0I8 odKBudlke9qPGYkj3mvn/LOUH3njarTy0156Nk0DXmoKcGL5U1kuLHNjlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8+8btyQmFQACTIxfqqesShKrB+MB8GA1UdIwQY MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt ZmQ4MTQ0NTVhODY4LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4 LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGTu1yeX9 VTeNbZHjDfHM4FwMqH4GU0Qmov1JY78lRwUAd6XdMm11FdnsvY1Xon7JcGj2YSwV XHKMeIswXsCXjCRI/MoMXy/PbclHMUAN3F3qVIVP23izy6/bLrVSS6CBGFEJJqXO H2iTe2P7cOZ+kJN0N4Hse8vcUqKKqsfAlDKGyK30JV/QFgDECe4h4+UpdNLnHN4u +KeS+hSqwU8gPkFWjiwqOOv1X198SePOrUuP3xd7YXqj0mCsKAJLM2RzoKQEWV6Z fN0jUXwnnkyEfvPdzd4i0SlueWmbl1DvvSdgVjTq6HUwt9/srA0uHZL2NeRW005W p6crAYf1q5+DGQ== -----END CERTIFICATE-----Generated at Thu Jan 1 08:44:45 2026 by rpki-client