This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json) Hash identifier: LzI/Y4AghC95ZGtDTXwkoz6DeOtbvMhHzkQkqkXt6ac= Subject key identifier: 2E:B8:F6:67:9C:64:40:2A:F3:2B:8A:11:40:19:69:CE:F9:9B:D4:23 Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Certificate serial: 019B34FB8ABF7E219113E581708D22E8654B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft Manifest number: 1718 Signing time: Fri 19 Dec 2025 05:00:58 +0000 Manifest this update: Fri 19 Dec 2025 05:00:58 +0000 Manifest next update: Sat 20 Dec 2025 05:00:58 +0000 Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: d9Oqellyr8nwbgqWBsKjSb4a+b30+oAFJCoC4mp0ET4=) 2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:8a:bf:7e:21:91:13:e5:81:70:8d:22:e8:65:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Validity Not Before: Dec 19 05:00:58 2025 GMT Not After : Dec 20 05:00:58 2025 GMT Subject: CN=2eb8f6679c64402af32b8a11401969cef99bd423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:50:dc:6f:9f:af:21:ba:5a:57:25:8f:7e:4e: 1d:93:cb:50:e0:4f:55:2a:13:91:9a:4a:ff:30:2b: 5b:ce:f6:5a:d9:4d:1c:2d:d0:4f:3a:f1:0e:e7:34: 73:3a:f8:14:a0:e7:15:52:02:c6:8e:c7:49:00:36: ae:4b:38:a9:ea:f5:ab:13:3f:ab:d2:ac:88:1b:b4: 96:4e:29:25:6b:d2:f4:a6:34:f6:f1:37:85:94:db: 02:43:b4:35:b1:72:cf:73:d1:d9:ae:5b:b7:9d:39: 8e:cb:18:a1:27:c5:bd:5a:9a:4f:89:b8:4a:e8:a8: 7b:58:57:da:b9:c2:82:e7:4a:e1:dc:aa:ac:5a:54: 55:70:23:44:11:41:80:b3:9b:e3:12:91:1c:c3:c5: 79:dd:c9:e1:7a:cd:14:51:66:c4:d3:04:76:87:a6: 8c:f3:bf:db:af:be:65:f3:81:46:0a:ec:0d:b9:ff: 00:d2:3b:6f:01:17:67:46:4a:a4:ed:2a:29:e4:81: ec:65:1f:54:c1:88:66:74:b0:b5:85:da:9f:da:fd: bb:21:27:d6:a3:93:cc:69:f6:d9:7d:02:ef:41:e5: f9:ca:66:08:0e:79:f0:47:57:5f:ff:2c:d2:ad:55: e8:96:52:7f:3d:d0:db:5e:16:22:e0:10:83:e7:7c: d1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:B8:F6:67:9C:64:40:2A:F3:2B:8A:11:40:19:69:CE:F9:9B:D4:23 X509v3 Authority Key Identifier: keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:f1:5f:08:8c:97:51:ec:bf:39:f3:5b:68:0e:66:27:96:5c: cd:ef:26:08:8c:a3:31:ff:97:7f:68:f0:c1:cf:25:20:41:20: 50:20:03:f4:d4:c3:db:82:9a:2c:d9:a0:56:c7:d8:fe:0b:3f: 1e:b4:38:5a:a5:3c:08:8a:9b:73:07:e7:5a:ca:0b:ac:75:f9: f7:72:5c:b6:be:b4:c8:fa:e8:20:e6:89:fd:a1:d0:de:cf:c9: 63:35:51:0c:94:15:9b:b7:62:6f:e4:d6:f4:71:22:d3:ce:f6: 74:6f:16:14:18:64:8d:ea:fb:ce:55:56:4f:51:51:df:ae:d6: 34:43:64:9b:72:0f:47:c9:b9:4e:ba:a7:c8:de:d8:7e:ea:a5: 6b:aa:bb:5b:9c:8d:c7:bd:cd:41:44:1d:e5:dd:4d:b4:de:f6: 4f:93:bc:fd:21:e8:6d:d6:04:1a:f2:ce:02:85:21:c2:df:47: 52:61:77:05:ff:4b:ac:b6:29:be:28:16:ff:77:6a:22:e1:e8: bb:a6:9b:ba:c8:87:58:02:4d:bf:99:0c:5f:b1:1e:7b:24:a4: 38:b6:86:66:88:c1:56:27:6d:cb:6f:3e:0f:58:6c:cd:7d:9b: 5d:ef:72:54:d6:8d:8d:37:46:d0:ed:a4:b0:fd:77:c8:92:62: 87:8f:63:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4q/fiGRE+WBcI0i6GVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5 ZTA1ZjYwHhcNMjUxMjE5MDUwMDU4WhcNMjUxMjIwMDUwMDU4WjAzMTEwLwYDVQQD EygyZWI4ZjY2NzljNjQ0MDJhZjMyYjhhMTE0MDE5NjljZWY5OWJkNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlDcb5+vIbpaVyWPfk4dk8tQ4E9V KhORmkr/MCtbzvZa2U0cLdBPOvEO5zRzOvgUoOcVUgLGjsdJADauSzip6vWrEz+r 0qyIG7SWTikla9L0pjT28TeFlNsCQ7Q1sXLPc9HZrlu3nTmOyxihJ8W9WppPibhK 6Kh7WFfaucKC50rh3KqsWlRVcCNEEUGAs5vjEpEcw8V53cnhes0UUWbE0wR2h6aM 87/br75l84FGCuwNuf8A0jtvARdnRkqk7Sop5IHsZR9UwYhmdLC1hdqf2v27ISfW o5PMafbZfQLvQeX5ymYIDnnwR1df/yzSrVXollJ/PdDbXhYi4BCD53zRUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC649mecZEAq8yuKEUAZac75m9QjMB8GA1UdIwQY MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4 LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/FfCIyX Uey/OfNbaA5mJ5Zcze8mCIyjMf+Xf2jwwc8lIEEgUCAD9NTD24KaLNmgVsfY/gs/ HrQ4WqU8CIqbcwfnWsoLrHX593Jctr60yProIOaJ/aHQ3s/JYzVRDJQVm7dib+TW 9HEi0872dG8WFBhkjer7zlVWT1FR367WNENkm3IPR8m5TrqnyN7Yfuqla6q7W5yN x73NQUQd5d1NtN72T5O8/SHobdYEGvLOAoUhwt9HUmF3Bf9LrLYpvigW/3dqIuHo u6abusiHWAJNv5kMX7EeeySkOLaGZojBVidty28+D1hszX2bXe9yVNaNjTdG0O2k sP13yJJih49jAg== -----END CERTIFICATE-----Generated at Fri Dec 19 08:10:35 2025 by rpki-client