This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft File: Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft (raw, json) Hash identifier: dRpeCDV1z471VxdDAzqIJ2tSXIoykG9tqpddVv+UNC0= Subject key identifier: 90:22:86:E8:44:B4:8E:C5:36:57:30:7A:91:55:0D:09:F5:C2:67:76 Authority key identifier: 36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C Certificate issuer: /CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c Certificate serial: 019B2EFAF9ED8FB238EDCB1CFC5F31743D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft Manifest number: 03F2 Signing time: Thu 18 Dec 2025 01:02:38 +0000 Manifest this update: Thu 18 Dec 2025 01:02:38 +0000 Manifest next update: Fri 19 Dec 2025 01:02:38 +0000 Files and hashes: 1: Kzv57mrF6D4TzpWqRm4OMZsBabg.roa (hash: H8J62lGi+SVfaohRYvudVwS5cRkvujjbuKntKUtgcEc=) 2: Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl (hash: W8WGJ6LLBmhzqfSXFkj1HQFrt/EZ8ymbWXWXeWdRwM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:fa:f9:ed:8f:b2:38:ed:cb:1c:fc:5f:31:74:3d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363cb5c6a05cdd481f304c0cd95e86d722d96d3c Validity Not Before: Dec 18 01:02:38 2025 GMT Not After : Dec 19 01:02:38 2025 GMT Subject: CN=902286e844b48ec53657307a91550d09f5c26776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:8c:53:29:ca:3d:8f:f0:26:4b:2b:02:f5: ba:09:20:d5:2e:c1:f5:61:af:e6:32:c7:81:28:00: dc:18:7e:f3:42:bb:e0:cb:b1:12:7e:60:b9:5b:da: 98:e9:02:5c:47:fc:45:21:8f:56:4d:06:42:d2:e8: c0:20:54:4e:ab:33:d1:83:d7:14:2c:13:d7:02:a4: 21:d7:a2:89:a6:7f:b5:5a:86:10:da:92:d4:ba:81: 25:34:21:90:08:f9:b0:e0:5e:e8:ab:27:b6:4e:ea: b6:65:fd:a5:f9:b7:cd:f9:ce:44:25:96:66:d0:6e: 3c:69:a5:4e:2b:1f:e1:e8:c7:67:e8:9c:a3:73:54: ea:01:9c:be:2d:66:85:c8:af:2c:23:21:32:91:f4: 24:7d:04:ed:75:59:7e:bb:f3:73:8b:00:de:b9:65: e2:b4:dc:59:d5:b9:67:b1:a4:d1:77:1a:d4:f8:d6: f8:ed:c5:89:2c:00:c0:73:a0:ee:30:cd:49:87:ae: 75:01:08:d2:3e:ad:c2:db:07:b1:a6:66:b6:19:57: e8:ad:6d:bd:66:aa:2f:39:6f:35:c1:a4:a0:c5:a6: 42:93:54:a3:5d:bf:66:57:e7:f6:2e:ef:b9:42:a8: c6:5b:3c:9f:29:43:a5:9b:5c:5f:52:c3:4c:fa:99: 99:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:22:86:E8:44:B4:8E:C5:36:57:30:7A:91:55:0D:09:F5:C2:67:76 X509v3 Authority Key Identifier: keyid:36:3C:B5:C6:A0:5C:DD:48:1F:30:4C:0C:D9:5E:86:D7:22:D9:6D:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njy1xqBc3UgfMEwM2V6G1yLZbTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/0206ff-7e87-44a6-9a56-ba3c64e14a1d/1/Njy1xqBc3UgfMEwM2V6G1yLZbTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b8:f8:f7:9a:56:e5:ad:0f:29:59:53:58:07:af:a9:de:48: 39:d3:80:c3:b1:e9:7e:1e:d3:ad:fd:2c:cc:47:dc:aa:b9:66: 4a:c0:36:50:36:6e:da:53:fe:06:6a:57:35:b4:19:d3:f1:90: 34:b9:55:7c:5d:d9:2a:2a:26:5e:80:72:78:5a:ca:af:36:52: 3a:9e:f5:49:be:57:22:30:86:c9:01:a8:8b:0f:21:ef:2f:cc: 62:5d:a3:73:bd:6a:19:f6:e6:41:25:67:1c:5c:c8:5c:67:9b: 3a:68:05:13:4b:7e:22:e4:0d:8a:0a:91:1a:75:4c:e6:ce:45: 6d:3e:37:5f:85:eb:38:84:26:c1:10:1e:c7:25:9d:e9:0b:b3: c9:bd:83:d4:40:87:21:31:5a:b4:41:5e:60:e2:2f:f0:9f:a5: bf:21:37:1b:12:27:33:2e:25:01:a4:e4:3e:ec:81:73:f1:9d: 65:f1:b4:b2:9b:24:59:5f:c1:b3:c7:3d:38:c5:77:ca:25:d6: 95:a7:68:09:6e:9a:97:4d:b1:88:2b:60:65:29:7a:f2:dd:1e: 09:57:b9:c7:f8:ff:a0:07:26:03:13:9d:c7:00:f9:47:3e:a5: cd:aa:cf:03:ab:70:2a:03:03:ea:ef:73:29:3a:4a:8a:08:a6: 9a:a2:32:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+vntj7I47csc/F8xdD1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2NiNWM2YTA1Y2RkNDgxZjMwNGMwY2Q5NWU4NmQ3MjJk OTZkM2MwHhcNMjUxMjE4MDEwMjM4WhcNMjUxMjE5MDEwMjM4WjAzMTEwLwYDVQQD Eyg5MDIyODZlODQ0YjQ4ZWM1MzY1NzMwN2E5MTU1MGQwOWY1YzI2Nzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/WMUynKPY/wJksrAvW6CSDVLsH1 Ya/mMseBKADcGH7zQrvgy7ESfmC5W9qY6QJcR/xFIY9WTQZC0ujAIFROqzPRg9cU LBPXAqQh16KJpn+1WoYQ2pLUuoElNCGQCPmw4F7oqye2Tuq2Zf2l+bfN+c5EJZZm 0G48aaVOKx/h6Mdn6Jyjc1TqAZy+LWaFyK8sIyEykfQkfQTtdVl+u/NziwDeuWXi tNxZ1blnsaTRdxrU+Nb47cWJLADAc6DuMM1Jh651AQjSPq3C2wexpma2GVforW29 ZqovOW81waSgxaZCk1SjXb9mV+f2Lu+5QqjGWzyfKUOlm1xfUsNM+pmZ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAihuhEtI7FNlcwepFVDQn1wmd2MB8GA1UdIwQY MBaAFDY8tcagXN1IHzBMDNlehtci2W08MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYt YmEzYzY0ZTE0YTFkLzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8wMjA2ZmYtN2U4Ny00NGE2LTlhNTYtYmEzYzY0ZTE0YTFk LzEvTmp5MXhxQmMzVWdmTUV3TTJWNkcxeUxaYlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqrj495pW 5a0PKVlTWAevqd5IOdOAw7Hpfh7Trf0szEfcqrlmSsA2UDZu2lP+BmpXNbQZ0/GQ NLlVfF3ZKiomXoByeFrKrzZSOp71Sb5XIjCGyQGoiw8h7y/MYl2jc71qGfbmQSVn HFzIXGebOmgFE0t+IuQNigqRGnVM5s5FbT43X4XrOIQmwRAexyWd6Quzyb2D1ECH ITFatEFeYOIv8J+lvyE3GxInMy4lAaTkPuyBc/GdZfG0spskWV/Bs8c9OMV3yiXW ladoCW6al02xiCtgZSl68t0eCVe5x/j/oAcmAxOdxwD5Rz6lzarPA6twKgMD6u9z KTpKigimmqIy3g== -----END CERTIFICATE-----Generated at Thu Dec 18 08:01:55 2025 by rpki-client