This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft File: nj3BkwnmeMFIJfxyCDyh3seEP00.mft (raw, json) Hash identifier: 6NIIkBwmT0MXoAeOo5z5KprkUiQSlNTIcnrLGNSjhUs= Subject key identifier: F4:C3:B7:5F:05:7E:12:DF:63:18:C1:BE:26:65:4C:38:09:11:96:D3 Authority key identifier: 9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D Certificate issuer: /CN=9e3dc19309e678c14825fc72083ca1dec7843f4d Certificate serial: 019B1E73F29528CC902DE7A5939ED089B0C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft Manifest number: 1595 Signing time: Sun 14 Dec 2025 20:01:13 +0000 Manifest this update: Sun 14 Dec 2025 20:01:13 +0000 Manifest next update: Mon 15 Dec 2025 20:01:13 +0000 Files and hashes: 1: JbUoXDLL57xF-6BVNBln0RftcZM.roa (hash: t8EC2530fZ+9x7+BNfg3gfNISOK9q19vZC97hYMQk9g=) 2: nj3BkwnmeMFIJfxyCDyh3seEP00.crl (hash: XQGb3+31cCZyY9aSSOWWB9a8PFFeg2P/LN7Y9dK5hYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:f2:95:28:cc:90:2d:e7:a5:93:9e:d0:89:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3dc19309e678c14825fc72083ca1dec7843f4d Validity Not Before: Dec 14 20:01:13 2025 GMT Not After : Dec 15 20:01:13 2025 GMT Subject: CN=f4c3b75f057e12df6318c1be26654c38091196d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:85:1a:2f:31:69:f6:e1:fa:d0:48:3e:0b:fb: 13:2c:f3:6e:ba:6b:72:25:c4:0d:fb:6e:de:b0:fd: aa:4b:58:22:37:ba:d7:36:e7:bc:7b:1d:2e:de:ae: b5:a8:f1:33:4c:5b:ad:cd:db:eb:6d:6a:10:07:e8: 22:04:83:72:a3:f3:b2:60:fd:b1:bf:b7:32:61:d3: 4a:ff:bd:37:2f:a9:95:11:5a:52:b7:e2:30:f3:0b: 1e:1e:37:1a:cf:26:bc:28:d6:51:82:29:67:10:75: 34:00:8f:7c:05:e3:53:a5:a7:09:52:e4:3b:7e:dd: 25:be:28:f2:20:bc:d3:04:cf:49:d5:27:18:4b:8e: c6:c7:92:6e:6b:29:74:15:9c:ea:7b:11:ca:27:59: 31:a1:92:79:1c:68:f0:53:c1:a6:f7:86:74:ff:74: 05:9a:d6:91:81:a6:fa:eb:8c:e2:ad:94:e8:8c:84: 21:88:72:15:6e:2d:9c:fa:9c:8b:15:de:34:18:d2: f7:04:32:76:3b:00:e7:55:c8:72:19:11:b6:9a:89: 26:aa:ba:e7:bf:7d:9f:ee:bc:47:d3:ba:43:e5:59: 9a:f6:a1:00:7a:a2:f6:95:4c:cb:a8:79:53:d8:a4: b6:2e:ff:73:06:04:8c:70:b5:19:48:6e:d3:90:1e: 5a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C3:B7:5F:05:7E:12:DF:63:18:C1:BE:26:65:4C:38:09:11:96:D3 X509v3 Authority Key Identifier: keyid:9E:3D:C1:93:09:E6:78:C1:48:25:FC:72:08:3C:A1:DE:C7:84:3F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj3BkwnmeMFIJfxyCDyh3seEP00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/832edd-488f-44d8-810b-f7ad97c0ecbd/1/nj3BkwnmeMFIJfxyCDyh3seEP00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:98:73:9a:67:63:e5:e2:b5:0a:89:21:8c:84:32:73:06:9f: 28:a5:26:8a:dc:4f:9f:20:30:f6:bf:9b:3a:9e:ac:c4:d7:f1: c9:ab:8c:2b:d6:9c:40:26:9a:60:01:a2:b3:77:11:ff:53:48: ea:82:b6:1e:b5:a6:75:73:49:01:bd:54:53:dc:1b:30:b5:e7: 6e:4e:89:f4:1b:af:b1:a7:65:9f:a6:52:c7:51:d9:1f:03:c4: 89:08:72:67:ff:00:31:a1:64:c6:97:94:7f:9a:6f:ed:91:4d: 08:2a:a8:b5:5a:d6:46:d2:5f:06:91:fb:37:20:cd:0a:c9:85: e0:f0:d0:7a:bf:f0:54:78:7e:2a:66:a3:64:69:01:5b:7e:94: c9:99:54:93:44:05:0b:e6:96:fd:30:19:bd:aa:b1:ee:d8:4c: 04:11:4d:35:fa:00:16:b3:a0:a7:c9:09:42:42:6e:1b:aa:4a: 2e:b8:dd:61:2a:7d:da:3e:c5:31:a6:26:2f:03:b7:1d:8c:24: aa:bd:9e:5d:5f:0d:5c:0c:67:21:b9:63:7f:a0:0c:17:18:42: b0:07:54:a8:05:1d:41:c3:aa:5b:03:71:b1:a3:e6:dc:4b:7a: a7:e0:b6:07:37:9e:33:14:33:ba:20:47:5b:15:d3:50:74:39: 68:bc:72:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec/KVKMyQLeelk57QibDAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2RjMTkzMDllNjc4YzE0ODI1ZmM3MjA4M2NhMWRlYzc4 NDNmNGQwHhcNMjUxMjE0MjAwMTEzWhcNMjUxMjE1MjAwMTEzWjAzMTEwLwYDVQQD EyhmNGMzYjc1ZjA1N2UxMmRmNjMxOGMxYmUyNjY1NGMzODA5MTE5NmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoUaLzFp9uH60Eg+C/sTLPNuumty JcQN+27esP2qS1giN7rXNue8ex0u3q61qPEzTFutzdvrbWoQB+giBINyo/OyYP2x v7cyYdNK/703L6mVEVpSt+Iw8wseHjcazya8KNZRgilnEHU0AI98BeNTpacJUuQ7 ft0lvijyILzTBM9J1ScYS47Gx5Juayl0FZzqexHKJ1kxoZJ5HGjwU8Gm94Z0/3QF mtaRgab664zirZTojIQhiHIVbi2c+pyLFd40GNL3BDJ2OwDnVchyGRG2mokmqrrn v32f7rxH07pD5Vma9qEAeqL2lUzLqHlT2KS2Lv9zBgSMcLUZSG7TkB5abwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTDt18FfhLfYxjBviZlTDgJEZbTMB8GA1UdIwQY MBaAFJ49wZMJ5njBSCX8cgg8od7HhD9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmozQmt3bm1lTUZJSmZ4eUNEeWgzc2VFUDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MzJlZGQtNDg4Zi00NGQ4LTgxMGIt ZjdhZDk3YzBlY2JkLzEvbmozQmt3bm1lTUZJSmZ4eUNEeWgzc2VFUDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS84MzJlZGQtNDg4Zi00NGQ4LTgxMGItZjdhZDk3YzBlY2Jk LzEvbmozQmt3bm1lTUZJSmZ4eUNEeWgzc2VFUDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5hzmmdj 5eK1CokhjIQycwafKKUmitxPnyAw9r+bOp6sxNfxyauMK9acQCaaYAGis3cR/1NI 6oK2HrWmdXNJAb1UU9wbMLXnbk6J9Buvsadln6ZSx1HZHwPEiQhyZ/8AMaFkxpeU f5pv7ZFNCCqotVrWRtJfBpH7NyDNCsmF4PDQer/wVHh+KmajZGkBW36UyZlUk0QF C+aW/TAZvaqx7thMBBFNNfoAFrOgp8kJQkJuG6pKLrjdYSp92j7FMaYmLwO3HYwk qr2eXV8NXAxnIbljf6AMFxhCsAdUqAUdQcOqWwNxsaPm3Et6p+C2BzeeMxQzuiBH WxXTUHQ5aLxyJA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:37:14 2025 by rpki-client