This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft File: njlEmOR5hynOmVC-NLRZqe8p9eg.mft (raw, json) Hash identifier: RZX9CDuIL2G+qTqKnbjbSSXUaxCXES7N6215aWfObo8= Subject key identifier: 38:FA:D6:57:E4:64:B9:76:90:AC:6F:7F:81:CB:B8:B3:6F:68:54:55 Authority key identifier: 9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8 Certificate issuer: /CN=9e394498e4798729ce9950be34b459a9ef29f5e8 Certificate serial: 019B45131C7C6DA38BAC57A0B5A6A07D333B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft Manifest number: 10A4 Signing time: Mon 22 Dec 2025 08:00:38 +0000 Manifest this update: Mon 22 Dec 2025 08:00:38 +0000 Manifest next update: Tue 23 Dec 2025 08:00:38 +0000 Files and hashes: 1: FlCa3OSW-ZoGEi5KBDwGmjiKfj4.roa (hash: 0As+wmiLAqptvOGMh9AlarJvbJelhLhuobR6hbbvj/M=) 2: njlEmOR5hynOmVC-NLRZqe8p9eg.crl (hash: rl1oF4L7C2jcsCEiga337GXYns7ggdWiR/cTBzOOQxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:1c:7c:6d:a3:8b:ac:57:a0:b5:a6:a0:7d:33:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e394498e4798729ce9950be34b459a9ef29f5e8 Validity Not Before: Dec 22 08:00:38 2025 GMT Not After : Dec 23 08:00:38 2025 GMT Subject: CN=38fad657e464b97690ac6f7f81cbb8b36f685455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:0e:71:54:7a:e8:57:7b:73:d8:b1:77:cc: 56:46:d6:07:f8:7e:90:ef:e3:25:b5:f9:4f:b2:2b: 5d:b0:50:4d:79:01:90:54:2c:a6:40:b5:a9:c8:08: 9d:3d:da:84:81:fe:b6:1b:19:64:98:71:1d:b4:b8: b2:3f:f7:84:83:6c:b2:bc:da:2f:11:6e:cd:dc:0f: 4f:90:93:f2:25:cc:27:a1:ee:03:64:76:b9:60:66: a4:7f:63:24:60:67:d3:a3:b3:e0:a2:87:f7:2a:1c: 29:90:e0:de:fe:6e:8b:07:29:09:93:7e:69:bc:a8: 69:14:10:4f:94:db:08:fd:ca:da:bd:2a:1f:9f:28: d9:10:7b:97:5e:b6:95:e4:33:1d:27:69:6a:2f:bf: a6:18:42:8d:a8:a1:b8:a0:99:fb:22:8e:52:eb:89: 70:a6:63:a4:9a:9b:a7:34:54:03:29:84:a0:20:4d: e1:0f:4b:2f:31:11:c4:ef:16:0f:69:45:c0:46:2f: 73:0d:43:9e:b6:3d:ff:1f:61:0a:1a:02:a8:16:98: 8d:61:f3:fb:79:bd:55:f3:ba:58:b0:af:9b:6f:74: 2f:a6:f4:84:2e:be:53:af:41:01:43:3e:61:de:46: 79:c8:ce:e4:70:3c:10:4f:72:b4:78:52:2c:d6:1b: f6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:FA:D6:57:E4:64:B9:76:90:AC:6F:7F:81:CB:B8:B3:6F:68:54:55 X509v3 Authority Key Identifier: keyid:9E:39:44:98:E4:79:87:29:CE:99:50:BE:34:B4:59:A9:EF:29:F5:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njlEmOR5hynOmVC-NLRZqe8p9eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2516e2-9e22-4e06-8a44-fa5ef4f53fbb/1/njlEmOR5hynOmVC-NLRZqe8p9eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d5:44:f3:2b:84:46:40:bf:bb:5a:43:e2:a7:ed:0d:e2:e8: f1:bb:bf:4d:9e:27:9d:aa:ba:56:54:60:58:87:26:77:86:2c: 98:7d:a4:71:33:2c:3a:fe:f2:27:75:13:85:89:d4:cb:a4:28: 15:85:6d:30:46:0a:70:22:30:5d:a4:d7:a1:24:a6:d5:d3:3f: d0:8a:eb:5a:ea:63:b1:92:e7:90:e7:1a:ab:af:35:71:df:3b: 68:22:a8:87:4f:e7:80:85:99:4c:4c:16:33:17:40:4f:fc:db: 24:56:6f:88:0c:9c:b6:6e:00:2f:f9:30:c1:a5:d2:e4:0b:a8: be:48:36:e5:1a:f6:7b:9e:d0:d8:a2:7a:33:52:5d:82:96:1f: 15:6b:22:d7:61:69:d6:33:bd:a3:07:bc:6a:fc:ab:63:39:9e: 19:1e:5b:53:8f:5e:a4:7c:06:f8:02:72:c4:2b:e3:ae:46:af: 76:68:e2:16:a1:b9:eb:0b:6c:99:df:fb:65:32:c6:74:f9:56: 76:9b:11:08:30:57:1b:c5:b8:af:62:44:62:87:f9:6e:d4:b4: 31:1b:dd:e4:79:81:43:6c:5d:b1:93:35:a9:33:1e:49:58:20: c2:85:a7:66:dc:77:a7:54:10:a0:90:98:c5:7a:b6:d9:54:4c: f2:1c:85:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFExx8baOLrFegtaagfTM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzk0NDk4ZTQ3OTg3MjljZTk5NTBiZTM0YjQ1OWE5ZWYy OWY1ZTgwHhcNMjUxMjIyMDgwMDM4WhcNMjUxMjIzMDgwMDM4WjAzMTEwLwYDVQQD EygzOGZhZDY1N2U0NjRiOTc2OTBhYzZmN2Y4MWNiYjhiMzZmNjg1NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UEOcVR66Fd7c9ixd8xWRtYH+H6Q 7+MltflPsitdsFBNeQGQVCymQLWpyAidPdqEgf62GxlkmHEdtLiyP/eEg2yyvNov EW7N3A9PkJPyJcwnoe4DZHa5YGakf2MkYGfTo7Pgoof3KhwpkODe/m6LBykJk35p vKhpFBBPlNsI/cravSofnyjZEHuXXraV5DMdJ2lqL7+mGEKNqKG4oJn7Io5S64lw pmOkmpunNFQDKYSgIE3hD0svMRHE7xYPaUXARi9zDUOetj3/H2EKGgKoFpiNYfP7 eb1V87pYsK+bb3QvpvSELr5Tr0EBQz5h3kZ5yM7kcDwQT3K0eFIs1hv2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDj61lfkZLl2kKxvf4HLuLNvaFRVMB8GA1UdIwQY MBaAFJ45RJjkeYcpzplQvjS0WanvKfXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQt ZmE1ZWY0ZjUzZmJiLzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8yNTE2ZTItOWUyMi00ZTA2LThhNDQtZmE1ZWY0ZjUzZmJi LzEvbmpsRW1PUjVoeW5PbVZDLU5MUlpxZThwOWVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9VE8yuE RkC/u1pD4qftDeLo8bu/TZ4nnaq6VlRgWIcmd4YsmH2kcTMsOv7yJ3UThYnUy6Qo FYVtMEYKcCIwXaTXoSSm1dM/0IrrWupjsZLnkOcaq681cd87aCKoh0/ngIWZTEwW MxdAT/zbJFZviAyctm4AL/kwwaXS5Auovkg25Rr2e57Q2KJ6M1JdgpYfFWsi12Fp 1jO9owe8avyrYzmeGR5bU49epHwG+AJyxCvjrkavdmjiFqG56wtsmd/7ZTLGdPlW dpsRCDBXG8W4r2JEYof5btS0MRvd5HmBQ2xdsZM1qTMeSVggwoWnZtx3p1QQoJCY xXq22VRM8hyFPg== -----END CERTIFICATE-----Generated at Mon Dec 22 10:16:53 2025 by rpki-client