This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft File: NS-JGea8HvVmNIkBj8h1vjTA8kw.mft (raw, json) Hash identifier: DIYXbWcHz69kKszqFFRYEu+JWGkcZCfkP9E3ETvEnjY= Subject key identifier: 32:AD:74:64:D1:4A:21:25:6E:E0:66:FF:4E:40:FE:55:39:F7:23:FC Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c Certificate serial: 019B1916380B7FF0B7AB21BAF52CBEA61660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft Manifest number: 179A Signing time: Sat 13 Dec 2025 19:00:45 +0000 Manifest this update: Sat 13 Dec 2025 19:00:45 +0000 Manifest next update: Sun 14 Dec 2025 19:00:45 +0000 Files and hashes: 1: 5tPAApTwknAaRXxKmBtwLwGK11k.roa (hash: 8ijfuuyCQYG0KzVjWtjN0KlVGd8B1/5JOo3YUUGUm/k=) 2: LVx4HKgcWIAx396vyIJnNE4ePuI.roa (hash: rjwIawjDoeXdj1yVpjEk4qjdVOMdb4bDHb4QfVsqSaE=) 3: LfROe2I71eG6M7Z-gNeANYWPFpE.roa (hash: jYCJfZL3yCQ4hYWioDRR7adhtNmlY65zHqG2PPbV/Qo=) 4: NS-JGea8HvVmNIkBj8h1vjTA8kw.crl (hash: pQKLteS75+9kSO6GgS3PnIzqj9Gkye6NdLZ6qGhvn1w=) 5: WB5IR-rncEh5erhRHuCyer1roLg.roa (hash: xTtXPbZY0LbMC6jqC5khGuSb0ZaN44bjPSvJlY54fv0=) 6: dkDLfL12Mvt9oOTN814F8r3xyp4.roa (hash: Bf4qm+dtST2tX+x1TcvddLF9nRprjThyue/B71J9XDM=) 7: zEolHRB2AMzAHPn0pcNPX5SKSz8.roa (hash: hfJMojoDujNrnnYpdExfaP44xHymzJk56kqZMc0LOZs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:38:0b:7f:f0:b7:ab:21:ba:f5:2c:be:a6:16:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c Validity Not Before: Dec 13 19:00:45 2025 GMT Not After : Dec 14 19:00:45 2025 GMT Subject: CN=32ad7464d14a21256ee066ff4e40fe5539f723fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:17:2e:bf:a8:ff:7d:4b:c2:73:44:a9:4a:6a: 0a:66:e0:33:40:b2:b2:72:3d:ad:27:b8:53:be:f7: 5f:f6:9b:9d:33:82:89:b4:3a:03:67:a5:e6:0c:0d: d1:65:ba:e3:7a:9b:1b:27:d2:d5:b6:f1:7b:39:7b: f8:bf:96:92:7a:83:32:f7:c5:0b:54:39:77:dc:28: 3a:d6:ba:77:e8:01:67:26:e2:de:73:17:0e:da:64: 7e:8f:53:2f:d0:f7:1f:0a:03:f6:96:70:eb:9c:a1: cb:72:93:c7:09:0f:e6:8a:9b:92:d9:af:5c:4b:b8: 8b:d6:53:2f:64:b0:23:ae:95:b8:b0:b8:48:ff:ed: 9e:12:e7:7d:a4:4c:0d:cb:ae:f7:fe:d8:4f:43:c6: 7b:e5:d5:b0:3b:10:d3:71:fc:ef:c6:6e:cf:fa:51: a5:01:a4:34:b7:56:9a:80:4d:d9:a1:33:b5:a8:4f: 86:44:fe:80:98:bf:9d:d8:dd:4f:5a:f2:76:a8:93: 4d:7f:a9:35:ff:1f:41:1e:43:90:64:ed:83:68:e2: a3:2f:99:3d:3d:b0:8a:83:1f:91:6c:fe:33:5b:2f: 2c:91:1f:62:4b:ab:65:37:19:53:c9:f6:a4:14:8d: 41:5a:0e:9c:0c:6d:d7:d5:c8:12:9c:ff:5a:bf:a9: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AD:74:64:D1:4A:21:25:6E:E0:66:FF:4E:40:FE:55:39:F7:23:FC X509v3 Authority Key Identifier: keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3b:c9:8f:9b:48:26:4c:94:30:73:20:c8:4d:e2:7d:e7:c2: 0f:98:ec:41:68:34:64:89:7f:fc:6e:53:9c:d7:d5:f2:b3:29: 69:b7:d1:21:9a:e3:8a:84:5b:61:80:c2:88:8b:5d:b9:4b:7f: ee:e9:29:03:7c:88:e8:55:bb:dc:f3:23:85:84:3d:86:77:48: ed:ca:75:c0:fb:8b:37:ff:13:ee:c7:0f:d2:1a:e2:7e:a8:13: b4:48:2c:1e:0a:66:4c:52:82:8b:50:41:1e:17:bf:10:d5:99: 3e:e3:89:10:2c:17:7a:41:04:98:53:bb:46:43:7c:1b:27:62: cb:dd:11:8b:f5:0c:41:68:5e:c7:6a:b0:13:70:85:15:d7:26: fd:9b:45:d1:4f:3e:dc:f3:6a:7e:f9:e1:54:7a:9f:3c:e3:be: d6:73:b8:9c:3a:97:1b:f8:b7:d2:30:77:49:68:18:c0:be:7a: 52:4d:25:a6:52:08:1f:2b:67:9a:04:bf:27:bc:30:e9:da:06: ae:37:06:12:5b:77:54:46:4d:04:ee:00:f9:22:23:51:9e:a9: 70:a1:7d:39:ee:1d:65:17:85:7c:99:91:b9:18:5b:cb:01:ac: 10:01:e3:c3:c2:83:44:b2:d9:83:27:3c:c6:86:41:51:55:a3: 7a:d5:6a:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFjgLf/C3qyG69Sy+phZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj MGYyNGMwHhcNMjUxMjEzMTkwMDQ1WhcNMjUxMjE0MTkwMDQ1WjAzMTEwLwYDVQQD EygzMmFkNzQ2NGQxNGEyMTI1NmVlMDY2ZmY0ZTQwZmU1NTM5ZjcyM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRcuv6j/fUvCc0SpSmoKZuAzQLKy cj2tJ7hTvvdf9pudM4KJtDoDZ6XmDA3RZbrjepsbJ9LVtvF7OXv4v5aSeoMy98UL VDl33Cg61rp36AFnJuLecxcO2mR+j1Mv0PcfCgP2lnDrnKHLcpPHCQ/mipuS2a9c S7iL1lMvZLAjrpW4sLhI/+2eEud9pEwNy673/thPQ8Z75dWwOxDTcfzvxm7P+lGl AaQ0t1aagE3ZoTO1qE+GRP6AmL+d2N1PWvJ2qJNNf6k1/x9BHkOQZO2DaOKjL5k9 PbCKgx+RbP4zWy8skR9iS6tlNxlTyfakFI1BWg6cDG3X1cgSnP9av6l28wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKtdGTRSiElbuBm/05A/lU59yP8MB8GA1UdIwQY MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt ZTNmY2IyM2UzNDM4LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4 LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEDvJj5tI JkyUMHMgyE3ifefCD5jsQWg0ZIl//G5TnNfV8rMpabfRIZrjioRbYYDCiItduUt/ 7ukpA3yI6FW73PMjhYQ9hndI7cp1wPuLN/8T7scP0hrifqgTtEgsHgpmTFKCi1BB Hhe/ENWZPuOJECwXekEEmFO7RkN8Gydiy90Ri/UMQWhex2qwE3CFFdcm/ZtF0U8+ 3PNqfvnhVHqfPOO+1nO4nDqXG/i30jB3SWgYwL56Uk0lplIIHytnmgS/J7ww6doG rjcGElt3VEZNBO4A+SIjUZ6pcKF9Oe4dZReFfJmRuRhbywGsEAHjw8KDRLLZgyc8 xoZBUVWjetVq7Q== -----END CERTIFICATE-----Generated at Sun Dec 14 01:02:08 2025 by rpki-client