This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json) Hash identifier: AjUYBEruSgMi6nAUTOTvbZCDYEi5Wg47xET7LU9U0lY= Subject key identifier: 68:38:50:CC:87:07:9D:7B:24:16:BA:DE:45:A7:E8:BA:6D:7F:11:A7 Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Certificate serial: 019B085A89978BACDFB9DF8C92043DAD72F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft Manifest number: 138C Signing time: Wed 10 Dec 2025 13:01:49 +0000 Manifest this update: Wed 10 Dec 2025 13:01:49 +0000 Manifest next update: Thu 11 Dec 2025 13:01:49 +0000 Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=) 2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: bfh0z9fUAYM/IhaMwN6sAWRYxQ9ZCAkMiyi/FSw2mIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:5a:89:97:8b:ac:df:b9:df:8c:92:04:3d:ad:72:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Validity Not Before: Dec 10 13:01:49 2025 GMT Not After : Dec 11 13:01:49 2025 GMT Subject: CN=683850cc87079d7b2416bade45a7e8ba6d7f11a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e6:7f:e5:13:1e:f0:47:8c:f0:25:33:98:63: 1d:ce:e5:d3:f8:75:4b:58:d8:57:af:49:7f:cf:f1: 11:17:db:a5:76:73:8c:7a:de:3e:59:a5:00:b6:f2: c6:2f:93:9e:64:39:b6:9f:92:1d:0a:1e:71:42:ab: 76:13:70:4c:fd:6e:9b:de:87:a5:1b:ad:63:da:da: 2c:5b:f7:89:4a:33:c1:f3:04:c0:60:ce:c2:4c:fa: 64:38:29:b5:75:e5:78:04:23:1f:4e:70:6d:13:4f: 57:4d:48:a8:06:48:b2:34:20:88:99:bc:1d:ed:d4: 81:89:11:12:ca:f5:1b:cc:d7:4b:fa:2b:26:29:d7: 10:af:83:f1:09:d6:f7:d7:b5:be:1f:85:b8:cd:66: 32:f3:f4:58:cb:34:ca:bc:76:5e:3a:7e:2f:31:f4: 33:30:66:7f:df:bc:5f:18:d8:48:5c:33:85:12:39: 6d:aa:9b:54:32:fb:4c:66:62:1e:27:b0:e3:95:df: 26:0f:ae:fc:ba:23:e7:d0:8a:47:e8:6d:11:e9:f1: b6:45:20:1a:32:71:95:aa:f5:9c:69:ec:72:c4:3f: 4d:76:89:50:fa:4e:76:03:6e:e1:4f:ea:ea:26:96: 08:e7:20:ee:83:b9:c6:5e:db:38:f4:06:f9:52:a9: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:38:50:CC:87:07:9D:7B:24:16:BA:DE:45:A7:E8:BA:6D:7F:11:A7 X509v3 Authority Key Identifier: keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:42:3e:7f:ce:45:19:b5:e8:0d:24:e2:9a:81:7b:c0:8a:69: dd:bf:65:bf:09:93:ad:eb:b7:a3:49:5c:36:c3:2d:3f:b9:c4: 64:38:61:09:98:ea:27:4b:9f:fd:44:b8:6b:c1:7e:02:02:11: f8:77:2d:ed:11:24:ff:65:b2:06:2f:07:40:4e:ec:07:4e:5c: a8:10:e5:4a:46:47:58:c8:38:09:64:5e:88:c8:d3:7c:98:11: 3c:ae:ea:2a:53:d8:e4:6b:da:23:4f:18:55:e4:00:cb:7d:32: dd:4d:fd:b7:ee:69:2a:76:95:70:32:08:b7:84:c2:e7:ca:ab: a1:0a:9f:8f:61:65:ec:33:cf:31:cf:bb:5e:b0:38:cd:5a:90: bf:6c:eb:3f:4b:e1:68:3e:01:56:97:7b:89:6f:57:60:e1:62: cd:6c:50:11:cd:48:4f:1b:72:ba:0b:0c:c7:06:7b:47:f1:b8: f9:3a:87:8c:c3:c1:48:bd:67:7b:8d:01:ef:6e:57:0e:45:20: cc:03:55:fe:8d:b2:8e:32:49:a1:47:c0:e6:72:95:60:2a:85: 41:6b:91:1c:0f:e0:5e:67:61:02:a1:c0:99:1b:36:f4:c2:4e: 90:5b:14:ff:f5:32:87:9f:fa:24:77:b0:d1:73:32:44:c4:37: 67:d2:dd:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsIWomXi6zfud+MkgQ9rXLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj ZWJjNjIwHhcNMjUxMjEwMTMwMTQ5WhcNMjUxMjExMTMwMTQ5WjAzMTEwLwYDVQQD Eyg2ODM4NTBjYzg3MDc5ZDdiMjQxNmJhZGU0NWE3ZThiYTZkN2YxMWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuZ/5RMe8EeM8CUzmGMdzuXT+HVL WNhXr0l/z/ERF9uldnOMet4+WaUAtvLGL5OeZDm2n5IdCh5xQqt2E3BM/W6b3oel G61j2tosW/eJSjPB8wTAYM7CTPpkOCm1deV4BCMfTnBtE09XTUioBkiyNCCImbwd 7dSBiRESyvUbzNdL+ismKdcQr4PxCdb317W+H4W4zWYy8/RYyzTKvHZeOn4vMfQz MGZ/37xfGNhIXDOFEjltqptUMvtMZmIeJ7Djld8mD678uiPn0IpH6G0R6fG2RSAa MnGVqvWcaexyxD9NdolQ+k52A27hT+rqJpYI5yDug7nGXts49Ab5UqmazQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGg4UMyHB517JBa63kWn6LptfxGnMB8GA1UdIwQY MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUI+f85F GbXoDSTimoF7wIpp3b9lvwmTreu3o0lcNsMtP7nEZDhhCZjqJ0uf/US4a8F+AgIR +Hct7REk/2WyBi8HQE7sB05cqBDlSkZHWMg4CWReiMjTfJgRPK7qKlPY5GvaI08Y VeQAy30y3U39t+5pKnaVcDIIt4TC58qroQqfj2Fl7DPPMc+7XrA4zVqQv2zrP0vh aD4BVpd7iW9XYOFizWxQEc1ITxtyugsMxwZ7R/G4+TqHjMPBSL1ne40B725XDkUg zANV/o2yjjJJoUfA5nKVYCqFQWuRHA/gXmdhAqHAmRs29MJOkFsU//Uyh5/6JHew 0XMyRMQ3Z9LdZw== -----END CERTIFICATE-----Generated at Wed Dec 10 16:08:27 2025 by rpki-client