This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json) Hash identifier: bfG2DCIv+UVZuWRAMhGqZ3WxnHueJfAlXXMgyySzS4g= Subject key identifier: DD:54:63:D3:3A:00:B1:D4:3D:BE:48:E3:50:93:14:35:79:10:86:1D Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa Certificate serial: 019B5C76FD9C2F3D044CD8EA504F8D6FE147 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 21:01:00 +0000 Manifest this update: Fri 26 Dec 2025 21:01:00 +0000 Manifest next update: Sat 27 Dec 2025 21:01:00 +0000 Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=) 2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: sEfmmykBb4ZiPoFZHX9B3nNjPSh/+/T9vFFIvLbkYBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:76:fd:9c:2f:3d:04:4c:d8:ea:50:4f:8d:6f:e1:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa Validity Not Before: Dec 26 21:01:00 2025 GMT Not After : Dec 27 21:01:00 2025 GMT Subject: CN=dd5463d33a00b1d43dbe48e3509314357910861d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:b2:c9:3f:65:d3:4b:79:a5:e7:a3:aa:d4: 19:c0:0c:69:32:43:81:79:79:0d:54:5f:b4:85:56: a8:ac:fd:f1:c0:81:d5:11:9a:6c:9d:99:77:67:82: 0a:74:75:42:a3:09:7b:8a:d0:31:2c:81:5a:55:70: be:07:bd:ab:33:25:07:b7:59:10:cd:d7:4d:6b:cd: 64:00:01:3c:1a:04:bb:b0:02:74:1d:db:fb:d1:62: 6a:83:9a:f3:4f:70:1a:a2:1f:2d:d2:c8:b9:07:07: 8f:b8:52:1e:55:f8:b3:4c:bf:51:5d:24:06:ce:02: cb:95:64:9d:36:27:e8:35:1d:aa:46:97:fb:e8:de: 0f:6e:0b:29:66:a8:84:e7:d5:f7:37:74:73:72:2d: af:9e:9f:ed:ba:c6:d7:14:f2:3e:dd:14:49:38:cf: 46:00:e5:d4:5b:5e:ce:5f:12:c4:e4:05:18:57:de: 47:20:d6:61:be:3d:41:3e:13:67:ed:69:31:6c:bb: 8f:8a:0b:fb:4b:a8:72:f1:0a:4e:f7:e7:ef:9e:ec: 91:63:81:7e:d4:a9:76:c8:28:f6:48:e9:8e:93:5d: 6a:d5:91:ad:ad:b2:d9:f0:f2:32:3f:96:9d:d0:b8: 90:7e:69:1f:b7:41:0f:69:80:47:c6:e8:56:fe:5c: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:54:63:D3:3A:00:B1:D4:3D:BE:48:E3:50:93:14:35:79:10:86:1D X509v3 Authority Key Identifier: keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:83:d8:ec:b8:d1:40:af:4b:b2:c6:8d:cb:1b:9a:64:68:e7: e7:76:80:10:a7:fb:27:d3:17:4c:91:8a:a9:84:84:53:d1:40: c4:5c:fc:22:89:ce:d2:c2:bf:9d:88:7d:09:a3:81:37:61:28: fb:b2:a8:33:07:33:37:e3:76:ca:2c:b7:d5:a2:5a:78:2f:b3: 98:e6:7e:11:07:aa:10:bb:48:43:7d:fc:ba:97:c0:dc:99:8b: fe:68:7a:1b:dc:c5:cf:b9:5f:f9:7c:d7:ff:74:4a:9c:43:a0: d6:8d:d3:8a:77:e1:52:ce:7a:05:1a:4a:d7:4f:c4:7c:d4:47: 6f:82:51:76:0f:fa:58:db:3f:a1:c2:cc:86:64:53:e7:1a:96: 8c:fb:02:8e:cf:5d:ea:c7:22:de:d2:4f:d4:4a:15:c1:f9:a5: f6:8e:5c:05:e7:71:10:a8:8c:45:17:30:f0:be:73:33:8f:4f: d2:d5:c8:7d:eb:3b:17:1a:2e:23:94:ec:e5:6a:39:18:45:cc: 35:38:2b:bb:ef:e8:76:c6:ef:9f:99:1a:c3:1d:dc:fc:3a:d2: 33:32:1a:a0:f9:fa:b0:bc:29:a5:ba:bf:ef:95:f1:0a:ec:65: c4:c2:21:dc:fa:9d:fd:31:6f:cd:fb:71:18:68:a5:49:6b:de: 64:a2:7a:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcdv2cLz0ETNjqUE+Nb+FHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTIxNTk4YjZhMjYxYWE0YzNlNjcxNDRhYzg3NjAzMzI1 M2UwYWEwHhcNMjUxMjI2MjEwMTAwWhcNMjUxMjI3MjEwMTAwWjAzMTEwLwYDVQQD EyhkZDU0NjNkMzNhMDBiMWQ0M2RiZTQ4ZTM1MDkzMTQzNTc5MTA4NjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucKyyT9l00t5peejqtQZwAxpMkOB eXkNVF+0hVaorP3xwIHVEZpsnZl3Z4IKdHVCowl7itAxLIFaVXC+B72rMyUHt1kQ zddNa81kAAE8GgS7sAJ0Hdv70WJqg5rzT3Aaoh8t0si5BwePuFIeVfizTL9RXSQG zgLLlWSdNifoNR2qRpf76N4PbgspZqiE59X3N3Rzci2vnp/tusbXFPI+3RRJOM9G AOXUW17OXxLE5AUYV95HINZhvj1BPhNn7WkxbLuPigv7S6hy8QpO9+fvnuyRY4F+ 1Kl2yCj2SOmOk11q1ZGtrbLZ8PIyP5ad0LiQfmkft0EPaYBHxuhW/lzgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1UY9M6ALHUPb5I41CTFDV5EIYdMB8GA1UdIwQY MBaAFDSSFZi2omGqTD5nFErIdgMyU+CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAt NDJlMDAyZGFkOWFlLzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAtNDJlMDAyZGFkOWFl LzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYPY7LjR QK9LssaNyxuaZGjn53aAEKf7J9MXTJGKqYSEU9FAxFz8IonO0sK/nYh9CaOBN2Eo +7KoMwczN+N2yiy31aJaeC+zmOZ+EQeqELtIQ338upfA3JmL/mh6G9zFz7lf+XzX /3RKnEOg1o3TinfhUs56BRpK10/EfNRHb4JRdg/6WNs/ocLMhmRT5xqWjPsCjs9d 6sci3tJP1EoVwfml9o5cBedxEKiMRRcw8L5zM49P0tXIfes7FxouI5Ts5Wo5GEXM NTgru+/odsbvn5kawx3c/DrSMzIaoPn6sLwppbq/75XxCuxlxMIh3Pqd/TFvzftx GGilSWveZKJ6TQ== -----END CERTIFICATE-----Generated at Fri Dec 26 22:43:16 2025 by rpki-client