This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json) Hash identifier: ffTM9la78Y0QCNkdijVSMgHLgG+Q1kTU5J7s6eJlUsQ= Subject key identifier: 67:B3:70:27:2E:46:75:C1:2D:CA:9A:EC:E6:1F:3B:8B:46:EE:53:BB Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06 Certificate serial: 019B4EBB8724A24E22D42B9EB6B72D60622A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft Manifest number: 0506 Signing time: Wed 24 Dec 2025 05:01:11 +0000 Manifest this update: Wed 24 Dec 2025 05:01:11 +0000 Manifest next update: Thu 25 Dec 2025 05:01:11 +0000 Files and hashes: 1: 4SmB41euEOxEr75RnuMOxqru4tM.roa (hash: gKQmWnegPjuIHDqA5p6blbnSDFS80Rd4wpfMeMUgC68=) 2: 8XyXEcGJM3fMgb6bYMtvTCeLoBM.roa (hash: q15fZ67r4KPnB5fz/oJpoPeyD9UeqSxS7qne2oUruYE=) 3: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: i774/Vz/ol3/9ln/iypFILZIL6rADRxRNVnb1RvYZUM=) 4: bjsIhhJXYWOCxm3-u3SPbRaJhE8.roa (hash: k601NGiADY++m5H4zoT2dwbTutk80SSDZnVosaITtR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:87:24:a2:4e:22:d4:2b:9e:b6:b7:2d:60:62:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06 Validity Not Before: Dec 24 05:01:11 2025 GMT Not After : Dec 25 05:01:11 2025 GMT Subject: CN=67b370272e4675c12dca9aece61f3b8b46ee53bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c3:11:a1:28:60:40:80:a1:4f:fa:bf:db:2b: b0:1c:7c:92:10:5b:9f:3d:d7:b7:d5:11:11:ad:83: 8f:2f:13:c0:01:be:92:fc:cc:80:58:d7:24:6d:d6: 71:1f:5b:79:98:cf:54:d0:e1:c9:54:d3:24:1a:2a: 90:10:d2:75:b9:ba:81:ba:32:46:af:a5:29:9f:b0: 32:56:ac:38:79:0b:13:9d:77:43:df:fc:5e:0e:a5: 3f:60:67:d0:07:8a:59:9e:3e:f3:88:74:6f:d7:d7: b7:05:38:35:95:c2:8a:2a:ee:92:46:e4:a1:46:c2: c5:93:fe:9b:58:51:05:2c:fa:e6:b5:41:c1:04:ed: 25:b8:7b:75:07:8f:25:6d:0c:f6:16:66:87:9d:8b: 46:d6:7e:14:13:65:91:24:ce:60:92:a2:dd:91:b9: 8b:60:cd:43:0e:49:61:dd:20:70:59:34:ee:b3:57: 76:2a:86:f8:f1:4a:74:3d:4f:e1:d0:50:f5:65:33: c0:b9:98:9e:b4:b1:ae:ad:dd:74:a8:f9:01:93:43: 09:a3:84:69:83:58:2f:0f:45:06:66:6d:81:ab:d3: e2:be:e3:fe:1a:db:43:28:b4:70:af:aa:f5:a1:17: b1:8c:82:fd:b4:c7:65:4c:f6:1b:87:fd:49:1f:0b: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B3:70:27:2E:46:75:C1:2D:CA:9A:EC:E6:1F:3B:8B:46:EE:53:BB X509v3 Authority Key Identifier: keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:16:dd:fd:bb:c3:0f:1b:47:36:d3:0b:24:01:e4:6f:61:63: ec:7c:71:e1:36:d2:37:a1:ee:7a:fc:71:28:2f:b3:88:e6:ad: aa:16:d3:9b:d8:5b:78:2e:52:e3:5c:e6:b8:65:56:43:fb:b9: 89:08:5c:3d:c5:5a:25:26:15:d5:b5:65:c3:a4:22:02:f9:86: 59:92:a5:aa:54:18:21:d2:c4:41:cf:56:97:a0:97:3c:ba:1b: e4:53:7c:a5:bf:9e:2f:6f:4e:11:48:03:d1:d4:2c:da:86:9f: 7d:0a:0e:62:f1:fe:4e:24:47:a3:82:e5:8c:76:54:81:bf:fc: b8:5d:b7:dc:39:fb:8d:df:13:77:c7:f6:b4:09:3a:4b:d5:cb: fe:72:67:bf:4e:f1:aa:11:6e:84:72:bb:97:46:01:07:c0:f0: 05:ad:d0:ad:50:fd:d3:d9:05:2a:8f:e9:4d:7b:5e:4b:3b:b9: a9:ff:84:77:55:38:66:00:45:49:61:bc:76:22:a2:b1:3d:d9: fb:3c:06:27:92:8c:2e:d9:bc:4b:13:c2:4a:2c:48:8e:18:39: 90:80:3b:2d:3a:6b:26:e6:04:a5:9d:fc:54:d4:4e:75:3f:7c: 2a:39:77:48:bf:40:27:4a:17:58:68:f1:f6:63:c6:d6:ce:6b: 24:50:9b:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu4ckok4i1CuetrctYGIqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ODMyMzE3ZDI1NDQ0MzRiNjU5ZTU2OTIwNzFkOGU0YzQ5 MzhiMDYwHhcNMjUxMjI0MDUwMTExWhcNMjUxMjI1MDUwMTExWjAzMTEwLwYDVQQD Eyg2N2IzNzAyNzJlNDY3NWMxMmRjYTlhZWNlNjFmM2I4YjQ2ZWU1M2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcMRoShgQIChT/q/2yuwHHySEFuf Pde31RERrYOPLxPAAb6S/MyAWNckbdZxH1t5mM9U0OHJVNMkGiqQENJ1ubqBujJG r6Upn7AyVqw4eQsTnXdD3/xeDqU/YGfQB4pZnj7ziHRv19e3BTg1lcKKKu6SRuSh RsLFk/6bWFEFLPrmtUHBBO0luHt1B48lbQz2FmaHnYtG1n4UE2WRJM5gkqLdkbmL YM1DDklh3SBwWTTus1d2Kob48Up0PU/h0FD1ZTPAuZietLGurd10qPkBk0MJo4Rp g1gvD0UGZm2Bq9PivuP+GttDKLRwr6r1oRexjIL9tMdlTPYbh/1JHwvjMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGezcCcuRnXBLcqa7OYfO4tG7lO7MB8GA1UdIwQY MBaAFDSDIxfSVEQ0tlnlaSBx2OTEk4sGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMt MzBjNjVhZDgzMjkxLzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS81YTJlZDktOGY4ZS00YzFkLWFhZjMtMzBjNjVhZDgzMjkx LzEvTklNakY5SlVSRFMyV2VWcElISFk1TVNUaXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBbd/bvD DxtHNtMLJAHkb2Fj7Hxx4TbSN6HuevxxKC+ziOatqhbTm9hbeC5S41zmuGVWQ/u5 iQhcPcVaJSYV1bVlw6QiAvmGWZKlqlQYIdLEQc9Wl6CXPLob5FN8pb+eL29OEUgD 0dQs2oaffQoOYvH+TiRHo4LljHZUgb/8uF233Dn7jd8Td8f2tAk6S9XL/nJnv07x qhFuhHK7l0YBB8DwBa3QrVD909kFKo/pTXteSzu5qf+Ed1U4ZgBFSWG8diKisT3Z +zwGJ5KMLtm8SxPCSixIjhg5kIA7LTprJuYEpZ38VNROdT98Kjl3SL9AJ0oXWGjx 9mPG1s5rJFCb6Q== -----END CERTIFICATE-----Generated at Wed Dec 24 11:40:55 2025 by rpki-client