This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft File: NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft (raw, json) Hash identifier: N30vPxRwJ/pmeBdt1/JzO+jbclNJX2w3Yi+IsTgM+5c= Subject key identifier: 71:43:14:A0:B6:50:E8:EA:E3:91:E5:30:00:E8:FB:B3:2D:8A:7B:7B Authority key identifier: 34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E Certificate issuer: /CN=349fd357c3fb8ea30e1207823b646e125318380e Certificate serial: 019B51BC41C8C8D088A86B4671F52DA253C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 19:00:50 +0000 Manifest this update: Wed 24 Dec 2025 19:00:50 +0000 Manifest next update: Thu 25 Dec 2025 19:00:50 +0000 Files and hashes: 1: NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl (hash: 7DBgR5BKWiIPenkS6XSXCAAEtPKbu/3n+WRTHA+2H2k=) 2: mR66z8E13ZO0oQRWIFilM8XhtIc.roa (hash: 6LXZMdZX8N37u9JPM24+jBKZx+3a7O9LjRVCP3ekI8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 19:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:41:c8:c8:d0:88:a8:6b:46:71:f5:2d:a2:53:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349fd357c3fb8ea30e1207823b646e125318380e Validity Not Before: Dec 24 19:00:50 2025 GMT Not After : Dec 25 19:00:50 2025 GMT Subject: CN=714314a0b650e8eae391e53000e8fbb32d8a7b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4d:ef:27:da:76:e6:b9:84:5e:5a:ae:a4:82: 62:5f:dd:fb:31:d3:26:cf:8e:4b:5a:88:8b:f0:d1: 72:b0:5c:99:74:dc:f7:00:34:4d:9d:95:8f:8d:2b: ff:1a:53:c8:5c:ee:ff:ff:db:53:58:81:3d:25:f7: 76:c2:70:79:33:8c:20:32:0d:6e:fe:a3:ff:c4:1a: d6:c7:e8:e4:c0:8f:cc:d0:bf:68:64:49:75:7e:b5: 89:65:12:72:2a:bb:50:ee:50:9a:88:5b:30:3a:9d: a8:bc:d3:3e:f0:00:6c:40:09:57:fb:7b:81:da:4e: d9:cd:80:4a:b8:d9:91:d3:79:ac:ed:04:bf:a5:9a: b5:ca:3d:47:a9:17:30:04:dc:5b:0f:71:79:85:b9: a7:ee:07:93:46:f7:0b:40:5c:cb:8a:aa:d7:86:57: f8:26:33:63:d4:55:2e:53:de:9e:e9:ec:fb:24:1c: 9f:13:32:3e:7d:96:3a:5a:f7:21:84:d8:ce:7e:a0: 2b:a0:65:7f:96:09:80:f4:df:c4:d3:e3:af:e3:0f: a0:73:f4:f9:7e:6c:48:a9:56:c5:02:08:f8:0b:f1: 72:21:12:45:da:76:8e:97:75:c3:c9:a9:21:dc:f8: d6:58:d5:dd:4b:dd:80:f7:6c:d9:59:36:0a:7d:dc: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:43:14:A0:B6:50:E8:EA:E3:91:E5:30:00:E8:FB:B3:2D:8A:7B:7B X509v3 Authority Key Identifier: keyid:34:9F:D3:57:C3:FB:8E:A3:0E:12:07:82:3B:64:6E:12:53:18:38:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJ_TV8P7jqMOEgeCO2RuElMYOA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/60a100-f166-42d5-8712-1e84f08c1dcb/1/NJ_TV8P7jqMOEgeCO2RuElMYOA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:eb:55:a9:c5:67:ef:58:f4:bb:21:81:7b:dc:5a:81:a4:3b: 71:16:5e:1f:48:e5:82:9d:1d:51:8b:14:28:9e:5c:2a:6a:d4: 1b:0b:ef:c4:87:88:ca:57:27:9f:dc:ad:d8:c5:0e:00:49:d3: ab:18:83:39:d5:f2:c0:8f:c7:1d:14:0d:71:38:ae:31:ff:54: 33:28:79:fd:bd:60:ab:83:55:59:71:a7:fd:4d:f3:60:a6:bf: 6c:6b:89:5e:b4:a7:0b:ba:55:86:a0:5f:c9:e7:a8:8f:b2:1f: 94:7b:7f:a5:69:4f:e1:45:0e:a8:5b:3d:1a:d4:7d:f9:e9:6a: 93:9f:97:04:0b:ac:c2:70:7e:21:4e:47:30:cf:74:c7:93:de: 0b:65:84:05:59:b4:16:05:e9:67:ec:3f:d5:07:bf:1a:68:a9: 8e:62:57:d2:41:6a:7e:75:58:ba:69:0d:93:d4:15:47:ca:a5: 13:e9:f4:97:1d:7b:53:ca:d3:1a:10:01:7f:62:5c:30:f6:74: 1a:45:7e:8b:b1:1a:15:31:b0:53:2a:1a:a7:1c:60:e3:fb:ce: 40:66:2e:1b:18:0d:bf:80:e3:27:3f:ba:82:14:b2:54:09:f4: f0:e8:6e:cd:83:50:a9:ab:63:7e:d5:dd:46:37:db:a3:3a:f9: b4:9e:e0:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvEHIyNCIqGtGcfUtolPHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWZkMzU3YzNmYjhlYTMwZTEyMDc4MjNiNjQ2ZTEyNTMx ODM4MGUwHhcNMjUxMjI0MTkwMDUwWhcNMjUxMjI1MTkwMDUwWjAzMTEwLwYDVQQD Eyg3MTQzMTRhMGI2NTBlOGVhZTM5MWU1MzAwMGU4ZmJiMzJkOGE3YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlk3vJ9p25rmEXlqupIJiX937MdMm z45LWoiL8NFysFyZdNz3ADRNnZWPjSv/GlPIXO7//9tTWIE9Jfd2wnB5M4wgMg1u /qP/xBrWx+jkwI/M0L9oZEl1frWJZRJyKrtQ7lCaiFswOp2ovNM+8ABsQAlX+3uB 2k7ZzYBKuNmR03ms7QS/pZq1yj1HqRcwBNxbD3F5hbmn7geTRvcLQFzLiqrXhlf4 JjNj1FUuU96e6ez7JByfEzI+fZY6WvchhNjOfqAroGV/lgmA9N/E0+Ov4w+gc/T5 fmxIqVbFAgj4C/FyIRJF2naOl3XDyakh3PjWWNXdS92A92zZWTYKfdwCnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFDFKC2UOjq45HlMADo+7Mtint7MB8GA1UdIwQY MBaAFDSf01fD+46jDhIHgjtkbhJTGDgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTIt MWU4NGYwOGMxZGNiLzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82MGExMDAtZjE2Ni00MmQ1LTg3MTItMWU4NGYwOGMxZGNi LzEvTkpfVFY4UDdqcU1PRWdlQ08yUnVFbE1ZT0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZOtVqcVn 71j0uyGBe9xagaQ7cRZeH0jlgp0dUYsUKJ5cKmrUGwvvxIeIylcnn9yt2MUOAEnT qxiDOdXywI/HHRQNcTiuMf9UMyh5/b1gq4NVWXGn/U3zYKa/bGuJXrSnC7pVhqBf yeeoj7IflHt/pWlP4UUOqFs9GtR9+elqk5+XBAuswnB+IU5HMM90x5PeC2WEBVm0 FgXpZ+w/1Qe/GmipjmJX0kFqfnVYumkNk9QVR8qlE+n0lx17U8rTGhABf2JcMPZ0 GkV+i7EaFTGwUyoapxxg4/vOQGYuGxgNv4DjJz+6ghSyVAn08OhuzYNQqatjftXd Rjfbozr5tJ7gbg== -----END CERTIFICATE-----Generated at Thu Dec 25 04:54:58 2025 by rpki-client