This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft File: njSxhiccy4nF5Ysw5wvXQQnMKEo.mft (raw, json) Hash identifier: 1Ql4y2fU+cZ9qvgj3ZKbMQLt12PkuDZF0Y5EX6tM9wk= Subject key identifier: 34:4B:8B:57:01:70:73:76:EE:1A:7B:7D:51:9C:73:E3:06:39:94:EB Authority key identifier: 9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A Certificate issuer: /CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Certificate serial: 019B50E0DFE8C22402AFF63BB02949F04951 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft Manifest number: 098A Signing time: Wed 24 Dec 2025 15:01:13 +0000 Manifest this update: Wed 24 Dec 2025 15:01:13 +0000 Manifest next update: Thu 25 Dec 2025 15:01:13 +0000 Files and hashes: 1: 1--MwUDBpJ-Q-qK0PaQbJviTOnnY.roa (hash: dCtfEERTL+DVPDzOeI+W+YlER3CfocSmb5i2ct7B3hg=) 2: njSxhiccy4nF5Ysw5wvXQQnMKEo.crl (hash: ByoO+kYkSWJqaA2Bfb0wiR/RSAkZAJs4682Z5T+TBBo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 15:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:df:e8:c2:24:02:af:f6:3b:b0:29:49:f0:49:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e34b186271ccb89c5e58b30e70bd74109cc284a Validity Not Before: Dec 24 15:01:13 2025 GMT Not After : Dec 25 15:01:13 2025 GMT Subject: CN=344b8b5701707376ee1a7b7d519c73e3063994eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:fc:f7:ba:79:7a:ca:68:76:43:4e:14:40: 0e:a5:d8:89:f2:33:de:be:20:34:76:89:2a:c8:91: a8:9b:a3:e0:00:7d:2d:cc:18:50:de:01:36:44:d2: b1:3c:f0:16:9d:08:2c:3c:2d:3c:24:94:ac:c5:25: b6:52:ce:2e:8e:36:f0:6e:2e:ff:77:a1:f8:8e:7b: 4f:80:9b:37:6d:e0:9b:21:e3:7f:b0:55:72:a3:73: 70:50:2d:3a:55:b6:13:b1:e6:29:ce:84:b5:c7:7c: 29:39:9b:68:ab:ac:bb:1c:94:9c:ea:f6:12:13:27: b3:9a:9c:61:0d:7c:f5:f8:37:46:0d:7c:69:61:ac: 44:2a:a0:7e:d3:c3:53:52:67:45:8c:0a:af:49:30: 5d:43:a6:ff:34:28:4c:eb:c9:53:08:b3:70:f0:ab: 8a:7f:1e:2f:cb:66:3c:34:1d:d2:bd:f9:92:74:f3: f6:a1:ac:35:bd:67:d4:cb:00:ba:84:52:50:d3:fd: f6:10:30:92:6e:20:21:c2:68:63:d1:31:d4:06:fa: 81:b7:93:bd:4c:e4:8c:ae:a9:f0:ab:5e:63:aa:e3: b7:52:ff:ec:fe:73:5b:aa:26:71:8e:77:8d:a1:5c: c7:fd:39:f7:2f:a4:7b:2c:ea:ae:c2:19:b0:b2:eb: 72:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:4B:8B:57:01:70:73:76:EE:1A:7B:7D:51:9C:73:E3:06:39:94:EB X509v3 Authority Key Identifier: keyid:9E:34:B1:86:27:1C:CB:89:C5:E5:8B:30:E7:0B:D7:41:09:CC:28:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njSxhiccy4nF5Ysw5wvXQQnMKEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0c37c3-9990-4596-99e9-dd5ffd531571/1/njSxhiccy4nF5Ysw5wvXQQnMKEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c5:ec:de:f3:9f:5a:4a:4c:bc:10:65:80:74:e0:58:9d:8d: 36:e1:28:78:39:1d:48:95:1b:25:8d:7a:06:a3:c4:fd:41:d2: 69:fc:a5:0e:f3:42:1c:84:3e:1f:34:79:c4:8b:a6:f8:9c:e6: a0:f0:96:21:82:96:f2:48:5d:e7:3a:66:d3:5f:77:c2:85:28: ef:47:e5:9a:f3:a8:06:be:a3:07:cf:9d:32:5f:2e:1b:21:7e: 01:99:88:06:de:d0:cd:ea:5d:bb:06:88:5b:08:fa:4f:4b:07: 2e:01:f7:8d:b1:a3:c5:04:2c:49:51:07:24:f4:d1:39:87:34: fd:69:76:06:b1:51:95:4d:9c:96:b1:be:1d:14:60:a1:39:16: ad:2f:55:ff:c2:b3:b4:b5:c5:f8:5d:30:c5:a2:bf:f9:b2:0e: 26:8a:01:a1:6b:70:d3:20:bd:75:80:4a:c7:70:6c:27:37:e5: 26:ef:11:f7:a6:0b:01:c8:e4:18:f9:43:f9:6b:0d:d4:4b:83: d0:65:1d:63:de:eb:10:87:15:b1:0f:49:ed:4f:a9:31:8d:04: 32:36:33:27:a4:50:75:85:da:62:c6:0e:e6:36:8f:7a:7a:ee: 56:61:14:43:c4:eb:4f:b4:f6:df:fb:94:e4:5c:84:99:af:d8: 27:97:2c:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4N/owiQCr/Y7sClJ8ElRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzRiMTg2MjcxY2NiODljNWU1OGIzMGU3MGJkNzQxMDlj YzI4NGEwHhcNMjUxMjI0MTUwMTEzWhcNMjUxMjI1MTUwMTEzWjAzMTEwLwYDVQQD EygzNDRiOGI1NzAxNzA3Mzc2ZWUxYTdiN2Q1MTljNzNlMzA2Mzk5NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVX897p5espodkNOFEAOpdiJ8jPe viA0dokqyJGom6PgAH0tzBhQ3gE2RNKxPPAWnQgsPC08JJSsxSW2Us4ujjbwbi7/ d6H4jntPgJs3beCbIeN/sFVyo3NwUC06VbYTseYpzoS1x3wpOZtoq6y7HJSc6vYS EyezmpxhDXz1+DdGDXxpYaxEKqB+08NTUmdFjAqvSTBdQ6b/NChM68lTCLNw8KuK fx4vy2Y8NB3SvfmSdPP2oaw1vWfUywC6hFJQ0/32EDCSbiAhwmhj0THUBvqBt5O9 TOSMrqnwq15jquO3Uv/s/nNbqiZxjneNoVzH/Tn3L6R7LOquwhmwsutyRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRLi1cBcHN27hp7fVGcc+MGOZTrMB8GA1UdIwQY MBaAFJ40sYYnHMuJxeWLMOcL10EJzChKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTkt ZGQ1ZmZkNTMxNTcxLzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wYzM3YzMtOTk5MC00NTk2LTk5ZTktZGQ1ZmZkNTMxNTcx LzEvbmpTeGhpY2N5NG5GNVlzdzV3dlhRUW5NS0VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8Xs3vOf WkpMvBBlgHTgWJ2NNuEoeDkdSJUbJY16BqPE/UHSafylDvNCHIQ+HzR5xIum+Jzm oPCWIYKW8khd5zpm0193woUo70flmvOoBr6jB8+dMl8uGyF+AZmIBt7QzepduwaI Wwj6T0sHLgH3jbGjxQQsSVEHJPTROYc0/Wl2BrFRlU2clrG+HRRgoTkWrS9V/8Kz tLXF+F0wxaK/+bIOJooBoWtw0yC9dYBKx3BsJzflJu8R96YLAcjkGPlD+WsN1EuD 0GUdY97rEIcVsQ9J7U+pMY0EMjYzJ6RQdYXaYsYO5jaPenruVmEUQ8TrT7T23/uU 5FyEma/YJ5cs8A== -----END CERTIFICATE-----Generated at Thu Dec 25 01:25:20 2025 by rpki-client