This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft File: nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft (raw, json) Hash identifier: 99AdpTQwRlY6Bx96W7P7jTeZ+zrlpuUNpPNsq1sN3qo= Subject key identifier: 4E:9B:88:D5:A4:E6:E1:D9:5C:01:E8:41:C2:67:DD:DE:2E:F4:1B:1F Authority key identifier: 9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50 Certificate issuer: /CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50 Certificate serial: 019B53060B17D7AC51BA58F4349D5244A153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft Manifest number: 11DE Signing time: Thu 25 Dec 2025 01:01:03 +0000 Manifest this update: Thu 25 Dec 2025 01:01:03 +0000 Manifest next update: Fri 26 Dec 2025 01:01:03 +0000 Files and hashes: 1: nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl (hash: kKXnqLiPG5w885I+YpS84w5IMqY4+JLkkBABn7jqng4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:0b:17:d7:ac:51:ba:58:f4:34:9d:52:44:a1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3e4a32e06a187234e0177f2cba05564cd1fb50 Validity Not Before: Dec 25 01:01:03 2025 GMT Not After : Dec 26 01:01:03 2025 GMT Subject: CN=4e9b88d5a4e6e1d95c01e841c267ddde2ef41b1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ac:1d:18:d3:28:52:75:db:77:d1:7b:23:d5: b9:72:fd:bf:55:e2:96:c2:b9:f3:8e:4f:dc:cc:d8: 11:f2:ed:82:c0:d4:97:cc:bd:b7:b2:24:55:dc:dc: cd:8e:6d:ef:2f:74:aa:55:f9:93:69:10:c2:e6:47: d7:82:5c:07:e0:24:de:0a:47:31:33:dc:64:6b:7a: 92:3e:d4:e3:c2:14:0a:c2:41:91:0e:49:75:8b:58: 50:0c:67:67:13:d8:9a:e3:ec:57:57:5d:f9:23:1f: 9f:5e:3d:25:2c:a2:cf:34:94:9d:93:4d:1e:90:65: 38:da:db:bb:a8:9d:86:91:44:1f:c1:b8:69:62:62: 22:43:9f:c1:53:cd:11:87:dd:ad:ec:3f:b8:3a:b0: 7e:c0:54:b4:92:be:2a:9e:1d:cc:0a:b9:ec:5a:96: db:92:0b:9d:ce:c8:4e:90:36:7e:d9:96:34:1f:2b: 27:37:ea:24:77:6e:cd:e1:bd:cb:fc:1f:34:fb:f1: 76:ad:d5:24:ee:4b:8d:b3:af:24:0d:a7:e1:8d:79: aa:ff:b2:7a:f8:c0:35:d7:08:15:5a:d3:ed:dc:36: 86:04:ee:d9:68:50:57:29:da:5d:da:bf:53:8d:d6: 01:92:a5:8f:6e:c3:3b:2f:60:03:17:a7:5f:28:05: ac:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9B:88:D5:A4:E6:E1:D9:5C:01:E8:41:C2:67:DD:DE:2E:F4:1B:1F X509v3 Authority Key Identifier: keyid:9E:3E:4A:32:E0:6A:18:72:34:E0:17:7F:2C:BA:05:56:4C:D1:FB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj5KMuBqGHI04Bd_LLoFVkzR-1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3c38fb-2cc6-4551-9bf3-8c793c062a49/1/nj5KMuBqGHI04Bd_LLoFVkzR-1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:a2:fe:f0:4e:40:a0:aa:44:e9:93:9d:82:e7:ce:5c:26:0f: 66:1f:fc:5b:61:d7:fa:84:f1:d9:7c:ea:97:1e:a6:70:dc:78: 07:1e:25:87:aa:48:f5:ba:c4:1f:9e:51:f8:94:69:6d:72:1e: 06:b5:ba:9b:21:e1:1b:60:a0:07:26:8c:b5:20:61:d0:31:b4: f0:a2:a5:97:7b:2f:6a:66:0b:36:4c:b7:0e:4b:fa:17:84:2c: 57:cd:dd:41:29:be:cf:ac:06:a8:bf:da:24:f4:2b:db:a3:56: d8:a3:96:0c:84:98:7d:1a:48:82:e7:d7:aa:ca:cc:5e:5b:bb: 88:e3:64:8c:95:83:f3:2c:b6:3d:87:1c:ac:44:f9:64:e1:39: d6:a8:f3:17:aa:2e:86:0c:65:83:91:7a:7c:b8:9b:bc:1c:56: 85:08:25:91:19:4b:85:78:8e:45:3a:c9:e3:a2:c8:4b:b8:9b: 60:93:85:5c:b2:86:92:9a:5e:32:5d:7c:7a:61:1c:03:00:c5: 5f:ae:8a:d5:24:b6:6e:11:45:55:7d:6d:d1:e6:26:89:36:8e: 16:d3:4b:f4:bf:59:e5:88:9c:45:a7:c5:3d:72:7f:ae:07:16: e6:d0:cd:3b:1b:e8:21:09:3a:dc:22:2d:8c:e7:09:73:31:9f: 44:12:5e:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBgsX16xRulj0NJ1SRKFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllM2U0YTMyZTA2YTE4NzIzNGUwMTc3ZjJjYmEwNTU2NGNk MWZiNTAwHhcNMjUxMjI1MDEwMTAzWhcNMjUxMjI2MDEwMTAzWjAzMTEwLwYDVQQD Eyg0ZTliODhkNWE0ZTZlMWQ5NWMwMWU4NDFjMjY3ZGRkZTJlZjQxYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56wdGNMoUnXbd9F7I9W5cv2/VeKW wrnzjk/czNgR8u2CwNSXzL23siRV3NzNjm3vL3SqVfmTaRDC5kfXglwH4CTeCkcx M9xka3qSPtTjwhQKwkGRDkl1i1hQDGdnE9ia4+xXV135Ix+fXj0lLKLPNJSdk00e kGU42tu7qJ2GkUQfwbhpYmIiQ5/BU80Rh92t7D+4OrB+wFS0kr4qnh3MCrnsWpbb kgudzshOkDZ+2ZY0HysnN+okd27N4b3L/B80+/F2rdUk7kuNs68kDafhjXmq/7J6 +MA11wgVWtPt3DaGBO7ZaFBXKdpd2r9TjdYBkqWPbsM7L2ADF6dfKAWsxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE6biNWk5uHZXAHoQcJn3d4u9BsfMB8GA1UdIwQY MBaAFJ4+SjLgahhyNOAXfyy6BVZM0ftQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMt OGM3OTNjMDYyYTQ5LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8zYzM4ZmItMmNjNi00NTUxLTliZjMtOGM3OTNjMDYyYTQ5 LzEvbmo1S011QnFHSEkwNEJkX0xMb0ZWa3pSLTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVaL+8E5A oKpE6ZOdgufOXCYPZh/8W2HX+oTx2Xzqlx6mcNx4Bx4lh6pI9brEH55R+JRpbXIe BrW6myHhG2CgByaMtSBh0DG08KKll3svamYLNky3Dkv6F4QsV83dQSm+z6wGqL/a JPQr26NW2KOWDISYfRpIgufXqsrMXlu7iONkjJWD8yy2PYccrET5ZOE51qjzF6ou hgxlg5F6fLibvBxWhQglkRlLhXiORTrJ46LIS7ibYJOFXLKGkppeMl18emEcAwDF X66K1SS2bhFFVX1t0eYmiTaOFtNL9L9Z5YicRafFPXJ/rgcW5tDNOxvoIQk63CIt jOcJczGfRBJegw== -----END CERTIFICATE-----Generated at Thu Dec 25 02:48:54 2025 by rpki-client