This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json) Hash identifier: KhyIONoFAcgA6WxBw9M3cyCjmvtyfSJVgyhiutXzv0U= Subject key identifier: 20:E2:E0:BA:D3:9D:29:3F:E0:2B:4F:FA:BF:25:8E:72:16:76:69:D1 Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91 Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391 Certificate serial: 019B2BF863DDB1E205849B5B461DB3AAFB01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft Manifest number: 177F Signing time: Wed 17 Dec 2025 11:00:57 +0000 Manifest this update: Wed 17 Dec 2025 11:00:57 +0000 Manifest next update: Thu 18 Dec 2025 11:00:57 +0000 Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=) 2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: 2Ej86Ync6Nm1B5NM+JQL2Gb3zuEyMnXWqeHlFklQOA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:63:dd:b1:e2:05:84:9b:5b:46:1d:b3:aa:fb:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391 Validity Not Before: Dec 17 11:00:57 2025 GMT Not After : Dec 18 11:00:57 2025 GMT Subject: CN=20e2e0bad39d293fe02b4ffabf258e72167669d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:f2:d4:63:68:79:28:71:cc:26:89:02:bd: 72:c5:5f:3a:2e:14:cd:69:35:63:fa:90:d2:78:54: 1f:db:6b:43:ad:88:62:7f:44:c1:9a:51:89:9d:3d: 8e:27:88:13:23:58:06:8c:11:49:30:89:ab:9a:2d: 46:07:35:5b:bb:32:dc:3d:c8:ac:2a:b3:64:7b:7d: c0:f9:30:21:91:53:2c:b3:f0:a6:95:08:41:7f:fb: c8:c8:bf:7b:9a:f7:bc:bb:e4:87:4b:a2:f5:a3:f6: eb:1b:7e:62:bc:de:bb:9e:97:9d:0b:c1:f8:1c:13: 89:39:51:4d:ce:97:fd:a9:bf:b1:76:ad:41:63:5b: 56:1e:59:39:66:37:b0:fb:8d:6c:b4:42:65:10:3f: 8f:3b:73:17:fb:da:3b:f9:ab:9e:fb:e4:3d:7a:95: 79:c7:5e:36:28:ae:8b:41:0d:50:12:27:f2:29:51: 24:fd:38:ea:e2:b1:0c:82:97:31:63:01:cd:40:cf: f8:89:d6:17:7a:ef:3c:c8:3c:86:67:39:ef:89:08: c8:99:ea:cf:90:83:46:f4:fd:94:d2:2a:8c:b1:5e: 41:b9:6b:17:a7:1d:85:16:96:af:ae:ce:59:33:45: f6:75:a7:db:e4:97:b3:97:5e:d2:c8:11:d5:e1:0f: bc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:E0:BA:D3:9D:29:3F:E0:2B:4F:FA:BF:25:8E:72:16:76:69:D1 X509v3 Authority Key Identifier: keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:1a:59:58:ee:2f:36:0f:cb:d1:16:1d:63:2d:f8:ab:c0:3c: 70:f5:78:c3:06:4b:ca:23:df:f2:73:43:df:f8:d3:c3:32:84: 2e:a5:1a:1a:e2:78:f2:ce:ae:20:e7:82:cd:71:c4:ac:df:00: 31:28:d3:70:78:c5:d8:5f:69:20:17:14:da:1d:1c:19:33:3b: 49:2f:02:6c:5f:ab:95:ea:5c:76:e7:01:42:8b:be:1c:4c:d5: 6d:93:62:27:b7:f3:4c:e9:f5:ea:1f:4a:fe:5c:fa:09:47:62: 22:90:2d:c6:5a:39:cc:4b:06:92:bc:ff:20:7e:ae:35:d9:1f: d4:59:69:ef:cc:fd:8d:74:b0:37:28:da:ac:c8:61:98:7a:45: 0c:d9:2c:ce:d9:6a:a6:d5:08:75:be:db:da:d2:9e:03:c6:3a: 58:8c:93:c1:3c:0e:0f:72:f2:27:10:a3:d1:d3:78:88:a7:e8: c2:9e:e1:5c:60:92:2a:c2:fb:9f:83:00:6c:01:49:9c:19:fd: 4e:20:07:26:63:30:63:ba:3b:98:82:6f:66:e3:73:d3:ea:3b: c0:ed:69:7d:8e:2e:09:5b:31:9b:c6:f7:5c:dd:4b:44:8b:4a: f7:f8:e5:07:ad:69:ad:e1:bd:a8:79:a6:ce:4b:b7:fa:4b:6c: 30:73:9a:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+GPdseIFhJtbRh2zqvsBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjM2MzkwNjBmZjg3YTc3ZmM2N2E2ZTAzYzBjNGRkMmFl NGMzOTEwHhcNMjUxMjE3MTEwMDU3WhcNMjUxMjE4MTEwMDU3WjAzMTEwLwYDVQQD EygyMGUyZTBiYWQzOWQyOTNmZTAyYjRmZmFiZjI1OGU3MjE2NzY2OWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZLy1GNoeShxzCaJAr1yxV86LhTN aTVj+pDSeFQf22tDrYhif0TBmlGJnT2OJ4gTI1gGjBFJMImrmi1GBzVbuzLcPcis KrNke33A+TAhkVMss/CmlQhBf/vIyL97mve8u+SHS6L1o/brG35ivN67npedC8H4 HBOJOVFNzpf9qb+xdq1BY1tWHlk5Zjew+41stEJlED+PO3MX+9o7+aue++Q9epV5 x142KK6LQQ1QEifyKVEk/Tjq4rEMgpcxYwHNQM/4idYXeu88yDyGZznviQjImerP kING9P2U0iqMsV5BuWsXpx2FFpavrs5ZM0X2dafb5Jezl17SyBHV4Q+8UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDi4LrTnSk/4CtP+r8ljnIWdmnRMB8GA1UdIwQY MBaAFJsjY5Bg/4enf8Z6bgPAxN0q5MORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMt NWFmYzNhNGZlNTQyLzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMtNWFmYzNhNGZlNTQy LzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRpZWO4v Ng/L0RYdYy34q8A8cPV4wwZLyiPf8nND3/jTwzKELqUaGuJ48s6uIOeCzXHErN8A MSjTcHjF2F9pIBcU2h0cGTM7SS8CbF+rlepcducBQou+HEzVbZNiJ7fzTOn16h9K /lz6CUdiIpAtxlo5zEsGkrz/IH6uNdkf1Flp78z9jXSwNyjarMhhmHpFDNksztlq ptUIdb7b2tKeA8Y6WIyTwTwOD3LyJxCj0dN4iKfowp7hXGCSKsL7n4MAbAFJnBn9 TiAHJmMwY7o7mIJvZuNz0+o7wO1pfY4uCVsxm8b3XN1LRItK9/jlB61preG9qHmm zku3+ktsMHOa7w== -----END CERTIFICATE-----Generated at Wed Dec 17 16:46:38 2025 by rpki-client