This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft File: myNjkGD_h6d_xnpuA8DE3Srkw5E.mft (raw, json) Hash identifier: mWBIukTr+4Ols0Zt8w5taJIwaszoXgRrpD9MDnq91ks= Subject key identifier: 89:A5:AE:99:E6:72:35:69:15:42:69:FB:53:9F:F6:18:62:80:5C:44 Authority key identifier: 9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91 Certificate issuer: /CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391 Certificate serial: 019B2A09FDD3E6ADD7BB4135EB90B7CA6A5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 02:00:56 +0000 Manifest this update: Wed 17 Dec 2025 02:00:56 +0000 Manifest next update: Thu 18 Dec 2025 02:00:56 +0000 Files and hashes: 1: NN299CMGcNrQCWLhS0OXaJqVLGQ.roa (hash: 93xwbIS/LqBoxP2s7kvpuTwTAH+EjaA0+8jXoFMAE+Y=) 2: myNjkGD_h6d_xnpuA8DE3Srkw5E.crl (hash: yzHa/CkNBuQ2hJ7X9UazTe4FwjIqJUkgwXHr0V3vLzg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:09:fd:d3:e6:ad:d7:bb:41:35:eb:90:b7:ca:6a:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b23639060ff87a77fc67a6e03c0c4dd2ae4c391 Validity Not Before: Dec 17 02:00:56 2025 GMT Not After : Dec 18 02:00:56 2025 GMT Subject: CN=89a5ae99e6723569154269fb539ff61862805c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:ab:31:2f:db:bb:29:85:0c:87:8b:88:be: d0:9b:c9:bf:5e:92:4f:17:d3:8a:ac:0b:76:1b:b1: 21:e2:71:3e:43:5d:ec:7b:46:0f:5e:87:b9:c1:b7: 86:6f:b5:91:f6:81:83:9a:7e:95:6d:b5:8b:d5:5b: e7:9f:4d:12:f2:ae:1b:60:60:f5:aa:b2:06:f1:f8: e5:4c:79:61:e2:11:45:87:a1:7f:41:72:cd:4f:29: 06:0c:6f:63:ec:ad:e8:68:e5:08:2a:2e:ff:3c:45: fb:e4:62:fd:f4:b1:23:fe:be:fb:b6:9d:be:7e:b8: 36:e7:55:ec:41:49:61:1e:d6:04:71:4a:72:04:1a: 16:9e:83:de:b1:12:4b:74:9d:bc:43:2f:8d:6d:30: 23:3b:64:d8:c6:8a:31:d0:03:f0:ab:64:f3:d6:4f: 0f:40:de:4d:1c:16:3a:3e:23:a8:3a:19:2b:b9:ab: 9a:09:ce:dd:2d:3c:7d:a8:09:35:2d:27:1d:95:c5: e7:f0:d0:9b:f9:70:3d:cb:a1:a5:01:f3:ea:ba:55: 3b:d2:52:4b:2f:18:a1:6d:73:45:8f:4c:d7:61:c8: 94:62:cf:ad:5e:7f:3f:5c:b0:bc:de:c8:dd:3a:55: 2c:97:07:a1:99:86:6f:2b:09:81:80:88:27:35:48: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A5:AE:99:E6:72:35:69:15:42:69:FB:53:9F:F6:18:62:80:5C:44 X509v3 Authority Key Identifier: keyid:9B:23:63:90:60:FF:87:A7:7F:C6:7A:6E:03:C0:C4:DD:2A:E4:C3:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/myNjkGD_h6d_xnpuA8DE3Srkw5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5d5f73-63b9-4aaa-a8ec-5afc3a4fe542/1/myNjkGD_h6d_xnpuA8DE3Srkw5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:65:98:5f:44:8a:ff:46:03:b0:38:a8:d3:93:04:ce:67:f1: 5b:e1:1d:26:9b:e5:9f:24:bd:7b:68:ca:ab:e5:5f:62:b1:1b: 93:3c:aa:de:76:84:57:1b:22:67:cb:7c:b8:f8:b9:ae:98:f8: d7:41:c5:5c:29:7d:4a:d6:a9:c6:55:20:2e:05:06:72:4a:05: dc:e9:8e:42:c0:55:5e:91:03:ce:55:ae:b5:21:8d:db:49:77: 29:21:ce:fb:bd:93:66:06:74:4e:fe:ae:d0:60:0d:c9:ee:d3: 4c:54:eb:37:18:7d:b2:cf:21:04:39:c6:1d:85:e9:01:85:61: 25:f2:4b:fc:f9:51:9a:03:e2:fc:ec:f4:a4:e0:ce:12:97:eb: d0:26:ca:12:ee:15:4f:62:5f:fa:92:6e:6c:f8:14:1d:0f:83: da:eb:b9:8b:be:36:e8:9f:2e:9d:7d:20:ee:5e:b4:6f:42:7e: 91:43:64:e8:e0:d5:74:8f:83:ba:26:36:8e:d3:c2:c0:af:2e: f9:89:89:cf:66:5e:4f:d4:75:29:eb:f0:ba:8d:20:19:5d:f2: d4:53:19:3f:61:93:e7:d5:fc:63:4f:65:38:77:54:eb:fa:d3: 3d:3f:de:20:be:a3:e9:ee:26:cc:19:67:c3:96:48:05:55:05: dd:dc:5d:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqCf3T5q3Xu0E165C3ympdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMjM2MzkwNjBmZjg3YTc3ZmM2N2E2ZTAzYzBjNGRkMmFl NGMzOTEwHhcNMjUxMjE3MDIwMDU2WhcNMjUxMjE4MDIwMDU2WjAzMTEwLwYDVQQD Eyg4OWE1YWU5OWU2NzIzNTY5MTU0MjY5ZmI1MzlmZjYxODYyODA1YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOarMS/buymFDIeLiL7Qm8m/XpJP F9OKrAt2G7Eh4nE+Q13se0YPXoe5wbeGb7WR9oGDmn6VbbWL1Vvnn00S8q4bYGD1 qrIG8fjlTHlh4hFFh6F/QXLNTykGDG9j7K3oaOUIKi7/PEX75GL99LEj/r77tp2+ frg251XsQUlhHtYEcUpyBBoWnoPesRJLdJ28Qy+NbTAjO2TYxoox0APwq2Tz1k8P QN5NHBY6PiOoOhkruauaCc7dLTx9qAk1LScdlcXn8NCb+XA9y6GlAfPqulU70lJL LxihbXNFj0zXYciUYs+tXn8/XLC83sjdOlUslwehmYZvKwmBgIgnNUj6lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImlrpnmcjVpFUJp+1Of9hhigFxEMB8GA1UdIwQY MBaAFJsjY5Bg/4enf8Z6bgPAxN0q5MORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMt NWFmYzNhNGZlNTQyLzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81ZDVmNzMtNjNiOS00YWFhLWE4ZWMtNWFmYzNhNGZlNTQy LzEvbXlOamtHRF9oNmRfeG5wdUE4REUzU3JrdzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGWYX0SK /0YDsDio05MEzmfxW+EdJpvlnyS9e2jKq+VfYrEbkzyq3naEVxsiZ8t8uPi5rpj4 10HFXCl9StapxlUgLgUGckoF3OmOQsBVXpEDzlWutSGN20l3KSHO+72TZgZ0Tv6u 0GANye7TTFTrNxh9ss8hBDnGHYXpAYVhJfJL/PlRmgPi/Oz0pODOEpfr0CbKEu4V T2Jf+pJubPgUHQ+D2uu5i7426J8unX0g7l60b0J+kUNk6ODVdI+DuiY2jtPCwK8u +YmJz2ZeT9R1Kevwuo0gGV3y1FMZP2GT59X8Y09lOHdU6/rTPT/eIL6j6e4mzBln w5ZIBVUF3dxdqg== -----END CERTIFICATE-----Generated at Wed Dec 17 09:47:29 2025 by rpki-client