This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft File: Njdp-GRKWnGK5isFjdH7YstaPCA.mft (raw, json) Hash identifier: ItszlYXhDj37bbVyGGJu6R5cjdwLCWN4SkO/rLF+opY= Subject key identifier: 05:7D:D0:E3:6E:0C:53:BF:26:C4:34:0D:73:D7:DD:FC:47:2D:F7:96 Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B3B34F6EE23306C097E157027219E0DC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft Manifest number: 13D9 Signing time: Sat 20 Dec 2025 10:01:25 +0000 Manifest this update: Sat 20 Dec 2025 10:01:25 +0000 Manifest next update: Sun 21 Dec 2025 10:01:25 +0000 Files and hashes: 1: 9_VTzPNMtq6bRoN_2gQPbFirB_4.roa (hash: GFcx39JAffdglXqipIFTeQRGB4wpQ89alaTRPqJNkCk=) 2: 9d7-oiu-mBjw4z1zBB1dh7CSH94.roa (hash: NSPVHDDpPzrpqQjtgOJxVDl+4YeQklgmMnIIlaE/zH4=) 3: BxI-z_iKAoRv-KkoQfmyFBd2rBU.roa (hash: azqV4pSZAum5oUwc2nR9O4azmHBN9hS6/dWIvs6n6Yk=) 4: I9XUisFoxGtL5nlEyDkRm9SxnHU.roa (hash: CRR3lDaaR4JHFLVIWiAceY/tOhJb5JmxYXyKyqN2k7o=) 5: JwtLcTu5YVfj_v6EYmBkVEJOCSk.roa (hash: Z/uV55YxgNv0N3LLBrV+q7AxLOdh39PbZ8CIfU7Xb24=) 6: Njdp-GRKWnGK5isFjdH7YstaPCA.crl (hash: eMW1k8cKD61oPmnLH0XE6+7+UKlrjR0KhJG9PUE48bs=) 7: UB0nHtcN2JqEpsBiE2dgnMbsFmA.roa (hash: /6u2jCfdxJpMMlfUjlpcIXqMInwiMRNkGcmBxEuYZxo=) 8: iVFWKpRKrZrvXfyBPCiicWzEtLc.roa (hash: ySfsYFD8sJUIiFlWUtE2uw6TxmR7ZrKTk3Ot39sI2WQ=) 9: mMGXQdchjm-1k_0cqBgKyEDxRR4.roa (hash: 3upgVfgQw3wj9y0X5oDRyiDppWmgLqIOtqf6K+MUlIM=) 10: nI4pg8TJwdBGvcOSMEwiKdACRgY.roa (hash: e4fjV36QQP3EEWEcje1wCzIbRILO6c8V4Bt3WpH8Zcc=) 11: nqKarluaIBxurSOLKoj0fda_I6o.roa (hash: 0igWebpYrmPU5dIZIocnzzs4+9GsDMulHYWmTIL37ig=) 12: o5rwtBSGBeueFoqXJnECfg6cmYA.roa (hash: TLPcNxEKVGJq+q8J97N3QnvxQz4N/IjsjG2sJIGRFeA=) 13: okDig36WatgfOljJ7YAQ7f4qAwI.roa (hash: 9F0Jk3aBVBsMc/BBPP2ZGmKOPXIvDvI2DUUSrfyHD70=) 14: pVY_FGIDhlEf6vs7MShMAVBNlQk.roa (hash: 36C0/NjrkK4EvhEr+5+ZgIKhG5JQMFDTmhg9XNYss9Q=) 15: snSvPYVkGepL_9GgsNIGnoIWw44.roa (hash: T0HMAvigAIpTuY/J9VuaKFj34+4Tc7VdD2Bhy8snzbA=) 16: uiYUyTWWE4PZpkpKN5LB2EKpPu0.roa (hash: z03Urv4xQycLb08btj7gfHzMCKzXb1kRu0QwraJJBFQ=) 17: xZ2Mzu_3c40aDFLd62CdvQWebug.roa (hash: xKY3AuHc8X/lxha18soPYIUuGtqbxocRZavr4da/On8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:f6:ee:23:30:6c:09:7e:15:70:27:21:9e:0d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Dec 20 10:01:25 2025 GMT Not After : Dec 21 10:01:25 2025 GMT Subject: CN=057dd0e36e0c53bf26c4340d73d7ddfc472df796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1e:e7:e8:5d:ad:79:6e:91:7e:5a:ca:c8:aa: 6e:ae:3d:fd:5b:ec:01:27:fd:e8:f6:01:bd:51:f8: 44:1e:e6:2d:10:d5:a0:66:b9:cb:cf:8a:b9:db:2f: 7c:72:0a:bf:2e:48:b9:be:4d:1b:42:db:ef:d4:5a: de:1b:15:96:8e:7f:1d:dd:1f:05:40:12:41:e4:e4: 3e:28:22:0e:c7:43:de:ab:04:53:b5:b0:94:94:b3: 72:76:27:33:07:28:78:df:96:f3:24:99:7f:2c:e2: 68:83:d8:6c:b8:ad:04:91:68:c6:da:07:01:e1:80: 1b:6c:fd:04:56:73:ce:22:c1:d3:68:dd:cd:31:b7: 65:20:e2:61:d2:0e:6a:b3:8d:9f:74:1b:ca:ee:99: 55:8d:c1:fb:5f:7d:db:fe:65:c9:d9:57:a2:1f:34: ad:11:f3:01:62:ef:b5:a2:29:c4:30:d0:1d:d6:c7: 60:cc:c8:fd:17:1a:fd:47:33:85:66:21:1a:5d:86: ad:61:5a:7a:77:4d:e3:3e:52:13:6e:84:c9:15:af: 90:30:61:60:af:67:06:02:24:97:c4:35:17:ce:4e: b6:8b:e8:5e:1a:46:9e:2a:80:6f:2c:c0:ca:b4:ad: dc:15:8a:11:b4:77:33:24:5c:47:c2:9e:3b:2e:ae: 76:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:7D:D0:E3:6E:0C:53:BF:26:C4:34:0D:73:D7:DD:FC:47:2D:F7:96 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:77:b6:93:c6:f4:74:98:3e:88:14:bd:9d:6b:fc:12:75:68: 72:01:03:90:2b:a6:f1:ac:a9:d0:83:87:e3:47:c1:d8:6f:b6: 87:d1:ca:16:e3:ad:38:30:17:dd:aa:f7:ab:5f:4e:7e:69:93: 5a:2d:43:84:75:cb:1a:27:35:b0:24:d0:3c:61:ec:14:33:ef: ba:b3:79:63:6d:93:41:a5:ec:d1:6f:64:bc:9b:1b:3a:6d:1b: 25:4d:bf:90:dc:c0:e9:a1:97:ac:07:51:96:ee:0e:95:91:8c: 0b:30:34:07:de:99:74:65:42:0c:e0:dd:61:34:97:31:a1:9f: ae:e9:93:ef:ec:89:6e:49:4c:4c:25:f3:8d:6f:7f:05:d6:0f: 47:54:26:16:17:1f:d9:d0:d5:9b:37:44:81:1d:f2:12:28:44: 17:62:61:57:c5:de:95:ca:82:a1:e5:68:98:a2:9e:3e:ce:cc: 3d:f5:d3:f2:44:1d:fb:6d:c2:2e:e8:9a:9a:85:69:f1:31:43: e1:fc:df:d2:f1:77:52:45:80:82:49:8e:5a:c5:e0:34:57:72: 65:b3:ec:27:07:fd:6d:7b:b8:91:6e:77:1c:32:14:9e:5b:ac: ad:6d:fe:56:87:b8:c5:8a:7f:6e:9f:69:e3:ea:16:57:f9:7d: b7:c4:08:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NPbuIzBsCX4VcCchng3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjUxMjIwMTAwMTI1WhcNMjUxMjIxMTAwMTI1WjAzMTEwLwYDVQQD EygwNTdkZDBlMzZlMGM1M2JmMjZjNDM0MGQ3M2Q3ZGRmYzQ3MmRmNzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7R7n6F2teW6RflrKyKpurj39W+wB J/3o9gG9UfhEHuYtENWgZrnLz4q52y98cgq/Lki5vk0bQtvv1FreGxWWjn8d3R8F QBJB5OQ+KCIOx0PeqwRTtbCUlLNydiczByh435bzJJl/LOJog9hsuK0EkWjG2gcB 4YAbbP0EVnPOIsHTaN3NMbdlIOJh0g5qs42fdBvK7plVjcH7X33b/mXJ2VeiHzSt EfMBYu+1oinEMNAd1sdgzMj9Fxr9RzOFZiEaXYatYVp6d03jPlITboTJFa+QMGFg r2cGAiSXxDUXzk62i+heGkaeKoBvLMDKtK3cFYoRtHczJFxHwp47Lq52HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAV90ONuDFO/JsQ0DXPX3fxHLfeWMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3e2k8b0 dJg+iBS9nWv8EnVocgEDkCum8ayp0IOH40fB2G+2h9HKFuOtODAX3ar3q19OfmmT Wi1DhHXLGic1sCTQPGHsFDPvurN5Y22TQaXs0W9kvJsbOm0bJU2/kNzA6aGXrAdR lu4OlZGMCzA0B96ZdGVCDODdYTSXMaGfrumT7+yJbklMTCXzjW9/BdYPR1QmFhcf 2dDVmzdEgR3yEihEF2JhV8XelcqCoeVomKKePs7MPfXT8kQd+23CLuiamoVp8TFD 4fzf0vF3UkWAgkmOWsXgNFdyZbPsJwf9bXu4kW53HDIUnlusrW3+Voe4xYp/bp9p 4+oWV/l9t8QIUg== -----END CERTIFICATE-----Generated at Sat Dec 20 13:12:27 2025 by rpki-client