This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft File: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft (raw, json) Hash identifier: NJ7e4wiXUfwFFC5XkLEdWKs20Fb9dj01s0I/LPvIQ9c= Subject key identifier: 0B:C2:77:5D:35:E2:23:E6:A8:2B:82:7B:49:CC:49:0B:AF:24:27:8E Authority key identifier: 36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA Certificate issuer: /CN=363bd1b29c89edb944e28710d193874c94323eaa Certificate serial: 019B2D0CB6C1D0BE5F053E4D8371543676B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft Manifest number: 0463 Signing time: Wed 17 Dec 2025 16:02:46 +0000 Manifest this update: Wed 17 Dec 2025 16:02:46 +0000 Manifest next update: Thu 18 Dec 2025 16:02:46 +0000 Files and hashes: 1: NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl (hash: /0Athg6nV+ce/GxZPtOpW3hzk8jF+m+1edJ4vL1VgA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 16:02:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:b6:c1:d0:be:5f:05:3e:4d:83:71:54:36:76:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363bd1b29c89edb944e28710d193874c94323eaa Validity Not Before: Dec 17 16:02:46 2025 GMT Not After : Dec 18 16:02:46 2025 GMT Subject: CN=0bc2775d35e223e6a82b827b49cc490baf24278e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1f:9d:e0:39:d1:95:4e:f3:d0:04:63:f9:6e: d8:e2:46:f0:d1:0d:19:80:46:9e:e0:1e:03:fa:b5: 80:d2:9e:75:f0:e8:63:95:3e:cd:86:28:4e:53:20: 1a:60:39:58:a0:52:6c:a1:0a:cb:f1:74:e6:08:72: 7b:8a:fb:5a:21:b5:2e:ca:5b:ba:99:bd:82:26:3e: bc:6c:07:15:27:b9:7f:ce:06:59:84:a5:1c:61:dc: 28:b2:0d:2d:f9:07:5a:b3:8a:56:d8:35:73:f2:c9: 75:35:ea:51:de:72:5d:93:56:38:42:f0:b4:91:25: d8:e0:88:e2:a4:5c:d2:d7:15:e7:b1:06:7a:bd:8c: fe:b5:15:02:a0:8c:2f:05:d5:bb:67:ab:b9:c9:62: ad:02:b0:2a:18:47:73:80:59:c5:23:73:b5:f2:ef: 2d:32:7a:e6:cf:a7:c5:bd:45:dc:cd:f8:a3:c2:fb: 83:df:0d:9f:18:58:e2:0e:05:1f:ad:1f:4a:1c:c9: 72:ce:22:3d:01:fa:0b:d1:57:63:d8:25:a3:21:f5: 95:f9:bc:8a:53:98:e3:1e:15:f4:f6:7b:d1:1d:b9: 6e:0b:9e:cd:20:2d:89:9c:38:d9:c5:6e:6f:09:94: 74:53:5e:08:2f:c8:47:b2:52:78:f6:2e:c3:23:40: 99:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:C2:77:5D:35:E2:23:E6:A8:2B:82:7B:49:CC:49:0B:AF:24:27:8E X509v3 Authority Key Identifier: keyid:36:3B:D1:B2:9C:89:ED:B9:44:E2:87:10:D1:93:87:4C:94:32:3E:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c961a4-c6a6-42ca-a18f-124658b36dfd/1/NjvRspyJ7blE4ocQ0ZOHTJQyPqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:90:2e:c0:ec:c3:a4:59:7d:2e:ca:14:1c:6d:c0:da:c9:84: 29:b7:2b:01:2d:59:0b:1b:bb:c1:c2:22:d9:b6:95:ed:de:a4: 58:49:b8:f8:4c:33:13:e4:ca:c4:e6:49:27:ee:76:db:e4:7c: 04:f0:91:aa:b7:bb:71:c9:00:ab:f0:2d:40:ba:6e:18:a5:12: 0a:74:8f:8d:79:4b:b7:0a:91:8e:52:f0:1a:cf:b2:96:3d:4e: 38:99:5d:41:a3:3f:ac:28:d9:61:d5:7b:6e:81:8f:ea:38:e0: eb:61:1a:88:a2:e1:29:7d:67:fe:5a:b2:69:5c:8b:7f:9a:9a: a1:67:46:15:50:4e:e0:45:20:86:fe:5a:bf:9a:38:7e:82:fc: 3f:08:a5:d5:ef:5e:7c:fb:ab:ac:f1:bc:a1:10:a4:09:4f:d1: 35:ca:40:37:f8:f0:36:9c:84:70:66:24:d3:e2:e7:56:f0:e9: ea:e8:a6:54:64:ac:c5:9b:52:48:aa:66:74:04:44:95:5d:02: 60:87:bb:f5:fa:28:43:50:21:4d:7b:8d:e0:25:ec:76:e3:83: 1c:b4:93:1a:a5:d8:cc:dd:cf:04:25:cd:40:63:7c:bd:0b:c1: 59:99:c9:dc:3b:16:09:02:33:04:08:bb:56:eb:8c:b8:e2:4d: 95:3f:e5:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDLbB0L5fBT5Ng3FUNnayMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2JkMWIyOWM4OWVkYjk0NGUyODcxMGQxOTM4NzRjOTQz MjNlYWEwHhcNMjUxMjE3MTYwMjQ2WhcNMjUxMjE4MTYwMjQ2WjAzMTEwLwYDVQQD EygwYmMyNzc1ZDM1ZTIyM2U2YTgyYjgyN2I0OWNjNDkwYmFmMjQyNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR+d4DnRlU7z0ARj+W7Y4kbw0Q0Z gEae4B4D+rWA0p518OhjlT7NhihOUyAaYDlYoFJsoQrL8XTmCHJ7ivtaIbUuylu6 mb2CJj68bAcVJ7l/zgZZhKUcYdwosg0t+Qdas4pW2DVz8sl1NepR3nJdk1Y4QvC0 kSXY4IjipFzS1xXnsQZ6vYz+tRUCoIwvBdW7Z6u5yWKtArAqGEdzgFnFI3O18u8t Mnrmz6fFvUXczfijwvuD3w2fGFjiDgUfrR9KHMlyziI9AfoL0Vdj2CWjIfWV+byK U5jjHhX09nvRHbluC57NIC2JnDjZxW5vCZR0U14IL8hHslJ49i7DI0CZ3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvCd1014iPmqCuCe0nMSQuvJCeOMB8GA1UdIwQY MBaAFDY70bKcie25ROKHENGTh0yUMj6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYt MTI0NjU4YjM2ZGZkLzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jOTYxYTQtYzZhNi00MmNhLWExOGYtMTI0NjU4YjM2ZGZk LzEvTmp2UnNweUo3YmxFNG9jUTBaT0hUSlF5UHFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfpAuwOzD pFl9LsoUHG3A2smEKbcrAS1ZCxu7wcIi2baV7d6kWEm4+EwzE+TKxOZJJ+522+R8 BPCRqre7cckAq/AtQLpuGKUSCnSPjXlLtwqRjlLwGs+ylj1OOJldQaM/rCjZYdV7 boGP6jjg62EaiKLhKX1n/lqyaVyLf5qaoWdGFVBO4EUghv5av5o4foL8Pwil1e9e fPurrPG8oRCkCU/RNcpAN/jwNpyEcGYk0+LnVvDp6uimVGSsxZtSSKpmdARElV0C YIe79fooQ1AhTXuN4CXsduODHLSTGqXYzN3PBCXNQGN8vQvBWZnJ3DsWCQIzBAi7 VuuMuOJNlT/lbw== -----END CERTIFICATE-----Generated at Wed Dec 17 20:47:08 2025 by rpki-client