This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft (raw, json) Hash identifier: al4yAEUXKAErUBCGAph+onlWqNC/kwQjC4NXM1jiMdg= Subject key identifier: 1A:47:40:10:3D:08:AC:9C:97:77:A2:4F:DB:85:AF:F4:8E:CC:4E:FC Authority key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3 Certificate issuer: /CN=363548ed4628966248204c2fe69065f0d7b527a3 Certificate serial: 019B5DC0A5299D08D56A2BB4F032990FDB40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 03:01:04 +0000 Manifest this update: Sat 27 Dec 2025 03:01:04 +0000 Manifest next update: Sun 28 Dec 2025 03:01:04 +0000 Files and hashes: 1: NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl (hash: nxV0AdLbSYf7G+c7g4EvbRSqI9VG71VB/suF9G9SEFk=) 2: ZTPqCUD63V4eQMXnLn6AnTQCitU.roa (hash: ywlhEvz+62iFTUdrK6be6oxB9Yvs+N63Zrh3s7mdFzs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:c0:a5:29:9d:08:d5:6a:2b:b4:f0:32:99:0f:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363548ed4628966248204c2fe69065f0d7b527a3 Validity Not Before: Dec 27 03:01:04 2025 GMT Not After : Dec 28 03:01:04 2025 GMT Subject: CN=1a4740103d08ac9c9777a24fdb85aff48ecc4efc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:7e:7c:45:4e:f6:fc:06:40:73:21:e9:0b: ac:0a:5a:8d:50:91:ac:63:86:38:52:02:d7:2c:a0: 2b:89:31:f0:01:16:94:bd:62:55:f6:93:ae:0a:ed: b1:3f:f1:fa:fc:cc:60:49:15:07:95:18:b0:ef:df: 5c:16:e4:f5:16:eb:13:ba:ab:30:21:3c:c0:99:76: c1:0b:bb:64:c2:40:44:e3:6d:5c:0e:1d:5f:f4:ad: a9:29:1c:c6:74:43:19:fb:c5:f6:ac:6a:19:61:0a: fa:42:aa:29:64:34:42:fc:1d:e8:04:6d:8e:fe:b6: ce:69:13:b2:66:4b:57:38:6d:cd:7c:97:f1:76:e0: 1a:15:e1:4e:9b:25:7a:09:ee:30:fc:78:ce:f5:07: 03:9a:28:df:c0:6c:3d:07:9b:fc:3a:ab:d6:89:11: 2a:65:1c:7b:ba:54:36:17:8e:94:bf:14:72:73:fe: c4:46:9e:3d:0d:dc:e3:1e:65:a9:2e:0e:a0:53:0d: cd:92:6a:55:c7:40:a2:ee:2e:9e:d3:60:dd:b2:99: 27:e3:c0:e4:8a:f4:1e:41:43:fb:27:a6:a6:bf:59: aa:f9:e0:e4:c0:17:81:24:c6:54:96:5f:fc:ee:73: 88:a1:c7:d2:ea:f0:9b:b6:d8:30:35:9f:0d:db:54: 2c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:47:40:10:3D:08:AC:9C:97:77:A2:4F:DB:85:AF:F4:8E:CC:4E:FC X509v3 Authority Key Identifier: keyid:36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:91:11:05:d7:f9:4f:bd:00:da:e6:0c:8e:13:c0:8e:8b:c9: e9:68:72:ff:bd:3c:c3:3b:57:15:23:25:26:a3:03:36:6e:8e: 32:68:38:2c:1a:5c:7e:09:36:ff:80:e9:ea:fb:09:5f:00:3b: 80:6e:a4:ca:06:e5:a3:b4:35:23:b3:af:11:25:38:c0:92:aa: b3:e4:f6:8b:13:2c:86:60:b3:8f:f2:2c:fb:71:1e:ab:5c:f8: e5:39:c1:12:1c:6b:e0:c0:88:76:f3:da:13:02:86:b3:e2:a6: fb:e5:d9:2a:b9:4b:d6:44:9d:4a:98:94:0b:b8:e3:f9:ca:c0: 79:cb:57:8f:4d:84:91:af:e1:86:bf:dd:51:f2:9d:52:3d:cb: b0:4e:96:a6:b5:d1:7e:1e:b8:7a:71:63:a4:af:de:e7:3b:11: 9f:8f:a8:d7:41:2c:16:3f:8f:1a:79:bd:2b:fc:da:40:87:6c: 18:ef:a4:48:75:9b:af:a1:2f:d1:53:20:e0:2b:4b:a1:c2:42: a0:d9:b7:2e:8d:e0:7a:89:7f:c1:88:1d:e8:06:eb:8f:06:c7: 46:f3:0d:f8:51:f0:86:6f:3a:bf:29:5b:6b:eb:78:72:2a:b3: c6:d9:52:77:be:a7:24:80:0c:f6:dc:f9:5d:06:b8:81:14:7c: 43:c0:c3:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdwKUpnQjVaiu08DKZD9tAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzU0OGVkNDYyODk2NjI0ODIwNGMyZmU2OTA2NWYwZDdi NTI3YTMwHhcNMjUxMjI3MDMwMTA0WhcNMjUxMjI4MDMwMTA0WjAzMTEwLwYDVQQD EygxYTQ3NDAxMDNkMDhhYzljOTc3N2EyNGZkYjg1YWZmNDhlY2M0ZWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dR+fEVO9vwGQHMh6QusClqNUJGs Y4Y4UgLXLKAriTHwARaUvWJV9pOuCu2xP/H6/MxgSRUHlRiw799cFuT1FusTuqsw ITzAmXbBC7tkwkBE421cDh1f9K2pKRzGdEMZ+8X2rGoZYQr6QqopZDRC/B3oBG2O /rbOaROyZktXOG3NfJfxduAaFeFOmyV6Ce4w/HjO9QcDmijfwGw9B5v8OqvWiREq ZRx7ulQ2F46UvxRyc/7ERp49DdzjHmWpLg6gUw3NkmpVx0Ci7i6e02Ddspkn48Dk ivQeQUP7J6amv1mq+eDkwBeBJMZUll/87nOIocfS6vCbttgwNZ8N21QsZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpHQBA9CKycl3eiT9uFr/SOzE78MB8GA1UdIwQY MBaAFDY1SO1GKJZiSCBML+aQZfDXtSejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2Yt OTVjNGU5NGFkMGE5LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NWRjODMtMjcwNy00OTE3LWI2M2YtOTVjNGU5NGFkMGE5 LzEvTmpWSTdVWW9sbUpJSUV3djVwQmw4TmUxSjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5ERBdf5 T70A2uYMjhPAjovJ6Why/708wztXFSMlJqMDNm6OMmg4LBpcfgk2/4Dp6vsJXwA7 gG6kygblo7Q1I7OvESU4wJKqs+T2ixMshmCzj/Is+3Eeq1z45TnBEhxr4MCIdvPa EwKGs+Km++XZKrlL1kSdSpiUC7jj+crAectXj02Eka/hhr/dUfKdUj3LsE6WprXR fh64enFjpK/e5zsRn4+o10EsFj+PGnm9K/zaQIdsGO+kSHWbr6Ev0VMg4CtLocJC oNm3Lo3geol/wYgd6AbrjwbHRvMN+FHwhm86vylba+t4ciqzxtlSd76nJIAM9tz5 XQa4gRR8Q8DDCA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:51:24 2025 by rpki-client