This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft File: njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json) Hash identifier: hY38Hs/nXCEV7kZyZllTc+6RHHc9/SSy3tJ8hHA+b5U= Subject key identifier: 7E:1B:DE:A0:EB:B2:A0:91:96:FC:12:11:C6:4B:E9:81:64:2C:D9:4D Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Certificate serial: 019B397D076E2961331807D7BC1C26B3B9D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft Manifest number: 1746 Signing time: Sat 20 Dec 2025 02:00:53 +0000 Manifest this update: Sat 20 Dec 2025 02:00:53 +0000 Manifest next update: Sun 21 Dec 2025 02:00:53 +0000 Files and hashes: 1: GlUPmztHj05vZ1Vup3NDG_Lg4PE.roa (hash: 1cVanJIyzbdaXi+XNYZJuMmXonQvqhc1hNQx9fPiOlY=) 2: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=) 3: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=) 4: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=) 5: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: zLREUsMpRdXXZXuLfCoXt9I6Tys1Mzr8hvOYEPlCF8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:07:6e:29:61:33:18:07:d7:bc:1c:26:b3:b9:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28 Validity Not Before: Dec 20 02:00:53 2025 GMT Not After : Dec 21 02:00:53 2025 GMT Subject: CN=7e1bdea0ebb2a09196fc1211c64be981642cd94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:24:d1:0d:fd:17:bd:22:ba:c0:4d:23:fb:68: 63:5b:0a:6d:58:4d:f4:e2:01:7c:bc:e3:28:27:92: 80:55:81:ff:a0:5c:8b:6a:90:94:e0:08:b3:82:ba: de:df:62:15:f4:17:85:6b:b1:bd:b3:44:64:d4:cd: 98:3d:fc:ae:a8:92:39:b7:bc:28:e8:64:8e:05:c6: 08:d8:40:78:e6:ed:d3:e8:b5:12:fe:00:a9:42:cc: 73:d1:1b:8d:65:9e:e2:6f:2d:ea:23:16:85:0a:0e: 5f:5b:55:78:42:7f:45:9d:16:84:01:5f:cb:36:38: 89:14:be:13:33:e2:07:a3:b8:32:e6:94:57:e9:6a: a3:12:58:74:b6:cd:07:b3:62:a4:7f:93:7b:8d:b7: 36:04:34:4f:fc:6b:52:16:d5:30:fa:2c:bc:77:54: bd:86:c8:26:32:57:5e:77:75:5f:9f:65:09:ea:b2: 52:fc:ba:55:16:ba:8d:60:69:67:ae:dd:2b:76:19: 6e:33:ec:28:f6:c6:eb:50:cd:57:d8:0c:ac:6e:a6: 22:ac:b6:79:e0:e7:b9:a8:37:03:9e:a9:b4:ff:4b: ea:37:82:8b:ec:de:6b:d1:34:d8:9e:1c:cb:07:4e: 9b:78:8d:04:13:67:c0:16:c3:a4:38:94:d0:fe:b0: ee:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:1B:DE:A0:EB:B2:A0:91:96:FC:12:11:C6:4B:E9:81:64:2C:D9:4D X509v3 Authority Key Identifier: keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0f:22:45:d4:2f:17:20:fe:62:2b:8c:8f:c1:7f:e9:af:f1: 24:c0:c5:e4:c4:de:05:fc:89:29:74:62:42:65:09:8e:ea:b3: d9:00:4c:62:f4:44:bf:d7:46:b4:70:e3:c3:bb:d0:ae:9c:a2: 90:77:25:9c:79:48:61:0d:6c:d6:18:63:22:6b:c9:69:a4:aa: a5:94:67:ed:3e:c3:bf:d3:d8:19:62:a7:d1:ab:4c:ae:d0:67: 29:69:af:63:6e:02:96:03:a8:13:e9:ce:84:41:c1:12:da:c6: 97:53:ab:3b:e9:21:c6:e7:48:dd:64:85:8e:3d:91:d3:bf:3e: 01:e8:39:6c:ea:5f:83:80:f9:fd:2b:98:cf:28:24:73:d8:bd: 3e:65:98:4c:54:72:e8:39:87:93:a4:92:48:51:e4:37:15:60: f2:07:04:63:4c:a3:2f:38:42:56:7e:65:05:74:21:f7:6c:81: 94:20:4c:c9:dd:d8:72:5a:0a:1e:23:72:62:96:94:96:b4:8e: 66:67:93:83:42:0a:56:c4:64:3d:97:1d:82:ab:23:5b:ab:2c: 50:08:55:74:7e:56:7b:4e:08:b3:58:9e:fe:65:ca:d7:8c:ba: 71:79:99:3d:12:65:9b:98:e7:69:88:20:17:fd:d3:ab:be:58: 51:c4:71:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fQduKWEzGAfXvBwms7nZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4 MjRjMjgwHhcNMjUxMjIwMDIwMDUzWhcNMjUxMjIxMDIwMDUzWjAzMTEwLwYDVQQD Eyg3ZTFiZGVhMGViYjJhMDkxOTZmYzEyMTFjNjRiZTk4MTY0MmNkOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yTRDf0XvSK6wE0j+2hjWwptWE30 4gF8vOMoJ5KAVYH/oFyLapCU4Aizgrre32IV9BeFa7G9s0Rk1M2YPfyuqJI5t7wo 6GSOBcYI2EB45u3T6LUS/gCpQsxz0RuNZZ7iby3qIxaFCg5fW1V4Qn9FnRaEAV/L NjiJFL4TM+IHo7gy5pRX6WqjElh0ts0Hs2Kkf5N7jbc2BDRP/GtSFtUw+iy8d1S9 hsgmMlded3Vfn2UJ6rJS/LpVFrqNYGlnrt0rdhluM+wo9sbrUM1X2AysbqYirLZ5 4Oe5qDcDnqm0/0vqN4KL7N5r0TTYnhzLB06beI0EE2fAFsOkOJTQ/rDuTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4b3qDrsqCRlvwSEcZL6YFkLNlNMB8GA1UdIwQY MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt YTc4MzQxMzA5OWQzLzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGg8iRdQv FyD+YiuMj8F/6a/xJMDF5MTeBfyJKXRiQmUJjuqz2QBMYvREv9dGtHDjw7vQrpyi kHclnHlIYQ1s1hhjImvJaaSqpZRn7T7Dv9PYGWKn0atMrtBnKWmvY24ClgOoE+nO hEHBEtrGl1OrO+khxudI3WSFjj2R078+Aeg5bOpfg4D5/SuYzygkc9i9PmWYTFRy 6DmHk6SSSFHkNxVg8gcEY0yjLzhCVn5lBXQh92yBlCBMyd3YcloKHiNyYpaUlrSO ZmeTg0IKVsRkPZcdgqsjW6ssUAhVdH5We04Is1ie/mXK14y6cXmZPRJlm5jnaYgg F/3Tq75YUcRxDA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:53:33 2025 by rpki-client