This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft File: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft (raw, json) Hash identifier: IEfBpsyo4yNJAbV7WF+GPLM6FjGSWjrpqp47H6ohnDs= Subject key identifier: B5:B1:29:90:D7:05:97:4C:8E:88:68:74:16:3D:E4:DB:DF:8A:47:D0 Authority key identifier: 36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 Certificate issuer: /CN=363f09508fdf256448219b284bb09b23b2b51396 Certificate serial: 019B3C104DFB14F8F994984EB8CCE6F27512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft Manifest number: 049A Signing time: Sat 20 Dec 2025 14:01:00 +0000 Manifest this update: Sat 20 Dec 2025 14:01:00 +0000 Manifest next update: Sun 21 Dec 2025 14:01:00 +0000 Files and hashes: 1: 0otNsOY2-Ux6_O9dO88zFay15wk.roa (hash: YBm2IMI2yhKvDThcZhxhu25xiNbRsmJYrGhGHOCFs7k=) 2: Em30JMreKh1DLV4bs3mOhdLf3qk.roa (hash: OikHlekzlibFoH4+uH6zYFGaEBbtczlB1ckRsntKVZk=) 3: Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl (hash: OcMUQUFSBA2LK1eFnYc3HMxfdWR9FBxc8Si1dUJMJgI=) 4: lHWw85Q8Cuu7tX7YMNLW-E9Fc0Y.roa (hash: wW8GdjY9FtGYP5Szwbqv9xBcxFWdF7Bdg3LrkDc1uL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:4d:fb:14:f8:f9:94:98:4e:b8:cc:e6:f2:75:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363f09508fdf256448219b284bb09b23b2b51396 Validity Not Before: Dec 20 14:01:00 2025 GMT Not After : Dec 21 14:01:00 2025 GMT Subject: CN=b5b12990d705974c8e886874163de4dbdf8a47d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:56:1f:18:ac:d9:8a:9e:c6:d6:c7:70:1b:25: f2:ae:c0:3b:ea:a0:d8:e7:18:6e:01:19:9a:e8:e0: 4c:84:59:f1:49:9a:25:40:69:a5:3d:e0:f8:d1:39: bd:0c:0c:91:f8:54:42:61:0b:fb:8e:85:7d:fc:24: 30:e4:a9:f1:a5:58:54:20:ce:f9:c3:d1:4a:ae:bd: 59:75:37:f7:42:06:9c:12:98:c6:9a:66:71:71:70: e1:2e:78:59:76:89:fe:d9:1e:ed:40:ea:63:fe:79: c7:50:bf:a4:9c:59:68:5a:24:2c:93:29:54:88:e8: bf:8b:7a:b0:15:1d:83:50:2b:70:75:46:c3:59:ee: 14:84:b8:4c:84:55:46:55:c3:d1:11:bd:14:68:b0: dc:b7:fb:7e:07:14:12:d3:9a:bf:12:26:d3:26:40: 74:5a:8b:0b:ac:56:e3:c5:a9:7d:f2:d4:8a:94:a9: 0f:6f:6f:b7:a3:62:c6:81:fa:b9:b5:77:b5:51:df: 94:79:0b:86:c2:16:ce:0c:46:7c:d7:5c:91:18:6a: 1e:3d:c2:a3:9c:61:80:6a:2e:8c:06:10:70:4e:96: 81:c9:d4:8b:4e:2f:45:f5:83:2b:7b:7e:53:98:b1: a7:a9:de:be:07:dd:cf:cf:fb:bc:91:b5:63:6d:b1: 58:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:29:90:D7:05:97:4C:8E:88:68:74:16:3D:E4:DB:DF:8A:47:D0 X509v3 Authority Key Identifier: keyid:36:3F:09:50:8F:DF:25:64:48:21:9B:28:4B:B0:9B:23:B2:B5:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad05f2-ab39-4132-8492-fd814455a868/1/Nj8JUI_fJWRIIZsoS7CbI7K1E5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:a3:e5:45:e1:df:ff:71:f6:43:c0:69:23:72:3f:ff:fe:88: 8a:3c:fb:53:95:04:b9:21:53:e8:f5:c5:ca:a2:1f:b3:4f:13: 42:64:a3:ac:68:8c:68:5b:14:fe:f2:c8:3a:23:fa:54:f2:e6: 86:ca:f3:15:cb:5f:d6:62:89:72:0b:12:c9:73:c4:96:d6:ba: 4b:98:b2:ef:11:09:e6:95:50:7a:34:1a:f4:83:1e:fa:36:71: 37:30:c2:90:01:7b:e9:9e:dd:f1:00:4e:53:db:10:b8:26:a2: 05:03:36:ba:2b:b7:80:ff:73:41:4b:92:2b:63:c0:23:6d:6e: 8e:1c:9d:07:75:ba:e9:0c:20:97:76:67:57:bd:cc:e4:c1:98: 0e:64:1f:ec:74:3e:04:2d:2a:52:09:44:11:80:4d:6b:1e:5f: 2e:7f:e0:81:20:9b:02:8f:93:41:cc:27:99:2e:b3:8d:fe:cd: b0:37:0d:2a:03:29:e6:40:e4:15:f2:0e:bb:51:c7:dc:d4:ba: ef:9d:56:f1:6c:f2:5a:f9:12:1e:d6:42:ce:8c:99:1b:a7:0b: 57:d9:1a:fa:1c:b8:86:9f:ec:c5:46:a2:f1:ba:2d:80:b2:09: 04:05:ab:90:7e:a7:09:8e:1c:3e:90:97:7f:40:b6:31:69:4f: f1:4e:21:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EE37FPj5lJhOuMzm8nUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2M2YwOTUwOGZkZjI1NjQ0ODIxOWIyODRiYjA5YjIzYjJi NTEzOTYwHhcNMjUxMjIwMTQwMTAwWhcNMjUxMjIxMTQwMTAwWjAzMTEwLwYDVQQD EyhiNWIxMjk5MGQ3MDU5NzRjOGU4ODY4NzQxNjNkZTRkYmRmOGE0N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFYfGKzZip7G1sdwGyXyrsA76qDY 5xhuARma6OBMhFnxSZolQGmlPeD40Tm9DAyR+FRCYQv7joV9/CQw5KnxpVhUIM75 w9FKrr1ZdTf3QgacEpjGmmZxcXDhLnhZdon+2R7tQOpj/nnHUL+knFloWiQskylU iOi/i3qwFR2DUCtwdUbDWe4UhLhMhFVGVcPREb0UaLDct/t+BxQS05q/EibTJkB0 WosLrFbjxal98tSKlKkPb2+3o2LGgfq5tXe1Ud+UeQuGwhbODEZ811yRGGoePcKj nGGAai6MBhBwTpaBydSLTi9F9YMre35TmLGnqd6+B93Pz/u8kbVjbbFYgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLWxKZDXBZdMjohodBY95NvfikfQMB8GA1UdIwQY MBaAFDY/CVCP3yVkSCGbKEuwmyOytROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTIt ZmQ4MTQ0NTVhODY4LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9hZDA1ZjItYWIzOS00MTMyLTg0OTItZmQ4MTQ0NTVhODY4 LzEvTmo4SlVJX2ZKV1JJSVpzb1M3Q2JJN0sxRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvaPlReHf /3H2Q8BpI3I///6Iijz7U5UEuSFT6PXFyqIfs08TQmSjrGiMaFsU/vLIOiP6VPLm hsrzFctf1mKJcgsSyXPElta6S5iy7xEJ5pVQejQa9IMe+jZxNzDCkAF76Z7d8QBO U9sQuCaiBQM2uiu3gP9zQUuSK2PAI21ujhydB3W66Qwgl3ZnV73M5MGYDmQf7HQ+ BC0qUglEEYBNax5fLn/ggSCbAo+TQcwnmS6zjf7NsDcNKgMp5kDkFfIOu1HH3NS6 751W8WzyWvkSHtZCzoyZG6cLV9ka+hy4hp/sxUai8botgLIJBAWrkH6nCY4cPpCX f0C2MWlP8U4hbA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:07:53 2025 by rpki-client