This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json) Hash identifier: c8fxi6tDVrGHosQp0t/iR50PxoFd9cGc5JaojtURfjI= Subject key identifier: 83:4E:D9:32:2B:22:7F:4A:E5:4D:B6:9B:96:3B:A9:EA:3D:0B:26:90 Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Certificate serial: 019B3CB50ED3D5AC7CC278D4A9FFCFB39232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft Manifest number: 171C Signing time: Sat 20 Dec 2025 17:00:57 +0000 Manifest this update: Sat 20 Dec 2025 17:00:57 +0000 Manifest next update: Sun 21 Dec 2025 17:00:57 +0000 Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: eMR8yyZkVbwPcbfdov1gaUDinNN/SfnRGLjB+kKIyQQ=) 2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:0e:d3:d5:ac:7c:c2:78:d4:a9:ff:cf:b3:92:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Validity Not Before: Dec 20 17:00:57 2025 GMT Not After : Dec 21 17:00:57 2025 GMT Subject: CN=834ed9322b227f4ae54db69b963ba9ea3d0b2690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:d5:80:29:8e:38:b2:4d:31:31:65:54:88: 53:31:92:2c:db:23:f3:9c:18:50:d3:31:41:7a:71: fc:ac:e5:3a:f7:2b:a4:d6:e5:b9:7a:db:57:50:26: f5:39:13:d6:0c:ce:53:05:a1:ea:90:54:9a:99:2a: 35:85:49:dd:77:9d:68:f8:70:03:e6:51:a9:85:51: 65:7f:18:05:d4:25:d1:65:32:63:67:f0:10:e6:a7: b5:f7:7b:70:0e:7d:dc:18:c0:5f:0e:29:bb:b2:25: 10:e5:88:0c:2b:dd:18:8a:96:0c:02:d6:be:c3:5e: 29:db:a5:91:f5:d3:ae:5c:0c:42:30:72:63:dc:21: 31:e3:76:27:db:5a:24:61:71:50:26:f5:4c:7f:1f: 7b:9d:1a:ab:a4:bf:32:96:d2:30:2c:13:49:0c:48: 58:7a:6e:25:58:06:84:3c:c1:f5:92:e8:ac:2d:95: 7e:b2:df:b4:23:d9:41:c3:66:cd:df:6a:38:e6:77: ab:6a:cb:95:e8:08:fa:a2:9a:bb:45:49:7b:20:65: 6d:5f:e4:23:00:5c:52:8c:a9:6a:38:b0:5a:45:de: 55:85:9a:af:33:e9:33:a2:df:06:fb:59:92:a7:37: 55:4f:38:ba:8d:34:33:37:e1:41:0d:c7:a5:29:c9: 66:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4E:D9:32:2B:22:7F:4A:E5:4D:B6:9B:96:3B:A9:EA:3D:0B:26:90 X509v3 Authority Key Identifier: keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:58:b0:ee:78:63:a2:ef:26:b4:a3:2d:f2:7d:8b:f6:4c:e8: 81:fe:74:9d:ec:6b:8b:0f:f5:03:83:78:c3:16:61:aa:3d:31: 13:c9:75:0b:ac:17:19:35:ed:f4:d9:84:72:be:c3:7b:78:18: 58:e4:8a:2e:58:fd:27:79:55:dc:73:07:18:e2:2c:28:b2:14: 8b:e6:4b:bf:53:20:dc:60:3b:e0:9a:44:32:c7:2e:f9:fd:81: 93:c0:42:0c:4c:80:ec:e2:98:68:6c:01:fd:0c:fc:55:0c:ab: 57:3a:3f:96:ef:b4:af:00:4b:4a:a9:b0:c9:cf:5a:94:3d:8a: 74:35:11:1e:e8:77:ad:13:09:5f:85:08:f4:37:c2:cc:e3:58: cd:29:b7:f4:da:b1:0e:59:20:04:3f:d8:15:fc:bb:4f:ce:88: 12:29:15:03:1a:32:48:f8:f5:2e:14:f8:90:1a:3b:64:6c:1d: 77:c3:bd:14:e6:9e:3c:65:e2:6b:06:df:c7:de:45:03:28:bf: b0:71:ec:db:0f:65:be:a9:7a:da:46:4e:6e:72:c8:3f:b2:52: c3:78:55:e3:3f:0c:91:ec:df:85:73:f6:19:57:52:0d:99:ad: 78:be:53:d6:0b:76:71:bc:56:41:73:f8:fb:81:d1:83:53:7e: af:2a:ca:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQ7T1ax8wnjUqf/Ps5IyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5 ZTA1ZjYwHhcNMjUxMjIwMTcwMDU3WhcNMjUxMjIxMTcwMDU3WjAzMTEwLwYDVQQD Eyg4MzRlZDkzMjJiMjI3ZjRhZTU0ZGI2OWI5NjNiYTllYTNkMGIyNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+/VgCmOOLJNMTFlVIhTMZIs2yPz nBhQ0zFBenH8rOU69yuk1uW5ettXUCb1ORPWDM5TBaHqkFSamSo1hUndd51o+HAD 5lGphVFlfxgF1CXRZTJjZ/AQ5qe193twDn3cGMBfDim7siUQ5YgMK90YipYMAta+ w14p26WR9dOuXAxCMHJj3CEx43Yn21okYXFQJvVMfx97nRqrpL8yltIwLBNJDEhY em4lWAaEPMH1kuisLZV+st+0I9lBw2bN32o45nerasuV6Aj6opq7RUl7IGVtX+Qj AFxSjKlqOLBaRd5VhZqvM+kzot8G+1mSpzdVTzi6jTQzN+FBDcelKclm7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFINO2TIrIn9K5U22m5Y7qeo9CyaQMB8GA1UdIwQY MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4 LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsViw7nhj ou8mtKMt8n2L9kzogf50nexriw/1A4N4wxZhqj0xE8l1C6wXGTXt9NmEcr7De3gY WOSKLlj9J3lV3HMHGOIsKLIUi+ZLv1Mg3GA74JpEMscu+f2Bk8BCDEyA7OKYaGwB /Qz8VQyrVzo/lu+0rwBLSqmwyc9alD2KdDURHuh3rRMJX4UI9DfCzONYzSm39Nqx DlkgBD/YFfy7T86IEikVAxoySPj1LhT4kBo7ZGwdd8O9FOaePGXiawbfx95FAyi/ sHHs2w9lvql62kZObnLIP7JSw3hV4z8MkezfhXP2GVdSDZmteL5T1gt2cbxWQXP4 +4HRg1N+ryrKbQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:56:22 2025 by rpki-client