This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft File: NJGSBLesR0JLqr-ykb0_yPqeBfY.mft (raw, json) Hash identifier: XpafQ8Y0l8qh8GMNg3e6287rIGlz7Zb6YPpfODnauUs= Subject key identifier: 78:2A:0B:97:27:13:F1:24:65:19:45:16:B4:8F:60:2D:59:A8:5E:3C Authority key identifier: 34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 Certificate issuer: /CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Certificate serial: 019B6B0E095DD3FB03A3B8E2BE3F3C0402B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft Manifest number: 1734 Signing time: Mon 29 Dec 2025 17:00:40 +0000 Manifest this update: Mon 29 Dec 2025 17:00:40 +0000 Manifest next update: Tue 30 Dec 2025 17:00:40 +0000 Files and hashes: 1: NJGSBLesR0JLqr-ykb0_yPqeBfY.crl (hash: J+4YqF833EQ1UqmGmhMscgThpy4UgQAZGmUg3eQEX0E=) 2: SJfqIxwijuwzDWomUXLMaLkPe54.roa (hash: hJwzF9WKMllQghsjNYhVq3jDd69NqlMlN06DZcOFQjY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:0e:09:5d:d3:fb:03:a3:b8:e2:be:3f:3c:04:02:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34919204b7ac47424baabfb291bd3fc8fa9e05f6 Validity Not Before: Dec 29 17:00:40 2025 GMT Not After : Dec 30 17:00:40 2025 GMT Subject: CN=782a0b972713f12465194516b48f602d59a85e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a2:f2:bb:52:76:0c:1e:18:3f:ba:b4:37:fe: 7d:1a:79:3e:04:f3:b6:4c:e3:18:9e:cf:62:72:73: 00:00:37:88:e1:cc:05:a5:b6:9b:31:d6:aa:71:8e: 9e:3e:4e:83:f3:95:fe:70:74:9d:7a:c9:fa:24:a2: 7a:b2:a4:75:61:8a:d2:fd:a4:f3:ff:af:bd:5e:bb: 5f:ee:79:7b:9a:88:e8:fa:d4:93:02:75:7b:79:b2: bb:0a:b5:b5:88:48:69:ce:89:0d:be:2a:1f:54:c0: d0:b4:5a:6f:ee:83:6a:8f:5f:7c:3a:6d:1c:9f:6f: 24:a2:01:20:03:99:10:e8:75:50:f5:0b:e3:3e:b9: ba:8d:ba:cf:43:cb:f8:e6:9b:0d:10:26:f4:70:19: 0b:d6:4e:51:63:5c:ea:83:a8:a6:c4:61:f2:27:15: 06:98:7c:d7:10:9c:39:20:58:25:7e:62:44:72:1e: 57:d5:b8:c0:89:6a:11:e4:8a:2f:2d:10:b8:c1:74: 2b:9a:61:89:c4:e4:6d:ac:79:68:93:16:ea:51:c9: ba:dd:89:0c:72:63:fd:a1:60:ac:7e:3c:8e:42:ad: d4:07:1f:54:d0:e6:6d:3d:11:45:26:c8:63:09:46: c2:2f:0c:fd:d5:2b:17:b6:a2:9b:e2:63:14:4a:92: e3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:2A:0B:97:27:13:F1:24:65:19:45:16:B4:8F:60:2D:59:A8:5E:3C X509v3 Authority Key Identifier: keyid:34:91:92:04:B7:AC:47:42:4B:AA:BF:B2:91:BD:3F:C8:FA:9E:05:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJGSBLesR0JLqr-ykb0_yPqeBfY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a8efdf-5cee-494b-be48-a371f2889138/1/NJGSBLesR0JLqr-ykb0_yPqeBfY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:cd:e4:67:3e:6e:44:19:7d:5b:fa:4e:6e:7d:43:08:6e:7d: 27:b9:bc:44:e7:a3:63:61:c6:bc:73:87:37:ec:92:58:71:ee: aa:9e:33:d3:c0:94:d4:40:6c:5e:3d:50:ad:ac:a6:d9:6e:2c: a5:b0:28:61:2e:c9:47:dc:96:3c:14:41:be:21:f0:1a:3e:a4: d7:bb:ba:56:c5:fb:73:e8:d9:85:ec:20:ce:82:f8:fd:71:20: c2:6b:f6:50:4e:b4:f8:16:ef:6a:c6:df:97:4e:c2:74:3c:c5: f0:46:a4:e6:7c:7f:85:f3:cb:d5:63:7b:12:70:d0:3a:5b:35: 3e:cc:ea:d7:d2:a4:4c:2e:74:85:10:d0:90:70:2a:aa:bf:4d: 7c:87:5b:97:ac:d8:4b:59:09:c7:e0:d5:2f:65:4c:f3:fc:db: ae:e6:70:da:70:cf:d2:cc:20:fd:13:fd:76:82:47:3e:1e:96: e3:23:47:4d:c0:7d:a2:48:b9:a7:42:07:18:3b:45:e3:ee:45: d4:a2:56:7c:70:37:c6:43:61:1e:d9:98:90:31:38:40:c8:78: 87:74:6b:c2:60:74:c0:45:14:2b:50:c9:9c:ca:13:df:8d:33: 11:11:4c:89:3a:c7:93:f7:67:48:ba:85:39:38:9e:dd:d0:c4: 34:7b:95:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrDgld0/sDo7jivj88BAKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTE5MjA0YjdhYzQ3NDI0YmFhYmZiMjkxYmQzZmM4ZmE5 ZTA1ZjYwHhcNMjUxMjI5MTcwMDQwWhcNMjUxMjMwMTcwMDQwWjAzMTEwLwYDVQQD Eyg3ODJhMGI5NzI3MTNmMTI0NjUxOTQ1MTZiNDhmNjAyZDU5YTg1ZTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Lyu1J2DB4YP7q0N/59Gnk+BPO2 TOMYns9icnMAADeI4cwFpbabMdaqcY6ePk6D85X+cHSdesn6JKJ6sqR1YYrS/aTz /6+9Xrtf7nl7mojo+tSTAnV7ebK7CrW1iEhpzokNviofVMDQtFpv7oNqj198Om0c n28kogEgA5kQ6HVQ9QvjPrm6jbrPQ8v45psNECb0cBkL1k5RY1zqg6imxGHyJxUG mHzXEJw5IFglfmJEch5X1bjAiWoR5IovLRC4wXQrmmGJxORtrHlokxbqUcm63YkM cmP9oWCsfjyOQq3UBx9U0OZtPRFFJshjCUbCLwz91SsXtqKb4mMUSpLjAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgqC5cnE/EkZRlFFrSPYC1ZqF48MB8GA1UdIwQY MBaAFDSRkgS3rEdCS6q/spG9P8j6ngX2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgt YTM3MWYyODg5MTM4LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hOGVmZGYtNWNlZS00OTRiLWJlNDgtYTM3MWYyODg5MTM4 LzEvTkpHU0JMZXNSMEpMcXIteWtiMF95UHFlQmZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyc3kZz5u RBl9W/pObn1DCG59J7m8ROejY2HGvHOHN+ySWHHuqp4z08CU1EBsXj1Qraym2W4s pbAoYS7JR9yWPBRBviHwGj6k17u6VsX7c+jZhewgzoL4/XEgwmv2UE60+Bbvasbf l07CdDzF8Eak5nx/hfPL1WN7EnDQOls1Pszq19KkTC50hRDQkHAqqr9NfIdbl6zY S1kJx+DVL2VM8/zbruZw2nDP0swg/RP9doJHPh6W4yNHTcB9oki5p0IHGDtF4+5F 1KJWfHA3xkNhHtmYkDE4QMh4h3RrwmB0wEUUK1DJnMoT340zERFMiTrHk/dnSLqF OTie3dDENHuVGQ== -----END CERTIFICATE-----Generated at Tue Dec 30 03:18:24 2025 by rpki-client