This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft File: NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft (raw, json) Hash identifier: 7/FsBr65Y9V4nPfgUtuCY1i3mxe/SktN4gjesZa6OuQ= Subject key identifier: E5:19:05:26:04:41:0B:AC:88:F3:BD:30:86:F9:4D:48:30:74:C2:7F Authority key identifier: 34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 Certificate issuer: /CN=349c02b30adbf10f71f9be0f4644424498263df3 Certificate serial: 019B32D71153FFA680ACF2CCF3D68B16F6E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft Manifest number: 14C4 Signing time: Thu 18 Dec 2025 19:01:53 +0000 Manifest this update: Thu 18 Dec 2025 19:01:53 +0000 Manifest next update: Fri 19 Dec 2025 19:01:53 +0000 Files and hashes: 1: NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl (hash: W1YVHxZYKgTHTag7SEhgF2erT73C6FAvwmTbb6/nbxQ=) 2: OhsLBgdiLz12uE4gfFblJpOKDsM.roa (hash: +nTXnosSsmnjrvQn+59KIQoVJyqP58V74UTxUmrvxmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:11:53:ff:a6:80:ac:f2:cc:f3:d6:8b:16:f6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=349c02b30adbf10f71f9be0f4644424498263df3 Validity Not Before: Dec 18 19:01:53 2025 GMT Not After : Dec 19 19:01:53 2025 GMT Subject: CN=e519052604410bac88f3bd3086f94d483074c27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:f1:c1:f7:fc:1a:f4:ab:6e:bd:52:c1:0d: 45:96:f9:26:11:fc:5c:24:1a:f6:a7:68:88:45:79: 45:eb:de:03:81:4f:07:88:c0:02:e8:da:7e:2d:04: d8:ef:75:09:92:b1:e4:fb:03:2e:5b:5c:ea:71:0e: f3:d1:01:9c:61:d2:25:bc:e5:3e:18:c8:52:28:54: 05:42:fb:f8:1f:f4:1f:54:a4:74:90:c0:94:db:9c: 0c:95:0f:bb:19:7f:df:af:f3:2b:85:2a:ff:ed:87: 86:05:98:ba:14:42:ff:76:95:70:72:6e:94:48:67: da:0b:c6:50:d6:3f:59:1f:8e:5c:a6:3e:7c:8d:dd: 92:25:57:2b:7a:cb:11:f9:f7:be:14:59:69:6d:93: 77:cd:9b:19:b2:c3:36:bb:e6:0b:fa:e4:c3:d0:23: 3f:60:11:b0:ae:45:45:b4:b7:90:9f:12:0b:28:24: 0c:5a:d5:ac:19:b0:41:37:87:e4:e2:74:64:06:51: 97:a1:d6:ae:3e:29:6b:8c:ff:36:56:49:ca:8f:0e: 27:e3:0c:33:b1:00:91:be:f8:c6:aa:11:6e:aa:7a: df:32:07:09:da:71:6d:05:32:ae:a3:62:34:82:22: 8a:87:16:56:c7:d8:16:f3:73:b7:8e:82:95:8f:b3: b1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:19:05:26:04:41:0B:AC:88:F3:BD:30:86:F9:4D:48:30:74:C2:7F X509v3 Authority Key Identifier: keyid:34:9C:02:B3:0A:DB:F1:0F:71:F9:BE:0F:46:44:42:44:98:26:3D:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJwCswrb8Q9x-b4PRkRCRJgmPfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/813821-24f4-485f-9c4b-433403d30a83/1/NJwCswrb8Q9x-b4PRkRCRJgmPfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a7:4a:d7:d5:33:5b:a4:2d:21:63:ac:84:d8:9f:81:79:ec: de:a4:38:5a:c3:06:4d:0b:69:e6:f4:75:8f:59:1b:ff:f5:be: 3b:64:7f:7b:b6:80:ad:db:cd:68:7c:f9:a2:4e:27:4d:73:f2: c3:d6:60:81:7c:29:d4:2d:23:21:76:a0:a4:10:f5:dd:82:84: 10:fa:79:fd:c2:c8:c2:68:1d:2a:86:ef:60:28:b4:ac:2e:74: d2:72:23:80:6f:ca:02:ae:e8:71:ca:9e:5c:53:b5:4e:46:d4: da:8f:c5:84:ef:e3:c5:ae:f1:ce:2f:90:3d:ca:63:0f:43:10: 69:f4:12:a5:6e:ba:f3:1b:6a:c6:46:c6:37:20:5b:21:b9:89: ae:5f:b0:fc:8e:1d:88:3d:2d:b2:23:8c:ee:c4:87:1b:57:5b: fe:58:32:00:70:92:2b:d7:3a:cc:97:ef:f9:32:20:bf:d7:62: a5:4d:e5:8e:3d:7e:44:1c:91:4a:74:90:e1:b1:2f:55:b1:d2: 48:1d:61:3b:29:c0:63:da:40:5d:d1:8f:b0:ee:0b:59:4e:5b: ea:2c:dc:0c:7a:36:02:d6:be:cf:6e:87:98:5e:bd:56:d2:ee: df:77:25:ff:92:89:7e:34:02:fe:bb:dc:60:8f:b3:12:e2:53: 67:81:de:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1xFT/6aArPLM89aLFvbnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OWMwMmIzMGFkYmYxMGY3MWY5YmUwZjQ2NDQ0MjQ0OTgy NjNkZjMwHhcNMjUxMjE4MTkwMTUzWhcNMjUxMjE5MTkwMTUzWjAzMTEwLwYDVQQD EyhlNTE5MDUyNjA0NDEwYmFjODhmM2JkMzA4NmY5NGQ0ODMwNzRjMjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdHxwff8GvSrbr1SwQ1FlvkmEfxc JBr2p2iIRXlF694DgU8HiMAC6Np+LQTY73UJkrHk+wMuW1zqcQ7z0QGcYdIlvOU+ GMhSKFQFQvv4H/QfVKR0kMCU25wMlQ+7GX/fr/MrhSr/7YeGBZi6FEL/dpVwcm6U SGfaC8ZQ1j9ZH45cpj58jd2SJVcressR+fe+FFlpbZN3zZsZssM2u+YL+uTD0CM/ YBGwrkVFtLeQnxILKCQMWtWsGbBBN4fk4nRkBlGXodauPilrjP82VknKjw4n4wwz sQCRvvjGqhFuqnrfMgcJ2nFtBTKuo2I0giKKhxZWx9gW83O3joKVj7OxBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUZBSYEQQusiPO9MIb5TUgwdMJ/MB8GA1UdIwQY MBaAFDScArMK2/EPcfm+D0ZEQkSYJj3zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGIt NDMzNDAzZDMwYTgzLzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi84MTM4MjEtMjRmNC00ODVmLTljNGItNDMzNDAzZDMwYTgz LzEvTkp3Q3N3cmI4UTl4LWI0UFJrUkNSSmdtUGZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKdK19Uz W6QtIWOshNifgXns3qQ4WsMGTQtp5vR1j1kb//W+O2R/e7aArdvNaHz5ok4nTXPy w9ZggXwp1C0jIXagpBD13YKEEPp5/cLIwmgdKobvYCi0rC500nIjgG/KAq7occqe XFO1TkbU2o/FhO/jxa7xzi+QPcpjD0MQafQSpW668xtqxkbGNyBbIbmJrl+w/I4d iD0tsiOM7sSHG1db/lgyAHCSK9c6zJfv+TIgv9dipU3ljj1+RByRSnSQ4bEvVbHS SB1hOynAY9pAXdGPsO4LWU5b6izcDHo2Ata+z26HmF69VtLu33cl/5KJfjQC/rvc YI+zEuJTZ4HexQ== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:55 2025 by rpki-client