This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json) Hash identifier: p1Oz+RfO4v83Nvwp8vCVt2ITtuv7e7DQIldeSYbcMpk= Subject key identifier: 5D:AA:D5:71:15:62:5A:44:B7:0E:6B:33:22:49:54:83:64:69:27:BF Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Certificate serial: 019B4DE02867B32A46C90AC53EDF1CA32FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft Manifest number: 13B0 Signing time: Wed 24 Dec 2025 01:01:34 +0000 Manifest this update: Wed 24 Dec 2025 01:01:34 +0000 Manifest next update: Thu 25 Dec 2025 01:01:34 +0000 Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=) 2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: teDZvu6CXm2F8vkmXUd2WpJcQbxqvGatqg/sxYeqs20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:28:67:b3:2a:46:c9:0a:c5:3e:df:1c:a3:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Validity Not Before: Dec 24 01:01:34 2025 GMT Not After : Dec 25 01:01:34 2025 GMT Subject: CN=5daad57115625a44b70e6b3322495483646927bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3f:80:7c:1e:02:ab:da:e8:95:6c:75:a3:c9: eb:82:91:43:ee:05:4b:a7:cd:94:75:c2:ec:dc:6c: f2:8f:a9:23:24:cf:88:e2:9d:08:47:3e:33:58:5a: 4f:a1:72:a3:72:79:6a:e2:80:c9:57:56:cc:a8:4d: e4:ad:54:10:37:a4:30:78:23:9e:e4:00:f2:4d:96: ad:9f:5b:6c:10:1a:de:ad:e6:8f:16:6f:d0:7a:9d: 75:69:a7:8e:be:4d:7d:d5:d3:a1:8f:ae:ad:25:b3: 3d:1d:c2:ab:86:2b:34:cf:af:3d:98:17:b6:16:56: e7:89:5f:10:a1:8c:60:78:2c:04:71:08:86:46:c5: 3f:9b:46:7d:02:ce:f9:60:6d:97:91:a4:4a:95:21: 7a:74:31:ca:32:cb:73:b2:ec:3c:18:07:f5:81:02: b6:dd:59:06:df:58:7a:b5:52:2c:67:e1:eb:aa:bf: a1:18:18:09:b2:34:49:49:5d:fb:c0:0b:b3:09:96: 28:f8:28:0f:c6:02:1f:9c:16:cf:8c:f6:e0:1f:b0: 9a:26:10:2c:f6:40:c8:a2:36:f0:43:28:74:5e:a5: 9e:5c:76:74:30:94:bd:68:ec:45:3c:39:93:f6:8f: 00:e4:f8:3d:b3:31:d4:00:6b:90:c5:c0:a0:d0:24: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AA:D5:71:15:62:5A:44:B7:0E:6B:33:22:49:54:83:64:69:27:BF X509v3 Authority Key Identifier: keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f1:f9:29:cb:53:f7:4d:63:64:41:e0:b6:6c:dc:b5:a3:5a: 78:24:68:44:1e:34:fe:16:9e:b4:5c:c5:5b:3b:b5:42:05:26: d4:b5:d8:02:38:d5:16:97:c6:1b:fa:90:e7:a3:72:ce:20:82: bf:9c:90:56:95:1e:a4:5f:26:5e:73:aa:9b:e2:f3:2e:d1:ff: 2f:38:57:1a:b6:2a:11:f1:b2:c2:be:b5:16:07:76:e8:05:68: 2f:9e:fe:49:7a:d9:cf:ed:d0:41:ff:64:85:dc:6b:42:83:00: 9f:0d:b1:36:7b:0e:cd:6d:28:46:f9:48:e8:72:b4:99:cd:10: 7f:d5:52:19:2c:2f:70:18:70:7f:05:a8:06:a5:0c:eb:8a:7b: a7:ab:15:65:f7:9e:2b:5d:0d:28:83:b0:ed:89:20:3f:31:9b: 47:c4:a0:e1:d9:56:02:2f:c4:6c:14:13:16:19:30:e0:61:ba: 6a:41:8e:82:4f:26:7d:84:ee:85:5b:53:45:3e:05:b2:24:ae: 68:1d:31:a7:b8:a4:2b:54:63:40:fc:80:23:a9:99:a5:8b:a9: 7e:0f:33:b1:5a:29:56:49:a4:05:3d:12:94:f8:94:0c:c8:4d: 9d:f2:fa:58:09:68:02:ed:cc:3b:71:58:08:3f:e4:48:a8:ca: e3:ce:d9:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4ChnsypGyQrFPt8coy+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj ZWJjNjIwHhcNMjUxMjI0MDEwMTM0WhcNMjUxMjI1MDEwMTM0WjAzMTEwLwYDVQQD Eyg1ZGFhZDU3MTE1NjI1YTQ0YjcwZTZiMzMyMjQ5NTQ4MzY0NjkyN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz+AfB4Cq9rolWx1o8nrgpFD7gVL p82UdcLs3Gzyj6kjJM+I4p0IRz4zWFpPoXKjcnlq4oDJV1bMqE3krVQQN6QweCOe 5ADyTZatn1tsEBrereaPFm/Qep11aaeOvk191dOhj66tJbM9HcKrhis0z689mBe2 FlbniV8QoYxgeCwEcQiGRsU/m0Z9As75YG2XkaRKlSF6dDHKMstzsuw8GAf1gQK2 3VkG31h6tVIsZ+Hrqr+hGBgJsjRJSV37wAuzCZYo+CgPxgIfnBbPjPbgH7CaJhAs 9kDIojbwQyh0XqWeXHZ0MJS9aOxFPDmT9o8A5Pg9szHUAGuQxcCg0CSKFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF2q1XEVYlpEtw5rMyJJVINkaSe/MB8GA1UdIwQY MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPH5KctT 901jZEHgtmzctaNaeCRoRB40/haetFzFWzu1QgUm1LXYAjjVFpfGG/qQ56NyziCC v5yQVpUepF8mXnOqm+LzLtH/LzhXGrYqEfGywr61Fgd26AVoL57+SXrZz+3QQf9k hdxrQoMAnw2xNnsOzW0oRvlI6HK0mc0Qf9VSGSwvcBhwfwWoBqUM64p7p6sVZfee K10NKIOw7YkgPzGbR8Sg4dlWAi/EbBQTFhkw4GG6akGOgk8mfYTuhVtTRT4FsiSu aB0xp7ikK1RjQPyAI6mZpYupfg8zsVopVkmkBT0SlPiUDMhNnfL6WAloAu3MO3FY CD/kSKjK487ZvQ== -----END CERTIFICATE-----Generated at Wed Dec 24 03:03:05 2025 by rpki-client