This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft File: njApS35GRarttUZy1IBlsbHOvGI.mft (raw, json) Hash identifier: 7fLSMxatb0kquSH7UlxPFRuZmzKEnYyCDVr7pfxbu5Q= Subject key identifier: 95:C1:08:87:23:EA:74:D0:31:4F:E6:4F:74:6B:26:6B:EB:EC:36:B7 Authority key identifier: 9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 Certificate issuer: /CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Certificate serial: 019B405C1F58B0C8945D5B8A128CB24B46E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft Manifest number: 13A9 Signing time: Sun 21 Dec 2025 10:02:17 +0000 Manifest this update: Sun 21 Dec 2025 10:02:17 +0000 Manifest next update: Mon 22 Dec 2025 10:02:17 +0000 Files and hashes: 1: 3MT-MBOjM_fLo7WZJJYydkGM80M.roa (hash: h4zX3/7+6CoudfHjSu4a0XixWS6dRqO5IEuKbftjnlk=) 2: njApS35GRarttUZy1IBlsbHOvGI.crl (hash: O182x8WDq27+SGySTpoPEpIoumzKXNl1zMuE4Ay76xc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:1f:58:b0:c8:94:5d:5b:8a:12:8c:b2:4b:46:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e30294b7e4645aaedb54672d48065b1b1cebc62 Validity Not Before: Dec 21 10:02:17 2025 GMT Not After : Dec 22 10:02:17 2025 GMT Subject: CN=95c1088723ea74d0314fe64f746b266bebec36b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f5:86:89:e5:ce:86:15:0e:c5:d1:ac:47:44: 38:0d:89:8c:09:d2:d9:ca:4c:a3:93:b0:ae:a2:89: 2b:95:62:13:d1:c8:2d:fd:e0:c6:de:7e:65:df:87: e0:fb:2e:60:29:cb:f9:a3:28:29:0f:57:d6:5b:1b: 5b:04:43:6a:2e:33:2d:1e:e2:c7:9f:59:fb:43:40: 1b:a1:94:49:cd:1a:70:cf:e4:36:59:4d:85:01:6a: 26:3c:68:88:9a:81:21:c1:1b:7e:b3:79:2a:5b:d5: 3c:8a:c7:94:e4:85:b8:f1:55:1a:eb:5a:b0:c9:78: bc:cd:62:07:e5:96:95:c9:21:3b:90:0e:b2:14:ea: 88:76:80:b9:c6:aa:e9:0d:a6:61:cc:0e:5f:db:5c: af:50:ed:b9:cf:fb:94:26:f5:a0:56:10:9c:dc:85: 0e:0b:a4:c7:5c:e0:c8:02:22:02:a2:1b:d4:94:dd: 8e:19:5e:d3:82:8d:0b:67:10:10:d2:e8:19:32:21: d6:a8:08:5a:dd:f4:38:22:1d:e9:28:3c:e4:dd:ed: fe:c4:0e:fd:02:2f:98:21:2b:1f:af:a9:c4:96:12: 9e:45:61:c7:7c:c4:31:35:1d:a1:35:5b:c4:04:06: aa:be:42:e2:7c:4e:17:c9:b1:bc:b0:ce:11:e6:c3: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C1:08:87:23:EA:74:D0:31:4F:E6:4F:74:6B:26:6B:EB:EC:36:B7 X509v3 Authority Key Identifier: keyid:9E:30:29:4B:7E:46:45:AA:ED:B5:46:72:D4:80:65:B1:B1:CE:BC:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njApS35GRarttUZy1IBlsbHOvGI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/44e893-9247-452e-9f67-6913387b8083/1/njApS35GRarttUZy1IBlsbHOvGI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:bb:c6:9b:5c:92:a7:ba:fa:39:18:fe:3d:90:62:ed:ac:ce: 8e:2a:c1:28:9c:d2:9b:b3:1a:1f:27:78:09:e7:3c:ae:9a:35: f3:5c:f7:4a:e5:be:1f:5d:6f:0c:24:c7:eb:b6:e0:8a:42:4f: ff:ff:de:04:de:75:b4:eb:c4:28:c5:4d:2b:5a:72:6a:f9:7d: 36:8d:a1:00:05:ad:76:34:99:78:4a:4e:fa:c5:cf:90:dd:3d: d2:40:e7:27:09:08:7d:38:b7:6f:4b:7d:bc:b5:6e:c0:d9:ff: e8:b5:15:8b:d3:fa:3c:94:3e:c0:df:2f:2c:a9:c5:27:cb:2b: 28:0a:41:0e:c5:96:5b:0b:9e:3f:11:7c:90:28:f4:13:5f:9b: 81:a3:3d:a1:56:52:f2:2c:24:9f:cb:0e:dc:52:02:ce:a2:e8: 3b:d9:41:64:b2:69:9e:b2:2e:b9:79:aa:c4:4b:fd:54:1e:5f: fc:2b:d6:fb:86:3e:1e:97:94:47:41:bc:e7:32:19:72:5d:61: 01:0b:04:59:c6:8d:41:b6:52:d7:aa:b8:3d:0f:7a:da:76:d2: e6:d2:4a:90:6a:8d:31:35:ca:b8:21:1d:51:f4:4f:ab:c3:86: 10:68:9f:8d:ae:1a:18:fa:ad:67:d3:fb:1a:40:e9:83:8e:63: e8:ba:8f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXB9YsMiUXVuKEoyyS0biMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMzAyOTRiN2U0NjQ1YWFlZGI1NDY3MmQ0ODA2NWIxYjFj ZWJjNjIwHhcNMjUxMjIxMTAwMjE3WhcNMjUxMjIyMTAwMjE3WjAzMTEwLwYDVQQD Eyg5NWMxMDg4NzIzZWE3NGQwMzE0ZmU2NGY3NDZiMjY2YmViZWMzNmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPWGieXOhhUOxdGsR0Q4DYmMCdLZ ykyjk7CuookrlWIT0cgt/eDG3n5l34fg+y5gKcv5oygpD1fWWxtbBENqLjMtHuLH n1n7Q0AboZRJzRpwz+Q2WU2FAWomPGiImoEhwRt+s3kqW9U8iseU5IW48VUa61qw yXi8zWIH5ZaVySE7kA6yFOqIdoC5xqrpDaZhzA5f21yvUO25z/uUJvWgVhCc3IUO C6THXODIAiICohvUlN2OGV7Tgo0LZxAQ0ugZMiHWqAha3fQ4Ih3pKDzk3e3+xA79 Ai+YISsfr6nElhKeRWHHfMQxNR2hNVvEBAaqvkLifE4XybG8sM4R5sPZxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXBCIcj6nTQMU/mT3RrJmvr7Da3MB8GA1UdIwQY MBaAFJ4wKUt+RkWq7bVGctSAZbGxzrxiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjct NjkxMzM4N2I4MDgzLzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC80NGU4OTMtOTI0Ny00NTJlLTlmNjctNjkxMzM4N2I4MDgz LzEvbmpBcFMzNUdSYXJ0dFVaeTFJQmxzYkhPdkdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrvGm1yS p7r6ORj+PZBi7azOjirBKJzSm7MaHyd4Cec8rpo181z3SuW+H11vDCTH67bgikJP ///eBN51tOvEKMVNK1pyavl9No2hAAWtdjSZeEpO+sXPkN090kDnJwkIfTi3b0t9 vLVuwNn/6LUVi9P6PJQ+wN8vLKnFJ8srKApBDsWWWwuePxF8kCj0E1+bgaM9oVZS 8iwkn8sO3FICzqLoO9lBZLJpnrIuuXmqxEv9VB5f/CvW+4Y+HpeUR0G85zIZcl1h AQsEWcaNQbZS16q4PQ962nbS5tJKkGqNMTXKuCEdUfRPq8OGEGifja4aGPqtZ9P7 GkDpg45j6LqPVA== -----END CERTIFICATE-----Generated at Sun Dec 21 13:09:24 2025 by rpki-client