This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft File: NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft (raw, json) Hash identifier: I9AzWdIn/gvEEuM0V7u2Qr7j7HeSoVdGTaiSLLK6f/Y= Subject key identifier: 21:A2:42:6F:98:F1:A7:A7:20:7A:E8:7A:C4:26:91:10:4F:47:6B:7F Authority key identifier: 34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA Certificate issuer: /CN=34921598b6a261aa4c3e67144ac876033253e0aa Certificate serial: 019B3D90DC7C74BF91289892C81A301C6733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 21:01:02 +0000 Manifest this update: Sat 20 Dec 2025 21:01:02 +0000 Manifest next update: Sun 21 Dec 2025 21:01:02 +0000 Files and hashes: 1: 7H80yAVL4R2QfCHsY7d1neAHwRc.roa (hash: CpyD2cHx4DtvY6d+1rHWrMEbiOladccjX6t3p/lpNsI=) 2: NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl (hash: FXitGz79CHSJopJsTjvSkw76ZzctSzxiiq9bKBPs35Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:dc:7c:74:bf:91:28:98:92:c8:1a:30:1c:67:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34921598b6a261aa4c3e67144ac876033253e0aa Validity Not Before: Dec 20 21:01:02 2025 GMT Not After : Dec 21 21:01:02 2025 GMT Subject: CN=21a2426f98f1a7a7207ae87ac42691104f476b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c1:ee:31:7b:0e:df:c6:f0:f3:65:d8:bb:90: 5c:e5:bc:f9:ca:21:a6:60:b2:8a:de:46:50:40:8b: 15:ff:54:72:b8:a4:81:0c:44:c9:76:5a:e0:fa:ad: 81:e7:ed:65:74:68:6e:8e:8b:16:61:a5:24:ae:22: f0:7a:a1:b2:69:04:dc:45:e9:f2:e4:42:3a:58:d1: cd:92:ec:bc:2e:0d:36:00:07:28:d3:3f:43:90:66: 80:7f:fd:35:1c:77:5d:3a:d4:07:8e:bb:c6:cb:c3: ec:f9:34:9f:91:e8:1d:d4:b8:f3:38:c5:06:cb:ac: 0c:ae:8a:32:d7:12:4b:b4:22:0c:b3:ee:5c:7c:eb: 43:fe:72:f2:56:89:47:1a:40:ce:28:57:ce:da:55: 24:44:fd:25:dc:bc:f8:9f:d1:70:f8:25:2f:32:10: be:c2:2c:b8:cf:97:9d:33:15:84:e6:1c:b8:73:27: c4:d6:f5:e1:d5:bc:fc:fd:db:a3:0a:92:fe:9d:c3: d3:99:87:0a:2d:0e:53:46:14:5f:c1:f9:98:d2:b7: 1e:a7:5d:81:a7:61:ea:3e:ac:eb:c5:8b:7e:8b:ce: 41:f3:8d:58:0a:8c:cc:fe:a6:9c:50:6f:84:b0:cc: 8b:92:3a:58:bd:59:de:32:16:a5:9e:0d:43:f8:a3: d3:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A2:42:6F:98:F1:A7:A7:20:7A:E8:7A:C4:26:91:10:4F:47:6B:7F X509v3 Authority Key Identifier: keyid:34:92:15:98:B6:A2:61:AA:4C:3E:67:14:4A:C8:76:03:32:53:E0:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJIVmLaiYapMPmcUSsh2AzJT4Ko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b000e2-67c3-46f7-8820-42e002dad9ae/1/NJIVmLaiYapMPmcUSsh2AzJT4Ko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:85:9f:19:25:4e:27:b5:44:0c:92:dc:ef:ec:b5:18:09:ea: ec:ad:13:89:10:2b:06:24:93:0f:cf:1d:e0:bc:05:28:9b:ef: 1d:74:f0:56:ea:6c:2b:f3:f5:cf:8e:9d:a7:34:4e:73:d8:94: 76:b5:10:33:2d:5b:5b:62:f8:62:08:b4:dc:01:60:39:37:c1: 71:88:e8:b2:7d:d5:3f:de:7a:fd:f0:00:87:15:a6:a3:5a:f0: 02:ea:9a:cc:8c:49:89:69:12:3c:6d:93:ab:20:63:87:65:93: 72:90:68:24:8b:87:ef:31:12:04:26:2f:7b:6b:6f:6d:c0:48: 80:70:b7:d5:87:e5:f3:e9:c2:f9:8d:80:c4:16:41:84:20:1a: 4c:a9:05:72:a4:9b:ba:91:f3:56:81:d3:24:01:cf:ca:10:a4: a7:35:6f:31:90:18:8e:11:c0:3a:c8:c5:87:eb:4d:1f:07:bc: 1d:64:30:e6:e4:a5:c7:f1:16:9f:90:0a:1f:43:54:aa:d7:db: 0f:8a:a9:2f:7d:3e:a9:db:a0:84:2f:1f:19:f5:d8:9f:eb:17: 09:e5:fd:11:eb:9f:b8:4e:a2:4e:a3:a4:a5:94:b9:0b:00:be: db:f3:85:27:d9:78:e4:9c:fe:8e:33:84:7d:e0:cb:8d:d8:64: a4:d5:88:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kNx8dL+RKJiSyBowHGczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0OTIxNTk4YjZhMjYxYWE0YzNlNjcxNDRhYzg3NjAzMzI1 M2UwYWEwHhcNMjUxMjIwMjEwMTAyWhcNMjUxMjIxMjEwMTAyWjAzMTEwLwYDVQQD EygyMWEyNDI2Zjk4ZjFhN2E3MjA3YWU4N2FjNDI2OTExMDRmNDc2YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8HuMXsO38bw82XYu5Bc5bz5yiGm YLKK3kZQQIsV/1RyuKSBDETJdlrg+q2B5+1ldGhujosWYaUkriLweqGyaQTcReny 5EI6WNHNkuy8Lg02AAco0z9DkGaAf/01HHddOtQHjrvGy8Ps+TSfkegd1LjzOMUG y6wMrooy1xJLtCIMs+5cfOtD/nLyVolHGkDOKFfO2lUkRP0l3Lz4n9Fw+CUvMhC+ wiy4z5edMxWE5hy4cyfE1vXh1bz8/dujCpL+ncPTmYcKLQ5TRhRfwfmY0rcep12B p2HqPqzrxYt+i85B841YCozM/qacUG+EsMyLkjpYvVneMhalng1D+KPTfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGiQm+Y8aenIHroesQmkRBPR2t/MB8GA1UdIwQY MBaAFDSSFZi2omGqTD5nFErIdgMyU+CqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAt NDJlMDAyZGFkOWFlLzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iMDAwZTItNjdjMy00NmY3LTg4MjAtNDJlMDAyZGFkOWFl LzEvTkpJVm1MYWlZYXBNUG1jVVNzaDJBekpUNEtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUoWfGSVO J7VEDJLc7+y1GAnq7K0TiRArBiSTD88d4LwFKJvvHXTwVupsK/P1z46dpzROc9iU drUQMy1bW2L4Ygi03AFgOTfBcYjosn3VP956/fAAhxWmo1rwAuqazIxJiWkSPG2T qyBjh2WTcpBoJIuH7zESBCYve2tvbcBIgHC31Yfl8+nC+Y2AxBZBhCAaTKkFcqSb upHzVoHTJAHPyhCkpzVvMZAYjhHAOsjFh+tNHwe8HWQw5uSlx/EWn5AKH0NUqtfb D4qpL30+qdughC8fGfXYn+sXCeX9EeufuE6iTqOkpZS5CwC+2/OFJ9l45Jz+jjOE feDLjdhkpNWI6w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:07:54 2025 by rpki-client