This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft File: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft (raw, json) Hash identifier: /DZlq6mKQR/d0ntkp+QmnrsmLlZxwdXSaf+c/11nQY8= Subject key identifier: 5A:8C:96:DA:06:A8:E7:73:DE:A8:A2:F6:CF:21:0D:B7:73:52:58:37 Authority key identifier: 36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5 Certificate issuer: /CN=36319bcd4747ed5b202bb578acb390d16fc411a5 Certificate serial: 019B9C31EDBF39F63B268CD46C06D0814EA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft Manifest number: 144D Signing time: Thu 08 Jan 2026 06:01:16 +0000 Manifest this update: Thu 08 Jan 2026 06:01:16 +0000 Manifest next update: Fri 09 Jan 2026 06:01:16 +0000 Files and hashes: 1: NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl (hash: YVXa+C+CXcd4m/Zx8qVYgGktxytyFPfmnB1hlXuw8TY=) 2: QWziBGJKT97GaU5TsJ0WTnA3UaQ.roa (hash: cg/5v5qKfRj2142sZSNTSinM09isCzKzLrAye6kCxYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9c:31:ed:bf:39:f6:3b:26:8c:d4:6c:06:d0:81:4e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36319bcd4747ed5b202bb578acb390d16fc411a5 Validity Not Before: Jan 8 06:01:16 2026 GMT Not After : Jan 9 06:01:16 2026 GMT Subject: CN=5a8c96da06a8e773dea8a2f6cf210db773525837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:ce:fd:f3:92:38:7a:fc:4e:94:39:73:e5: 41:a1:1e:db:8a:5a:75:f2:21:f8:f2:9d:be:f0:03: d6:ce:aa:8a:fe:28:bd:cb:a5:7c:8b:1d:74:7a:f6: 7d:c9:9d:a4:a0:21:f7:59:25:d9:c6:fd:fe:7f:cd: ab:ba:49:3c:ba:f6:58:91:5f:08:02:f4:1a:1c:bb: 87:81:52:d2:77:a8:7c:7e:03:6b:e0:de:be:a9:e6: 88:56:52:a6:53:87:82:99:86:f9:73:bc:4e:e4:79: 4a:c7:d0:59:53:d6:42:43:c5:6a:87:18:11:9e:00: e3:34:7c:7d:67:51:4d:40:aa:d6:d6:0e:2b:53:ea: 19:08:43:b3:07:14:39:d7:3a:03:4d:f0:1f:2d:ac: a8:95:93:a7:64:87:51:c5:5e:c6:eb:95:e4:f1:2e: 66:0f:30:d1:a3:d6:5e:c0:f9:35:fe:68:51:2c:c7: d9:fe:07:05:41:25:f2:1a:8c:ba:fd:cd:ae:4e:c1: 90:01:54:a2:ad:5c:9d:0a:4b:c3:63:a2:e9:b3:e5: 01:1b:78:8a:46:15:ed:ce:a8:de:61:fb:da:60:e3: e0:73:4d:54:5a:c8:20:7d:2d:1e:5b:1b:6f:70:f3: bf:33:c9:0c:5e:3c:3a:0b:46:f3:07:b9:fa:4b:64: 8f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:8C:96:DA:06:A8:E7:73:DE:A8:A2:F6:CF:21:0D:B7:73:52:58:37 X509v3 Authority Key Identifier: keyid:36:31:9B:CD:47:47:ED:5B:20:2B:B5:78:AC:B3:90:D1:6F:C4:11:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ba24d8-d484-4e9b-87ba-2455f9f5216f/1/NjGbzUdH7VsgK7V4rLOQ0W_EEaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:84:a6:ea:e8:7d:69:6d:5f:68:b0:80:cc:02:c7:06:97:b9: 28:02:d6:9f:f9:a3:16:0f:2f:7f:a5:4c:c1:9c:70:ba:95:a8: 46:a4:11:18:51:02:99:54:cb:ff:40:da:6f:ce:92:b8:34:4c: ef:a2:d5:21:33:ca:60:38:e4:64:0c:27:61:96:f7:fd:e8:42: ae:6b:6e:6c:a1:c2:83:33:a3:49:4b:98:0a:5c:2d:44:fd:58: 10:97:aa:b9:78:7c:d1:b3:93:ff:1c:35:fc:3a:af:3a:a8:47: c2:e0:91:6e:53:fc:20:0d:41:44:e4:f9:25:f0:82:81:2f:7d: 83:43:41:a8:96:f4:bf:10:4d:22:70:3f:0d:4d:1d:80:a4:54: 4f:10:17:aa:23:92:ea:4a:a4:4f:7a:85:83:c4:7b:5a:1c:53: 7d:35:a7:bb:16:ee:96:8f:7d:69:d9:a6:14:83:3f:9f:bb:4b: df:96:6e:66:8b:4f:cb:9a:c8:7f:ff:dc:ca:b0:be:dd:eb:f4: c0:c7:38:95:c9:57:58:39:5b:a7:49:0e:24:f0:94:f7:df:19: e1:b4:e4:36:36:aa:c5:da:16:3a:27:80:5b:38:d5:41:2f:8f: 9b:0e:89:1f:2d:52:10:29:2b:ae:bf:ea:f8:6a:57:d6:70:52: ae:13:e2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZucMe2/OfY7JozUbAbQgU6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2MzE5YmNkNDc0N2VkNWIyMDJiYjU3OGFjYjM5MGQxNmZj NDExYTUwHhcNMjYwMTA4MDYwMTE2WhcNMjYwMTA5MDYwMTE2WjAzMTEwLwYDVQQD Eyg1YThjOTZkYTA2YThlNzczZGVhOGEyZjZjZjIxMGRiNzczNTI1ODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmDO/fOSOHr8TpQ5c+VBoR7bilp1 8iH48p2+8APWzqqK/ii9y6V8ix10evZ9yZ2koCH3WSXZxv3+f82rukk8uvZYkV8I AvQaHLuHgVLSd6h8fgNr4N6+qeaIVlKmU4eCmYb5c7xO5HlKx9BZU9ZCQ8VqhxgR ngDjNHx9Z1FNQKrW1g4rU+oZCEOzBxQ51zoDTfAfLayolZOnZIdRxV7G65Xk8S5m DzDRo9ZewPk1/mhRLMfZ/gcFQSXyGoy6/c2uTsGQAVSirVydCkvDY6Lps+UBG3iK RhXtzqjeYfvaYOPgc01UWsggfS0eWxtvcPO/M8kMXjw6C0bzB7n6S2SPKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFqMltoGqOdz3qii9s8hDbdzUlg3MB8GA1UdIwQY MBaAFDYxm81HR+1bICu1eKyzkNFvxBGlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEt MjQ1NWY5ZjUyMTZmLzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iYTI0ZDgtZDQ4NC00ZTliLTg3YmEtMjQ1NWY5ZjUyMTZm LzEvTmpHYnpVZEg3VnNnSzdWNHJMT1EwV19FRWFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoSm6uh9 aW1faLCAzALHBpe5KALWn/mjFg8vf6VMwZxwupWoRqQRGFECmVTL/0Dab86SuDRM 76LVITPKYDjkZAwnYZb3/ehCrmtubKHCgzOjSUuYClwtRP1YEJequXh80bOT/xw1 /DqvOqhHwuCRblP8IA1BROT5JfCCgS99g0NBqJb0vxBNInA/DU0dgKRUTxAXqiOS 6kqkT3qFg8R7WhxTfTWnuxbulo99admmFIM/n7tL35ZuZotPy5rIf//cyrC+3ev0 wMc4lclXWDlbp0kOJPCU998Z4bTkNjaqxdoWOieAWzjVQS+Pmw6JHy1SECkrrr/q +GpX1nBSrhPi/w== -----END CERTIFICATE-----Generated at Thu Jan 8 13:36:21 2026 by rpki-client