This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json) Hash identifier: KT/HTLlFNEpBWwelGko/1jnNRDJmkyk8YBW07SmNOCE= Subject key identifier: B0:95:1A:81:C9:B1:CA:50:19:90:B5:A4:BD:79:A7:24:0E:69:A4:56 Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9 Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9 Certificate serial: 019AF12E0959B7B7B0790841FFC86ADE3061 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft Manifest number: 0C6B Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: Ht48G7XSgqxbyMEWzeoN2gGljdU+VLxxpqQlWkzEaQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:09:59:b7:b7:b0:79:08:41:ff:c8:6a:de:30:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9 Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=b0951a81c9b1ca501990b5a4bd79a7240e69a456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:1c:8f:49:18:92:9b:d6:f1:0f:e4:16:07: 42:37:67:5d:27:96:8d:ac:3f:97:f5:42:7d:88:02: 05:bb:04:b3:c9:47:45:6c:c6:90:d4:c8:52:23:82: 7f:01:6b:0b:7e:8a:ed:b6:15:6d:69:a8:8b:69:4d: 95:11:d5:21:9a:18:4b:b0:43:1b:af:a3:3b:3e:a3: 48:30:47:21:a8:d9:cc:fd:ad:b1:64:76:d5:82:66: ca:b3:23:16:b1:e3:bb:f9:a5:07:47:b9:7b:6d:87: c4:be:00:b1:e1:ad:af:44:a4:af:90:84:97:3a:6f: f4:30:31:a0:1f:49:14:37:42:83:3e:20:89:99:24: 46:17:af:c2:77:79:e4:1f:fb:8f:1c:07:73:de:35: e3:9b:ca:73:d5:78:8d:3e:c4:1c:9b:1b:96:9e:5f: 6e:b1:4b:96:c6:17:7f:5f:f7:51:44:08:12:34:eb: f4:25:66:ab:ed:1c:99:39:8f:9e:f1:09:be:2f:95: 5b:e3:ab:7c:e9:b2:9c:aa:1b:f6:39:13:50:1c:ee: 7b:11:ff:93:99:f6:ac:dd:6c:db:77:6b:0c:54:74: 53:7a:ec:b2:66:ef:07:d2:f1:b8:e1:c2:9a:86:54: 81:b1:c5:f0:f6:20:4f:75:d6:8d:0d:ba:65:c8:0c: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:95:1A:81:C9:B1:CA:50:19:90:B5:A4:BD:79:A7:24:0E:69:A4:56 X509v3 Authority Key Identifier: keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:56:ec:9f:ca:33:e0:a3:05:3d:2a:bc:e6:5d:ee:57:69:83: 78:f9:d7:54:36:8f:09:7e:1e:c3:68:35:cf:be:86:12:90:b1: a6:93:c3:c9:3d:17:1e:24:af:7b:3e:21:35:e5:48:10:51:07: 16:d9:22:04:1a:79:67:6e:73:7b:24:6a:a3:f8:e0:6f:9d:bf: cc:65:13:65:34:c0:2a:d2:59:3e:6c:8a:57:37:cb:12:3b:72: a6:5a:95:92:c2:c6:25:00:87:e5:4d:6b:8d:8d:a0:ae:10:86: 9f:80:d5:67:08:58:14:2e:f4:f9:58:64:9f:90:24:23:db:a2: b9:41:dc:db:0d:5a:35:3b:d9:73:9f:63:66:15:4c:89:87:f5: 4d:b6:69:b5:cd:1e:84:df:63:bc:ff:7f:09:b6:c3:a3:f2:fe: 21:da:8f:29:25:23:57:b8:4f:70:5c:5d:cf:5a:9f:e5:0b:8e: 9e:78:79:44:f2:d6:72:83:df:d7:ad:45:7d:d2:d5:15:40:b7: dc:83:cc:54:c2:e2:06:e3:c5:96:fd:d9:b7:16:fe:a1:f6:80: d2:b3:af:db:d3:4a:a0:da:bb:a6:31:53:e8:73:d3:2a:a9:11: fa:da:68:8d:8f:42:32:9b:8b:35:4f:a2:f6:06:9d:cf:47:69: 1f:6c:e9:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLglZt7eweQhB/8hq3jBhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NzFiZDZlMmRkYTVmYTMwNTdjNGJjMjgzZmFmNzEzYTkx NWE1ZDkwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhiMDk1MWE4MWM5YjFjYTUwMTk5MGI1YTRiZDc5YTcyNDBlNjlhNDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IIcj0kYkpvW8Q/kFgdCN2ddJ5aN rD+X9UJ9iAIFuwSzyUdFbMaQ1MhSI4J/AWsLfortthVtaaiLaU2VEdUhmhhLsEMb r6M7PqNIMEchqNnM/a2xZHbVgmbKsyMWseO7+aUHR7l7bYfEvgCx4a2vRKSvkISX Om/0MDGgH0kUN0KDPiCJmSRGF6/Cd3nkH/uPHAdz3jXjm8pz1XiNPsQcmxuWnl9u sUuWxhd/X/dRRAgSNOv0JWar7RyZOY+e8Qm+L5Vb46t86bKcqhv2ORNQHO57Ef+T mfas3Wzbd2sMVHRTeuyyZu8H0vG44cKahlSBscXw9iBPddaNDbplyAxJnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCVGoHJscpQGZC1pL15pyQOaaRWMB8GA1UdIwQY MBaAFDdxvW4t2l+jBXxLwoP69xOpFaXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjNHOWJpM2FYNk1GZkV2Q2dfcjNFNmtWcGRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NmY5M2ItY2Q5ZC00ZTgyLWJlZjAt OWRjZjZiM2MwNzk3LzEvTjNHOWJpM2FYNk1GZkV2Q2dfcjNFNmtWcGRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NmY5M2ItY2Q5ZC00ZTgyLWJlZjAtOWRjZjZiM2MwNzk3 LzEvTjNHOWJpM2FYNk1GZkV2Q2dfcjNFNmtWcGRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1bsn8oz 4KMFPSq85l3uV2mDePnXVDaPCX4ew2g1z76GEpCxppPDyT0XHiSvez4hNeVIEFEH FtkiBBp5Z25zeyRqo/jgb52/zGUTZTTAKtJZPmyKVzfLEjtyplqVksLGJQCH5U1r jY2grhCGn4DVZwhYFC70+Vhkn5AkI9uiuUHc2w1aNTvZc59jZhVMiYf1TbZptc0e hN9jvP9/CbbDo/L+IdqPKSUjV7hPcFxdz1qf5QuOnnh5RPLWcoPf161FfdLVFUC3 3IPMVMLiBuPFlv3Ztxb+ofaA0rOv29NKoNq7pjFT6HPTKqkR+tpojY9CMpuLNU+i 9gadz0dpH2zp4g== -----END CERTIFICATE-----Generated at Sat Dec 6 09:44:49 2025 by rpki-client