This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json) Hash identifier: AM7DljHzdigMZAKdSKb0CNFvsYA+AHXSCiwFOCpsbwc= Subject key identifier: 17:CD:00:66:1B:C5:27:8E:1D:AE:6C:B6:01:1C:DD:D9:B1:A3:AC:6D Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52 Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52 Certificate serial: 019AF276D556967593E3A083516F9244C217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft Manifest number: 03BB Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: mah4AWfXC0pa7vVaoRQiMo894vo.roa (hash: FRBDBjNrcarz6+cgNnWqdZSbwkqTq4d1ETUAtkcAHtM=) 2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: Evkp0CoI+pV5qnI0ZouE3QMOZ4wFncjPPFvTnv3/KyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d5:56:96:75:93:e3:a0:83:51:6f:92:44:c2:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52 Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=17cd00661bc5278e1dae6cb6011cddd9b1a3ac6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:35:8e:b8:09:53:12:a6:c7:53:e4:69:71:1a: ec:7b:30:ab:f6:a2:e9:7d:8c:b4:0e:66:38:a9:51: 44:ac:28:95:d4:f0:3d:3c:85:af:23:7a:9b:a7:0b: d9:70:4a:08:3b:ca:72:80:8a:c4:0c:01:6f:31:a8: 97:8b:12:b3:dc:e3:1e:ae:5f:50:c8:04:67:74:04: 6d:07:22:ff:d5:15:6e:b0:93:22:34:19:cc:fa:b1: 2c:ff:a9:da:e8:f9:b0:d8:4f:96:9c:41:b7:93:db: 88:43:5f:ef:b9:5a:f0:3d:16:f3:51:bc:99:bb:d6: 85:4d:53:4c:8b:74:1f:6b:29:b2:a7:06:b3:da:5c: 11:da:c6:3e:41:39:01:d2:dd:35:be:67:81:f8:4c: 57:ba:ca:c1:66:f5:39:68:b1:d8:1e:ca:d6:d3:8d: 63:02:8a:5c:69:91:ed:7c:4d:a5:61:cd:de:aa:96: ac:ab:d5:b0:6c:c0:68:53:65:16:0d:df:86:71:86: cb:aa:56:1a:7c:e5:d6:79:98:83:4c:94:12:90:90: 19:61:24:0e:aa:de:77:a2:7c:2f:2b:2f:5b:c0:80: 9a:07:c6:a4:a7:5a:95:77:a2:62:1a:e4:8a:36:0f: bd:52:77:24:da:dd:2a:68:7c:5e:b3:6d:16:41:36: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CD:00:66:1B:C5:27:8E:1D:AE:6C:B6:01:1C:DD:D9:B1:A3:AC:6D X509v3 Authority Key Identifier: keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:32:c9:5b:af:28:2a:03:b0:98:7c:82:44:47:2c:9f:a5:d0: 08:45:46:70:2e:fb:ad:47:d0:34:0f:89:54:90:13:24:e8:53: e6:bf:e8:c8:7f:02:b1:0c:ed:03:39:6e:f0:b6:eb:2d:31:fc: c5:3e:06:b6:0f:3f:44:71:8c:a7:90:c4:79:f8:7f:67:57:c6: 1c:60:bf:1e:50:a8:b2:6a:55:26:d2:03:49:bd:5f:a8:71:14: b5:7c:c1:14:b2:df:6d:4a:5f:fc:04:c1:f3:3b:82:cd:e3:a4: e8:f6:07:2c:c4:60:ff:11:8b:19:cf:3c:88:1e:1c:f9:ba:58: b0:18:47:0a:41:b0:56:28:fd:aa:b6:9d:58:a9:9a:a2:ee:9f: 74:7e:0c:4c:65:90:48:df:93:31:f0:58:d4:0b:c5:2f:9d:2b: 5f:1e:bd:55:77:6d:9d:d6:1d:80:89:28:48:91:30:20:50:3d: c5:3e:c7:00:17:82:4d:1d:3a:53:8b:58:95:2c:8f:fa:b7:8e: 3f:ce:2b:25:d4:32:ec:cd:d5:d2:e9:51:68:32:5b:c5:89:25: 22:6f:a3:c4:cc:dc:7f:77:83:0a:73:0d:cc:23:28:c3:1c:47: d4:7e:04:59:11:72:c8:07:09:d2:62:eb:71:9b:85:a3:04:d5: 98:48:60:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtVWlnWT46CDUW+SRMIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZGRjNzNiNTlhMWZjZGVlMjJlMjU4MjRkNDBhY2MyNzI4 NmFhNTIwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EygxN2NkMDA2NjFiYzUyNzhlMWRhZTZjYjYwMTFjZGRkOWIxYTNhYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDWOuAlTEqbHU+RpcRrsezCr9qLp fYy0DmY4qVFErCiV1PA9PIWvI3qbpwvZcEoIO8pygIrEDAFvMaiXixKz3OMerl9Q yARndARtByL/1RVusJMiNBnM+rEs/6na6Pmw2E+WnEG3k9uIQ1/vuVrwPRbzUbyZ u9aFTVNMi3Qfaymypwaz2lwR2sY+QTkB0t01vmeB+ExXusrBZvU5aLHYHsrW041j AopcaZHtfE2lYc3eqpasq9WwbMBoU2UWDd+GcYbLqlYafOXWeZiDTJQSkJAZYSQO qt53onwvKy9bwICaB8akp1qVd6JiGuSKNg+9Unck2t0qaHxes20WQTYWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfNAGYbxSeOHa5stgEc3dmxo6xtMB8GA1UdIwQY MBaAFKzdxztZofze4i4lgk1ArMJyhqpSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWIt YTBlYzg0YTMxMzkzLzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS84Nzg4ZTUtOGFiOC00M2U5LTlkYWItYTBlYzg0YTMxMzkz LzEvck4zSE8xbWhfTjdpTGlXQ1RVQ3N3bktHcWxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTLJW68o KgOwmHyCREcsn6XQCEVGcC77rUfQNA+JVJATJOhT5r/oyH8CsQztAzlu8LbrLTH8 xT4Gtg8/RHGMp5DEefh/Z1fGHGC/HlCosmpVJtIDSb1fqHEUtXzBFLLfbUpf/ATB 8zuCzeOk6PYHLMRg/xGLGc88iB4c+bpYsBhHCkGwVij9qradWKmaou6fdH4MTGWQ SN+TMfBY1AvFL50rXx69VXdtndYdgIkoSJEwIFA9xT7HABeCTR06U4tYlSyP+reO P84rJdQy7M3V0ulRaDJbxYklIm+jxMzcf3eDCnMNzCMowxxH1H4EWRFyyAcJ0mLr cZuFowTVmEhgQA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:25 2025 by rpki-client