This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json) Hash identifier: OOcIGOk+jrnV4ZhMwR2Kk1cqaz/GllCdX4sTdi1NqOk= Subject key identifier: 1D:E6:85:48:C6:C7:6D:DA:D8:8A:54:EE:77:B5:F0:3D:03:BD:78:EB Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24 Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224 Certificate serial: 019AF2768660034F60A5F1960D85946F99C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft Manifest number: 0EE8 Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: VtnBsekD8McOl1dTkhvnKl9QzCWLjNBh0m7GG7kj9qM=) 2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:86:60:03:4f:60:a5:f1:96:0d:85:94:6f:99:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224 Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=1de68548c6c76ddad88a54ee77b5f03d03bd78eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9e:6e:1f:1d:ac:3e:e5:7c:27:16:4a:26:b9: 52:40:3c:66:15:59:c8:2d:b4:e8:11:54:88:b9:f5: 29:9e:ec:56:ff:11:6a:a0:4c:24:85:36:30:cb:89: 3a:e2:5a:50:ee:33:d5:5a:9d:b1:29:20:21:0f:d3: 33:26:f9:03:10:9b:39:f5:02:06:7f:0e:d6:bd:61: 67:38:11:ae:77:4c:03:94:85:e3:b5:c3:06:35:2b: 9d:29:f0:c3:ad:05:49:b0:7a:4d:2f:11:90:18:3e: b4:55:13:c4:b5:09:e4:37:a3:bb:f6:7f:ab:0e:11: e9:b1:fe:20:83:c9:ee:68:e5:e2:45:12:1e:24:76: 3c:f3:27:fd:e9:e2:fe:13:3c:43:70:1d:a2:29:57: 80:40:a7:82:b2:9c:70:05:92:51:e1:90:36:12:f2: 55:5f:45:bd:da:dd:66:00:91:02:f2:8f:82:08:37: 3b:d1:b5:db:2b:ec:e8:ce:f3:e6:c0:e0:82:9e:eb: b4:15:40:0f:6e:e1:d7:73:c8:1b:ca:14:68:7f:83: 66:6f:45:5f:f4:ac:8f:c1:f5:b5:55:db:9a:b1:9b: 59:ed:28:e5:73:91:33:30:36:fe:0e:99:86:a8:42: a3:d1:d7:5a:04:28:a4:c5:12:66:cd:a4:e6:3d:7a: 1c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:E6:85:48:C6:C7:6D:DA:D8:8A:54:EE:77:B5:F0:3D:03:BD:78:EB X509v3 Authority Key Identifier: keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b9:a5:bf:71:5d:23:6d:2c:fa:54:82:dc:e6:1e:48:af:d2: e5:d5:38:e8:67:4a:75:3c:32:68:b2:26:37:12:86:e9:eb:ba: 64:17:d3:73:d0:f8:c3:52:c3:b6:79:f3:17:f1:76:b3:6d:eb: 47:99:90:cf:63:4a:b5:20:aa:77:3d:98:81:86:0d:0a:d1:66: a8:3f:fe:dc:89:c9:20:a8:9b:a4:84:98:52:b7:4f:cd:f6:5e: 14:d7:8b:85:41:01:a0:d8:05:77:2f:a3:b6:f5:2f:eb:1b:4b: 8a:89:ad:3f:04:50:f2:96:7d:89:f5:18:96:ab:e2:89:e1:97: b6:5a:d6:b4:49:06:a0:61:fd:5e:09:f1:09:ed:8c:c9:de:80: cb:8c:8c:bb:54:87:8b:25:98:d6:a9:a8:e6:2e:96:b1:6e:8c: 9f:9e:3d:32:ca:a3:15:0f:4a:c9:da:11:a4:43:30:70:2b:04: f6:03:f9:9e:f3:31:f9:f1:45:78:b8:ae:0f:17:c3:16:18:7b: ba:59:ad:63:a9:f6:a7:7d:25:00:f3:27:6d:3f:2b:a0:52:4e: ac:83:a6:72:e5:60:f4:df:16:c9:22:bc:c1:ca:df:18:02:a6: dc:b3:55:43:79:59:70:c7:02:32:e3:b9:23:c3:db:9b:18:25: d9:28:32:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydoZgA09gpfGWDYWUb5nJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3N2JkMTBmN2Q5MDZjMTMxYzhjOWUyZmM3MzE2NDE2ZGY0 YWUyMjQwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD EygxZGU2ODU0OGM2Yzc2ZGRhZDg4YTU0ZWU3N2I1ZjAzZDAzYmQ3OGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ5uHx2sPuV8JxZKJrlSQDxmFVnI LbToEVSIufUpnuxW/xFqoEwkhTYwy4k64lpQ7jPVWp2xKSAhD9MzJvkDEJs59QIG fw7WvWFnOBGud0wDlIXjtcMGNSudKfDDrQVJsHpNLxGQGD60VRPEtQnkN6O79n+r DhHpsf4gg8nuaOXiRRIeJHY88yf96eL+EzxDcB2iKVeAQKeCspxwBZJR4ZA2EvJV X0W92t1mAJEC8o+CCDc70bXbK+zozvPmwOCCnuu0FUAPbuHXc8gbyhRof4Nmb0Vf 9KyPwfW1VduasZtZ7Sjlc5EzMDb+DpmGqEKj0ddaBCikxRJmzaTmPXocdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3mhUjGx23a2IpU7ne18D0DvXjrMB8GA1UdIwQY MBaAFDd70Q99kGwTHIyeL8cxZBbfSuIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzct NWE5YWM3ZjM5MDIzLzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzctNWE5YWM3ZjM5MDIz LzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLmlv3Fd I20s+lSC3OYeSK/S5dU46GdKdTwyaLImNxKG6eu6ZBfTc9D4w1LDtnnzF/F2s23r R5mQz2NKtSCqdz2YgYYNCtFmqD/+3InJIKibpISYUrdPzfZeFNeLhUEBoNgFdy+j tvUv6xtLiomtPwRQ8pZ9ifUYlqviieGXtlrWtEkGoGH9XgnxCe2Myd6Ay4yMu1SH iyWY1qmo5i6WsW6Mn549MsqjFQ9KydoRpEMwcCsE9gP5nvMx+fFFeLiuDxfDFhh7 ulmtY6n2p30lAPMnbT8roFJOrIOmcuVg9N8WySK8wcrfGAKm3LNVQ3lZcMcCMuO5 I8Pbmxgl2SgyhQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:48 2025 by rpki-client