This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json) Hash identifier: Krsqb6HQ4aTCv4vTb6fA5ZhoMP3A2LAMr+THhID9uG4= Subject key identifier: 37:F4:B3:DB:E8:33:B1:E3:C6:82:8C:03:6B:37:A1:C3:31:7B:B1:83 Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Certificate serial: 019AF2097CD97A4A00BE84821A1A3BD9FD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 05:01:39 +0000 Manifest this update: Sat 06 Dec 2025 05:01:39 +0000 Manifest next update: Sun 07 Dec 2025 05:01:39 +0000 Files and hashes: 1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=) 2: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=) 3: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=) 4: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: PO+noju/J6i0hv2ZacEbzp52zsdlacQqSvnVgkikzic=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:7c:d9:7a:4a:00:be:84:82:1a:1a:3b:d9:fd:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Validity Not Before: Dec 6 05:01:39 2025 GMT Not After : Dec 7 05:01:39 2025 GMT Subject: CN=37f4b3dbe833b1e3c6828c036b37a1c3317bb183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:65:07:b7:81:58:0d:df:5b:5e:fc:c8:d9:0f: d0:8a:12:fa:12:fe:8a:00:48:4d:04:5b:8f:6d:5f: 41:b4:37:58:b2:18:c6:e3:44:db:54:8c:c5:a3:5a: 00:0e:d4:e5:36:89:15:f8:fe:6b:c7:cf:f5:99:4a: b7:7b:71:60:52:fb:50:af:45:72:26:21:5d:52:d0: 3f:c6:44:75:6e:4d:a2:3f:a7:29:7b:92:a6:c4:f8: 48:14:62:d4:73:ff:be:d1:bf:15:bb:09:e2:5d:7c: ff:7e:19:1a:9f:e7:f9:ca:9c:35:28:07:23:a6:5f: 7b:06:76:17:79:b9:67:9c:65:e4:38:01:eb:39:d1: 63:f6:15:55:e2:dc:51:68:fd:18:89:7f:81:7f:40: a5:18:db:62:01:91:cf:7a:c2:27:8f:d1:8d:a6:5c: 64:5d:f6:b8:51:a0:76:53:7b:1b:10:6f:69:59:85: 49:a9:12:ca:6a:36:bc:98:dc:f2:4d:01:6e:52:0e: 52:57:51:18:4b:8d:15:b9:f3:fe:99:a0:af:c7:d5: cb:a2:07:8e:f1:9f:30:d7:2e:cf:1c:53:72:57:00: 81:e3:39:f0:57:95:3f:8a:6e:46:0a:3d:fa:30:a4: 8e:9e:b8:3a:09:b0:ba:ac:d7:56:78:6c:c0:c1:c9: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F4:B3:DB:E8:33:B1:E3:C6:82:8C:03:6B:37:A1:C3:31:7B:B1:83 X509v3 Authority Key Identifier: keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b6:b6:85:f1:4a:a0:b3:af:47:16:e2:8b:24:e0:88:aa:d5: e3:cd:76:e1:6b:cb:5a:dd:bc:2c:1d:8a:24:c2:a1:70:e1:e7: 15:d6:2e:69:05:69:86:0e:52:d1:69:7b:f5:69:b2:ea:67:21: 48:e2:bb:56:99:7f:36:a4:83:13:dc:cf:ce:63:e0:1c:4b:e9: 0f:f9:8f:35:8f:95:96:6c:cb:24:8f:3a:e4:33:e6:b7:84:6f: 9f:9e:cf:4b:57:e1:8d:05:91:0a:e9:7a:ff:a4:03:d5:6d:0e: d6:46:28:a1:be:99:c1:21:45:af:73:a0:de:51:45:85:00:72: 1d:df:b4:56:c7:d9:fd:6c:60:a1:ab:e6:0d:6e:6a:9a:e4:d5: 00:f9:3e:0c:19:d2:2e:2e:53:a5:8a:b6:a3:8b:58:95:00:b9: e6:78:18:13:ba:4f:64:94:33:a2:54:38:50:0a:c5:bf:ad:e3: 84:4b:bb:75:1f:72:f1:17:61:4a:7d:e5:89:0b:e8:01:b5:78: 29:85:a8:31:fb:c5:c9:af:da:d1:7d:81:5b:5c:9e:35:ec:01: b8:ae:59:1e:f0:97:c7:ea:1e:6e:3e:6f:10:1b:a3:07:63:b1: cc:9b:d5:c7:08:9e:9d:08:4a:f3:ab:d4:95:b3:fd:df:e3:51: ad:42:47:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXzZekoAvoSCGho72f1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj MzBlNDUwHhcNMjUxMjA2MDUwMTM5WhcNMjUxMjA3MDUwMTM5WjAzMTEwLwYDVQQD EygzN2Y0YjNkYmU4MzNiMWUzYzY4MjhjMDM2YjM3YTFjMzMxN2JiMTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02UHt4FYDd9bXvzI2Q/QihL6Ev6K AEhNBFuPbV9BtDdYshjG40TbVIzFo1oADtTlNokV+P5rx8/1mUq3e3FgUvtQr0Vy JiFdUtA/xkR1bk2iP6cpe5KmxPhIFGLUc/++0b8VuwniXXz/fhkan+f5ypw1KAcj pl97BnYXeblnnGXkOAHrOdFj9hVV4txRaP0YiX+Bf0ClGNtiAZHPesInj9GNplxk Xfa4UaB2U3sbEG9pWYVJqRLKaja8mNzyTQFuUg5SV1EYS40VufP+maCvx9XLogeO 8Z8w1y7PHFNyVwCB4znwV5U/im5GCj36MKSOnrg6CbC6rNdWeGzAwcmQ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDf0s9voM7HjxoKMA2s3ocMxe7GDMB8GA1UdIwQY MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATra2hfFK oLOvRxbiiyTgiKrV48124WvLWt28LB2KJMKhcOHnFdYuaQVphg5S0Wl79Wmy6mch SOK7Vpl/NqSDE9zPzmPgHEvpD/mPNY+VlmzLJI865DPmt4Rvn57PS1fhjQWRCul6 /6QD1W0O1kYoob6ZwSFFr3Og3lFFhQByHd+0VsfZ/WxgoavmDW5qmuTVAPk+DBnS Li5TpYq2o4tYlQC55ngYE7pPZJQzolQ4UArFv63jhEu7dR9y8RdhSn3liQvoAbV4 KYWoMfvFya/a0X2BW1yeNewBuK5ZHvCXx+oebj5vEBujB2OxzJvVxwienQhK86vU lbP93+NRrUJHIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:20 2025 by rpki-client