This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json) Hash identifier: SPC/CD2WTu/OZJR3zUTQIgV5AH9VJCLyvUrT3RgrNm4= Subject key identifier: AA:8F:D2:0E:79:89:6E:19:BF:AA:05:F6:5F:22:4E:BA:6F:0A:3A:8B Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Certificate serial: 019AF1D1BA873FD75DE71C76BE49CD1ECB24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: 3-Pz_ACqotf_1pTiM38rfDDW65c.roa (hash: +6mxaP3CNTwVlIYMhWG+20r4HZR/llgs3lm8STPmGs0=) 2: 9kX4GrtqMRWRvdlXwe-ZIc9Ou2o.roa (hash: 6kYLXGHct4tBz4Kt7RTp0Yq24Dr5ZTh8EftVQx18Anw=) 3: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: 25/HvOrtJczF6idUAV7Wxjsj8XN7AqXVSRyi7vxuFmY=) 4: PuYFjQeAMPYTJknY4a9xdl9WjmI.roa (hash: E2/hGT1MU9NO8befK4BGLovPtwxuEyai1B8Xt8zA7+A=) 5: QRbrmHMbnacFIghz2vQJ1iEwIPo.roa (hash: gpC7d4/OhCyOZcpUbHREfEufrTPs9FXkeTxWhp4MXlw=) 6: Y61qcEFC7UHY3oR4PWuHU9DuQw4.roa (hash: nZiVzcf4EnknurihRkUREMkpQVHN0LJkiBmCqD91PTc=) 7: avUi3YjwZnz0yzUPnJu4Y8PDkW0.roa (hash: mWS6jEEzpU5C/mf65CgMVs1ygfIg+nXboKeBb7STrRk=) 8: nTWU5WV73x998fb6pecneWzKHj0.roa (hash: m9Al1FOb5Ruq1WL/BIhpl9I/8AOLD6hHB+5Qi5PqY4A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ba:87:3f:d7:5d:e7:1c:76:be:49:cd:1e:cb:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=aa8fd20e79896e19bfaa05f65f224eba6f0a3a8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2b:cc:d0:fe:4f:a9:32:1d:85:03:83:df:1a: 02:3e:e2:ac:52:4d:59:27:1f:69:19:e9:7b:01:40: 8a:a8:0e:1e:d5:9c:c3:a7:20:9e:c6:62:39:35:86: 56:ee:72:76:3a:82:6d:d4:86:2a:82:13:e0:7f:cb: 0d:b7:e9:6f:f5:e3:fb:3c:3f:3a:8f:c9:24:44:dc: 43:2d:15:e5:71:14:64:f5:18:a2:8f:a3:c6:05:be: b9:d2:11:96:35:96:62:18:bf:57:05:63:bf:65:ca: d8:9b:01:6b:9a:51:30:aa:ab:17:61:60:52:27:a4: cf:76:5f:f9:a2:0c:21:08:f2:b5:2a:f8:2e:33:aa: 2d:c6:f5:5c:11:04:96:84:c1:16:1f:2a:38:60:eb: b7:38:97:a8:38:12:27:27:79:97:91:20:40:6c:89: 33:c9:20:50:9f:01:a4:8d:d7:2a:02:46:aa:cf:08: f3:c7:f0:1b:05:e9:06:a3:b4:d4:32:3a:21:ce:f4: eb:af:fa:7b:ff:7f:88:40:11:45:2a:3b:6a:6c:fb: c7:ad:24:90:9f:3e:6e:1f:a7:6b:ea:c3:07:27:59: d6:55:89:ba:2f:e5:d3:e9:0e:db:c0:54:d6:a2:33: c3:7a:78:fd:0c:3c:b4:cb:c8:42:34:0d:2e:37:2b: 36:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8F:D2:0E:79:89:6E:19:BF:AA:05:F6:5F:22:4E:BA:6F:0A:3A:8B X509v3 Authority Key Identifier: keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:43:48:c9:fe:34:36:63:2f:98:a7:83:55:2d:29:1d:51:b0: 16:1d:4c:85:32:0e:b3:a5:69:14:30:2f:a2:e3:f9:a8:56:02: d3:e9:f7:d2:06:7f:3c:7c:8e:d8:31:84:5d:87:6b:60:fc:79: 72:41:3a:56:c3:49:a3:7d:d5:57:c5:e3:dd:9b:5f:10:1e:4b: b5:8e:b0:17:2a:73:a4:77:6d:7c:46:23:07:fa:c3:21:b7:04: df:59:15:23:8e:c0:57:b8:ba:de:a8:e4:02:48:88:00:75:f7: 68:7a:a7:75:d8:40:cc:d0:a5:79:ad:d5:db:2e:2b:4a:45:b8: 52:bb:ba:ff:e9:11:23:4b:86:0b:23:43:5f:3d:a9:74:a5:23: bf:55:cb:80:14:79:82:26:a7:d4:cc:db:17:86:4a:86:fc:5a: 20:89:78:40:e8:7b:ef:e1:ab:c1:00:44:80:ed:8d:9e:22:29: e0:57:58:29:50:3e:2c:6d:d1:b4:1f:76:ce:66:46:d7:57:7c: 5e:4f:48:b5:94:fb:69:52:87:ab:53:78:45:2e:94:c8:44:df: 12:b7:a0:0c:e3:5f:b8:cc:54:00:bb:5f:53:44:8c:02:05:83: 9c:dc:06:9e:cc:85:93:52:a0:80:08:5c:76:24:c4:90:48:8c: 9e:f7:f7:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0bqHP9dd5xx2vknNHsskMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz NmZmMTAwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EyhhYThmZDIwZTc5ODk2ZTE5YmZhYTA1ZjY1ZjIyNGViYTZmMGEzYThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySvM0P5PqTIdhQOD3xoCPuKsUk1Z Jx9pGel7AUCKqA4e1ZzDpyCexmI5NYZW7nJ2OoJt1IYqghPgf8sNt+lv9eP7PD86 j8kkRNxDLRXlcRRk9Riij6PGBb650hGWNZZiGL9XBWO/ZcrYmwFrmlEwqqsXYWBS J6TPdl/5ogwhCPK1KvguM6otxvVcEQSWhMEWHyo4YOu3OJeoOBInJ3mXkSBAbIkz ySBQnwGkjdcqAkaqzwjzx/AbBekGo7TUMjohzvTrr/p7/3+IQBFFKjtqbPvHrSSQ nz5uH6dr6sMHJ1nWVYm6L+XT6Q7bwFTWojPDenj9DDy0y8hCNA0uNys21wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqP0g55iW4Zv6oF9l8iTrpvCjqLMB8GA1UdIwQY MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt YjUzYjY0Y2YwZDk1LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1 LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0NIyf40 NmMvmKeDVS0pHVGwFh1MhTIOs6VpFDAvouP5qFYC0+n30gZ/PHyO2DGEXYdrYPx5 ckE6VsNJo33VV8Xj3ZtfEB5LtY6wFypzpHdtfEYjB/rDIbcE31kVI47AV7i63qjk AkiIAHX3aHqnddhAzNClea3V2y4rSkW4Uru6/+kRI0uGCyNDXz2pdKUjv1XLgBR5 gian1MzbF4ZKhvxaIIl4QOh77+GrwQBEgO2NniIp4FdYKVA+LG3RtB92zmZG11d8 Xk9ItZT7aVKHq1N4RS6UyETfEregDONfuMxUALtfU0SMAgWDnNwGnsyFk1KggAhc diTEkEiMnvf3Dw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:23:44 2025 by rpki-client