This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json) Hash identifier: dEddh09KTm6DAYpPNVXmzBmvlnmqwq6jeuEsO9XUuXA= Subject key identifier: 01:8F:7A:E0:0F:B7:3F:89:67:95:E2:92:AA:C9:13:BD:6A:50:18:D9 Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004 Certificate serial: 019AF3BFE546F7D31C0D81D2A8FA90082BC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft Manifest number: 16BD Signing time: Sat 06 Dec 2025 13:00:30 +0000 Manifest this update: Sat 06 Dec 2025 13:00:30 +0000 Manifest next update: Sun 07 Dec 2025 13:00:30 +0000 Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: 9ItNxC7GYiTdvIjc6NYeQj0mODRni8w2G/QJWXoTJXM=) 2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=) 3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:e5:46:f7:d3:1c:0d:81:d2:a8:fa:90:08:2b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004 Validity Not Before: Dec 6 13:00:30 2025 GMT Not After : Dec 7 13:00:30 2025 GMT Subject: CN=018f7ae00fb73f896795e292aac913bd6a5018d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:64:97:f5:35:a2:18:68:98:9e:69:6b:56:69: 65:79:5b:30:ef:b4:70:aa:db:e6:c3:d3:94:50:34: 98:46:3a:df:97:28:58:25:1d:4b:be:88:53:c6:50: b8:bd:f7:ee:ae:57:e4:75:71:49:19:01:e5:6f:33: f2:b3:1f:06:c2:c1:25:0f:23:70:94:7b:cc:46:b7: dc:00:ab:a0:9a:4c:93:65:e1:0d:66:09:82:96:f0: 47:06:d0:39:65:40:35:ef:7b:fa:71:17:b3:3a:c4: 5d:55:03:5c:66:38:91:32:6e:dc:86:3d:62:da:68: 08:0a:17:93:86:e4:7f:97:f6:a8:cb:dc:e6:b3:33: 57:fd:f2:82:27:d6:35:2f:5f:75:95:f2:9b:16:fb: dd:da:90:70:45:c6:ec:9e:ea:08:44:32:68:a3:c5: 5f:1d:1e:f5:e9:7f:19:3e:08:16:7b:d9:8c:7f:74: c8:ce:5d:8b:13:e0:81:23:45:00:2d:d0:df:19:23: cd:8a:d9:f3:d2:60:21:a3:65:03:62:9e:95:d6:c0: da:e7:65:af:b5:6d:ea:78:6c:85:cd:7d:a6:49:1f: 9f:11:c3:0b:55:23:df:d9:af:5e:78:df:c2:1c:67: 6f:fb:36:c3:ce:6a:46:63:ec:00:7a:cb:70:3b:be: ca:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:8F:7A:E0:0F:B7:3F:89:67:95:E2:92:AA:C9:13:BD:6A:50:18:D9 X509v3 Authority Key Identifier: keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3c:b6:61:4d:dc:09:06:3d:f7:e1:1d:df:f5:ed:c7:44:17: 2b:dd:7d:d2:9d:2c:f7:ff:c5:d4:7e:fe:c1:97:4f:18:00:66: c8:15:3e:bb:2b:7f:3b:d4:67:2c:bc:31:72:34:cb:35:6c:5b: 04:01:b5:3e:f7:e5:27:11:a7:dc:15:64:c1:78:64:73:37:8a: 8f:26:e1:dc:e7:d3:f9:e7:a3:04:70:b8:43:08:fa:86:d3:ee: 41:e4:88:e1:8c:d8:e7:ba:4e:f7:92:5f:a2:27:b6:e2:fc:fb: ec:21:95:c3:2a:bf:5b:2e:8d:e2:5f:a7:17:44:79:20:0a:1e: 8d:a5:11:04:be:7d:5c:76:07:22:5d:f0:8e:8a:20:48:7f:9b: a7:76:ba:36:04:5a:d1:03:cb:57:23:ab:20:10:7c:8f:23:cc: d1:a7:cc:00:2e:7b:53:f3:33:1f:c2:fd:f7:5f:ff:59:f5:83: 10:3a:06:a2:49:37:a7:e6:55:b6:2a:85:9f:67:fb:cf:e7:32: 5e:89:9a:23:f3:72:10:f1:4c:87:5e:23:ee:a7:31:68:bc:c3: b1:b5:09:08:be:ea:93:36:a3:38:d2:42:db:94:6d:41:b9:0e: df:3b:60:d3:b1:33:56:49:e9:16:a3:8e:49:0d:13:a1:b1:56: 51:f6:50:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+VG99McDYHSqPqQCCvHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz ODMwMDQwHhcNMjUxMjA2MTMwMDMwWhcNMjUxMjA3MTMwMDMwWjAzMTEwLwYDVQQD EygwMThmN2FlMDBmYjczZjg5Njc5NWUyOTJhYWM5MTNiZDZhNTAxOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmSX9TWiGGiYnmlrVmlleVsw77Rw qtvmw9OUUDSYRjrflyhYJR1LvohTxlC4vffurlfkdXFJGQHlbzPysx8GwsElDyNw lHvMRrfcAKugmkyTZeENZgmClvBHBtA5ZUA173v6cRezOsRdVQNcZjiRMm7chj1i 2mgICheThuR/l/aoy9zmszNX/fKCJ9Y1L191lfKbFvvd2pBwRcbsnuoIRDJoo8Vf HR716X8ZPggWe9mMf3TIzl2LE+CBI0UALdDfGSPNitnz0mAho2UDYp6V1sDa52Wv tW3qeGyFzX2mSR+fEcMLVSPf2a9eeN/CHGdv+zbDzmpGY+wAestwO77KHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGPeuAPtz+JZ5XikqrJE71qUBjZMB8GA1UdIwQY MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzy2YU3c CQY99+Ed3/Xtx0QXK9190p0s9//F1H7+wZdPGABmyBU+uyt/O9RnLLwxcjTLNWxb BAG1PvflJxGn3BVkwXhkczeKjybh3OfT+eejBHC4Qwj6htPuQeSI4YzY57pO95Jf oie24vz77CGVwyq/Wy6N4l+nF0R5IAoejaURBL59XHYHIl3wjoogSH+bp3a6NgRa 0QPLVyOrIBB8jyPM0afMAC57U/MzH8L991//WfWDEDoGokk3p+ZVtiqFn2f7z+cy XomaI/NyEPFMh14j7qcxaLzDsbUJCL7qkzajONJC25RtQbkO3ztg07EzVknpFqOO SQ0TobFWUfZQxA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:02:25 2025 by rpki-client