This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft File: N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json) Hash identifier: OFG9QAB7EdqnCLO6ux9gRQtYeU2co2KLlrs8fpw/+m4= Subject key identifier: 50:1B:10:E6:90:83:CD:CE:B7:EB:27:CD:0F:85:38:D3:5B:21:5A:EE Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c Certificate serial: 019B2B1E6104EF482BCC2E4F7D9EECE276D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft Manifest number: 04AA Signing time: Wed 17 Dec 2025 07:02:49 +0000 Manifest this update: Wed 17 Dec 2025 07:02:49 +0000 Manifest next update: Thu 18 Dec 2025 07:02:49 +0000 Files and hashes: 1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=) 2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: rwnB6Bd/fiOu9KWNwJLFM3Jk47Tbzn5V856arUjaBxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1e:61:04:ef:48:2b:cc:2e:4f:7d:9e:ec:e2:76:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c Validity Not Before: Dec 17 07:02:49 2025 GMT Not After : Dec 18 07:02:49 2025 GMT Subject: CN=501b10e69083cdceb7eb27cd0f8538d35b215aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:27:ca:30:0b:cf:07:91:90:c4:ed:b0:09:e5: 34:fd:10:67:69:4f:30:e5:2c:9e:cb:75:15:dd:a1: ca:13:4f:ad:81:c4:d3:56:9c:00:84:76:d4:7b:e9: b0:14:44:98:0a:8f:d1:7b:d1:56:81:a4:83:e1:82: c5:fd:d1:7a:bb:b3:7d:cb:dc:74:21:85:7a:8d:7e: cd:53:3c:20:d4:fa:b7:1d:a6:00:15:d4:4e:b6:99: 50:51:e9:ff:c7:e1:89:b3:bb:d3:6c:3e:3a:72:be: 46:b3:92:47:52:e9:f7:5a:91:ad:a0:e4:61:ae:80: 59:af:00:8f:36:e7:2d:b1:04:3b:85:5d:2f:cc:56: 5f:f1:a5:9a:b7:bc:ab:eb:a3:a8:df:30:06:df:f3: eb:ff:fc:2e:e4:b4:21:3e:4c:db:e3:7e:1c:fa:a7: 4d:9a:c1:38:84:8a:1e:07:af:cb:b5:1b:7c:26:17: aa:9a:44:0b:60:a7:8f:4e:09:c3:dc:a5:35:0f:9e: 7f:54:74:9b:db:ed:01:57:b6:c3:fe:f6:71:43:f1: de:85:a9:84:1f:a7:1a:bf:ca:1c:9a:36:17:04:2f: f2:30:d4:d4:18:6d:06:63:49:09:3d:91:06:19:9d: 55:e5:1d:e0:02:ad:c2:be:a5:04:5a:0c:3b:0e:87: 61:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1B:10:E6:90:83:CD:CE:B7:EB:27:CD:0F:85:38:D3:5B:21:5A:EE X509v3 Authority Key Identifier: keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:33:8a:2c:fc:a7:ba:4e:e4:4b:88:3b:3f:47:28:05:dc:37: 66:e7:9d:59:21:bc:36:ad:1f:90:71:62:77:6d:d3:1d:de:5a: 22:d4:df:8b:85:ee:10:fa:e4:8a:1a:37:93:ef:fd:70:87:93: ae:94:3d:79:19:1a:9c:21:66:4a:55:98:98:11:3c:77:ab:a1: 76:8f:ec:3d:d1:61:ce:d7:8c:fc:13:27:ca:dc:f9:ff:fd:48: 8d:e1:ec:b6:60:74:28:48:4a:2e:24:0c:9c:23:7c:a2:07:bc: 65:e4:b5:9d:02:d4:d6:f3:ef:10:5b:5d:a6:25:b2:ad:26:0c: 47:5a:68:dd:bf:f9:33:d2:f7:2a:78:5b:1d:d4:76:b5:12:62: 8e:12:b0:6b:a7:17:74:20:40:1e:40:70:30:dc:45:0b:08:72: af:07:34:c5:fb:7b:ff:cb:c3:1e:4f:98:69:6d:96:9e:91:b6: bc:c1:fc:b9:21:27:1d:69:1a:e7:60:17:d8:c5:e3:ad:48:56: 79:0f:df:c5:49:47:f1:c4:7c:2d:e4:8d:85:a0:70:8b:42:86: 7b:05:a0:a1:65:a1:c3:2f:9b:d6:3f:ea:d5:ad:ad:08:4d:a3: f0:2d:ee:e8:a7:d9:37:52:56:56:ce:5a:b6:d1:c3:bd:27:2e: f6:ea:66:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHmEE70grzC5PfZ7s4nbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTRkMmU0MmYyMzYyYzJlNmVmNTJiODJmMTlmN2U1NjM3 NTdlMGMwHhcNMjUxMjE3MDcwMjQ5WhcNMjUxMjE4MDcwMjQ5WjAzMTEwLwYDVQQD Eyg1MDFiMTBlNjkwODNjZGNlYjdlYjI3Y2QwZjg1MzhkMzViMjE1YWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SfKMAvPB5GQxO2wCeU0/RBnaU8w 5Syey3UV3aHKE0+tgcTTVpwAhHbUe+mwFESYCo/Re9FWgaSD4YLF/dF6u7N9y9x0 IYV6jX7NUzwg1Pq3HaYAFdROtplQUen/x+GJs7vTbD46cr5Gs5JHUun3WpGtoORh roBZrwCPNuctsQQ7hV0vzFZf8aWat7yr66Oo3zAG3/Pr//wu5LQhPkzb434c+qdN msE4hIoeB6/LtRt8JheqmkQLYKePTgnD3KU1D55/VHSb2+0BV7bD/vZxQ/HehamE H6cav8ocmjYXBC/yMNTUGG0GY0kJPZEGGZ1V5R3gAq3CvqUEWgw7DodhYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAbEOaQg83Ot+snzQ+FONNbIVruMB8GA1UdIwQY MBaAFDek0uQvI2LC5u9SuC8Z9+VjdX4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYt OTFjMGQ4ZTc1NDlkLzEvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYtOTFjMGQ4ZTc1NDlk LzEvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzOKLPyn uk7kS4g7P0coBdw3ZuedWSG8Nq0fkHFid23THd5aItTfi4XuEPrkiho3k+/9cIeT rpQ9eRkanCFmSlWYmBE8d6uhdo/sPdFhzteM/BMnytz5//1IjeHstmB0KEhKLiQM nCN8oge8ZeS1nQLU1vPvEFtdpiWyrSYMR1po3b/5M9L3KnhbHdR2tRJijhKwa6cX dCBAHkBwMNxFCwhyrwc0xft7/8vDHk+YaW2WnpG2vMH8uSEnHWka52AX2MXjrUhW eQ/fxUlH8cR8LeSNhaBwi0KGewWgoWWhwy+b1j/q1a2tCE2j8C3u6KfZN1JWVs5a ttHDvScu9upm5w== -----END CERTIFICATE-----Generated at Wed Dec 17 13:47:13 2025 by rpki-client