This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft File: N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json) Hash identifier: UFKb7zrIsvyvNaGB5x/T7I+6fqBtqQFPhz4b7+QTGcI= Subject key identifier: 85:F3:67:0D:18:7E:EC:8A:D9:F4:3D:56:D7:A3:ED:82:33:45:E6:83 Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c Certificate serial: 019AF12F078421E88E64B7E9A0D5510168D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft Manifest number: 048C Signing time: Sat 06 Dec 2025 01:03:02 +0000 Manifest this update: Sat 06 Dec 2025 01:03:02 +0000 Manifest next update: Sun 07 Dec 2025 01:03:02 +0000 Files and hashes: 1: 3PpgKNG0AmRV_aCWCsXZ_tB5eIg.roa (hash: eRzqoJ+wnFE50kPBIiEdOOr71bv/+CxmFvCCuPDTNi4=) 2: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: wOwRJyVicNNKUSSKVLaOjt9M9ufVkZvyxnNUB9Pbb50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:07:84:21:e8:8e:64:b7:e9:a0:d5:51:01:68:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c Validity Not Before: Dec 6 01:03:02 2025 GMT Not After : Dec 7 01:03:02 2025 GMT Subject: CN=85f3670d187eec8ad9f43d56d7a3ed823345e683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:85:28:33:c5:e0:9b:41:50:22:89:a6:54:17: 47:d4:03:7f:23:f4:88:c0:b2:8f:31:95:3b:54:09: 99:a3:86:d6:6a:18:9d:d0:c9:6f:c7:9a:1f:4d:c3: 07:df:15:83:68:85:57:51:49:fe:27:0f:e5:9a:0a: 71:fd:3d:76:80:64:82:7c:29:5e:a4:54:a2:b0:15: 42:d8:bd:62:c1:f2:e8:12:22:e3:0a:5b:9e:ea:74: 3f:45:51:c4:ae:d8:a6:89:d1:f1:6d:ca:47:a2:a0: 56:10:f7:8d:fc:6a:ec:87:41:12:ef:1b:5f:d9:76: 25:52:a5:27:b5:b8:2c:ab:aa:e8:41:f9:b6:5a:d3: 9e:af:e3:a6:a0:cd:72:bb:1a:a1:5b:9c:27:fa:5e: f6:57:79:43:4f:b0:d7:3a:f9:6b:9f:bc:c3:6e:ae: cf:3d:2f:36:00:30:dd:ed:31:a9:76:90:59:c3:a1: ee:da:77:5c:37:bc:0a:c8:5d:4f:df:f6:d4:c2:3b: f7:22:08:f4:29:07:f8:d9:f6:9e:b0:61:6a:d2:68: 29:94:ba:ee:6b:4a:1b:20:11:a1:0d:0b:ee:93:b0: 87:0a:f5:fd:4d:74:01:a4:31:7f:51:f4:63:6b:0c: ae:8d:d4:0a:dc:2d:05:fb:46:b9:2b:04:62:fa:e9: 5b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F3:67:0D:18:7E:EC:8A:D9:F4:3D:56:D7:A3:ED:82:33:45:E6:83 X509v3 Authority Key Identifier: keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5a:e7:1b:04:af:3e:5b:29:aa:fd:f6:75:5f:8a:93:8f:5f: 4a:38:28:1d:0c:59:e8:16:9c:64:58:ec:d9:61:24:15:7c:b3: fe:e6:e6:be:6c:6a:ea:5a:94:3e:fc:7f:35:84:3c:10:31:d1: 8c:42:62:b4:ef:3a:d6:cb:2a:64:03:20:6f:2e:23:ec:5c:8f: 52:f2:0e:5f:48:60:e8:3c:af:94:4f:f4:05:f1:d9:a9:dc:4b: a4:db:bf:c1:57:e8:91:2d:6e:64:67:fe:15:5d:ac:2a:43:e5: 32:c7:80:bb:09:fb:5b:dd:f2:c0:eb:18:e3:9c:65:82:93:ec: 69:27:99:2e:2e:55:0c:89:df:66:43:d9:13:ff:ef:27:7e:1f: 46:71:b9:d1:8f:e7:05:b4:9c:07:34:5f:df:80:5e:ce:90:f2: f0:a7:7e:ec:4a:d3:c6:3f:5d:f4:d1:e0:a5:19:77:9c:de:95: 17:43:77:87:75:03:64:3a:7c:8a:e9:40:bf:9d:77:f4:c8:c6: e5:fd:59:15:b0:76:63:b1:5c:89:25:e7:5a:9f:b5:26:48:a6: 22:dc:b1:ab:f1:b8:17:e8:d7:6a:bc:e0:42:a2:7f:12:88:33: 62:48:e9:75:97:7d:83:4f:d1:87:ef:9d:3b:e5:05:fc:4f:1f: aa:65:dc:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLweEIeiOZLfpoNVRAWjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTRkMmU0MmYyMzYyYzJlNmVmNTJiODJmMTlmN2U1NjM3 NTdlMGMwHhcNMjUxMjA2MDEwMzAyWhcNMjUxMjA3MDEwMzAyWjAzMTEwLwYDVQQD Eyg4NWYzNjcwZDE4N2VlYzhhZDlmNDNkNTZkN2EzZWQ4MjMzNDVlNjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooUoM8Xgm0FQIommVBdH1AN/I/SI wLKPMZU7VAmZo4bWahid0Mlvx5ofTcMH3xWDaIVXUUn+Jw/lmgpx/T12gGSCfCle pFSisBVC2L1iwfLoEiLjClue6nQ/RVHErtimidHxbcpHoqBWEPeN/Grsh0ES7xtf 2XYlUqUntbgsq6roQfm2WtOer+OmoM1yuxqhW5wn+l72V3lDT7DXOvlrn7zDbq7P PS82ADDd7TGpdpBZw6Hu2ndcN7wKyF1P3/bUwjv3Igj0KQf42faesGFq0mgplLru a0obIBGhDQvuk7CHCvX9TXQBpDF/UfRjawyujdQK3C0F+0a5KwRi+ulbVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXzZw0YfuyK2fQ9Vtej7YIzReaDMB8GA1UdIwQY MBaAFDek0uQvI2LC5u9SuC8Z9+VjdX4MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYt OTFjMGQ4ZTc1NDlkLzEvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8yNWZiNTQtZDQ2Ny00ZTkwLWE0MWYtOTFjMGQ4ZTc1NDlk LzEvTjZUUzVDOGpZc0xtNzFLNEx4bjM1V04xZmd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqlrnGwSv Plspqv32dV+Kk49fSjgoHQxZ6BacZFjs2WEkFXyz/ubmvmxq6lqUPvx/NYQ8EDHR jEJitO861ssqZAMgby4j7FyPUvIOX0hg6DyvlE/0BfHZqdxLpNu/wVfokS1uZGf+ FV2sKkPlMseAuwn7W93ywOsY45xlgpPsaSeZLi5VDInfZkPZE//vJ34fRnG50Y/n BbScBzRf34BezpDy8Kd+7ErTxj9d9NHgpRl3nN6VF0N3h3UDZDp8iulAv5139MjG 5f1ZFbB2Y7FciSXnWp+1JkimItyxq/G4F+jXarzgQqJ/EogzYkjpdZd9g0/Rh++d O+UF/E8fqmXcLg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:02 2025 by rpki-client