This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json) Hash identifier: 35SQP+RG8DlRCr1ywzDwokAXkak9gyeXk0PpdpbXNYg= Subject key identifier: D8:1B:C1:CB:59:72:37:CA:14:C2:A4:A5:FF:63:14:6B:68:7B:FA:EE Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d Certificate serial: 019AF19A9CF184A7DF4764C7600A3299A164 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft Manifest number: 08F4 Signing time: Sat 06 Dec 2025 03:00:33 +0000 Manifest this update: Sat 06 Dec 2025 03:00:33 +0000 Manifest next update: Sun 07 Dec 2025 03:00:33 +0000 Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: xc3x+tHZlRHdepBhTjTm33xmLHLUSgTqUPrHLGVcim0=) 2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:9c:f1:84:a7:df:47:64:c7:60:0a:32:99:a1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d Validity Not Before: Dec 6 03:00:33 2025 GMT Not After : Dec 7 03:00:33 2025 GMT Subject: CN=d81bc1cb597237ca14c2a4a5ff63146b687bfaee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f2:a4:03:85:86:d3:6e:16:52:e6:f9:dd:71: 1c:c5:20:b4:ee:ef:31:47:dd:df:00:e2:9a:4d:27: f0:84:9b:2c:97:6f:24:6d:64:4b:35:48:96:3e:e1: 6c:e7:46:9a:43:2e:e6:c9:57:33:5a:b2:55:2f:a8: 29:1a:d9:08:93:40:6f:ec:93:b6:cc:2d:f1:31:60: 3d:0f:7b:88:9c:50:37:b2:2a:cc:09:20:52:ff:22: dc:0e:50:c0:7e:47:b5:37:d6:67:51:6c:12:06:d4: c9:95:dd:fa:75:af:86:19:48:a4:de:3d:32:cf:9d: 91:20:fb:5d:3c:b2:ca:41:89:a1:ef:99:78:6a:71: 14:7a:d7:37:e0:4c:91:c8:3c:7c:55:65:27:38:19: f2:1a:6d:11:76:dd:1a:03:04:3b:28:0b:22:c6:30: 31:9d:d2:47:fa:45:b2:4c:aa:3f:c5:e5:90:f0:cd: 8b:16:0b:8a:91:ae:3a:56:80:05:b5:95:40:d6:0d: d3:cf:93:14:75:52:8a:2c:07:c7:6e:ba:1f:6a:6d: 0c:df:64:c9:5d:4e:6e:54:ac:a7:72:57:ad:25:53: aa:33:7c:b7:f6:a8:9a:6b:72:38:87:d3:7d:f4:c5: 95:63:42:7c:ce:ab:b7:dc:a5:11:3f:f9:9b:d9:20: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:C1:CB:59:72:37:CA:14:C2:A4:A5:FF:63:14:6B:68:7B:FA:EE X509v3 Authority Key Identifier: keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a1:1e:d2:1b:11:73:0b:be:61:a1:1a:cf:b2:c0:0c:8f:04: 64:fd:4c:82:61:43:b6:ae:52:2f:b2:44:21:e4:f1:21:c4:33: 03:b8:2c:de:b6:0f:24:6c:60:06:1f:b5:d4:4a:38:c1:fa:4b: 22:45:f7:92:aa:b5:f9:d4:94:01:c3:ce:3c:bf:97:17:e7:9b: 7c:6c:65:d0:5d:5a:5e:8a:69:ca:01:c9:2a:8b:6b:36:e4:11: 26:e6:29:d2:53:22:b9:06:77:84:34:66:19:79:e8:27:6c:3a: 4e:03:a5:f5:09:48:cd:67:3b:e1:18:67:28:5b:2d:f4:5b:c3: fd:40:d9:0f:d8:47:8a:24:e4:1c:bd:18:ee:1a:6f:b2:24:fb: c5:7d:e1:ef:aa:35:ba:a3:94:e6:37:48:34:7a:43:03:79:58: 55:2e:4a:89:00:a6:47:ad:e1:e9:38:0a:41:fd:0e:1a:ca:3f: f3:71:73:d4:d3:eb:e3:d2:b2:65:6b:e6:e5:97:d2:c9:a1:8c: 33:d8:df:8c:cc:f4:ee:08:4e:33:8e:d6:94:8d:d5:11:9b:10: 30:ec:1d:30:2e:65:80:74:9a:c3:f6:eb:83:b6:51:75:55:1a: 0c:d3:f2:d0:94:f5:e5:08:8a:c9:50:bf:6c:a2:f4:76:cd:83: 36:cb:11:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpzxhKffR2THYAoymaFkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZjRiOTFhM2ZmY2U5Zjk3NTA1YTczY2ZkNWU0YWQ0ZTM1 ZTA0MmQwHhcNMjUxMjA2MDMwMDMzWhcNMjUxMjA3MDMwMDMzWjAzMTEwLwYDVQQD EyhkODFiYzFjYjU5NzIzN2NhMTRjMmE0YTVmZjYzMTQ2YjY4N2JmYWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufKkA4WG024WUub53XEcxSC07u8x R93fAOKaTSfwhJssl28kbWRLNUiWPuFs50aaQy7myVczWrJVL6gpGtkIk0Bv7JO2 zC3xMWA9D3uInFA3sirMCSBS/yLcDlDAfke1N9ZnUWwSBtTJld36da+GGUik3j0y z52RIPtdPLLKQYmh75l4anEUetc34EyRyDx8VWUnOBnyGm0Rdt0aAwQ7KAsixjAx ndJH+kWyTKo/xeWQ8M2LFguKka46VoAFtZVA1g3Tz5MUdVKKLAfHbrofam0M32TJ XU5uVKyncletJVOqM3y39qiaa3I4h9N99MWVY0J8zqu33KURP/mb2SA+MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgbwctZcjfKFMKkpf9jFGtoe/ruMB8GA1UdIwQY MBaAFDf0uRo//On5dQWnPP1eStTjXgQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQt YWIyYmFmYTFhZTRkLzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQtYWIyYmFmYTFhZTRk LzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAqEe0hsR cwu+YaEaz7LADI8EZP1MgmFDtq5SL7JEIeTxIcQzA7gs3rYPJGxgBh+11Eo4wfpL IkX3kqq1+dSUAcPOPL+XF+ebfGxl0F1aXoppygHJKotrNuQRJuYp0lMiuQZ3hDRm GXnoJ2w6TgOl9QlIzWc74RhnKFst9FvD/UDZD9hHiiTkHL0Y7hpvsiT7xX3h76o1 uqOU5jdINHpDA3lYVS5KiQCmR63h6TgKQf0OGso/83Fz1NPr49KyZWvm5ZfSyaGM M9jfjMz07ghOM47WlI3VEZsQMOwdMC5lgHSaw/brg7ZRdVUaDNPy0JT15QiKyVC/ bKL0ds2DNssREg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:05:37 2025 by rpki-client