This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json) Hash identifier: RnNBW6qSHQUXFlJDvIqLEY/zBjWU5z3PuAClqZf0+Po= Subject key identifier: 2E:8B:E2:65:55:A5:29:08:2F:5C:94:02:AC:13:17:3D:BB:39:C0:B4 Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Certificate serial: 019AF31B63D1C8E3164DE1C799DDBD1DA890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft Manifest number: 0510 Signing time: Sat 06 Dec 2025 10:00:49 +0000 Manifest this update: Sat 06 Dec 2025 10:00:49 +0000 Manifest next update: Sun 07 Dec 2025 10:00:49 +0000 Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=) 2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: DmGgDbnjbkcZ1IYs/469PsUobSqP2xcz5Hxn+77WG5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:63:d1:c8:e3:16:4d:e1:c7:99:dd:bd:1d:a8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Validity Not Before: Dec 6 10:00:49 2025 GMT Not After : Dec 7 10:00:49 2025 GMT Subject: CN=2e8be26555a529082f5c9402ac13173dbb39c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7f:dc:72:9d:5e:75:87:c3:af:e6:80:59:8d: f8:90:20:8a:c9:a9:61:a8:ed:c0:0b:e1:53:7a:67: e9:05:8b:1e:c5:99:7e:2b:87:29:20:23:d9:c6:e8: b1:e1:22:09:37:cf:a9:cf:e4:4e:d5:ac:d4:e7:3c: 6c:6b:0c:4a:7a:98:5c:e0:e5:39:cf:45:85:e2:98: 01:74:99:a6:e9:c4:44:7c:00:2f:df:d6:77:7d:02: 04:7e:35:48:cf:bc:57:63:92:d5:83:e2:2d:24:e0: 6f:46:1a:db:d2:d8:4a:73:86:44:13:52:ca:54:f5: 7e:81:6f:42:f6:46:97:87:0a:51:cf:d0:15:ee:cc: 67:dd:79:b0:91:2e:47:ba:23:f6:89:eb:5d:bc:a1: 52:8e:cd:50:4e:1e:35:08:23:5c:a4:ab:73:87:da: 29:a1:d2:66:b8:e1:d1:0f:5a:e2:3b:e7:63:fd:e7: 12:82:e9:6d:20:76:d0:7f:3e:4e:0d:50:ae:1f:40: 5e:6d:17:5b:3c:59:56:ee:a4:b1:a0:5e:4e:2d:bc: c2:34:25:9c:64:4c:a2:fb:47:a2:9a:2b:2d:40:17: 38:07:0e:39:db:38:f3:33:8d:76:38:5e:96:03:f3: 90:ce:ba:a4:f5:75:82:34:47:5a:14:23:83:0d:52: 46:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8B:E2:65:55:A5:29:08:2F:5C:94:02:AC:13:17:3D:BB:39:C0:B4 X509v3 Authority Key Identifier: keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:3d:b6:9c:72:a9:5d:8f:d4:c0:6f:a8:4c:8e:c6:d6:18:79: 20:f5:f9:c1:64:2e:89:d9:f1:47:4b:71:c6:c0:e1:32:b5:19: 66:70:8d:5b:f2:05:cc:53:54:d0:78:22:3f:a9:e8:ba:44:07: 0d:35:52:98:60:3b:e3:1f:54:78:a1:52:bf:70:f6:3e:d5:8d: 8a:41:98:1e:84:d2:d7:b8:f0:5f:4a:49:9d:bd:31:bc:55:7b: 6b:57:bb:95:74:47:24:2a:07:0d:42:ac:0c:43:61:d8:e0:4a: 3b:19:2b:70:ed:64:6b:17:77:d1:e1:d1:c7:bb:b1:29:c1:00: 60:92:75:ac:a8:8a:77:64:5b:39:1c:9d:24:a9:a2:88:3b:b9: cb:bf:e8:83:da:c6:76:82:67:c3:56:8c:34:c3:1d:5d:52:a9: 0e:86:44:3b:7d:88:c5:8a:bf:77:06:f8:c5:b0:91:0c:ed:36: 56:12:8f:e0:78:a0:ee:d2:cc:5f:00:f7:e0:8c:f7:16:a2:87: 6b:c6:c5:a4:3e:94:b0:c7:e2:15:be:ab:f5:a1:14:2c:bd:e2: 54:cd:ba:02:90:44:65:7a:ac:e1:23:ef:23:72:a2:4e:b7:1f: f1:33:d1:29:78:69:7c:d8:5b:bd:71:f3:41:51:a0:29:a8:38: aa:4e:fe:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2PRyOMWTeHHmd29HaiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx YTVmOGIwHhcNMjUxMjA2MTAwMDQ5WhcNMjUxMjA3MTAwMDQ5WjAzMTEwLwYDVQQD EygyZThiZTI2NTU1YTUyOTA4MmY1Yzk0MDJhYzEzMTczZGJiMzljMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX/ccp1edYfDr+aAWY34kCCKyalh qO3AC+FTemfpBYsexZl+K4cpICPZxuix4SIJN8+pz+RO1azU5zxsawxKephc4OU5 z0WF4pgBdJmm6cREfAAv39Z3fQIEfjVIz7xXY5LVg+ItJOBvRhrb0thKc4ZEE1LK VPV+gW9C9kaXhwpRz9AV7sxn3XmwkS5HuiP2ietdvKFSjs1QTh41CCNcpKtzh9op odJmuOHRD1riO+dj/ecSgultIHbQfz5ODVCuH0BebRdbPFlW7qSxoF5OLbzCNCWc ZEyi+0eimistQBc4Bw452zjzM412OF6WA/OQzrqk9XWCNEdaFCODDVJGMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6L4mVVpSkIL1yUAqwTFz27OcC0MB8GA1UdIwQY MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD22nHKp XY/UwG+oTI7G1hh5IPX5wWQuidnxR0txxsDhMrUZZnCNW/IFzFNU0HgiP6noukQH DTVSmGA74x9UeKFSv3D2PtWNikGYHoTS17jwX0pJnb0xvFV7a1e7lXRHJCoHDUKs DENh2OBKOxkrcO1kaxd30eHRx7uxKcEAYJJ1rKiKd2RbORydJKmiiDu5y7/og9rG doJnw1aMNMMdXVKpDoZEO32IxYq/dwb4xbCRDO02VhKP4Hig7tLMXwD34Iz3FqKH a8bFpD6UsMfiFb6r9aEULL3iVM26ApBEZXqs4SPvI3KiTrcf8TPRKXhpfNhbvXHz QVGgKag4qk7+RQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:44 2025 by rpki-client