This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json) Hash identifier: PB7tmuxTujdBKiTZctrP7lLQemhXF1Kfekk8n5ghXhI= Subject key identifier: 4B:85:8C:92:EB:A0:7D:BC:CB:3D:81:F4:4C:49:FD:26:FD:72:63:78 Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45 Certificate serial: 019AF19A952F932CEA1568E25709654C6988 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft Manifest number: 12B6 Signing time: Sat 06 Dec 2025 03:00:31 +0000 Manifest this update: Sat 06 Dec 2025 03:00:31 +0000 Manifest next update: Sun 07 Dec 2025 03:00:31 +0000 Files and hashes: 1: JqPeTKIiSqFLnMuoE0z5MMpECyE.roa (hash: Sm0VFijktfATyc4h+uw4DoW/FSQrn3UdeoSnPalbaPo=) 2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 2KXhNLuKbjaEDxXPLQ6Z0tA8yNMrDFOu2Axd4b+tScw=) 3: VmdUY2uJ9NapTyZJ8UBdjlgGJQQ.roa (hash: 53UxHJyDkYLtFVil6COplJSwSFn/MNxw2tMZPgc57WQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:95:2f:93:2c:ea:15:68:e2:57:09:65:4c:69:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45 Validity Not Before: Dec 6 03:00:31 2025 GMT Not After : Dec 7 03:00:31 2025 GMT Subject: CN=4b858c92eba07dbccb3d81f44c49fd26fd726378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b4:08:3f:09:ac:41:61:db:f9:6d:98:b8:c6: a4:3f:93:01:31:bb:95:69:fc:24:92:33:00:5a:fc: 34:7a:0a:2c:c4:16:79:4f:a5:9e:ac:84:84:ed:6a: 82:4f:0d:60:c0:09:d4:7f:76:5c:3f:ef:55:3d:0b: bf:c7:e0:c9:6a:55:39:71:1c:87:44:22:d7:59:8d: 42:0d:93:58:34:42:1c:c5:29:73:e7:47:63:53:71: a1:26:83:43:f9:d4:5f:7c:59:11:c6:07:03:1f:26: 4e:ce:7c:00:30:1c:19:7a:c0:53:13:4e:f0:f6:d5: 02:bb:43:1f:aa:8f:50:06:aa:8d:b6:d7:86:28:a3: e3:60:04:d7:5a:58:8f:a7:20:32:88:d6:1f:90:d2: 5d:59:40:89:69:45:40:41:3d:7c:d2:65:74:7c:08: 4d:89:66:8c:aa:80:94:35:ec:4f:03:46:b3:25:57: 0d:f1:12:5e:2c:f4:6a:86:7e:fa:b1:71:55:9b:6e: 66:ea:07:b2:8a:18:1d:b2:2e:9c:b7:5a:47:3f:94: 01:cb:71:55:19:9d:a1:9a:a4:19:8a:57:a2:fe:4d: 1b:65:db:99:bf:5e:6b:42:9e:5e:04:4c:98:ab:e5: df:79:96:63:67:53:f1:dd:fd:15:03:0f:7b:5d:e4: 65:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:85:8C:92:EB:A0:7D:BC:CB:3D:81:F4:4C:49:FD:26:FD:72:63:78 X509v3 Authority Key Identifier: keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:71:6b:fa:51:71:7d:21:d3:fe:9c:f0:4f:8f:44:d1:d0:bb: e1:5c:2d:71:1f:74:9d:41:c4:78:13:b5:7d:89:c7:4f:2b:45: 49:4b:8e:98:8b:d3:67:8e:c6:39:40:36:7b:c8:f6:d8:70:dd: 68:d4:aa:1e:5c:ab:a2:72:47:c0:49:83:34:6a:1b:cc:6a:b3: 89:75:26:f3:57:b4:26:03:ff:1d:7d:8d:ee:c3:87:f2:11:d5: 4f:98:d3:6d:ce:4a:45:66:48:fb:dc:7d:ad:77:e0:a9:4e:f7: 31:63:4a:13:eb:ba:b1:93:49:7e:18:1b:2f:0d:d2:da:1b:8b: e1:2a:50:58:3c:b5:28:b8:2d:21:ab:3a:80:54:17:5b:b4:13: 3a:10:3e:c0:4a:70:72:dd:6d:ba:bc:1b:14:1d:6d:16:bf:96: df:7a:77:5d:ff:e7:77:d8:ff:83:07:2a:cf:e7:93:0d:0d:ba: 32:ba:d5:80:cd:38:53:62:c2:f0:c3:50:13:c4:90:f4:b4:05: e2:a9:11:87:68:84:73:3d:f0:60:12:be:68:42:99:62:db:b8: e9:2d:8f:28:cf:54:3d:ac:1a:a7:39:bf:48:ae:7f:7f:f8:f5: 76:e5:ea:21:3b:75:a4:10:4a:3a:07:90:77:cf:5a:48:eb:65: f6:30:3b:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmpUvkyzqFWjiVwllTGmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw MDhjNDUwHhcNMjUxMjA2MDMwMDMxWhcNMjUxMjA3MDMwMDMxWjAzMTEwLwYDVQQD Eyg0Yjg1OGM5MmViYTA3ZGJjY2IzZDgxZjQ0YzQ5ZmQyNmZkNzI2Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrQIPwmsQWHb+W2YuMakP5MBMbuV afwkkjMAWvw0egosxBZ5T6WerISE7WqCTw1gwAnUf3ZcP+9VPQu/x+DJalU5cRyH RCLXWY1CDZNYNEIcxSlz50djU3GhJoND+dRffFkRxgcDHyZOznwAMBwZesBTE07w 9tUCu0Mfqo9QBqqNtteGKKPjYATXWliPpyAyiNYfkNJdWUCJaUVAQT180mV0fAhN iWaMqoCUNexPA0azJVcN8RJeLPRqhn76sXFVm25m6geyihgdsi6ct1pHP5QBy3FV GZ2hmqQZilei/k0bZduZv15rQp5eBEyYq+XfeZZjZ1Px3f0VAw97XeRlfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEuFjJLroH28yz2B9ExJ/Sb9cmN4MB8GA1UdIwQY MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct ODhhMGU0NTBhMTdiLzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3Fr+lFx fSHT/pzwT49E0dC74VwtcR90nUHEeBO1fYnHTytFSUuOmIvTZ47GOUA2e8j22HDd aNSqHlyronJHwEmDNGobzGqziXUm81e0JgP/HX2N7sOH8hHVT5jTbc5KRWZI+9x9 rXfgqU73MWNKE+u6sZNJfhgbLw3S2huL4SpQWDy1KLgtIas6gFQXW7QTOhA+wEpw ct1turwbFB1tFr+W33p3Xf/nd9j/gwcqz+eTDQ26MrrVgM04U2LC8MNQE8SQ9LQF 4qkRh2iEcz3wYBK+aEKZYtu46S2PKM9UPawapzm/SK5/f/j1duXqITt1pBBKOgeQ d89aSOtl9jA7aQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:28 2025 by rpki-client