This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json) Hash identifier: 850TcyM686qP+u1EuXVGFnOEfEHrU5jtHqmzq15rJ/k= Subject key identifier: 96:72:6E:3B:78:A0:03:78:DE:8A:1B:23:4B:2C:49:B3:26:52:D7:3E Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Certificate serial: 019B35A06186A64A9D3F8B884B830E6D7533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft Manifest number: 0D0F Signing time: Fri 19 Dec 2025 08:01:01 +0000 Manifest this update: Fri 19 Dec 2025 08:01:01 +0000 Manifest next update: Sat 20 Dec 2025 08:01:01 +0000 Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: hRSv8P0mLkMSJ04DiUeQJQ+0YmWS2G6pc/QMA79GUrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:61:86:a6:4a:9d:3f:8b:88:4b:83:0e:6d:75:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Validity Not Before: Dec 19 08:01:01 2025 GMT Not After : Dec 20 08:01:01 2025 GMT Subject: CN=96726e3b78a00378de8a1b234b2c49b32652d73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:a2:81:30:cf:e7:6b:4c:48:39:b6:8d:4e: 1c:5f:8d:d8:a0:8f:33:26:c3:ee:ad:ec:29:97:5e: 34:15:f9:f1:9b:0d:65:7d:93:75:2e:77:c9:3f:49: ac:93:21:44:ed:65:48:0a:93:06:d6:23:e0:16:be: 62:c7:b3:fb:8e:7a:01:08:a4:ac:18:94:6c:5e:4e: 6f:39:df:dd:95:22:09:74:4e:f1:67:66:d7:7a:1a: 41:52:b9:18:88:8f:22:bf:1f:23:7b:31:d6:8c:b9: 3f:04:1b:fe:cc:6f:80:f8:bd:43:4e:30:12:88:9a: bb:5b:83:a4:15:98:2a:f7:f6:b5:5c:48:4d:14:55: dc:9c:97:83:52:66:c6:15:65:90:4f:23:db:09:6f: 5e:f5:b1:d2:8e:10:79:c9:65:a2:83:cb:b2:b3:0d: e7:8f:24:37:31:fd:d9:27:67:19:f0:52:cf:ef:11: b2:c9:38:06:2e:ef:67:90:71:a4:26:28:23:43:59: 6b:65:dd:2c:2e:c6:e6:27:61:65:0a:40:83:42:14: f2:4e:52:85:20:5b:17:9d:fb:11:e9:9d:21:9e:99: 53:6f:3d:ec:56:64:11:cf:fc:1d:f9:3c:5a:29:25: ce:19:ff:9a:b5:f8:da:88:d6:f7:f0:19:8d:2c:58: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:72:6E:3B:78:A0:03:78:DE:8A:1B:23:4B:2C:49:B3:26:52:D7:3E X509v3 Authority Key Identifier: keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:32:aa:94:cf:86:05:1b:58:a2:48:3a:35:97:96:0b:45:90: 52:fa:59:26:60:b3:46:e0:95:60:f6:d9:8b:93:c0:35:87:fd: f4:c0:a5:00:43:61:60:5b:73:d2:60:8d:c1:e4:62:24:53:52: d1:b2:3e:1c:df:6c:53:78:3d:2e:98:a0:69:1d:78:05:c4:93: da:f0:04:3c:68:11:ec:72:79:f8:29:e5:43:0c:00:a0:2e:e7: 65:e5:50:64:ca:82:e8:95:ca:ac:46:52:65:89:05:66:45:a9: cf:5d:58:49:51:46:fd:13:3d:b7:9c:57:78:fb:e4:66:bb:8c: 0a:8b:98:a4:96:f4:0a:63:91:49:f2:cb:27:7e:01:4e:26:7f: bd:43:33:58:c1:28:d3:3c:d1:b3:20:50:e7:ce:a5:e2:ca:10: 12:e4:f2:a8:84:6c:18:af:c5:69:92:ff:d6:22:3f:00:b5:be: d2:0e:20:98:64:cc:a5:3a:90:b3:e0:b3:14:b9:51:a0:4e:40: 8b:e1:29:2e:64:c9:47:7b:99:29:ad:9d:0e:2b:b3:77:03:1f: f6:c7:2b:5e:53:19:ea:6c:0f:e8:c0:63:63:24:21:a3:5a:0f: 8d:10:61:e6:2e:09:a6:2d:0b:d2:a7:40:a1:00:32:2d:fe:7b: 21:6a:ad:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oGGGpkqdP4uIS4MObXUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTBmNzFmYWE0M2M5YWY1YTBkY2Y2MDNmZDBiMmE3OGMy MjRhOTMwHhcNMjUxMjE5MDgwMTAxWhcNMjUxMjIwMDgwMTAxWjAzMTEwLwYDVQQD Eyg5NjcyNmUzYjc4YTAwMzc4ZGU4YTFiMjM0YjJjNDliMzI2NTJkNzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKuigTDP52tMSDm2jU4cX43YoI8z JsPurewpl140Ffnxmw1lfZN1LnfJP0mskyFE7WVICpMG1iPgFr5ix7P7jnoBCKSs GJRsXk5vOd/dlSIJdE7xZ2bXehpBUrkYiI8ivx8jezHWjLk/BBv+zG+A+L1DTjAS iJq7W4OkFZgq9/a1XEhNFFXcnJeDUmbGFWWQTyPbCW9e9bHSjhB5yWWig8uysw3n jyQ3Mf3ZJ2cZ8FLP7xGyyTgGLu9nkHGkJigjQ1lrZd0sLsbmJ2FlCkCDQhTyTlKF IFsXnfsR6Z0hnplTbz3sVmQRz/wd+TxaKSXOGf+atfjaiNb38BmNLFi5VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZybjt4oAN43oobI0ssSbMmUtc+MB8GA1UdIwQY MBaAFDeQ9x+qQ8mvWg3PYD/QsqeMIkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUt MDc3YjI5NzMwY2U2LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUtMDc3YjI5NzMwY2U2 LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTKqlM+G BRtYokg6NZeWC0WQUvpZJmCzRuCVYPbZi5PANYf99MClAENhYFtz0mCNweRiJFNS 0bI+HN9sU3g9LpigaR14BcST2vAEPGgR7HJ5+CnlQwwAoC7nZeVQZMqC6JXKrEZS ZYkFZkWpz11YSVFG/RM9t5xXePvkZruMCouYpJb0CmORSfLLJ34BTiZ/vUMzWMEo 0zzRsyBQ586l4soQEuTyqIRsGK/FaZL/1iI/ALW+0g4gmGTMpTqQs+CzFLlRoE5A i+EpLmTJR3uZKa2dDiuzdwMf9scrXlMZ6mwP6MBjYyQho1oPjRBh5i4Jpi0L0qdA oQAyLf57IWqtAw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:38:43 2025 by rpki-client