This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json) Hash identifier: fNihDHN19s8y0FWysPdFn/IPjshW3KvOi6e7HfdbDBA= Subject key identifier: 69:E1:D1:F9:19:A1:C6:CA:7A:2E:C9:BD:76:0E:E1:B1:5D:33:BA:7E Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Certificate serial: 019AF208FC08602987BFCEE3F8794958F4E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft Manifest number: 0CEC Signing time: Sat 06 Dec 2025 05:01:06 +0000 Manifest this update: Sat 06 Dec 2025 05:01:06 +0000 Manifest next update: Sun 07 Dec 2025 05:01:06 +0000 Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: AbTPji5ZBeCf04iaU+PyQctXsM7p9AAkWlf9fpLzm5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fc:08:60:29:87:bf:ce:e3:f8:79:49:58:f4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Validity Not Before: Dec 6 05:01:06 2025 GMT Not After : Dec 7 05:01:06 2025 GMT Subject: CN=69e1d1f919a1c6ca7a2ec9bd760ee1b15d33ba7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2c:96:c7:e4:1f:3f:52:42:8d:53:f5:23:f0: 4e:6f:41:96:69:58:f2:76:0a:19:2d:0f:60:1e:a3: 01:ef:6d:0a:f3:69:f5:5d:fd:6b:a8:54:f7:31:97: b6:8b:c9:54:87:18:b3:c7:cf:32:47:07:a3:58:12: a1:27:11:00:5f:db:88:02:3b:47:45:8b:b7:1f:ed: ef:60:c9:d0:46:59:1c:dd:d0:bb:a2:a7:b4:50:6d: 17:f5:21:c6:64:42:d4:a1:56:d7:98:80:7b:92:bd: bd:33:bd:99:cd:a3:a4:25:b9:ae:91:49:26:75:0c: a8:08:5c:18:83:aa:42:51:6d:55:5b:47:16:67:90: 10:6a:a0:6b:83:89:a8:bf:07:ab:f7:05:28:88:df: 80:d5:4a:a1:3d:66:56:d3:f8:f6:77:9e:75:60:7c: 21:11:a5:60:7a:ec:f8:10:7c:87:99:3f:46:8c:96: d3:1f:68:91:9c:ed:14:8b:c3:9c:3e:96:2d:46:fd: 75:ec:da:c4:9f:d0:22:46:e8:a2:93:bf:e2:d9:7b: 5c:1a:91:d5:06:82:e3:25:5e:88:f2:e0:46:77:66: 99:ca:c6:34:7a:49:c2:5f:56:9f:27:63:e2:2d:36: 37:86:45:c3:7f:1c:5a:93:72:fc:ea:e7:de:14:8a: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E1:D1:F9:19:A1:C6:CA:7A:2E:C9:BD:76:0E:E1:B1:5D:33:BA:7E X509v3 Authority Key Identifier: keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f6:b3:ce:33:ad:c1:b1:8f:bd:eb:4c:17:3f:5e:16:2f:23: 5a:a7:93:1e:12:6a:e1:53:eb:f6:3a:29:7c:f7:7e:3a:02:50: 3d:ff:91:30:2a:a9:32:8c:78:72:53:9e:38:25:2e:34:42:38: e1:8a:10:94:3d:71:f2:94:5e:e7:34:ec:92:2a:c5:f4:f2:e0: 5f:3d:33:28:71:52:0f:6e:b8:19:09:fc:14:9d:71:86:2b:fb: fc:d4:22:36:8b:1b:8c:fd:6d:18:ce:38:5e:d3:b5:5a:6e:0c: 26:31:29:d0:57:31:e1:ee:11:d7:5b:1f:b1:d4:60:1c:a1:0e: 79:91:05:a3:3e:17:f2:56:de:c9:63:b0:74:94:24:c9:65:b9: fe:6e:d9:01:a4:98:1c:39:01:10:5e:9e:f8:6f:c7:6a:ab:18: c7:dc:19:c4:e3:28:81:22:bd:cf:6d:9e:da:cf:2d:94:08:d2: da:f9:d1:cb:c9:b6:4c:0e:35:9e:f8:26:67:a6:88:c8:2c:4d: 53:3d:b1:c5:ed:49:f5:67:25:01:c1:90:0f:ac:c0:ec:6c:58: 27:ad:8d:3b:a2:3d:a8:ef:98:a6:78:71:cf:5d:24:11:4f:37: a5:12:e3:99:fc:83:5b:6b:31:87:92:59:43:32:96:fc:e4:72: 9a:7e:86:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPwIYCmHv87j+HlJWPTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTBmNzFmYWE0M2M5YWY1YTBkY2Y2MDNmZDBiMmE3OGMy MjRhOTMwHhcNMjUxMjA2MDUwMTA2WhcNMjUxMjA3MDUwMTA2WjAzMTEwLwYDVQQD Eyg2OWUxZDFmOTE5YTFjNmNhN2EyZWM5YmQ3NjBlZTFiMTVkMzNiYTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiyWx+QfP1JCjVP1I/BOb0GWaVjy dgoZLQ9gHqMB720K82n1Xf1rqFT3MZe2i8lUhxizx88yRwejWBKhJxEAX9uIAjtH RYu3H+3vYMnQRlkc3dC7oqe0UG0X9SHGZELUoVbXmIB7kr29M72ZzaOkJbmukUkm dQyoCFwYg6pCUW1VW0cWZ5AQaqBrg4movwer9wUoiN+A1UqhPWZW0/j2d551YHwh EaVgeuz4EHyHmT9GjJbTH2iRnO0Ui8OcPpYtRv117NrEn9AiRuiik7/i2XtcGpHV BoLjJV6I8uBGd2aZysY0eknCX1afJ2PiLTY3hkXDfxxak3L86ufeFIpBQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnh0fkZocbKei7JvXYO4bFdM7p+MB8GA1UdIwQY MBaAFDeQ9x+qQ8mvWg3PYD/QsqeMIkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUt MDc3YjI5NzMwY2U2LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUtMDc3YjI5NzMwY2U2 LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPazzjOt wbGPvetMFz9eFi8jWqeTHhJq4VPr9jopfPd+OgJQPf+RMCqpMox4clOeOCUuNEI4 4YoQlD1x8pRe5zTskirF9PLgXz0zKHFSD264GQn8FJ1xhiv7/NQiNosbjP1tGM44 XtO1Wm4MJjEp0Fcx4e4R11sfsdRgHKEOeZEFoz4X8lbeyWOwdJQkyWW5/m7ZAaSY HDkBEF6e+G/HaqsYx9wZxOMogSK9z22e2s8tlAjS2vnRy8m2TA41nvgmZ6aIyCxN Uz2xxe1J9WclAcGQD6zA7GxYJ62NO6I9qO+Ypnhxz10kEU83pRLjmfyDW2sxh5JZ QzKW/ORymn6GCQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:42 2025 by rpki-client