This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json) Hash identifier: Xy9bgdWBwCiwmZdGSjHu5PgiE8XvugYPcY2sdKJQu/s= Subject key identifier: B1:49:6B:B9:EE:D4:D7:7A:DF:65:16:C8:3A:A8:89:F5:0F:6F:36:B3 Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1 Certificate serial: 019AF464E9C1FC8237C052DB1080898A2A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft Manifest number: 0D0F Signing time: Sat 06 Dec 2025 16:00:45 +0000 Manifest this update: Sat 06 Dec 2025 16:00:45 +0000 Manifest next update: Sun 07 Dec 2025 16:00:45 +0000 Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: H7UCkLy5gaCr7ngcb9WH3ou8cWQFrrhAGla70nL6E1o=) 2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:e9:c1:fc:82:37:c0:52:db:10:80:89:8a:2a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1 Validity Not Before: Dec 6 16:00:45 2025 GMT Not After : Dec 7 16:00:45 2025 GMT Subject: CN=b1496bb9eed4d77adf6516c83aa889f50f6f36b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c8:24:90:b1:b7:71:2e:6a:d5:dd:35:95:a3: f8:ec:21:af:a6:46:95:d7:60:12:e8:98:5c:2a:4e: ca:31:87:b3:63:90:dc:0f:9e:e5:70:4b:c7:67:92: 68:f4:c1:d1:0f:c0:a2:7c:ee:56:68:c5:17:8f:be: 45:64:35:c0:f8:f8:d6:cb:26:dc:02:84:6f:2e:a4: dd:47:be:ff:f9:f0:75:e1:46:c4:6a:fd:35:b7:e9: d1:bd:fd:3d:74:36:c9:91:91:ab:57:e1:84:b3:5a: ec:01:e1:6e:a6:e1:54:bd:3b:5a:da:96:1f:09:38: 63:45:b9:de:6b:6d:b4:af:b4:bb:37:5a:43:ab:0d: d9:5c:19:d4:f4:21:59:29:10:4b:30:23:d3:5d:9d: 43:ac:44:fd:9c:75:88:76:00:74:ab:ca:b3:95:69: 22:c0:66:35:84:08:fa:10:70:5d:aa:b9:c5:e2:4b: 19:93:09:1c:59:2a:10:cb:d9:34:7a:71:cb:20:0e: fe:ae:16:f2:00:2d:a4:f6:98:bd:bb:59:3d:a9:ed: 1e:13:f8:17:83:6b:4d:43:af:ac:d3:ec:04:c8:c5: d6:68:12:2f:a4:96:a3:7d:48:46:a3:3a:f1:51:36: df:40:54:00:8e:5d:41:4b:15:1d:6f:f4:5a:7f:1e: 8c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:49:6B:B9:EE:D4:D7:7A:DF:65:16:C8:3A:A8:89:F5:0F:6F:36:B3 X509v3 Authority Key Identifier: keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ca:bd:3d:2c:90:d9:44:e5:ec:3b:3b:69:b7:e6:75:05:37: bd:f3:2a:3d:a2:05:7d:25:29:55:d7:53:26:fd:45:be:b8:ec: 34:69:2c:ee:19:06:c8:28:0c:c3:df:d0:63:1a:25:8b:36:34: 33:b4:b0:88:d4:62:7a:5d:df:f2:ab:e5:1a:4a:85:dc:44:f4: a1:03:52:30:e4:6e:6d:ba:2f:d9:b2:4a:3c:40:64:ed:18:51: 58:20:d3:13:2c:63:11:07:d2:70:ca:42:9d:32:e4:c3:ad:e3: e2:63:1c:da:90:76:db:4e:66:ba:dc:ea:70:28:92:bf:31:34: 90:d7:e4:29:47:00:4c:53:97:fa:a7:0c:07:75:ce:c0:f1:16: ac:d9:a4:9a:96:eb:a0:f3:63:90:16:36:0a:2a:1e:1e:b6:61: 74:64:47:12:4b:78:bb:30:48:2a:f8:5e:e8:c1:0b:6f:be:4a: 65:69:47:55:57:3a:cc:87:09:0e:e7:ba:95:2f:d8:19:d2:67: e5:8d:47:a3:39:00:1b:10:dc:02:11:5e:9a:53:b1:bb:12:60: aa:04:82:35:72:e8:0f:60:36:e6:c5:48:a7:7b:07:ff:47:64: 38:4e:65:92:e6:96:fe:9a:cc:0b:54:ea:a0:df:a5:a9:89:01: 8d:b8:68:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOnB/II3wFLbEICJiiolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll NWJmZDEwHhcNMjUxMjA2MTYwMDQ1WhcNMjUxMjA3MTYwMDQ1WjAzMTEwLwYDVQQD EyhiMTQ5NmJiOWVlZDRkNzdhZGY2NTE2YzgzYWE4ODlmNTBmNmYzNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMgkkLG3cS5q1d01laP47CGvpkaV 12AS6JhcKk7KMYezY5DcD57lcEvHZ5Jo9MHRD8CifO5WaMUXj75FZDXA+PjWyybc AoRvLqTdR77/+fB14UbEav01t+nRvf09dDbJkZGrV+GEs1rsAeFupuFUvTta2pYf CThjRbnea220r7S7N1pDqw3ZXBnU9CFZKRBLMCPTXZ1DrET9nHWIdgB0q8qzlWki wGY1hAj6EHBdqrnF4ksZkwkcWSoQy9k0enHLIA7+rhbyAC2k9pi9u1k9qe0eE/gX g2tNQ6+s0+wEyMXWaBIvpJajfUhGozrxUTbfQFQAjl1BSxUdb/Rafx6MnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFJa7nu1Nd632UWyDqoifUPbzazMB8GA1UdIwQY MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4 LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8q9PSyQ 2UTl7Ds7abfmdQU3vfMqPaIFfSUpVddTJv1FvrjsNGks7hkGyCgMw9/QYxolizY0 M7SwiNRiel3f8qvlGkqF3ET0oQNSMORubbov2bJKPEBk7RhRWCDTEyxjEQfScMpC nTLkw63j4mMc2pB2205mutzqcCiSvzE0kNfkKUcATFOX+qcMB3XOwPEWrNmkmpbr oPNjkBY2CioeHrZhdGRHEkt4uzBIKvhe6MELb75KZWlHVVc6zIcJDue6lS/YGdJn 5Y1HozkAGxDcAhFemlOxuxJgqgSCNXLoD2A25sVIp3sH/0dkOE5lkuaW/prMC1Tq oN+lqYkBjbhoYw== -----END CERTIFICATE-----Generated at Sat Dec 6 23:55:58 2025 by rpki-client