This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft File: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json) Hash identifier: nEgpy+OmXuD0I1hbwHroVRPEYPFPnSM0wHTo6NfjmDE= Subject key identifier: 5B:DF:45:C9:01:BC:CE:C6:D2:68:4A:E7:2A:F5:AE:BA:28:79:61:2F Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019AF1D23DAA917A2FD547CBA7B4571C31B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft Manifest number: 08 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: JdiqjzyOZUhps4PgSnF+IxhcOI85bnqQUWNGRpeEysE=) 2: nxHEgGmNDS7-geQ5hOsqGMEpJHc.roa (hash: 0LTihJ1p3YwES3vN//+gWZyPU4fXm6Nydwbsciw+uU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3d:aa:91:7a:2f:d5:47:cb:a7:b4:57:1c:31:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=5bdf45c901bccec6d2684ae72af5aeba2879612f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:c5:a1:4b:28:ee:0a:f6:89:33:66:fb:d6:85: 0e:8e:05:0a:69:f9:b7:1f:15:cf:78:03:a5:12:5f: a4:aa:68:4e:10:46:b0:71:e9:f0:23:4e:46:76:15: aa:46:ca:5c:f0:9e:fc:92:d6:5b:4a:3e:1f:2d:bb: 95:88:94:4e:19:9d:9e:c7:07:31:f9:29:81:6f:4e: 9e:70:b5:80:5f:5a:42:f1:a6:b5:5f:d3:56:7c:e8: 45:69:e8:27:ce:36:a9:ca:06:74:bf:42:56:08:b6: 27:5a:c3:bc:59:a0:c9:6c:e1:b5:43:a9:ea:6e:ca: 88:b3:81:02:c5:37:7f:ea:72:bd:0b:20:33:a0:ff: 4c:72:b1:40:04:91:9c:db:e9:0a:e1:47:ae:ae:70: f6:0b:18:79:a6:0a:05:df:2d:96:58:1f:fa:cc:b2: 2a:c4:f2:c0:78:5a:b9:a6:99:f0:9b:9f:34:07:ec: b4:31:6f:9d:65:dc:69:ae:d6:a9:c5:f7:73:7e:a5: 2a:ff:ad:e8:83:4f:37:51:53:e6:0d:9e:df:aa:ca: 52:52:7a:9f:0f:79:c2:1f:c4:be:db:ec:b2:16:30: a9:fe:47:0e:8f:f2:b9:fd:57:c0:22:3f:f1:a6:02: b1:8d:0c:8c:e1:23:33:99:89:0b:69:35:4f:01:20: 15:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DF:45:C9:01:BC:CE:C6:D2:68:4A:E7:2A:F5:AE:BA:28:79:61:2F X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:16:33:83:df:b0:af:d2:13:6c:7f:f8:b8:f6:7c:28:89:57: 11:e5:11:7b:5c:9e:5a:52:fe:7b:43:b5:53:a2:a2:c2:c0:73: 53:b3:9c:ef:84:cf:73:47:5b:28:d1:98:ad:23:67:cd:fa:23: a8:4f:7d:db:f4:f2:7f:02:c5:3e:e6:3c:ff:70:b1:36:e0:b2: 71:2c:5e:93:7e:61:27:d5:4b:1d:b2:ba:b3:7d:82:d9:b2:89: 65:fa:ec:7f:98:c6:81:42:b0:64:6b:cb:05:dc:b6:6c:9b:f9: 49:d1:fc:50:fb:9e:cc:c2:2f:93:cb:43:3e:17:c8:3c:e1:fe: 9a:af:96:90:46:52:89:81:ad:05:15:00:58:ce:78:fe:30:2a: f6:8c:78:a1:62:ee:44:3c:26:db:fb:1f:c8:5b:a1:e6:d2:9a: cc:51:ac:d0:23:44:53:eb:9e:c5:eb:c4:56:c0:39:34:9c:6e: e0:35:09:c0:1e:db:bc:25:99:0c:d0:2a:a0:6f:b5:26:9d:f3: 52:ca:56:fb:16:ca:72:c3:da:96:58:27:49:8f:ff:ba:e7:53: 86:02:97:97:60:d5:4c:a2:81:3c:57:71:e3:a2:fa:65:e8:80: fe:fd:af:b6:fb:b7:9b:e5:67:3a:35:d7:32:c2:de:0b:2d:29: 4b:c9:6b:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j2qkXov1UfLp7RXHDGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD Eyg1YmRmNDVjOTAxYmNjZWM2ZDI2ODRhZTcyYWY1YWViYTI4Nzk2MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sWhSyjuCvaJM2b71oUOjgUKafm3 HxXPeAOlEl+kqmhOEEawcenwI05GdhWqRspc8J78ktZbSj4fLbuViJROGZ2exwcx +SmBb06ecLWAX1pC8aa1X9NWfOhFaegnzjapygZ0v0JWCLYnWsO8WaDJbOG1Q6nq bsqIs4ECxTd/6nK9CyAzoP9McrFABJGc2+kK4UeurnD2Cxh5pgoF3y2WWB/6zLIq xPLAeFq5ppnwm580B+y0MW+dZdxprtapxfdzfqUq/63og083UVPmDZ7fqspSUnqf D3nCH8S+2+yyFjCp/kcOj/K5/VfAIj/xpgKxjQyM4SMzmYkLaTVPASAVKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvfRckBvM7G0mhK5yr1rrooeWEvMB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASxYzg9+w r9ITbH/4uPZ8KIlXEeURe1yeWlL+e0O1U6KiwsBzU7Oc74TPc0dbKNGYrSNnzfoj qE992/TyfwLFPuY8/3CxNuCycSxek35hJ9VLHbK6s32C2bKJZfrsf5jGgUKwZGvL Bdy2bJv5SdH8UPuezMIvk8tDPhfIPOH+mq+WkEZSiYGtBRUAWM54/jAq9ox4oWLu RDwm2/sfyFuh5tKazFGs0CNEU+uexevEVsA5NJxu4DUJwB7bvCWZDNAqoG+1Jp3z UspW+xbKcsPallgnSY//uudThgKXl2DVTKKBPFdx46L6ZeiA/v2vtvu3m+VnOjXX MsLeCy0pS8lrOw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:57 2025 by rpki-client