This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json) Hash identifier: LpHXpuSEIoYr0Ku3OqER4yYqAV5MXxDOlTRpWAki134= Subject key identifier: BD:EE:52:50:BA:A7:66:04:BB:67:34:6E:29:82:F6:41:B5:8F:AC:8C Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c Certificate serial: 019AF6F90A1C773F013852500EE9436A87AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft Manifest number: 0219 Signing time: Sun 07 Dec 2025 04:01:47 +0000 Manifest this update: Sun 07 Dec 2025 04:01:47 +0000 Manifest next update: Mon 08 Dec 2025 04:01:47 +0000 Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: etNlDCMr5Tm6bYOcAXWaBI+vyY8ifQ8CBLdCZvOp28I=) 2: p02sjha6oluTWKotOKPITJ53VlU.roa (hash: rLFuslHglQh990YEEpEUg7xz9pfaxlb0KsezlTb7ZC4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:0a:1c:77:3f:01:38:52:50:0e:e9:43:6a:87:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c Validity Not Before: Dec 7 04:01:47 2025 GMT Not After : Dec 8 04:01:47 2025 GMT Subject: CN=bdee5250baa76604bb67346e2982f641b58fac8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:57:80:15:e3:d0:b6:4e:0d:cc:fb:9b:6e:62: 4e:4e:ec:17:d5:06:65:19:32:ee:a3:20:a0:02:d0: 74:51:6d:01:51:a1:f8:b1:85:4c:3f:bc:40:98:eb: fc:7c:4b:03:b7:00:98:9c:0f:82:81:10:ed:46:22: ca:a6:dd:4e:fb:58:34:6d:9d:40:f1:8d:8e:6a:c9: ca:d2:2b:57:96:f6:9a:20:99:63:75:f5:49:02:55: a5:d4:3f:14:0b:6f:ff:be:2c:1f:d1:1c:b3:f4:70: 70:b8:f4:dc:3c:bf:af:cf:c0:6e:2e:d5:0b:35:f0: a9:8f:e9:af:b5:41:e4:71:74:aa:33:3d:4e:b8:98: 2e:10:69:9f:e1:48:05:bf:cd:a8:01:65:9c:b3:1c: bc:5f:49:5e:42:72:ae:09:78:dd:74:9f:7c:a5:8d: 25:68:11:3f:46:60:15:df:99:56:c3:6a:58:93:7d: 48:72:1b:e7:25:9d:a4:11:9a:6b:2c:7b:a3:15:c8: 35:bf:2b:dd:0a:0c:dc:fd:73:a7:e2:2a:1c:17:b8: a1:c7:bf:08:05:19:61:0e:a2:3c:e5:64:a5:3c:b2: c3:61:8c:2e:e2:e8:e7:56:d1:dd:fb:4c:d4:63:30: cf:75:11:04:a7:38:7c:20:29:e2:93:16:cc:46:84: 89:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:EE:52:50:BA:A7:66:04:BB:67:34:6E:29:82:F6:41:B5:8F:AC:8C X509v3 Authority Key Identifier: keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:4f:cd:65:50:c5:e6:24:90:e8:3b:e6:81:48:bc:db:47:a3: cf:66:df:45:ae:33:65:db:66:d1:09:c3:35:0e:85:28:ea:67: 9c:e9:f9:d8:ce:5c:d1:78:88:5e:35:3e:84:49:7e:47:cb:58: 1b:cf:dd:f7:cc:d8:f3:a2:ef:ef:31:3d:ab:ed:36:1f:81:22: 72:4a:ec:54:19:e3:f9:c1:c7:a2:fc:15:6b:ca:af:17:a8:e9: b9:80:68:60:89:c1:e7:67:01:92:7d:fc:f2:07:38:44:11:cf: 35:87:c8:4d:78:8b:aa:d3:bf:de:08:06:48:5b:8a:cc:b1:ad: 67:e7:05:0e:c9:f2:5c:b5:a2:71:21:3f:3b:21:38:1c:b4:75: 96:c9:9d:b8:ba:92:f8:c8:fe:71:83:09:35:5c:6b:95:60:37: 55:08:97:60:53:cd:db:a6:45:e1:9a:3d:c1:77:0d:d4:21:da: 89:5b:5f:51:04:97:74:b1:60:aa:b0:81:3d:16:50:c8:d2:b5: e4:3d:c1:e4:b0:00:96:d1:fb:3e:58:4e:ca:9f:a5:06:da:ef: 59:fc:eb:23:e0:6d:10:19:57:ff:61:11:31:1b:b7:28:42:21: 2e:47:84:af:29:1b:1d:75:05:64:0f:75:44:23:fa:65:9a:1f: b3:51:fb:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+Qocdz8BOFJQDulDaoeuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZDIwOWE2OTU5ZTIzNTRmNzNjZTJmMmI5NDEyMjZmODMy OTBjOGMwHhcNMjUxMjA3MDQwMTQ3WhcNMjUxMjA4MDQwMTQ3WjAzMTEwLwYDVQQD EyhiZGVlNTI1MGJhYTc2NjA0YmI2NzM0NmUyOTgyZjY0MWI1OGZhYzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFeAFePQtk4NzPubbmJOTuwX1QZl GTLuoyCgAtB0UW0BUaH4sYVMP7xAmOv8fEsDtwCYnA+CgRDtRiLKpt1O+1g0bZ1A 8Y2OasnK0itXlvaaIJljdfVJAlWl1D8UC2//viwf0Ryz9HBwuPTcPL+vz8BuLtUL NfCpj+mvtUHkcXSqMz1OuJguEGmf4UgFv82oAWWcsxy8X0leQnKuCXjddJ98pY0l aBE/RmAV35lWw2pYk31IchvnJZ2kEZprLHujFcg1vyvdCgzc/XOn4iocF7ihx78I BRlhDqI85WSlPLLDYYwu4ujnVtHd+0zUYzDPdREEpzh8ICnikxbMRoSJ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3uUlC6p2YEu2c0bimC9kG1j6yMMB8GA1UdIwQY MBaAFDfSCaaVniNU9zzi8rlBIm+DKQyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZDdkY2UtMGRkYy00MzY4LWIwNGQt MTNmMzRiMDlhZTYxLzEvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9iZDdkY2UtMGRkYy00MzY4LWIwNGQtMTNmMzRiMDlhZTYx LzEvTjlJSnBwV2VJMVQzUE9MeXVVRWliNE1wREl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeU/NZVDF 5iSQ6DvmgUi820ejz2bfRa4zZdtm0QnDNQ6FKOpnnOn52M5c0XiIXjU+hEl+R8tY G8/d98zY86Lv7zE9q+02H4EickrsVBnj+cHHovwVa8qvF6jpuYBoYInB52cBkn38 8gc4RBHPNYfITXiLqtO/3ggGSFuKzLGtZ+cFDsnyXLWicSE/OyE4HLR1lsmduLqS +Mj+cYMJNVxrlWA3VQiXYFPN26ZF4Zo9wXcN1CHaiVtfUQSXdLFgqrCBPRZQyNK1 5D3B5LAAltH7PlhOyp+lBtrvWfzrI+BtEBlX/2ERMRu3KEIhLkeErykbHXUFZA91 RCP6ZZofs1H78A== -----END CERTIFICATE-----Generated at Sun Dec 7 08:10:21 2025 by rpki-client