This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json) Hash identifier: BPM9J9BpByDaBd7l0rPRQSoSrB0z9KISjGJ3q09nzLE= Subject key identifier: 67:5C:50:80:68:82:95:AD:DF:1F:49:94:EF:79:0C:B0:1F:6A:24:B9 Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4 Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4 Certificate serial: 019AF2ADB4CA8E43E8FA5644DC8C0F68038B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft Manifest number: 0708 Signing time: Sat 06 Dec 2025 08:01:01 +0000 Manifest this update: Sat 06 Dec 2025 08:01:01 +0000 Manifest next update: Sun 07 Dec 2025 08:01:01 +0000 Files and hashes: 1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: V/3WPs6P0NILIOUpFF5i8lofh2GUuKnMNmDCS+3lYKY=) 2: R1GLOmkDsdOQU3JmSI6jpWMtr0k.roa (hash: TobK47r5xeGKINzekYR4rqZ5DBGKz/0D1yzbu2xP0c8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b4:ca:8e:43:e8:fa:56:44:dc:8c:0f:68:03:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4 Validity Not Before: Dec 6 08:01:01 2025 GMT Not After : Dec 7 08:01:01 2025 GMT Subject: CN=675c5080688295addf1f4994ef790cb01f6a24b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:2f:33:aa:66:93:ab:fe:c7:b5:11:f8:24:65: a9:a6:9b:8c:04:82:2e:4b:38:7a:aa:e6:07:17:83: 6d:5a:f1:f0:9f:bb:76:c0:13:5f:1d:7d:19:fd:69: b1:ab:80:ad:40:b0:68:ed:b6:2d:f9:8e:df:9b:2e: f5:df:07:5f:9c:bc:a8:86:4c:d4:34:e9:b0:98:2a: 4a:df:d5:e0:9a:b4:68:81:39:a2:5b:01:d6:b3:d8: 5e:b3:62:9c:57:67:30:1c:d4:2e:da:d6:8f:8c:3a: 93:db:4d:0d:90:31:1e:26:bf:6a:27:31:76:64:06: f0:9d:cc:03:d8:fe:c7:07:56:08:fb:e8:f4:d2:bb: 42:6b:ab:45:c3:a9:93:98:ed:b2:ff:53:5c:16:f6: 8c:87:f4:53:09:5b:10:64:51:f8:e0:c6:77:e1:d7: 6e:0a:f7:13:f6:f6:2e:6e:b9:b9:ee:f5:8b:81:30: a6:c2:28:4d:73:d8:a8:1d:1d:ca:10:e2:5a:c8:22: b5:82:bf:55:98:d7:86:ac:6e:04:d3:a5:11:1c:c5: 8d:77:39:d0:c6:b9:cc:b9:3f:e1:2d:61:a4:31:c6: df:fe:84:fd:5c:ef:3a:b7:a6:7d:bb:39:1d:fd:64: 0d:cc:ec:ac:9b:8c:2a:60:97:34:42:36:d9:ef:ae: 02:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5C:50:80:68:82:95:AD:DF:1F:49:94:EF:79:0C:B0:1F:6A:24:B9 X509v3 Authority Key Identifier: keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:52:0a:2a:b1:68:97:a1:f6:e1:32:50:fc:5f:c8:bf:c4:c6: 15:02:5d:df:19:63:20:3d:ad:51:5e:91:9d:0b:be:7c:00:ba: a4:9d:74:03:92:c2:d8:de:63:52:c9:9a:d2:9d:f1:d4:27:a7: e1:a6:a5:74:89:19:ec:cb:3c:3c:4c:10:a0:4a:ea:61:12:01: 94:12:0b:13:2b:19:c6:8e:fc:5a:eb:2f:c1:5b:c1:d7:81:5a: 4f:67:88:2c:cf:0b:18:e0:9d:47:99:f8:04:ff:1e:f0:ed:94: 7d:40:a5:cf:91:ba:d2:a5:cb:09:a1:f9:00:69:c1:f7:e6:7c: 18:6a:44:17:45:c4:bb:e3:a6:7a:6f:c9:0a:40:fa:d1:b3:42: 69:76:d8:ca:06:a6:4a:d9:19:0a:6d:61:fb:e0:50:2e:d7:69: 3c:94:38:fc:1e:64:63:ed:77:e1:77:bc:26:ef:b4:19:01:f1: 6d:aa:24:58:54:25:30:24:9d:b9:2e:37:87:e3:99:21:c7:f1: e9:3d:1a:e9:5c:47:57:84:d7:e4:4a:e1:03:cf:8d:95:21:48: d8:72:36:07:3d:c7:91:9f:4e:9a:c2:d2:cc:31:35:62:66:b3: 13:ae:1a:d7:74:ca:70:a8:0d:7f:98:41:1a:37:a1:39:1f:5c: d7:76:e6:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbTKjkPo+lZE3IwPaAOLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODFiYWJhYzY5MjUyNzFiMTc5ODE3NTE1ZTA2ZTZhMTBh Y2Y2YjQwHhcNMjUxMjA2MDgwMTAxWhcNMjUxMjA3MDgwMTAxWjAzMTEwLwYDVQQD Eyg2NzVjNTA4MDY4ODI5NWFkZGYxZjQ5OTRlZjc5MGNiMDFmNmEyNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7i8zqmaTq/7HtRH4JGWpppuMBIIu Szh6quYHF4NtWvHwn7t2wBNfHX0Z/Wmxq4CtQLBo7bYt+Y7fmy713wdfnLyohkzU NOmwmCpK39XgmrRogTmiWwHWs9hes2KcV2cwHNQu2taPjDqT200NkDEeJr9qJzF2 ZAbwncwD2P7HB1YI++j00rtCa6tFw6mTmO2y/1NcFvaMh/RTCVsQZFH44MZ34ddu CvcT9vYubrm57vWLgTCmwihNc9ioHR3KEOJayCK1gr9VmNeGrG4E06URHMWNdznQ xrnMuT/hLWGkMcbf/oT9XO86t6Z9uzkd/WQNzOysm4wqYJc0QjbZ764CFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGdcUIBogpWt3x9JlO95DLAfaiS5MB8GA1UdIwQY MBaAFDeBurrGklJxsXmBdRXgbmoQrPa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEt ZGU1NzFiODk2MThkLzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS84ZjgzYzItM2JiMy00ZDQ3LTgwMzEtZGU1NzFiODk2MThk LzEvTjRHNnVzYVNVbkd4ZVlGMUZlQnVhaENzOXJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVIKKrFo l6H24TJQ/F/Iv8TGFQJd3xljID2tUV6RnQu+fAC6pJ10A5LC2N5jUsma0p3x1Cen 4aaldIkZ7Ms8PEwQoErqYRIBlBILEysZxo78WusvwVvB14FaT2eILM8LGOCdR5n4 BP8e8O2UfUClz5G60qXLCaH5AGnB9+Z8GGpEF0XEu+Omem/JCkD60bNCaXbYygam StkZCm1h++BQLtdpPJQ4/B5kY+134Xe8Ju+0GQHxbaokWFQlMCSduS43h+OZIcfx 6T0a6VxHV4TX5ErhA8+NlSFI2HI2Bz3HkZ9OmsLSzDE1YmazE64a13TKcKgNf5hB GjehOR9c13bmMg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:26 2025 by rpki-client