This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json) Hash identifier: Z9ch2/M57xBN1HNUorkz4DPXn44oPla7dx//AgmwiXc= Subject key identifier: 8A:52:65:6E:0A:F9:BE:BF:C7:8A:FC:18:A0:10:6F:CF:2C:0F:19:EF Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97 Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97 Certificate serial: 019AF2AD8E4AA7B6004354929E6E52156D2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 08:00:51 +0000 Manifest this update: Sat 06 Dec 2025 08:00:51 +0000 Manifest next update: Sun 07 Dec 2025 08:00:51 +0000 Files and hashes: 1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: xydcb0jOw8Yk6sjYZAVJwAainQoixjN1ntalBJnvjZc=) 2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:8e:4a:a7:b6:00:43:54:92:9e:6e:52:15:6d:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97 Validity Not Before: Dec 6 08:00:51 2025 GMT Not After : Dec 7 08:00:51 2025 GMT Subject: CN=8a52656e0af9bebfc78afc18a0106fcf2c0f19ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:3f:c3:a5:52:bd:8b:7d:e4:cd:5d:0b:d2:33: b8:7c:51:60:43:3c:f0:40:2f:3a:98:fc:ef:ad:a6: 34:ee:77:de:43:c7:e3:9c:08:cf:df:bf:0e:d4:24: ad:47:10:fc:c3:f4:06:c3:e9:24:ed:9e:22:8c:a2: 42:53:86:9f:cf:19:97:e5:63:eb:98:8a:52:7a:48: ef:22:46:86:28:7d:95:e5:d3:1f:37:46:a6:10:d4: be:c5:9a:6b:fd:8a:81:73:d9:ca:27:82:ad:af:a1: 0e:01:85:49:96:ae:7f:cc:35:2c:b1:ea:9d:07:b5: 91:de:a9:c5:64:e0:23:8a:60:0b:f3:10:46:66:36: 10:36:d4:98:e3:de:8b:40:90:ef:72:d3:57:49:00: a0:3e:d1:63:55:fe:61:ac:b8:c4:22:09:6a:84:b2: 6a:fd:93:16:0c:ea:f0:76:a8:80:0a:a8:07:ed:1d: e6:d4:ec:9e:53:0d:ac:dd:8b:90:fc:f8:ca:76:8d: cf:b9:80:1e:5f:b7:73:2d:19:4c:fd:1c:e0:52:63: a2:59:56:b5:38:27:d4:82:f3:70:f6:51:15:c4:0d: db:ef:bf:08:94:89:20:e6:a6:1c:5c:38:21:4e:4b: ce:b1:f7:52:9f:73:ab:1a:5d:9b:93:a7:3b:48:12: 43:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:52:65:6E:0A:F9:BE:BF:C7:8A:FC:18:A0:10:6F:CF:2C:0F:19:EF X509v3 Authority Key Identifier: keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:09:00:e9:f9:75:9c:52:13:c4:6f:4f:e1:c2:14:03:e3:cc: 50:06:bf:e6:8b:3d:39:91:46:9d:53:e9:00:87:f6:af:58:ff: 6c:4b:79:d2:94:d6:27:2e:ba:1a:e9:db:f6:fa:cc:e6:99:98: d2:64:22:a6:39:0b:af:00:3e:8b:d0:d2:15:05:fb:3d:74:6a: 01:92:b8:bc:39:ab:f6:ea:59:c1:20:d1:ae:d1:d3:69:bd:e4: bd:ff:da:05:dd:db:31:6d:2e:b8:8c:78:0e:35:b7:49:cc:88: 71:88:94:26:3c:24:20:1b:08:14:88:66:7a:b0:a3:17:56:a3: 85:d5:4c:42:ed:b6:7c:80:fe:b5:b1:aa:94:ec:c2:04:0c:63: 6b:f9:20:e1:c6:c3:51:10:76:d7:1c:3a:d1:bc:43:5b:2a:41: 22:cc:2f:f1:68:b9:13:14:9b:8a:52:dd:6a:6d:19:78:87:38: 8f:c9:ad:74:ca:fa:17:c6:2c:fc:55:fc:d9:00:2a:38:0b:88: a7:de:cb:ee:96:1e:18:be:7f:c6:4f:f1:2e:bd:2c:c3:da:19: a2:13:83:d0:47:71:d0:c2:a4:af:cf:0b:8c:d3:74:56:ef:cb: c1:58:a8:cd:e9:38:65:e1:cc:f3:f0:67:7c:69:0f:8b:d8:af: 2f:e5:dd:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrY5Kp7YAQ1SSnm5SFW0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmY1NWI5NTc0M2E5MTViNzkzZDcyZGU3MWFjOTZjZTYx OThhOTcwHhcNMjUxMjA2MDgwMDUxWhcNMjUxMjA3MDgwMDUxWjAzMTEwLwYDVQQD Eyg4YTUyNjU2ZTBhZjliZWJmYzc4YWZjMThhMDEwNmZjZjJjMGYxOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9D/DpVK9i33kzV0L0jO4fFFgQzzw QC86mPzvraY07nfeQ8fjnAjP378O1CStRxD8w/QGw+kk7Z4ijKJCU4afzxmX5WPr mIpSekjvIkaGKH2V5dMfN0amENS+xZpr/YqBc9nKJ4Ktr6EOAYVJlq5/zDUsseqd B7WR3qnFZOAjimAL8xBGZjYQNtSY496LQJDvctNXSQCgPtFjVf5hrLjEIglqhLJq /ZMWDOrwdqiACqgH7R3m1OyeUw2s3YuQ/PjKdo3PuYAeX7dzLRlM/RzgUmOiWVa1 OCfUgvNw9lEVxA3b778IlIkg5qYcXDghTkvOsfdSn3OrGl2bk6c7SBJDowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpSZW4K+b6/x4r8GKAQb88sDxnvMB8GA1UdIwQY MBaAFDf/VblXQ6kVt5PXLecayWzmGYqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEt Nzc1MDk3MjI2NWFhLzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEtNzc1MDk3MjI2NWFh LzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQkA6fl1 nFITxG9P4cIUA+PMUAa/5os9OZFGnVPpAIf2r1j/bEt50pTWJy66Gunb9vrM5pmY 0mQipjkLrwA+i9DSFQX7PXRqAZK4vDmr9upZwSDRrtHTab3kvf/aBd3bMW0uuIx4 DjW3ScyIcYiUJjwkIBsIFIhmerCjF1ajhdVMQu22fID+tbGqlOzCBAxja/kg4cbD URB21xw60bxDWypBIswv8Wi5ExSbilLdam0ZeIc4j8mtdMr6F8Ys/FX82QAqOAuI p97L7pYeGL5/xk/xLr0sw9oZohOD0Edx0MKkr88LjNN0Vu/LwViozek4ZeHM8/Bn fGkPi9ivL+Xdiw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:48:17 2025 by rpki-client