This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json) Hash identifier: /6bJC9p7AwJ0Au804rq2S6lLgS+njFm3It38ggJ2M0U= Subject key identifier: 8E:1B:CC:A4:D2:17:AD:0E:53:E8:1A:37:CD:0A:1E:79:68:8B:D9:81 Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73 Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473 Certificate serial: 019AF2ADB214ECCEFEA8046B8C1A24F478D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft Manifest number: 0E18 Signing time: Sat 06 Dec 2025 08:01:00 +0000 Manifest this update: Sat 06 Dec 2025 08:01:00 +0000 Manifest next update: Sun 07 Dec 2025 08:01:00 +0000 Files and hashes: 1: EZgthmV-Ra7gv9VxID_LxuQNZRk.roa (hash: /sMTXd+Qkuph99VXYlJb+JgMuVUgV39vMBsQNIId7R8=) 2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: DwiYkmf5F9wYul9dXPbpIf4G2hFWxCOcr/wmkRIyNn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:b2:14:ec:ce:fe:a8:04:6b:8c:1a:24:f4:78:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473 Validity Not Before: Dec 6 08:01:00 2025 GMT Not After : Dec 7 08:01:00 2025 GMT Subject: CN=8e1bcca4d217ad0e53e81a37cd0a1e79688bd981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:fc:5e:5d:39:1f:88:d1:36:6e:e2:df:51: b6:81:82:10:b5:6b:08:0e:64:f0:1c:4a:1b:0e:92: c9:19:b9:d0:02:f9:fa:3f:3a:82:18:9d:0e:91:ef: b4:3a:e2:7b:8f:cf:35:aa:52:0e:bc:90:49:54:50: a7:18:cf:56:90:12:c2:11:11:ae:3f:d0:bc:eb:c6: 87:53:7a:8a:a3:b1:76:2d:64:59:27:93:f0:f3:ff: 99:31:3d:12:30:bd:6e:49:69:e2:99:d7:8b:d1:37: 6e:ba:e6:d3:f8:bf:22:f0:51:6d:f3:b8:8e:f5:35: 9d:d9:fd:54:7f:e7:f8:e9:53:ab:b1:67:a0:20:53: 22:0a:8e:ec:81:c1:a1:af:90:a2:46:f9:99:6d:52: a4:9a:36:69:af:87:90:54:89:95:7f:d3:46:1f:68: 4d:0e:c4:8a:4a:b0:39:d1:b6:1c:d1:d3:c6:b0:be: 50:09:87:39:11:7e:46:16:dd:25:0e:16:bc:8e:82: 26:76:83:21:38:52:bc:a1:4b:c6:63:ac:c6:aa:df: b4:75:5b:4e:81:7d:cc:4d:4f:fa:81:4e:b8:f3:02: 1e:e4:f5:7d:df:6f:89:a2:89:af:f2:0e:c5:49:cb: 8b:14:2f:0c:f0:cd:e1:fa:c1:25:bb:ab:a5:2b:bd: a0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:CC:A4:D2:17:AD:0E:53:E8:1A:37:CD:0A:1E:79:68:8B:D9:81 X509v3 Authority Key Identifier: keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c0:fd:f1:4d:96:e2:6a:08:b6:c7:09:6b:88:89:e2:88:a2: 08:bb:8a:b7:97:10:d6:ff:81:7e:f4:44:64:5d:91:16:48:79: 1b:64:42:ca:ca:a8:08:9c:2e:00:68:d1:88:8a:8f:23:cc:7d: 17:e6:2d:55:e1:5c:c2:4c:35:39:4b:4e:94:f0:ed:9c:cc:34: 15:02:90:09:4b:d9:6e:a3:21:dd:ad:f0:81:72:63:5c:67:61: e8:da:d4:c0:d4:5e:65:5b:84:b0:79:29:b9:c7:a7:c2:86:a7: 08:92:a8:11:b3:32:9a:80:00:9e:14:78:36:9e:95:70:cd:d7: 9d:27:ff:27:bb:66:15:6d:f9:fc:99:16:b7:a6:ac:95:a9:62: 39:75:30:ed:24:13:cb:6c:9b:10:f1:2d:06:26:d3:fd:9f:c6: e8:6e:92:ab:39:2d:72:c4:82:4c:17:d1:4a:0d:b3:e2:a6:0e: b5:fb:c4:1a:57:e1:97:91:c1:ad:88:85:e9:13:15:72:8a:d2: 85:c1:8b:75:16:67:d0:71:e2:83:7b:8f:75:3e:3a:be:e7:45: 91:c6:a1:39:a2:65:aa:27:f0:ff:b4:21:91:70:38:7f:f2:cf: 99:da:93:78:b4:b2:a7:63:85:d4:98:0f:54:3b:46:ae:1e:87: 9b:13:94:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrbIU7M7+qARrjBok9HjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl NTU0NzMwHhcNMjUxMjA2MDgwMTAwWhcNMjUxMjA3MDgwMTAwWjAzMTEwLwYDVQQD Eyg4ZTFiY2NhNGQyMTdhZDBlNTNlODFhMzdjZDBhMWU3OTY4OGJkOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o/8Xl05H4jRNm7i31G2gYIQtWsI DmTwHEobDpLJGbnQAvn6PzqCGJ0Oke+0OuJ7j881qlIOvJBJVFCnGM9WkBLCERGu P9C868aHU3qKo7F2LWRZJ5Pw8/+ZMT0SML1uSWnimdeL0TduuubT+L8i8FFt87iO 9TWd2f1Uf+f46VOrsWegIFMiCo7sgcGhr5CiRvmZbVKkmjZpr4eQVImVf9NGH2hN DsSKSrA50bYc0dPGsL5QCYc5EX5GFt0lDha8joImdoMhOFK8oUvGY6zGqt+0dVtO gX3MTU/6gU648wIe5PV932+Joomv8g7FScuLFC8M8M3h+sElu6ulK72ggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4bzKTSF60OU+gaN80KHnloi9mBMB8GA1UdIwQY MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM8D98U2W 4moItscJa4iJ4oiiCLuKt5cQ1v+BfvREZF2RFkh5G2RCysqoCJwuAGjRiIqPI8x9 F+YtVeFcwkw1OUtOlPDtnMw0FQKQCUvZbqMh3a3wgXJjXGdh6NrUwNReZVuEsHkp ucenwoanCJKoEbMymoAAnhR4Np6VcM3XnSf/J7tmFW35/JkWt6aslaliOXUw7SQT y2ybEPEtBibT/Z/G6G6SqzktcsSCTBfRSg2z4qYOtfvEGlfhl5HBrYiF6RMVcorS hcGLdRZn0HHig3uPdT46vudFkcahOaJlqifw/7QhkXA4f/LPmdqTeLSyp2OF1JgP VDtGrh6HmxOUCA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:55:09 2025 by rpki-client