This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json) Hash identifier: LO/o+uzvnKLUJ848gXvrsJaNrfGyFkISha7i8bqhqcQ= Subject key identifier: 50:1C:7B:0C:F0:8D:93:77:E1:49:95:3E:3E:B2:CF:F4:67:BD:67:D0 Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74 Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74 Certificate serial: 019AF0BF0CEB5CC99A25F557FDDCB3C4C4B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft Manifest number: 0505 Signing time: Fri 05 Dec 2025 23:00:43 +0000 Manifest this update: Fri 05 Dec 2025 23:00:43 +0000 Manifest next update: Sat 06 Dec 2025 23:00:43 +0000 Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: NAMHFUKh5luKNpvXmhjCRp+3peRqbydEnVCzzwyAPnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:0c:eb:5c:c9:9a:25:f5:57:fd:dc:b3:c4:c4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74 Validity Not Before: Dec 5 23:00:43 2025 GMT Not After : Dec 6 23:00:43 2025 GMT Subject: CN=501c7b0cf08d9377e149953e3eb2cff467bd67d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a0:ec:bf:7d:66:b6:c9:17:97:5c:8a:3c:c3: a1:71:83:09:c2:b1:e3:ee:60:9c:0d:57:2c:91:7f: ca:9d:e7:cc:67:b2:15:e8:8a:38:15:38:86:28:15: 73:fb:16:80:33:80:6c:0f:31:ac:95:9e:75:77:fa: 6a:06:33:44:30:f0:0f:fc:77:fc:bc:05:69:d6:16: 3a:a0:7b:7b:c1:86:68:e6:8a:17:db:6f:27:31:60: f0:cd:38:e8:58:43:76:8f:d0:87:f2:9b:29:39:99: 2c:a9:2e:40:e8:d9:d7:be:31:b8:5a:40:bb:1d:72: 19:65:bf:17:da:7b:7f:21:6f:cf:d5:e4:f5:45:d4: 4f:f2:14:34:f0:1d:48:98:2c:bc:94:31:cc:2f:b6: d2:6b:59:5f:c2:79:50:8a:d1:2f:a5:69:df:7e:15: 67:7a:b5:97:96:23:09:9c:84:00:9d:74:55:7d:ca: db:71:bd:c6:47:71:04:fa:d4:ff:9e:37:51:e2:1d: c2:cc:ab:ec:bb:0f:9f:c6:9e:87:32:81:c7:79:5b: e2:dc:b5:07:6f:45:c3:27:c9:55:43:7b:91:16:7c: e4:52:1d:bd:49:f3:dc:d7:85:93:ab:7c:fd:6f:24: 95:3e:05:54:74:b9:dc:6e:31:14:b9:85:1d:2a:3f: 7a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1C:7B:0C:F0:8D:93:77:E1:49:95:3E:3E:B2:CF:F4:67:BD:67:D0 X509v3 Authority Key Identifier: keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:20:6e:76:96:2f:99:d3:03:74:b1:79:fd:21:03:9c:98:61: 73:e8:aa:a0:61:e8:fe:cf:9b:f2:5b:cb:71:56:ac:6a:ac:81: 50:ac:3c:77:ee:68:8b:f6:93:c1:f4:3e:8e:0b:c5:b6:19:f9: 5f:d1:f0:bf:46:66:e7:25:e3:40:4f:0f:4b:f2:77:56:41:f4: f4:68:e9:c4:85:db:32:9f:b4:5a:11:6b:fa:81:f5:70:36:20: a0:aa:75:72:c2:bc:73:96:06:b9:f9:59:d1:bc:aa:e7:de:37: f5:e2:aa:17:3f:fc:05:00:99:e9:ee:ef:47:60:7e:5c:4e:e2: 24:8b:82:2b:f6:fc:d8:49:f9:5f:15:a7:cf:80:e2:c4:13:da: 78:fc:16:27:94:08:1e:ae:a0:87:93:e6:c8:bb:df:54:a3:39: 84:51:09:09:fa:8e:2a:9a:6a:b9:fd:1b:dd:8a:66:91:19:e6: b3:5a:ab:2c:57:f7:80:8a:7d:50:16:62:e8:20:2f:52:9c:66: 5b:8a:8e:fa:b5:1d:b5:71:bc:55:1b:25:a6:a0:91:a7:5a:56: 95:fc:82:0c:6b:a5:58:3b:2c:c2:a0:8d:9e:25:61:6f:63:ce: 37:8b:09:19:7a:8d:64:67:09:c3:09:ba:dc:42:94:80:34:36: 3e:54:29:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvwzrXMmaJfVX/dyzxMSyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTFiMzM2MDE3N2EwMGJjM2RjNTc0M2UwMjYzMjg0NjA0 ZjliNzQwHhcNMjUxMjA1MjMwMDQzWhcNMjUxMjA2MjMwMDQzWjAzMTEwLwYDVQQD Eyg1MDFjN2IwY2YwOGQ5Mzc3ZTE0OTk1M2UzZWIyY2ZmNDY3YmQ2N2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKDsv31mtskXl1yKPMOhcYMJwrHj 7mCcDVcskX/KnefMZ7IV6Io4FTiGKBVz+xaAM4BsDzGslZ51d/pqBjNEMPAP/Hf8 vAVp1hY6oHt7wYZo5ooX228nMWDwzTjoWEN2j9CH8pspOZksqS5A6NnXvjG4WkC7 HXIZZb8X2nt/IW/P1eT1RdRP8hQ08B1ImCy8lDHML7bSa1lfwnlQitEvpWnffhVn erWXliMJnIQAnXRVfcrbcb3GR3EE+tT/njdR4h3CzKvsuw+fxp6HMoHHeVvi3LUH b0XDJ8lVQ3uRFnzkUh29SfPc14WTq3z9bySVPgVUdLncbjEUuYUdKj96eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAcewzwjZN34UmVPj6yz/RnvWfQMB8GA1UdIwQY MBaAFJ/hszYBd6ALw9xXQ+AmMoRgT5t0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1Yzkt Zjk3NWVhNGUzNjc0LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lOWZiNjEtYjU2Ni00ZjM2LTk1YzktZjk3NWVhNGUzNjc0 LzEvbi1Hek5nRjNvQXZEM0ZkRDRDWXloR0JQbTNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApiBudpYv mdMDdLF5/SEDnJhhc+iqoGHo/s+b8lvLcVasaqyBUKw8d+5oi/aTwfQ+jgvFthn5 X9Hwv0Zm5yXjQE8PS/J3VkH09GjpxIXbMp+0WhFr+oH1cDYgoKp1csK8c5YGuflZ 0byq59439eKqFz/8BQCZ6e7vR2B+XE7iJIuCK/b82En5XxWnz4DixBPaePwWJ5QI Hq6gh5PmyLvfVKM5hFEJCfqOKppquf0b3YpmkRnms1qrLFf3gIp9UBZi6CAvUpxm W4qO+rUdtXG8VRslpqCRp1pWlfyCDGulWDsswqCNniVhb2PON4sJGXqNZGcJwwm6 3EKUgDQ2PlQpqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:50 2025 by rpki-client