This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json) Hash identifier: 2qR6Y8jpW+lS9MnWfGKXysmNHaedQToZJTmxohFpSto= Subject key identifier: 77:16:DF:4E:30:24:73:22:AB:13:5A:75:48:94:80:39:55:FF:0B:D9 Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78 Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978 Certificate serial: 019AF19AED3FC9846D9CBC15A587E65D739C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft Manifest number: 0E0C Signing time: Sat 06 Dec 2025 03:00:53 +0000 Manifest this update: Sat 06 Dec 2025 03:00:53 +0000 Manifest next update: Sun 07 Dec 2025 03:00:53 +0000 Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: k10wX/yyiHJOjh1DUA7KtlaBrnA7hV/dyjQf2StpAms=) 2: XD9exolZuPQ40dkfdus25Vf9rII.roa (hash: FmLN+c/lhCwCKONje2+AaEBWa+VnuluALCFAOq2/rro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:ed:3f:c9:84:6d:9c:bc:15:a5:87:e6:5d:73:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978 Validity Not Before: Dec 6 03:00:53 2025 GMT Not After : Dec 7 03:00:53 2025 GMT Subject: CN=7716df4e30247322ab135a754894803955ff0bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:ff:98:c4:19:1e:7f:5c:9c:d8:7a:1f:a6: e2:19:ac:11:7f:cd:0f:2e:73:f9:b7:5e:42:1c:37: a5:af:4a:63:9b:1d:7c:a3:d6:37:c9:f7:4d:3d:f5: 66:21:84:c4:a2:35:bc:b1:01:b0:b9:ab:0e:fb:21: ba:28:53:10:b4:46:c4:c7:1b:81:70:a3:ea:57:2c: 86:85:17:b4:0a:90:f9:2a:81:80:ce:db:6c:e0:cd: 19:18:87:a0:0d:64:4e:1d:5b:2a:b2:e1:0b:4a:da: 6f:4d:bd:37:d5:b0:bf:ce:3e:46:51:12:f2:12:51: fc:ba:06:40:1b:15:ae:ff:38:36:1f:1a:66:9e:f0: dd:de:98:01:7c:36:16:c0:0f:dd:5f:0a:01:aa:09: 58:b5:cb:a9:b4:2a:9a:42:fc:0a:87:a3:dd:0f:99: 0d:78:e3:d9:d3:71:c0:db:f9:45:52:da:ab:80:05: d5:59:6f:44:bc:2a:11:99:1a:26:25:fc:90:05:30: 76:c8:f9:02:c6:75:e3:08:a5:1a:d2:74:3c:f5:5d: ff:68:35:4f:71:aa:65:04:ce:cf:96:8d:ef:a2:0b: 40:31:eb:06:63:97:9e:3e:cf:ec:56:fc:64:ff:a4: 89:b6:80:83:02:30:ab:d8:a3:34:a6:11:8c:66:ad: 66:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:16:DF:4E:30:24:73:22:AB:13:5A:75:48:94:80:39:55:FF:0B:D9 X509v3 Authority Key Identifier: keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:71:bc:85:b7:1b:71:1e:69:b7:1d:77:0b:1b:5c:90:d3:42: be:9f:a2:bc:e7:9e:4a:a1:04:8d:9b:df:5d:64:d0:7c:6e:46: 81:f8:fb:b6:76:bd:96:5e:b2:9f:b9:af:21:1b:2f:51:6b:57: 83:41:b9:23:18:ba:92:af:fb:41:3e:f7:ab:ea:e9:fd:9b:40: ed:97:58:4a:e1:d8:08:dc:e9:fa:32:33:ea:02:17:b4:8e:9a: 6c:aa:72:e1:a9:4b:9d:8e:91:68:65:87:8a:58:90:39:8f:40: c8:f4:27:1e:7d:c4:32:6b:1c:a9:82:dc:2b:a8:3f:4e:f9:57: b5:0d:50:b8:df:e2:d8:90:33:e8:31:1a:de:a8:83:aa:a7:45: 8f:b6:43:ad:cd:be:38:0d:92:b8:68:5b:96:cc:97:cc:1b:04: ce:2d:88:f6:9b:de:85:b4:6f:f1:43:19:f0:76:5b:eb:bc:c1: 37:30:60:b9:d1:e9:15:32:9d:86:65:c1:55:72:d2:ce:67:41: b6:66:8c:16:ad:04:c8:f8:a0:ad:1e:94:1b:ad:fc:32:27:34: 8b:7c:9b:99:84:01:0f:09:f6:fe:dd:7a:4a:6c:42:bc:e7:39: 7f:b2:19:be:b0:3d:5e:50:04:ed:41:1b:7f:33:ed:d3:1c:1f: 88:6c:6f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmu0/yYRtnLwVpYfmXXOcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm YzA5NzgwHhcNMjUxMjA2MDMwMDUzWhcNMjUxMjA3MDMwMDUzWjAzMTEwLwYDVQQD Eyg3NzE2ZGY0ZTMwMjQ3MzIyYWIxMzVhNzU0ODk0ODAzOTU1ZmYwYmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznX/mMQZHn9cnNh6H6biGawRf80P LnP5t15CHDelr0pjmx18o9Y3yfdNPfVmIYTEojW8sQGwuasO+yG6KFMQtEbExxuB cKPqVyyGhRe0CpD5KoGAztts4M0ZGIegDWROHVsqsuELStpvTb031bC/zj5GURLy ElH8ugZAGxWu/zg2HxpmnvDd3pgBfDYWwA/dXwoBqglYtcuptCqaQvwKh6PdD5kN eOPZ03HA2/lFUtqrgAXVWW9EvCoRmRomJfyQBTB2yPkCxnXjCKUa0nQ89V3/aDVP caplBM7Plo3vogtAMesGY5eePs/sVvxk/6SJtoCDAjCr2KM0phGMZq1mywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcW304wJHMiqxNadUiUgDlV/wvZMB8GA1UdIwQY MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3G8hbcb cR5ptx13CxtckNNCvp+ivOeeSqEEjZvfXWTQfG5Ggfj7tna9ll6yn7mvIRsvUWtX g0G5Ixi6kq/7QT73q+rp/ZtA7ZdYSuHYCNzp+jIz6gIXtI6abKpy4alLnY6RaGWH iliQOY9AyPQnHn3EMmscqYLcK6g/TvlXtQ1QuN/i2JAz6DEa3qiDqqdFj7ZDrc2+ OA2SuGhblsyXzBsEzi2I9pvehbRv8UMZ8HZb67zBNzBgudHpFTKdhmXBVXLSzmdB tmaMFq0EyPigrR6UG638Mic0i3ybmYQBDwn2/t16SmxCvOc5f7IZvrA9XlAE7UEb fzPt0xwfiGxvMA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:59:31 2025 by rpki-client