This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json) Hash identifier: 45Wk41ecLlnaD3/Jex0zChj6VHApkV0VmFVty/kZSQ0= Subject key identifier: 39:25:7E:51:D7:52:62:83:84:24:A1:28:96:30:94:67:65:7B:EB:C9 Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6 Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6 Certificate serial: 019B2FD5BECC44BD5D46651B0C56BA3D5537 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft Manifest number: 0B8F Signing time: Thu 18 Dec 2025 05:01:35 +0000 Manifest this update: Thu 18 Dec 2025 05:01:35 +0000 Manifest next update: Fri 19 Dec 2025 05:01:35 +0000 Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: iplsABnjqU0SQ2ytWYS1yxqy/206ot86/dixTQlOBpI=) 2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d5:be:cc:44:bd:5d:46:65:1b:0c:56:ba:3d:55:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6 Validity Not Before: Dec 18 05:01:35 2025 GMT Not After : Dec 19 05:01:35 2025 GMT Subject: CN=39257e51d75262838424a12896309467657bebc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:85:92:d8:62:a7:2a:e0:b6:5a:5b:e0:92:a2: 4a:71:56:f8:0a:6a:80:29:d0:a3:21:0b:b4:0a:22: 32:f3:b7:b4:94:96:fa:2e:32:d9:09:de:4d:26:99: fd:f7:d7:f4:b8:8a:71:7f:6d:c1:d9:a0:d4:60:1e: a6:12:0a:b7:4e:41:18:a0:80:ea:1f:ae:4a:9e:9c: b8:6c:16:13:88:c5:c3:13:bd:c3:f7:51:de:06:36: bd:06:03:0d:32:59:22:7c:4c:15:e7:29:f6:1a:b8: fa:35:2c:6e:bb:be:62:c5:71:cd:74:bc:8b:4c:11: ca:49:6f:ce:20:52:12:60:e7:ca:51:ab:0f:6a:15: af:0e:0c:fe:97:28:8f:f6:9c:44:fe:b8:31:b4:be: 37:5b:2b:33:99:5a:a3:30:b3:fe:eb:a0:1e:a5:bf: 54:d4:4f:e2:86:16:dc:fe:87:11:62:3b:c6:00:74: 5a:a4:a9:ba:b3:e6:38:7e:83:cf:6c:58:2d:0a:9c: 25:8b:ca:26:b4:2a:3f:4c:31:89:6e:00:79:70:c7: 0f:5e:c1:51:d7:07:a7:1e:5f:da:72:f0:9a:81:c7: ac:94:7c:e9:e8:6c:a4:c8:15:3e:84:ac:ee:47:47: 66:c1:77:34:9d:2d:3c:f3:07:e5:3b:57:3e:ee:d5: fe:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:25:7E:51:D7:52:62:83:84:24:A1:28:96:30:94:67:65:7B:EB:C9 X509v3 Authority Key Identifier: keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:06:e6:d8:90:23:b7:81:21:94:2d:b2:3b:cc:c3:e4:99:0a: 47:03:96:85:43:d7:95:78:1b:61:65:41:3a:24:8a:38:32:45: b7:52:73:35:80:11:00:a6:10:7f:2a:fb:78:d7:c3:a6:28:93: 67:f4:ec:d0:fa:ff:39:9a:5d:0a:29:83:22:40:e8:83:6e:d8: 77:77:05:00:db:e4:80:d7:9f:8d:49:e7:3d:89:4f:da:dd:63: 1d:af:92:0c:ed:7d:05:a0:37:b2:6d:4a:e6:4d:1b:5d:48:e3: 6b:4b:6a:f7:15:54:a0:8b:e8:54:54:4a:9b:a2:09:25:15:d6: e5:f2:3e:8f:cc:81:8e:ba:97:69:ee:85:a3:d0:72:81:84:73: 6b:49:19:a5:14:ce:2e:7f:57:ec:c1:c3:49:b4:4c:31:e7:56: 6c:ac:3b:b7:ed:f7:fe:b6:e0:02:3b:9c:8e:6e:39:59:73:50: 23:c4:1d:77:2a:64:82:ea:76:58:57:37:c2:7b:8d:6f:49:0e: b3:23:11:55:52:21:53:f3:b0:13:41:b6:71:6a:cb:3d:5e:c1: d8:29:48:c0:b1:c9:b6:3d:b5:30:7c:b9:45:cd:67:ea:76:8f: 1a:bd:b7:e7:fb:36:59:1c:6d:18:2e:f7:4e:fd:58:cb:e4:b5: 18:10:fc:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1b7MRL1dRmUbDFa6PVU3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzJlM2EwY2Q3NDkwMDUzNWI2YTZmOGZmYzY1N2Q5M2Ew OTA3YTYwHhcNMjUxMjE4MDUwMTM1WhcNMjUxMjE5MDUwMTM1WjAzMTEwLwYDVQQD EygzOTI1N2U1MWQ3NTI2MjgzODQyNGExMjg5NjMwOTQ2NzY1N2JlYmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYWS2GKnKuC2WlvgkqJKcVb4CmqA KdCjIQu0CiIy87e0lJb6LjLZCd5NJpn999f0uIpxf23B2aDUYB6mEgq3TkEYoIDq H65Knpy4bBYTiMXDE73D91HeBja9BgMNMlkifEwV5yn2Grj6NSxuu75ixXHNdLyL TBHKSW/OIFISYOfKUasPahWvDgz+lyiP9pxE/rgxtL43WyszmVqjMLP+66Aepb9U 1E/ihhbc/ocRYjvGAHRapKm6s+Y4foPPbFgtCpwli8omtCo/TDGJbgB5cMcPXsFR 1wenHl/acvCagceslHzp6GykyBU+hKzuR0dmwXc0nS088wflO1c+7tX+awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDklflHXUmKDhCShKJYwlGdle+vJMB8GA1UdIwQY MBaAFJ9y46DNdJAFNbam+P/GV9k6CQemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5Yzkt MTBhY2EzMzEzMzg3LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5YzktMTBhY2EzMzEzMzg3 LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAswbm2JAj t4EhlC2yO8zD5JkKRwOWhUPXlXgbYWVBOiSKODJFt1JzNYARAKYQfyr7eNfDpiiT Z/Ts0Pr/OZpdCimDIkDog27Yd3cFANvkgNefjUnnPYlP2t1jHa+SDO19BaA3sm1K 5k0bXUjja0tq9xVUoIvoVFRKm6IJJRXW5fI+j8yBjrqXae6Fo9BygYRza0kZpRTO Ln9X7MHDSbRMMedWbKw7t+33/rbgAjucjm45WXNQI8Qddypkgup2WFc3wnuNb0kO syMRVVIhU/OwE0G2cWrLPV7B2ClIwLHJtj21MHy5Rc1n6naPGr235/s2WRxtGC73 Tv1Yy+S1GBD8gA== -----END CERTIFICATE-----Generated at Thu Dec 18 09:26:51 2025 by rpki-client