This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft File: n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json) Hash identifier: IAcaGRPk2Y2AHTLjhd5PxfueEr/BhVLQp6yOcu+v8TM= Subject key identifier: 04:44:BE:A5:7C:8C:AE:EB:68:F0:B8:87:5F:83:17:03:72:6F:3D:2D Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d Certificate serial: 019AF12D46EF19132558159D8FF2A77F0A5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft Manifest number: 03B5 Signing time: Sat 06 Dec 2025 01:01:07 +0000 Manifest this update: Sat 06 Dec 2025 01:01:07 +0000 Manifest next update: Sun 07 Dec 2025 01:01:07 +0000 Files and hashes: 1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=) 2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: Jtk9QmLnYRW//y7HMILtMIz0IIu8cnU2IKqcW+D3g40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:46:ef:19:13:25:58:15:9d:8f:f2:a7:7f:0a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d Validity Not Before: Dec 6 01:01:07 2025 GMT Not After : Dec 7 01:01:07 2025 GMT Subject: CN=0444bea57c8caeeb68f0b8875f831703726f3d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:52:04:f4:37:30:95:d5:35:04:cb:2e:f9:16: 46:3a:ef:88:79:54:ee:da:9d:53:3c:63:25:51:ec: 73:bf:ad:4f:16:6e:39:1f:f1:b7:3f:0c:31:2e:18: 45:74:8d:11:42:b3:e1:22:43:44:55:c3:27:ca:6f: dd:c2:b6:27:71:e6:31:5a:00:04:47:66:b8:ef:a5: b0:f9:87:fe:1b:07:8b:d0:84:a9:03:40:22:85:75: f9:b7:ac:43:4d:80:f2:e1:36:c9:c6:3a:23:00:54: 41:05:ae:8a:d1:50:ff:f8:c4:e9:ab:2c:2b:ff:50: 1d:07:ac:17:85:ea:64:0f:3e:36:da:90:49:c8:18: ef:70:cb:f1:3a:01:f8:44:5b:6c:40:11:16:69:93: 36:00:2b:04:ee:57:07:c1:69:71:ed:6d:bb:02:bd: cc:7a:5f:d9:f4:60:93:0a:87:bd:48:19:ab:8c:b6: 1e:68:62:1d:37:d5:23:ff:c4:99:0e:b3:95:56:da: 6d:d8:a0:f1:32:3b:2b:04:a9:6f:3d:20:47:a6:55: 1e:6c:01:c1:93:ab:28:ea:2d:fb:91:e4:5c:b9:ee: 5d:57:ef:6e:3d:9d:7b:8a:9e:b0:cf:f7:f5:23:c9: f3:3c:a0:10:af:7f:a6:ae:9c:db:fc:04:c6:e4:4b: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:44:BE:A5:7C:8C:AE:EB:68:F0:B8:87:5F:83:17:03:72:6F:3D:2D X509v3 Authority Key Identifier: keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:bc:5d:97:1a:e9:82:2d:2f:ef:ef:a2:af:24:d0:42:16:b6: e4:79:b5:68:5e:cc:d3:f8:d2:f0:ea:f7:46:5c:5d:b1:f5:a1: 12:c3:03:42:07:1b:36:c6:0b:0a:17:b7:f8:92:27:0b:a0:99: 6b:56:97:dd:2d:41:eb:11:99:97:85:92:e2:a5:b8:e5:27:d7: c6:d5:57:33:b7:99:63:81:21:96:98:7f:30:a1:7a:66:aa:33: d4:cb:7a:b2:de:fa:a8:d5:8d:89:c1:e2:28:d8:3b:b2:88:92: 09:cc:e7:74:a1:98:1e:b5:ae:6c:0d:3f:c4:91:fc:58:6c:be: d2:19:12:9f:75:a8:af:73:18:8a:cc:56:76:13:fb:03:ea:2d: df:5a:a0:33:63:ba:3b:9b:94:69:98:eb:6b:ee:f0:d0:08:63: 22:20:2e:3e:4f:6e:95:10:b2:3e:02:f8:2c:df:2e:31:96:83: 33:a6:29:66:9a:3b:a5:12:0e:39:d3:b5:b6:2e:35:61:eb:40: bd:46:9c:cb:fc:44:a5:55:2b:58:bc:e8:32:cb:43:90:cc:36: f2:74:ae:69:14:7d:20:8d:53:46:f6:d2:84:1a:68:98:e2:2f: 13:9c:fb:3f:6b:5c:be:ec:64:ef:ad:1d:8b:9c:76:53:8e:9e: 8e:ee:17:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUbvGRMlWBWdj/KnfwpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzgzZGZjMjg5YmZhYTNjNGJhMWIzMjRmMWRiYjU3ZjU4 NmEwMWQwHhcNMjUxMjA2MDEwMTA3WhcNMjUxMjA3MDEwMTA3WjAzMTEwLwYDVQQD EygwNDQ0YmVhNTdjOGNhZWViNjhmMGI4ODc1ZjgzMTcwMzcyNmYzZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFIE9DcwldU1BMsu+RZGOu+IeVTu 2p1TPGMlUexzv61PFm45H/G3PwwxLhhFdI0RQrPhIkNEVcMnym/dwrYnceYxWgAE R2a476Ww+Yf+GweL0ISpA0AihXX5t6xDTYDy4TbJxjojAFRBBa6K0VD/+MTpqywr /1AdB6wXhepkDz422pBJyBjvcMvxOgH4RFtsQBEWaZM2ACsE7lcHwWlx7W27Ar3M el/Z9GCTCoe9SBmrjLYeaGIdN9Uj/8SZDrOVVtpt2KDxMjsrBKlvPSBHplUebAHB k6so6i37keRcue5dV+9uPZ17ip6wz/f1I8nzPKAQr3+mrpzb/ATG5Ev0JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAREvqV8jK7raPC4h1+DFwNybz0tMB8GA1UdIwQY MBaAFJ94Pfwom/qjxLobMk8du1f1hqAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQt MDBlNTVhMjQ5OWQwLzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQtMDBlNTVhMjQ5OWQw LzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLxdlxrp gi0v7++iryTQQha25Hm1aF7M0/jS8Or3RlxdsfWhEsMDQgcbNsYLChe3+JInC6CZ a1aX3S1B6xGZl4WS4qW45SfXxtVXM7eZY4Ehlph/MKF6Zqoz1Mt6st76qNWNicHi KNg7soiSCczndKGYHrWubA0/xJH8WGy+0hkSn3Wor3MYisxWdhP7A+ot31qgM2O6 O5uUaZjra+7w0AhjIiAuPk9ulRCyPgL4LN8uMZaDM6YpZpo7pRIOOdO1ti41YetA vUacy/xEpVUrWLzoMstDkMw28nSuaRR9II1TRvbShBpomOIvE5z7P2tcvuxk760d i5x2U46eju4XjQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:11 2025 by rpki-client