This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json) Hash identifier: UtrM/+B+6BCtpbOAr329Em7h1E6+nXi1i4W97Cmr8kU= Subject key identifier: 0C:AC:0A:19:77:11:1A:12:F0:BB:4E:D6:DA:87:A2:37:02:2C:F1:92 Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Certificate serial: 019AF3890AB9F2047F683C29B80C299B61F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft Manifest number: 0E19 Signing time: Sat 06 Dec 2025 12:00:35 +0000 Manifest this update: Sat 06 Dec 2025 12:00:35 +0000 Manifest next update: Sun 07 Dec 2025 12:00:35 +0000 Files and hashes: 1: 58JHZYwChQxy5A0DEGSJKm5qgGY.roa (hash: xeMISReSvUH9kHX33+O3dRk8u4xWQHey/QlYUL5cwIs=) 2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: ZSfdl4k8Q99NKRU7kxxOWGZDznuAKTxls4p0zkYRbxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:0a:b9:f2:04:7f:68:3c:29:b8:0c:29:9b:61:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Validity Not Before: Dec 6 12:00:35 2025 GMT Not After : Dec 7 12:00:35 2025 GMT Subject: CN=0cac0a1977111a12f0bb4ed6da87a237022cf192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:5f:74:85:da:51:b7:96:c1:66:ab:75:ec: b2:98:ac:6a:8b:c5:bc:9d:30:6a:d7:31:57:0a:34: ef:04:0e:b4:96:14:4c:a4:ed:2c:b1:44:2f:7c:bd: ad:fd:44:2c:70:b3:fa:aa:87:04:a8:0c:04:e2:64: 29:19:8f:7c:a5:4c:77:d7:53:3c:bd:67:5a:26:c4: 6b:f7:f0:a9:cd:f7:ee:8e:c5:4c:b7:12:d8:92:ae: 11:24:27:a1:1f:c2:91:f2:f9:85:90:2c:66:5a:fa: 1c:b0:43:5d:ed:1c:69:77:e4:bf:7d:1d:03:ac:cb: a3:c2:62:00:7c:65:d5:d6:d0:90:af:a0:8b:12:de: 71:8e:06:a1:d5:50:f0:c9:f1:b6:52:6b:6e:b1:49: ff:24:d5:ad:81:5c:60:e6:3a:5c:6d:bc:40:c8:b3: 4a:89:06:31:e5:21:ac:28:be:15:8f:17:6e:68:be: 35:8f:2f:45:fb:d1:19:67:eb:a0:6f:9a:48:32:1a: 1e:79:c0:33:40:65:55:73:b9:60:3b:4a:cf:64:59: 77:c5:95:fa:5b:11:3b:e5:01:c4:94:3a:79:f9:36: b9:f8:1b:b6:0d:0c:21:a1:f9:27:90:7c:c8:5f:23: 37:57:8b:af:64:91:2f:5f:db:cc:92:45:0d:b6:8f: 75:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:AC:0A:19:77:11:1A:12:F0:BB:4E:D6:DA:87:A2:37:02:2C:F1:92 X509v3 Authority Key Identifier: keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:d9:fb:21:6d:f7:97:49:55:22:61:ca:7a:81:3d:7f:ed:6a: a4:9b:27:8a:79:64:99:d1:d8:49:e4:d5:f2:af:56:2a:7a:d1: 81:76:82:71:14:83:a6:d4:9b:fe:a7:f5:81:21:ee:0b:fe:5b: a4:e4:88:c6:b0:33:ab:d3:a1:76:ee:f7:8c:94:44:83:32:37: ef:75:1b:8d:50:ad:5e:89:09:58:51:c0:e3:c5:f0:11:31:c3: 38:8e:79:3d:18:02:50:9b:d4:08:f8:3b:a4:70:8c:81:b0:6e: ce:50:42:36:19:ac:cd:72:64:b3:aa:8b:41:5e:e7:29:e0:ab: 8a:5d:1d:9e:b9:d4:59:30:24:6d:b9:00:b4:24:2e:02:5c:75: 38:b4:66:d8:0f:59:0d:08:05:43:b2:c1:d9:f7:6b:cd:b5:7f: 66:02:8a:ae:26:69:24:e2:0b:fa:91:63:6b:51:d2:7c:70:09: 7f:25:f9:14:c4:08:a7:b1:de:f4:83:aa:f2:45:00:dd:07:fe: 01:a2:4f:72:9e:41:ac:4c:7d:a0:31:42:5d:b5:5f:68:fa:1e: 48:fe:2d:ee:85:f2:dc:18:88:ed:88:15:bd:60:ac:32:a6:c2: d0:38:44:02:98:3b:d4:de:21:f5:b0:c9:a2:ec:02:d3:b1:24: 3c:7c:1e:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziQq58gR/aDwpuAwpm2H3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1 Njc0YzUwHhcNMjUxMjA2MTIwMDM1WhcNMjUxMjA3MTIwMDM1WjAzMTEwLwYDVQQD EygwY2FjMGExOTc3MTExYTEyZjBiYjRlZDZkYTg3YTIzNzAyMmNmMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8dfdIXaUbeWwWardeyymKxqi8W8 nTBq1zFXCjTvBA60lhRMpO0ssUQvfL2t/UQscLP6qocEqAwE4mQpGY98pUx311M8 vWdaJsRr9/CpzffujsVMtxLYkq4RJCehH8KR8vmFkCxmWvocsENd7Rxpd+S/fR0D rMujwmIAfGXV1tCQr6CLEt5xjgah1VDwyfG2UmtusUn/JNWtgVxg5jpcbbxAyLNK iQYx5SGsKL4VjxduaL41jy9F+9EZZ+ugb5pIMhoeecAzQGVVc7lgO0rPZFl3xZX6 WxE75QHElDp5+Ta5+Bu2DQwhofknkHzIXyM3V4uvZJEvX9vMkkUNto915wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAysChl3ERoS8LtO1tqHojcCLPGSMB8GA1UdIwQY MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt MDc2ZTFkNzdhZWJlLzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENn7IW33 l0lVImHKeoE9f+1qpJsninlkmdHYSeTV8q9WKnrRgXaCcRSDptSb/qf1gSHuC/5b pOSIxrAzq9Ohdu73jJREgzI373UbjVCtXokJWFHA48XwETHDOI55PRgCUJvUCPg7 pHCMgbBuzlBCNhmszXJks6qLQV7nKeCril0dnrnUWTAkbbkAtCQuAlx1OLRm2A9Z DQgFQ7LB2fdrzbV/ZgKKriZpJOIL+pFja1HSfHAJfyX5FMQIp7He9IOq8kUA3Qf+ AaJPcp5BrEx9oDFCXbVfaPoeSP4t7oXy3BiI7YgVvWCsMqbC0DhEApg71N4h9bDJ ouwC07EkPHweog== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:56 2025 by rpki-client