This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft File: N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json) Hash identifier: OY28GyzbaXCtI0P2HIXnAM0yUIDrLYnfCWu6tkBYzs0= Subject key identifier: E9:40:34:14:F0:F7:A7:DA:5E:19:01:72:4E:A7:B6:87:F4:C9:C2:3F Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5 Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5 Certificate serial: 019B3CB5488EB17B4AFFBFC0C1B450DCB01D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft Manifest number: 0763 Signing time: Sat 20 Dec 2025 17:01:12 +0000 Manifest this update: Sat 20 Dec 2025 17:01:12 +0000 Manifest next update: Sun 21 Dec 2025 17:01:12 +0000 Files and hashes: 1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: 5PC0uPswf7R9rwZSDfcAs5UJfswUu2WGXZ5ZrZAWtJI=) 2: vUnbbu8skzS26iiXfWJzScSr25E.roa (hash: ImAxTHT0Xe4VXBRsFAB4OoUTkv7HmDfrBn2Cev7GldU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:48:8e:b1:7b:4a:ff:bf:c0:c1:b4:50:dc:b0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5 Validity Not Before: Dec 20 17:01:12 2025 GMT Not After : Dec 21 17:01:12 2025 GMT Subject: CN=e9403414f0f7a7da5e1901724ea7b687f4c9c23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:b9:6b:31:21:48:4e:6f:bc:b2:6b:cc:c5: d0:ac:8c:e2:53:e8:24:ea:71:bf:6f:fa:b3:d2:70: c2:72:38:f3:16:c5:ca:03:8b:f4:49:c5:63:53:de: 35:11:67:fe:51:85:38:11:1a:a2:76:4b:d5:28:65: bb:56:d1:cd:b7:32:f0:3a:6e:43:54:46:d8:74:13: fb:f0:ca:7f:28:7a:14:29:52:ff:54:2d:96:2c:a7: f2:24:0f:2b:94:9b:02:e8:52:0c:ad:23:28:9a:fd: 02:66:0c:9b:02:0f:97:21:8e:5b:0f:07:04:aa:42: 95:89:e6:8c:7f:0e:2e:c5:66:d9:6c:6a:f9:2e:e2: 3b:c5:af:af:b4:09:8d:26:6d:e7:59:50:61:62:37: 6f:42:da:2f:12:c4:0b:bf:19:ab:30:17:e3:09:62: 01:fd:c2:85:5a:6a:fd:76:a0:48:2e:cb:36:18:ff: b0:83:c0:73:2b:57:27:d9:69:7f:33:65:7f:a0:cc: 74:38:aa:6d:65:e1:8e:12:a0:dc:62:26:3f:f7:64: e0:08:8e:75:8c:d9:e7:20:5d:73:57:bb:ec:62:0b: d8:a6:00:06:89:9c:98:28:74:c4:cb:90:05:59:1d: a6:5b:ad:0a:82:48:94:a7:b0:49:4f:89:22:15:62: 6e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:40:34:14:F0:F7:A7:DA:5E:19:01:72:4E:A7:B6:87:F4:C9:C2:3F X509v3 Authority Key Identifier: keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:98:02:ea:f1:c3:55:90:2b:1a:db:94:55:41:f1:c5:25:89: d6:42:dc:8c:8b:b6:cc:b8:b0:7c:16:e1:bd:36:cf:75:32:b7: 02:ae:ef:e5:23:a3:c8:fe:05:ea:24:bf:95:cf:db:80:ca:ac: db:54:c1:0f:d4:2e:4a:94:bd:11:99:11:6f:96:9c:ed:7d:e7: e0:46:8f:0a:ee:16:17:3a:86:4c:5c:84:f7:52:c7:59:69:cb: e2:d0:e3:09:a7:8f:2a:71:30:cf:35:ab:86:fe:c9:b1:1c:18: b4:44:3c:c4:93:6b:3d:e2:0d:f0:e4:9f:10:9e:d0:a7:2f:20: a2:85:44:3a:9b:ec:a0:46:1d:20:99:21:9a:83:09:fd:e6:15: b9:72:06:40:b2:bc:de:c2:2e:0d:79:a9:b4:e9:b6:84:7d:a3: 3a:5c:70:15:49:82:a7:78:73:ac:2a:e4:36:2d:d0:99:f0:e3: 4b:bf:72:11:d3:84:76:e5:d5:45:65:b4:e0:7c:58:89:2f:bb: e4:4d:b8:8c:3b:6c:f5:b1:d2:64:9d:d0:e1:95:9f:6b:db:b9: 27:50:5c:b7:ff:95:9a:b2:94:14:d1:de:38:bc:f2:ce:35:e2: 4f:6c:3b:09:54:4f:30:1a:9d:da:49:1b:6f:21:48:b7:33:48: 29:bf:bc:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tUiOsXtK/7/AwbRQ3LAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTk1OTFkNDg1ZmMwZDA5MDJhODliZTg0MThhM2JiMTI3 NTA2YTUwHhcNMjUxMjIwMTcwMTEyWhcNMjUxMjIxMTcwMTEyWjAzMTEwLwYDVQQD EyhlOTQwMzQxNGYwZjdhN2RhNWUxOTAxNzI0ZWE3YjY4N2Y0YzljMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwi5azEhSE5vvLJrzMXQrIziU+gk 6nG/b/qz0nDCcjjzFsXKA4v0ScVjU941EWf+UYU4ERqidkvVKGW7VtHNtzLwOm5D VEbYdBP78Mp/KHoUKVL/VC2WLKfyJA8rlJsC6FIMrSMomv0CZgybAg+XIY5bDwcE qkKVieaMfw4uxWbZbGr5LuI7xa+vtAmNJm3nWVBhYjdvQtovEsQLvxmrMBfjCWIB /cKFWmr9dqBILss2GP+wg8BzK1cn2Wl/M2V/oMx0OKptZeGOEqDcYiY/92TgCI51 jNnnIF1zV7vsYgvYpgAGiZyYKHTEy5AFWR2mW60KgkiUp7BJT4kiFWJu8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlANBTw96faXhkBck6ntof0ycI/MB8GA1UdIwQY MBaAFDepWR1IX8DQkCqJvoQYo7sSdQalMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGIt YzU0YWY5NjBlZjE4LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC85Njc4ZjktOWRmZS00YjM5LWE4MGItYzU0YWY5NjBlZjE4 LzEvTjZsWkhVaGZ3TkNRS29tLWhCaWp1eEoxQnFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5JgC6vHD VZArGtuUVUHxxSWJ1kLcjIu2zLiwfBbhvTbPdTK3Aq7v5SOjyP4F6iS/lc/bgMqs 21TBD9QuSpS9EZkRb5ac7X3n4EaPCu4WFzqGTFyE91LHWWnL4tDjCaePKnEwzzWr hv7JsRwYtEQ8xJNrPeIN8OSfEJ7Qpy8gooVEOpvsoEYdIJkhmoMJ/eYVuXIGQLK8 3sIuDXmptOm2hH2jOlxwFUmCp3hzrCrkNi3QmfDjS79yEdOEduXVRWW04HxYiS+7 5E24jDts9bHSZJ3Q4ZWfa9u5J1Bct/+VmrKUFNHeOLzyzjXiT2w7CVRPMBqd2kkb byFItzNIKb+8Sg== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:31 2025 by rpki-client