This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json) Hash identifier: okfHTBXotH2qVaSAn6MZMhxsXTGSjHQu1xCfJk8rVd0= Subject key identifier: D4:C6:ED:54:DE:2A:B4:12:0C:6D:AE:80:A5:9D:04:BB:04:AF:A5:8B Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24 Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224 Certificate serial: 019B54F42F04E2925561D63D4D3F4F41C68E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft Manifest number: 0F1B Signing time: Thu 25 Dec 2025 10:00:47 +0000 Manifest this update: Thu 25 Dec 2025 10:00:47 +0000 Manifest next update: Fri 26 Dec 2025 10:00:47 +0000 Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: gbdny3qmsO2krlDS0+eVRbLnsNxKz5vhoue1VSoYu/U=) 2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:f4:2f:04:e2:92:55:61:d6:3d:4d:3f:4f:41:c6:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224 Validity Not Before: Dec 25 10:00:47 2025 GMT Not After : Dec 26 10:00:47 2025 GMT Subject: CN=d4c6ed54de2ab4120c6dae80a59d04bb04afa58b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2c:64:7a:02:c5:cb:68:8e:0b:ca:3e:83:c4: 1a:1e:2c:2e:e4:b2:54:02:7a:d7:ff:13:b5:aa:86: 5b:a8:5e:77:d0:c8:f2:e9:39:4e:8e:10:c4:87:4d: 1c:6c:44:0e:ab:60:18:e4:c7:52:7b:1e:96:5b:34: 2b:6a:cd:57:6f:ab:0c:c1:a7:71:52:f7:dd:14:8b: 84:32:a4:99:d4:f2:f7:a1:24:12:b8:d5:53:d4:14: 1c:1c:24:c9:74:00:2d:43:a5:70:8b:ca:05:d4:07: ac:61:c8:f3:06:0a:a2:5e:dc:a5:2a:de:dc:ac:4a: b8:94:75:bd:b0:48:14:80:42:fe:fd:59:ef:ae:a2: 05:82:10:04:77:72:a6:94:c2:49:53:8a:66:92:d1: a8:1e:26:54:e6:47:0c:e1:a1:d5:0e:3e:0a:60:c0: 66:12:83:5e:56:d5:9f:76:26:94:95:2a:91:1e:88: cf:81:79:35:ef:13:47:17:0b:d5:ef:25:b3:26:6c: 37:9c:61:94:39:db:cb:cf:86:74:06:44:ab:bd:fb: 8e:f5:67:ab:81:b7:6e:e6:2a:94:0e:48:96:ad:50: b8:7a:10:43:c4:59:e0:cc:9a:d9:b6:c8:1a:8f:bd: 8f:fd:c1:a8:52:20:1f:50:96:81:55:3c:1f:ee:92: 05:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C6:ED:54:DE:2A:B4:12:0C:6D:AE:80:A5:9D:04:BB:04:AF:A5:8B X509v3 Authority Key Identifier: keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:92:e7:6e:bc:70:72:27:23:2d:ed:eb:a8:eb:8d:2e:50:91: d0:be:d0:ca:a6:98:56:83:09:1e:52:81:e8:d8:02:2b:cc:ca: 30:12:4c:cb:44:5e:d1:7f:23:e0:06:30:21:a9:5f:4d:08:6c: f8:6b:77:0c:db:4d:8e:93:06:45:16:b9:08:d2:66:3a:e6:36: 21:fc:c7:01:cd:c4:1f:96:d7:9b:d2:d9:6d:9f:72:e4:d3:a7: 40:a8:9f:4d:b0:b1:89:01:7d:0c:e1:78:21:97:06:c5:09:d4: 3c:11:01:a7:a4:5f:35:f3:15:47:e8:87:c6:6d:77:25:c8:62: ab:01:ab:13:b4:41:b3:e8:fd:75:fa:1a:58:9d:b9:10:f2:3c: 29:c9:f1:94:9b:1f:1e:c9:2d:b1:8d:d2:bb:47:05:37:a6:dd: 18:d6:95:99:af:5d:b4:66:85:b8:50:07:dd:68:05:50:0b:3e: 4a:65:4b:d5:72:6f:89:03:63:82:ad:4c:cc:c1:30:3a:18:6d: cf:78:af:6d:ac:83:cb:b3:8f:23:72:58:13:4f:64:90:b3:26: 3d:73:e0:88:4c:2e:23:10:2f:e3:e8:12:88:0a:bf:c4:4d:1b: e1:1d:78:41:3e:73:18:2b:db:d1:06:af:5f:a7:a8:4c:33:6b: 41:56:6e:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtU9C8E4pJVYdY9TT9PQcaOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3N2JkMTBmN2Q5MDZjMTMxYzhjOWUyZmM3MzE2NDE2ZGY0 YWUyMjQwHhcNMjUxMjI1MTAwMDQ3WhcNMjUxMjI2MTAwMDQ3WjAzMTEwLwYDVQQD EyhkNGM2ZWQ1NGRlMmFiNDEyMGM2ZGFlODBhNTlkMDRiYjA0YWZhNThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArixkegLFy2iOC8o+g8QaHiwu5LJU AnrX/xO1qoZbqF530Mjy6TlOjhDEh00cbEQOq2AY5MdSex6WWzQras1Xb6sMwadx UvfdFIuEMqSZ1PL3oSQSuNVT1BQcHCTJdAAtQ6Vwi8oF1AesYcjzBgqiXtylKt7c rEq4lHW9sEgUgEL+/VnvrqIFghAEd3KmlMJJU4pmktGoHiZU5kcM4aHVDj4KYMBm EoNeVtWfdiaUlSqRHojPgXk17xNHFwvV7yWzJmw3nGGUOdvLz4Z0BkSrvfuO9Wer gbdu5iqUDkiWrVC4ehBDxFngzJrZtsgaj72P/cGoUiAfUJaBVTwf7pIFgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTG7VTeKrQSDG2ugKWdBLsEr6WLMB8GA1UdIwQY MBaAFDd70Q99kGwTHIyeL8cxZBbfSuIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzct NWE5YWM3ZjM5MDIzLzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzctNWE5YWM3ZjM5MDIz LzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZLnbrxw cicjLe3rqOuNLlCR0L7QyqaYVoMJHlKB6NgCK8zKMBJMy0Re0X8j4AYwIalfTQhs +Gt3DNtNjpMGRRa5CNJmOuY2IfzHAc3EH5bXm9LZbZ9y5NOnQKifTbCxiQF9DOF4 IZcGxQnUPBEBp6RfNfMVR+iHxm13JchiqwGrE7RBs+j9dfoaWJ25EPI8KcnxlJsf HsktsY3Su0cFN6bdGNaVma9dtGaFuFAH3WgFUAs+SmVL1XJviQNjgq1MzMEwOhht z3ivbayDy7OPI3JYE09kkLMmPXPgiEwuIxAv4+gSiAq/xE0b4R14QT5zGCvb0Qav X6eoTDNrQVZu1w== -----END CERTIFICATE-----Generated at Thu Dec 25 14:19:58 2025 by rpki-client