This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json) Hash identifier: GLkgiGNYB1ZmlixPZ1mHKPkv13HYmytf96jyH0duVZo= Subject key identifier: 7A:E2:1F:BC:12:EB:99:B2:B2:9F:20:D1:8E:14:34:31:0E:34:C9:9F Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Certificate serial: 019B45B88F1DF6F16040C001F5C51E8AA53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft Manifest number: 1793 Signing time: Mon 22 Dec 2025 11:01:21 +0000 Manifest this update: Mon 22 Dec 2025 11:01:21 +0000 Manifest next update: Tue 23 Dec 2025 11:01:21 +0000 Files and hashes: 1: 1E7Gf5u3eRF1Aunlmjbqz4Acde0.roa (hash: WXQHP0KJmxLNS7N2wK9mSrPQyTyTx5Hc/Dr9c9sHehU=) 2: 6W7MdARlMXl2B1LJ-tkqoS6g0qI.asa (hash: U8Fk2jP4GFzteMdfb1HCuZ2Ov9sGcKKPsVwSh3++h9Q=) 3: 6m1Zr_a79xM5w_A5UxoM7pPydiY.asa (hash: mwruC/EYleNBqGOjKp7xRfqBPuAa14ybRpQxed0X5Uo=) 4: E41q-p3jPlyQ_c_xxbExKmLEhsA.roa (hash: viuUWFSJw7nloUiLYZrm+xh5LFHH1990i6bBiRJWdNg=) 5: cCtlVAhKMx_L9MmcKQdhGeXgd7A.roa (hash: Q1si7hVwLSegXDVNPXeui2AkeRgS0Epsk3MKoikvRr4=) 6: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: GwezTHbTkiHS/KyTYBk8GxfnRdxqbUktHl4TOEhLBO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:b8:8f:1d:f6:f1:60:40:c0:01:f5:c5:1e:8a:a5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45 Validity Not Before: Dec 22 11:01:21 2025 GMT Not After : Dec 23 11:01:21 2025 GMT Subject: CN=7ae21fbc12eb99b2b29f20d18e1434310e34c99f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:eb:3f:bd:67:fb:7f:23:71:e1:6b:36:31:31: 01:b1:ad:79:66:f9:6d:18:95:c2:ae:19:38:c2:f8: 0f:6e:27:92:5f:6b:b9:da:82:91:93:38:37:ef:61: d5:ff:d5:30:86:4b:83:81:66:f9:62:6f:b7:28:bf: f0:b0:c0:9f:17:5e:d6:5f:ab:16:2d:3b:86:01:22: 30:d5:df:14:58:dc:a0:8f:70:cf:d6:c8:e8:05:5a: 0f:c8:10:5f:de:c1:a9:bd:b8:4b:d8:cf:c1:6e:f3: cf:5d:bc:62:2f:71:9a:16:b1:62:0d:ca:82:a1:92: b6:1c:76:da:2e:34:d4:51:72:c6:4d:2f:38:d5:38: a3:91:5f:9b:1a:33:8a:45:b6:89:81:b4:60:d5:fd: e5:fd:a9:66:fb:dc:6d:58:4d:16:4d:d3:04:13:7c: 8c:dc:1f:59:22:78:4e:f1:d6:53:79:78:91:30:04: e9:8a:a3:31:fd:92:55:49:35:36:ce:d0:a5:9b:3b: a7:93:19:94:c6:b7:23:90:e3:9a:8f:30:9d:c5:07: 59:2d:c5:35:ea:7a:86:f5:cb:c9:04:7a:5f:e9:e1: 84:0d:f1:86:44:e7:6d:4f:68:3f:4b:f0:8b:92:0d: 23:d1:12:d5:6d:1f:a6:51:92:39:b8:e9:d6:51:61: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E2:1F:BC:12:EB:99:B2:B2:9F:20:D1:8E:14:34:31:0E:34:C9:9F X509v3 Authority Key Identifier: keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:c9:c7:2a:1e:88:76:3d:ea:f0:e4:11:c0:2f:3c:8a:31:77: ad:8f:4d:87:4f:9a:a1:df:4e:12:f0:7d:51:31:4a:41:bb:95: 89:0c:4f:50:5e:35:c8:9f:81:12:91:1e:31:6a:8e:fd:3a:f0: ca:00:28:82:32:00:1f:89:d8:16:b3:46:a9:35:1a:4d:32:a9: 53:fe:56:33:30:55:9e:95:00:52:d0:f3:dc:7b:58:4f:36:34: 95:a7:63:6e:8c:82:f0:30:f7:db:5e:6b:63:71:4d:eb:68:2a: 02:f9:b8:5a:77:e2:46:3f:4a:3f:35:54:40:dc:6d:3d:a9:8e: df:57:23:9d:39:69:29:de:63:98:19:7d:6e:a2:6e:69:99:3e: 3f:12:08:0d:b1:52:ee:42:cf:c5:b7:0c:c2:91:51:b2:a7:18: af:c9:52:62:e4:ce:a6:42:87:b9:85:4b:85:d3:4a:fd:86:5b: 46:6b:c2:2d:82:c7:93:cd:1b:e6:d7:73:b4:7e:8f:41:cd:f6: 7a:fe:b8:cf:96:a6:f1:d4:a0:5e:a0:ea:63:04:6a:e0:37:c3: 6a:4b:35:98:bf:1a:f4:50:28:b7:c7:eb:dc:dd:a8:6e:5a:2f: e2:f3:9b:95:63:46:4b:63:0b:5d:4d:1b:01:12:3c:49:1a:a7: 8d:ad:b2:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFuI8d9vFgQMAB9cUeiqU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj MzBlNDUwHhcNMjUxMjIyMTEwMTIxWhcNMjUxMjIzMTEwMTIxWjAzMTEwLwYDVQQD Eyg3YWUyMWZiYzEyZWI5OWIyYjI5ZjIwZDE4ZTE0MzQzMTBlMzRjOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4+s/vWf7fyNx4Ws2MTEBsa15Zvlt GJXCrhk4wvgPbieSX2u52oKRkzg372HV/9UwhkuDgWb5Ym+3KL/wsMCfF17WX6sW LTuGASIw1d8UWNygj3DP1sjoBVoPyBBf3sGpvbhL2M/BbvPPXbxiL3GaFrFiDcqC oZK2HHbaLjTUUXLGTS841TijkV+bGjOKRbaJgbRg1f3l/alm+9xtWE0WTdMEE3yM 3B9ZInhO8dZTeXiRMATpiqMx/ZJVSTU2ztClmzunkxmUxrcjkOOajzCdxQdZLcU1 6nqG9cvJBHpf6eGEDfGGROdtT2g/S/CLkg0j0RLVbR+mUZI5uOnWUWGwXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHriH7wS65mysp8g0Y4UNDEONMmfMB8GA1UdIwQY MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8nHKh6I dj3q8OQRwC88ijF3rY9Nh0+aod9OEvB9UTFKQbuViQxPUF41yJ+BEpEeMWqO/Trw ygAogjIAH4nYFrNGqTUaTTKpU/5WMzBVnpUAUtDz3HtYTzY0ladjboyC8DD3215r Y3FN62gqAvm4WnfiRj9KPzVUQNxtPamO31cjnTlpKd5jmBl9bqJuaZk+PxIIDbFS 7kLPxbcMwpFRsqcYr8lSYuTOpkKHuYVLhdNK/YZbRmvCLYLHk80b5tdztH6PQc32 ev64z5am8dSgXqDqYwRq4DfDaks1mL8a9FAot8fr3N2oblov4vOblWNGS2MLXU0b ARI8SRqnja2ymw== -----END CERTIFICATE-----Generated at Mon Dec 22 14:30:25 2025 by rpki-client