This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json) Hash identifier: EMzoIlmeGF3QojHubYWaA/klkzSGiYfbxcyhSyub19w= Subject key identifier: 41:7B:BC:E7:A1:EF:8C:FA:63:D6:CB:BD:1F:76:C3:D1:49:A9:1B:D0 Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004 Certificate serial: 019B3F113CF5091A63D0C40DEE46854ABF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft Manifest number: 16E4 Signing time: Sun 21 Dec 2025 04:00:52 +0000 Manifest this update: Sun 21 Dec 2025 04:00:52 +0000 Manifest next update: Mon 22 Dec 2025 04:00:52 +0000 Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: UQkqvoO5kLBARnpv5ZNLYislxxGxfg1KNXvs5NMvKSg=) 2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=) 3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:3c:f5:09:1a:63:d0:c4:0d:ee:46:85:4a:bf:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004 Validity Not Before: Dec 21 04:00:52 2025 GMT Not After : Dec 22 04:00:52 2025 GMT Subject: CN=417bbce7a1ef8cfa63d6cbbd1f76c3d149a91bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:e2:9d:e6:6d:c1:db:d2:2b:84:bd:9a:cb: 9a:2b:67:3a:b0:e5:f3:83:47:47:48:3d:ae:3e:64: 6b:e9:71:3e:83:b6:94:a5:4d:bb:ff:b7:f5:9e:53: fb:95:4e:d4:e8:64:68:9d:e3:22:a7:14:7a:29:a9: 08:f9:9c:ae:c7:bc:e9:05:57:d5:98:8d:a2:bb:79: 00:0f:9b:73:7d:28:7e:1c:49:4a:ab:57:1e:51:53: b4:03:b9:18:e6:0e:cd:1c:50:d8:24:1d:a6:5a:be: c7:1f:e8:be:26:28:27:4d:34:50:73:87:3e:be:60: d9:cf:05:47:b9:db:dc:c6:c4:09:96:12:95:11:90: 9c:bf:51:00:92:72:21:fd:42:3a:e4:9e:0d:4f:90: 97:81:8b:b7:bc:cf:8f:b3:bb:47:01:55:e2:7d:c7: e4:4a:34:3f:5f:aa:e6:72:ac:f7:bb:ce:b2:74:ba: 40:7c:9e:6b:ff:ee:1d:66:a6:55:b6:e4:05:2d:f2: 40:7b:99:37:90:b5:79:4a:80:12:67:0d:7f:a5:c7: 78:01:02:cf:9c:86:8c:1a:1b:35:ec:f8:48:7f:f7: 73:53:d4:87:a6:7d:27:23:1b:02:a6:3b:c7:98:8a: 78:f2:3b:ab:9b:1d:f4:ae:00:c3:9e:92:ff:d4:55: 8c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7B:BC:E7:A1:EF:8C:FA:63:D6:CB:BD:1F:76:C3:D1:49:A9:1B:D0 X509v3 Authority Key Identifier: keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d8:8f:a6:c9:2b:3c:a3:78:9c:3e:3d:b0:59:5b:68:83:c1: 62:fa:02:57:71:ef:0f:98:5a:2d:4e:8a:92:c4:af:a6:76:0d: 81:dd:55:8a:66:1f:ba:8a:b8:5e:b8:df:5c:0d:13:72:e4:05: d6:92:2d:bf:11:44:87:9f:60:68:25:fe:ce:0f:e3:c2:28:2a: aa:41:d3:51:2c:b9:2a:e6:d4:c2:42:ba:61:9b:18:ab:e7:4b: 13:f8:52:79:e9:4b:2d:a2:77:6c:3d:43:2c:f4:da:23:1b:6e: 7b:93:93:ee:c2:c6:59:dc:09:e7:69:5a:23:e6:11:8c:a1:ca: c7:0d:57:07:d8:bc:cb:c5:ce:47:41:1a:d2:85:58:93:63:bc: 1f:b5:bb:ca:71:1e:1a:fd:06:ec:c9:d8:4b:ed:39:31:2e:9a: 43:73:25:44:ee:49:d2:10:e0:68:83:14:08:73:73:27:fd:a8: 23:9e:2a:67:55:03:cf:bd:cf:18:0c:b8:51:70:68:f0:5d:9b: de:88:14:d4:25:6f:e2:dc:36:0e:3b:09:65:53:fa:f6:fc:4f: ee:59:01:cb:5d:5f:9c:d0:e6:02:20:ee:67:b0:98:cd:4e:67: 46:60:d6:5f:18:7c:02:41:10:b6:67:65:54:79:2b:68:5d:d6: 19:d9:48:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETz1CRpj0MQN7kaFSr+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz ODMwMDQwHhcNMjUxMjIxMDQwMDUyWhcNMjUxMjIyMDQwMDUyWjAzMTEwLwYDVQQD Eyg0MTdiYmNlN2ExZWY4Y2ZhNjNkNmNiYmQxZjc2YzNkMTQ5YTkxYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0jineZtwdvSK4S9msuaK2c6sOXz g0dHSD2uPmRr6XE+g7aUpU27/7f1nlP7lU7U6GRoneMipxR6KakI+Zyux7zpBVfV mI2iu3kAD5tzfSh+HElKq1ceUVO0A7kY5g7NHFDYJB2mWr7HH+i+JignTTRQc4c+ vmDZzwVHudvcxsQJlhKVEZCcv1EAknIh/UI65J4NT5CXgYu3vM+Ps7tHAVXifcfk SjQ/X6rmcqz3u86ydLpAfJ5r/+4dZqZVtuQFLfJAe5k3kLV5SoASZw1/pcd4AQLP nIaMGhs17PhIf/dzU9SHpn0nIxsCpjvHmIp48jurmx30rgDDnpL/1FWMBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEF7vOeh74z6Y9bLvR92w9FJqRvQMB8GA1UdIwQY MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNiPpskr PKN4nD49sFlbaIPBYvoCV3HvD5haLU6KksSvpnYNgd1VimYfuoq4XrjfXA0TcuQF 1pItvxFEh59gaCX+zg/jwigqqkHTUSy5KubUwkK6YZsYq+dLE/hSeelLLaJ3bD1D LPTaIxtue5OT7sLGWdwJ52laI+YRjKHKxw1XB9i8y8XOR0Ea0oVYk2O8H7W7ynEe Gv0G7MnYS+05MS6aQ3MlRO5J0hDgaIMUCHNzJ/2oI54qZ1UDz73PGAy4UXBo8F2b 3ogU1CVv4tw2DjsJZVP69vxP7lkBy11fnNDmAiDuZ7CYzU5nRmDWXxh8AkEQtmdl VHkraF3WGdlIuA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:52:43 2025 by rpki-client