This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json) Hash identifier: FpqjV9tAPRCr8JFyiQBySaasNDz370FN7noTowa2Me4= Subject key identifier: 3D:98:7D:42:86:92:37:5E:15:14:2F:90:FE:35:7E:57:FD:39:1B:0D Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d Certificate serial: 019B3343B5336CC501AC1D567B0748F754D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft Manifest number: 0916 Signing time: Thu 18 Dec 2025 21:00:33 +0000 Manifest this update: Thu 18 Dec 2025 21:00:33 +0000 Manifest next update: Fri 19 Dec 2025 21:00:33 +0000 Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: zRzf2uDx98jkvMgaeIP+a/jpJ1UbPyo28bsvWfCfw10=) 2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:43:b5:33:6c:c5:01:ac:1d:56:7b:07:48:f7:54:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d Validity Not Before: Dec 18 21:00:33 2025 GMT Not After : Dec 19 21:00:33 2025 GMT Subject: CN=3d987d428692375e15142f90fe357e57fd391b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:7d:be:56:5b:61:bb:bb:9d:c1:0f:67:7a:94: 90:ee:2a:8b:77:29:26:56:63:dd:80:9b:f6:f2:74: 8e:c5:01:d7:39:bc:6d:88:32:0e:8b:14:f7:c3:c1: 45:ed:14:1a:52:1f:86:3b:b8:ac:70:d3:5b:11:bc: 8d:dd:7f:28:7b:53:32:24:7b:59:ff:43:3d:7d:5c: 18:39:be:45:ae:9b:30:b6:ca:7d:6d:2e:c2:a7:2c: 09:9f:30:01:d1:e6:8c:c0:3f:27:89:30:c9:21:11: da:93:a7:85:1c:46:22:53:83:69:e4:e1:04:54:be: 3d:2c:1f:51:98:e2:aa:cd:38:81:83:34:2f:2d:11: c1:99:6b:9d:48:4f:88:11:b9:b9:56:b3:f8:af:be: 7f:7e:79:98:3c:d0:2e:71:3f:9c:31:98:af:89:78: 65:b0:90:49:a2:1a:b2:6e:75:35:1b:5a:3e:57:c2: 2b:7f:87:f0:af:f8:e3:40:92:e7:b1:6f:45:73:bc: be:00:66:2a:c1:dc:3e:de:02:52:de:0d:e8:5c:3f: e4:a2:9c:23:3c:06:dd:71:5a:cc:03:d9:52:31:ff: 22:94:6e:72:e9:68:f4:73:a8:ba:40:de:7f:67:37: 9c:2e:57:6d:38:62:f5:27:0b:33:4f:ba:32:3d:0d: d4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:98:7D:42:86:92:37:5E:15:14:2F:90:FE:35:7E:57:FD:39:1B:0D X509v3 Authority Key Identifier: keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:56:a9:e4:47:25:1c:b7:7f:eb:61:3d:50:db:3f:3c:21:fb: fe:2e:a5:7c:40:8f:3a:4c:c5:33:cd:9b:98:34:32:8c:7a:62: d1:c5:d6:3c:94:e4:08:cc:46:bd:72:e6:a0:43:a8:98:57:b2: e1:3e:2a:30:31:b3:15:1e:c4:4f:73:a8:b7:0b:aa:de:4e:2a: b2:44:73:ea:47:4d:88:0a:52:75:78:3a:91:cb:d2:96:93:ab: 2b:92:95:ac:80:5b:0d:bc:6a:a4:ff:b5:93:fd:1a:82:ed:f2: dc:91:75:41:c1:48:9f:fa:db:25:b3:60:a7:cd:e3:8f:04:9b: e3:11:69:24:1c:2e:2c:cd:73:df:4f:1b:38:f9:f6:f7:79:a3: c7:92:5f:92:ed:f5:b9:78:fa:cd:02:a1:c3:ab:1f:fb:2c:31: 20:b3:be:33:23:48:06:4f:aa:7a:0e:3e:02:2f:2c:5a:72:08: 1f:8f:90:75:28:41:4a:25:04:5f:e5:55:23:a9:7f:95:c6:86: 08:10:d8:81:b6:d7:66:fa:8d:d7:50:93:f6:47:59:5c:83:a8: 72:63:c5:fe:8b:3b:a5:bc:82:28:e1:34:34:5b:51:63:c0:46: 56:1f:2f:38:e8:be:44:0b:ff:a9:06:9e:0b:2d:3c:5b:d5:8b: f8:8b:7a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszQ7UzbMUBrB1WewdI91TZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZjRiOTFhM2ZmY2U5Zjk3NTA1YTczY2ZkNWU0YWQ0ZTM1 ZTA0MmQwHhcNMjUxMjE4MjEwMDMzWhcNMjUxMjE5MjEwMDMzWjAzMTEwLwYDVQQD EygzZDk4N2Q0Mjg2OTIzNzVlMTUxNDJmOTBmZTM1N2U1N2ZkMzkxYjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjn2+Vlthu7udwQ9nepSQ7iqLdykm VmPdgJv28nSOxQHXObxtiDIOixT3w8FF7RQaUh+GO7iscNNbEbyN3X8oe1MyJHtZ /0M9fVwYOb5Frpswtsp9bS7CpywJnzAB0eaMwD8niTDJIRHak6eFHEYiU4Np5OEE VL49LB9RmOKqzTiBgzQvLRHBmWudSE+IEbm5VrP4r75/fnmYPNAucT+cMZiviXhl sJBJohqybnU1G1o+V8Irf4fwr/jjQJLnsW9Fc7y+AGYqwdw+3gJS3g3oXD/kopwj PAbdcVrMA9lSMf8ilG5y6Wj0c6i6QN5/ZzecLldtOGL1JwszT7oyPQ3UCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2YfUKGkjdeFRQvkP41flf9ORsNMB8GA1UdIwQY MBaAFDf0uRo//On5dQWnPP1eStTjXgQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQt YWIyYmFmYTFhZTRkLzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQtYWIyYmFmYTFhZTRk LzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFap5Ecl HLd/62E9UNs/PCH7/i6lfECPOkzFM82bmDQyjHpi0cXWPJTkCMxGvXLmoEOomFey 4T4qMDGzFR7ET3Ootwuq3k4qskRz6kdNiApSdXg6kcvSlpOrK5KVrIBbDbxqpP+1 k/0agu3y3JF1QcFIn/rbJbNgp83jjwSb4xFpJBwuLM1z308bOPn293mjx5Jfku31 uXj6zQKhw6sf+ywxILO+MyNIBk+qeg4+Ai8sWnIIH4+QdShBSiUEX+VVI6l/lcaG CBDYgbbXZvqN11CT9kdZXIOocmPF/os7pbyCKOE0NFtRY8BGVh8vOOi+RAv/qQae Cy08W9WL+It6Ug== -----END CERTIFICATE-----Generated at Fri Dec 19 00:17:15 2025 by rpki-client