This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json) Hash identifier: dsdltgxNyGwSWzGmCJEg6yv1gUfaglBu+dshGgnrXdw= Subject key identifier: 92:DD:4B:51:74:F3:FE:52:F4:BB:91:2A:92:F4:5B:B7:7D:B5:81:92 Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Certificate serial: 019B3E6C6D6652608C622406E54F2E4E2AA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft Manifest number: 0537 Signing time: Sun 21 Dec 2025 01:00:51 +0000 Manifest this update: Sun 21 Dec 2025 01:00:51 +0000 Manifest next update: Mon 22 Dec 2025 01:00:51 +0000 Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=) 2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: enJFS8ORlWNyCBqeFz/uh4tb5SaYYAoxYK39Snta/Jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:6d:66:52:60:8c:62:24:06:e5:4f:2e:4e:2a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Validity Not Before: Dec 21 01:00:51 2025 GMT Not After : Dec 22 01:00:51 2025 GMT Subject: CN=92dd4b5174f3fe52f4bb912a92f45bb77db58192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:59:85:db:ce:3a:81:34:95:a4:24:14:ce:6c: 37:96:48:a9:c9:0d:c2:bb:8b:27:a7:b2:d3:d6:52: 2d:54:28:18:24:12:0d:f2:f9:74:84:cf:14:13:ea: 06:4a:02:12:95:34:b2:91:f3:2c:66:d6:d8:6d:e1: cb:98:3d:82:a0:63:4b:4c:f8:fc:db:5e:e5:12:b1: f9:3a:f0:33:03:29:f5:8d:7c:8d:e4:50:28:d2:fd: df:6b:af:c9:04:75:03:f1:fc:6d:01:be:62:28:65: 2e:5a:2d:85:81:a0:c1:48:b1:21:91:59:28:de:36: d5:a8:e5:0d:cb:bf:02:63:85:c0:81:a0:04:f8:95: b8:af:ff:4c:85:36:56:ea:a1:a1:8e:01:4d:52:49: 52:8d:3c:90:8d:8c:15:e9:c7:81:97:f5:20:ea:ad: 79:d1:89:26:49:ac:7e:c4:e8:ac:08:39:d2:58:91: ac:84:08:54:69:0b:93:fd:cb:8a:88:80:7b:ff:a9: e4:d6:e7:a7:95:fd:49:58:9d:80:51:13:7f:74:eb: 31:6f:14:a3:41:aa:ac:72:25:1c:a8:05:7f:55:1e: 34:e2:38:47:fb:65:4c:8d:57:88:cc:f3:a0:62:16: 66:f5:ee:1d:01:a4:1d:6d:0e:2c:db:ec:70:86:12: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:DD:4B:51:74:F3:FE:52:F4:BB:91:2A:92:F4:5B:B7:7D:B5:81:92 X509v3 Authority Key Identifier: keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:31:6d:45:25:be:b1:2e:87:6c:ea:8b:f5:6b:81:8f:e1:15: 5c:b3:66:5f:21:b7:ea:80:1f:73:b3:f2:38:fa:3d:8a:cc:c1: bb:94:3b:56:64:8f:95:1b:94:88:7d:89:1d:ae:01:9c:ae:6e: 53:46:06:f3:de:a2:9a:2a:7a:81:2a:c7:ba:6e:7c:01:a5:18: fa:91:6a:5a:61:c5:b8:62:18:77:27:77:8d:24:77:63:e6:02: 08:ec:a7:94:fe:93:8f:c3:63:3b:30:80:7b:3a:0a:ec:d8:0a: 76:ec:54:0f:9c:b8:cc:38:cb:ae:af:4e:47:0c:38:0b:76:d3: 5f:33:82:65:63:a5:20:1c:a1:4f:be:47:35:52:1f:76:2b:b6: 8e:86:b3:43:bc:71:ba:02:f2:78:bc:1a:c3:cb:a1:3f:67:96: b9:51:f9:e2:e3:a7:8d:a3:1a:c9:e4:c5:0e:5a:62:d9:b5:ed: 64:b6:2d:64:c0:b2:ca:02:47:10:e9:29:e9:45:98:7a:a7:8c: aa:59:d2:ea:cb:27:df:67:29:a5:6f:85:11:11:08:2d:7d:54: d3:47:7f:50:7f:f6:dd:63:79:32:c0:6d:6f:ae:dc:42:f4:ac: 53:2e:47:e3:1e:7c:13:de:86:43:93:23:55:45:c7:c0:90:ee: 0b:a5:46:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bG1mUmCMYiQG5U8uTiqnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx YTVmOGIwHhcNMjUxMjIxMDEwMDUxWhcNMjUxMjIyMDEwMDUxWjAzMTEwLwYDVQQD Eyg5MmRkNGI1MTc0ZjNmZTUyZjRiYjkxMmE5MmY0NWJiNzdkYjU4MTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lmF2846gTSVpCQUzmw3lkipyQ3C u4snp7LT1lItVCgYJBIN8vl0hM8UE+oGSgISlTSykfMsZtbYbeHLmD2CoGNLTPj8 217lErH5OvAzAyn1jXyN5FAo0v3fa6/JBHUD8fxtAb5iKGUuWi2FgaDBSLEhkVko 3jbVqOUNy78CY4XAgaAE+JW4r/9MhTZW6qGhjgFNUklSjTyQjYwV6ceBl/Ug6q15 0YkmSax+xOisCDnSWJGshAhUaQuT/cuKiIB7/6nk1uenlf1JWJ2AURN/dOsxbxSj QaqsciUcqAV/VR404jhH+2VMjVeIzPOgYhZm9e4dAaQdbQ4s2+xwhhJWuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLdS1F08/5S9LuRKpL0W7d9tYGSMB8GA1UdIwQY MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjFtRSW+ sS6HbOqL9WuBj+EVXLNmXyG36oAfc7PyOPo9iszBu5Q7VmSPlRuUiH2JHa4BnK5u U0YG896imip6gSrHum58AaUY+pFqWmHFuGIYdyd3jSR3Y+YCCOynlP6Tj8NjOzCA ezoK7NgKduxUD5y4zDjLrq9ORww4C3bTXzOCZWOlIByhT75HNVIfdiu2joazQ7xx ugLyeLwaw8uhP2eWuVH54uOnjaMayeTFDlpi2bXtZLYtZMCyygJHEOkp6UWYeqeM qlnS6ssn32cppW+FEREILX1U00d/UH/23WN5MsBtb67cQvSsUy5H4x58E96GQ5Mj VUXHwJDuC6VG1w== -----END CERTIFICATE-----Generated at Sun Dec 21 06:55:12 2025 by rpki-client