This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json) Hash identifier: UcNnuESRzWif97AVs4sCT4pF9dlU8tRS6wH3hUdaGW0= Subject key identifier: 87:2D:F3:BB:05:58:96:82:30:66:FC:38:BB:3C:03:DE:58:8D:2D:1C Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45 Certificate serial: 019B78A3ECC101FBDA932FFDA5F48B8E6A86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft Manifest number: 12FC Signing time: Thu 01 Jan 2026 08:19:27 +0000 Manifest this update: Thu 01 Jan 2026 08:19:27 +0000 Manifest next update: Fri 02 Jan 2026 08:19:27 +0000 Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=) 2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: zs2pQpDNtRhYQYhxhEeq0FHwzA+GlosaVY3XXHzz8xY=) 3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:ec:c1:01:fb:da:93:2f:fd:a5:f4:8b:8e:6a:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45 Validity Not Before: Jan 1 08:19:27 2026 GMT Not After : Jan 2 08:19:27 2026 GMT Subject: CN=872df3bb055896823066fc38bb3c03de588d2d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:91:0b:87:56:3f:75:4c:59:e0:c4:94:c9: 37:85:37:2e:0d:e8:e8:68:d6:40:82:df:3f:4e:3b: a9:10:73:18:67:a6:73:f6:fe:98:57:1c:a1:19:fd: 64:1b:e0:45:99:1f:0f:14:47:1b:3a:f6:c6:54:7a: 44:44:ee:a3:f1:fa:34:43:78:64:41:f6:4f:e2:22: 00:e3:59:76:58:f9:28:b9:48:44:29:80:35:4f:7a: e8:af:06:30:20:3a:84:ca:d3:25:c8:62:5f:ab:77: 1b:d0:fa:07:d0:78:a6:99:33:b8:88:cf:a3:4b:ea: e6:00:26:21:f8:b1:53:87:a8:ba:35:70:34:99:d1: 79:be:96:31:70:a0:93:27:5d:1c:3d:4b:a0:f5:52: aa:d9:cc:b9:53:23:fe:20:a5:5a:2e:2b:52:a0:23: de:79:e0:f6:c7:be:54:0f:6d:08:26:10:9e:6d:11: 20:ec:76:d9:85:48:72:08:ef:5b:97:6f:85:06:e9: a2:83:aa:c6:3a:a5:17:73:61:19:fa:6a:c4:2a:6e: 8a:8e:6d:68:08:1a:aa:2d:53:ba:45:8c:ac:15:d6: a2:de:76:b7:f1:02:b1:36:ac:07:fa:fc:21:c6:04: 99:27:60:eb:93:83:a1:ad:ea:23:ba:c1:5e:84:4a: 49:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:2D:F3:BB:05:58:96:82:30:66:FC:38:BB:3C:03:DE:58:8D:2D:1C X509v3 Authority Key Identifier: keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ca:97:81:e7:d0:ef:d5:86:bc:93:f6:5d:c5:8a:70:db:0d: 8c:0b:97:2b:ad:63:35:0d:35:72:da:5c:fd:cb:d8:a3:3e:75: bb:46:ed:a8:11:ef:e4:8a:79:74:0c:5f:f8:72:7a:aa:7c:b2: 7f:50:41:34:c9:96:1d:0a:5e:a4:1d:e8:e5:c6:29:f5:06:1b: 62:0d:07:b5:84:d1:16:76:2a:c7:3b:f4:46:ae:99:f5:45:e9: 03:37:53:2d:a9:e8:25:04:e7:3f:bd:1c:51:2d:c5:a6:8d:65: b1:76:83:e5:f3:20:d3:1a:f7:3d:30:99:7e:16:62:9b:c7:31: 16:e9:09:cd:56:71:d5:60:2e:be:be:b0:89:23:ab:bf:31:77: c9:5c:b5:53:d5:3a:8f:78:07:91:50:1e:08:f7:2f:a9:25:95: 91:a0:dc:08:a7:dd:15:4b:b3:43:b1:32:ad:61:3a:d1:23:d9: 8d:2e:c7:b5:73:c6:36:1e:30:82:fe:e1:5c:95:4f:b7:d6:84: ea:1f:ee:a1:cc:08:4a:de:74:9b:02:4a:96:3b:79:54:cd:a5: 53:1b:2a:38:13:c9:43:97:7f:7f:24:ec:d2:65:02:ad:65:2e: 45:03:df:c9:a6:a3:52:0e:93:cf:ca:6b:d7:d0:19:12:9b:fb: 8c:93:0a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4o+zBAfvaky/9pfSLjmqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw MDhjNDUwHhcNMjYwMTAxMDgxOTI3WhcNMjYwMTAyMDgxOTI3WjAzMTEwLwYDVQQD Eyg4NzJkZjNiYjA1NTg5NjgyMzA2NmZjMzhiYjNjMDNkZTU4OGQyZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIeRC4dWP3VMWeDElMk3hTcuDejo aNZAgt8/TjupEHMYZ6Zz9v6YVxyhGf1kG+BFmR8PFEcbOvbGVHpERO6j8fo0Q3hk QfZP4iIA41l2WPkouUhEKYA1T3rorwYwIDqEytMlyGJfq3cb0PoH0HimmTO4iM+j S+rmACYh+LFTh6i6NXA0mdF5vpYxcKCTJ10cPUug9VKq2cy5UyP+IKVaLitSoCPe eeD2x75UD20IJhCebREg7HbZhUhyCO9bl2+FBumig6rGOqUXc2EZ+mrEKm6Kjm1o CBqqLVO6RYysFdai3na38QKxNqwH+vwhxgSZJ2Drk4OhreojusFehEpJSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIct87sFWJaCMGb8OLs8A95YjS0cMB8GA1UdIwQY MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct ODhhMGU0NTBhMTdiLzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMqXgefQ 79WGvJP2XcWKcNsNjAuXK61jNQ01ctpc/cvYoz51u0btqBHv5Ip5dAxf+HJ6qnyy f1BBNMmWHQpepB3o5cYp9QYbYg0HtYTRFnYqxzv0Rq6Z9UXpAzdTLanoJQTnP70c US3Fpo1lsXaD5fMg0xr3PTCZfhZim8cxFukJzVZx1WAuvr6wiSOrvzF3yVy1U9U6 j3gHkVAeCPcvqSWVkaDcCKfdFUuzQ7EyrWE60SPZjS7HtXPGNh4wgv7hXJVPt9aE 6h/uocwISt50mwJKljt5VM2lUxsqOBPJQ5d/fyTs0mUCrWUuRQPfyaajUg6Tz8pr 19AZEpv7jJMKrA== -----END CERTIFICATE-----Generated at Thu Jan 1 14:17:07 2026 by rpki-client