This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json) Hash identifier: 0g+8vVoyhcVWQOc5N41tXjy4OeaXqKWvH4SmMqG49Qk= Subject key identifier: D0:26:31:82:48:13:AA:46:02:67:5F:D1:30:6D:3C:EE:CB:79:F9:C1 Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Certificate serial: 019B4513686D52CCC6DA066685C2EB20BF86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft Manifest number: 0D17 Signing time: Mon 22 Dec 2025 08:00:58 +0000 Manifest this update: Mon 22 Dec 2025 08:00:58 +0000 Manifest next update: Tue 23 Dec 2025 08:00:58 +0000 Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: vRHLM7GcsTCOtiZmzwmRXlzTg7+A6Jt+GO820PBvq2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:68:6d:52:cc:c6:da:06:66:85:c2:eb:20:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93 Validity Not Before: Dec 22 08:00:58 2025 GMT Not After : Dec 23 08:00:58 2025 GMT Subject: CN=d02631824813aa4602675fd1306d3ceecb79f9c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:ce:86:4f:11:8e:26:85:80:06:32:8e:49: 8b:40:52:8e:ee:b0:3d:a9:fa:f8:a8:42:32:33:cd: a5:50:9c:b0:a5:45:b4:c6:29:61:49:2a:f8:e7:1e: a0:a1:52:97:aa:32:dd:15:15:53:10:80:e2:64:9d: bc:6e:2b:c4:62:65:7d:2c:5c:c1:3b:7c:6f:38:ca: 2d:45:3b:4e:10:d6:79:24:cd:61:24:77:a7:fc:5e: 0d:32:9b:6b:b4:3f:76:68:0b:4c:03:5b:fe:0a:8e: d1:31:e9:0e:a2:a4:3f:fc:c8:b2:c8:de:3a:90:f2: e3:a1:87:c7:e1:c0:a5:b1:5f:4d:5c:41:dc:22:9d: 83:70:d3:a7:16:57:67:35:15:c1:f3:cc:97:9a:da: 4a:6a:2e:f3:e6:39:62:22:65:98:8f:7c:07:77:20: 3f:ea:8e:db:37:9d:7a:45:5a:bb:19:65:2b:6b:64: 95:85:13:dc:7d:d5:b7:fb:08:29:bb:14:1f:72:1a: ca:39:f9:29:79:80:b9:13:45:3f:f4:2a:b8:ed:48: 36:48:91:89:f8:fe:76:25:39:73:e8:1a:d8:2a:7e: eb:f6:a1:38:c9:f8:49:64:d2:d4:97:71:95:de:80: d1:53:3b:c0:ec:13:e8:71:a5:c7:55:2a:d5:5f:c1: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:26:31:82:48:13:AA:46:02:67:5F:D1:30:6D:3C:EE:CB:79:F9:C1 X509v3 Authority Key Identifier: keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:77:cc:55:c0:7c:db:f5:41:33:6c:27:0a:7f:90:bd:d8:ec: 65:bc:81:e9:d0:21:5d:c6:bf:06:b7:62:31:f6:e8:97:41:3d: 78:04:c1:5d:a8:df:a9:c8:80:52:d8:bd:c3:08:af:76:b4:de: 51:8b:33:08:80:fd:49:f2:a8:16:9b:b1:44:88:40:54:c2:02: fe:9f:b6:2d:23:e3:1e:a8:40:93:25:4f:a0:9f:58:89:84:1e: 5f:bd:f2:7c:cc:81:12:dc:f0:5f:64:7e:d0:c0:67:c2:9a:8d: bd:42:38:5f:7d:e5:62:be:69:c4:b0:af:cb:c8:38:16:cc:44: 01:81:2f:af:66:fa:d5:f2:c5:e5:c5:b3:04:b3:b2:9b:1a:7d: 75:64:ff:b2:b8:94:e1:da:4c:72:fa:66:a4:72:2c:e6:32:fa: 5e:77:e6:c1:f8:8b:50:96:f4:42:2b:c4:c5:ce:c3:f7:74:a5: 3d:69:f1:8f:65:e0:2a:67:a7:5e:9c:b7:4a:72:f5:a7:4f:8e: c7:f6:bf:71:33:71:5f:03:35:ff:83:e3:0a:e2:89:29:f0:9f: 06:f2:2d:33:aa:39:f8:6b:35:2a:69:6b:34:f2:29:ac:63:3b: 1a:e6:d9:c3:ce:da:f8:10:6f:2e:39:e5:3a:5f:74:f2:f7:d0: d0:f2:82:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE2htUszG2gZmhcLrIL+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTBmNzFmYWE0M2M5YWY1YTBkY2Y2MDNmZDBiMmE3OGMy MjRhOTMwHhcNMjUxMjIyMDgwMDU4WhcNMjUxMjIzMDgwMDU4WjAzMTEwLwYDVQQD EyhkMDI2MzE4MjQ4MTNhYTQ2MDI2NzVmZDEzMDZkM2NlZWNiNzlmOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJnOhk8RjiaFgAYyjkmLQFKO7rA9 qfr4qEIyM82lUJywpUW0xilhSSr45x6goVKXqjLdFRVTEIDiZJ28bivEYmV9LFzB O3xvOMotRTtOENZ5JM1hJHen/F4NMptrtD92aAtMA1v+Co7RMekOoqQ//MiyyN46 kPLjoYfH4cClsV9NXEHcIp2DcNOnFldnNRXB88yXmtpKai7z5jliImWYj3wHdyA/ 6o7bN516RVq7GWUra2SVhRPcfdW3+wgpuxQfchrKOfkpeYC5E0U/9Cq47Ug2SJGJ +P52JTlz6BrYKn7r9qE4yfhJZNLUl3GV3oDRUzvA7BPocaXHVSrVX8Ew7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAmMYJIE6pGAmdf0TBtPO7LefnBMB8GA1UdIwQY MBaAFDeQ9x+qQ8mvWg3PYD/QsqeMIkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUt MDc3YjI5NzMwY2U2LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUtMDc3YjI5NzMwY2U2 LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnfMVcB8 2/VBM2wnCn+QvdjsZbyB6dAhXca/BrdiMfbol0E9eATBXajfqciAUti9wwivdrTe UYszCID9SfKoFpuxRIhAVMIC/p+2LSPjHqhAkyVPoJ9YiYQeX73yfMyBEtzwX2R+ 0MBnwpqNvUI4X33lYr5pxLCvy8g4FsxEAYEvr2b61fLF5cWzBLOymxp9dWT/sriU 4dpMcvpmpHIs5jL6XnfmwfiLUJb0QivExc7D93SlPWnxj2XgKmenXpy3SnL1p0+O x/a/cTNxXwM1/4PjCuKJKfCfBvItM6o5+Gs1KmlrNPIprGM7GubZw87a+BBvLjnl Ol908vfQ0PKC9w== -----END CERTIFICATE-----Generated at Mon Dec 22 13:58:08 2025 by rpki-client