This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json) Hash identifier: xKlV3Blc8E5hR7RH5vv4TgELhC8TOMH9KyOcUpG12yU= Subject key identifier: 6D:A3:C8:43:6C:2C:45:9C:B4:C3:C1:60:75:C8:34:BB:CD:75:4B:D0 Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1 Certificate serial: 019B6542CA67D18BBFA4AA115FD8D2618C2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft Manifest number: 0D4A Signing time: Sun 28 Dec 2025 14:00:34 +0000 Manifest this update: Sun 28 Dec 2025 14:00:34 +0000 Manifest next update: Mon 29 Dec 2025 14:00:34 +0000 Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: p31kBDupdCjnQaTnf3pYfvh24cW9Fe+/LfFWB826Qkw=) 2: dBKhxuJSL53c965dxWDnC2hqswk.roa (hash: r+a1Cg72eHOGch8WK+OGEhGG31PFatTfiOwYRDsGjJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:42:ca:67:d1:8b:bf:a4:aa:11:5f:d8:d2:61:8c:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1 Validity Not Before: Dec 28 14:00:34 2025 GMT Not After : Dec 29 14:00:34 2025 GMT Subject: CN=6da3c8436c2c459cb4c3c16075c834bbcd754bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:82:4e:99:25:00:5b:63:26:e0:2d:3f:7b:58: f9:f5:3c:2d:09:fc:c4:03:10:72:fa:a7:11:bb:7a: 2a:e0:d3:d8:d6:41:84:11:5a:81:f9:ed:97:2f:c7: 29:b9:5f:f0:83:3c:23:84:d4:0f:f2:48:5a:3d:e2: 49:2d:5b:72:08:36:01:69:12:fb:2c:14:49:35:f9: b1:30:08:25:df:68:41:fa:1a:ee:64:38:8c:57:17: 43:a2:68:f3:56:f2:85:be:fb:46:fa:c6:38:80:14: 77:2d:f0:90:9d:ba:30:5f:f2:84:70:61:0e:dc:f7: fb:88:a6:72:b5:49:59:0d:7c:2f:e9:31:6d:91:da: da:96:b2:19:4a:0d:bc:de:74:6a:67:e2:7d:43:40: 13:af:20:c1:27:ee:a9:3e:1e:ae:5c:ca:20:ed:8a: 2d:43:80:5b:2d:cd:96:93:ae:6b:c8:ec:84:a4:34: db:7d:11:46:8c:43:69:d8:37:f6:00:2b:eb:64:48: 78:eb:f3:72:27:cb:4b:34:e5:b7:0f:52:63:6d:0d: b2:a8:e4:5f:36:2b:fa:3d:40:ab:d7:6b:17:89:c0: 2c:a0:fa:c5:ab:fa:f6:89:d1:77:b7:00:37:55:b3: 84:4f:9d:55:7c:3f:46:02:f9:8c:50:74:81:22:49: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A3:C8:43:6C:2C:45:9C:B4:C3:C1:60:75:C8:34:BB:CD:75:4B:D0 X509v3 Authority Key Identifier: keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:e6:da:98:39:34:0b:cc:91:94:fe:f3:03:d9:5c:a0:18:2b: e5:4a:31:fa:a3:35:79:7b:37:ef:c3:6e:38:fb:48:0c:30:f7: 14:ea:03:90:07:29:ba:1c:11:1b:e2:20:77:c9:f7:1a:c0:87: 0c:60:de:c4:f2:ea:69:df:07:f0:36:4a:54:66:fa:19:78:76: 76:ed:1e:0d:91:91:c3:3b:05:b0:9b:65:d2:d1:db:33:a4:2a: 00:8f:d5:e5:67:21:7d:a7:9a:e5:58:5e:17:a7:12:29:78:e6: c4:e1:fb:fb:b8:1b:1a:2d:d5:b8:e6:c5:6c:3e:5c:9e:8d:52: e0:26:8c:d4:9f:05:8e:de:4a:2a:b9:1e:d0:0f:4f:7f:4d:c2: b7:fe:fe:f0:c6:2d:d7:56:9f:fe:a0:57:0d:fe:78:f7:8d:ee: 7f:9f:76:bc:7f:6a:43:86:f8:ec:81:bb:ca:b6:dc:53:91:71: c8:b7:c3:d6:85:9c:3e:2d:43:11:9a:4d:c2:cd:fe:6f:84:47: 3f:89:b7:dc:7d:86:5d:a0:a6:00:8b:68:f8:4c:e9:d5:86:8d: 0c:43:69:5a:c1:d6:3f:54:14:6a:2b:e6:97:8d:d1:ec:9f:02: ee:ec:47:26:75:ca:52:d7:c6:21:24:02:75:67:49:0e:d1:0a: d6:d7:68:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlQspn0Yu/pKoRX9jSYYwtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll NWJmZDEwHhcNMjUxMjI4MTQwMDM0WhcNMjUxMjI5MTQwMDM0WjAzMTEwLwYDVQQD Eyg2ZGEzYzg0MzZjMmM0NTljYjRjM2MxNjA3NWM4MzRiYmNkNzU0YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYJOmSUAW2Mm4C0/e1j59TwtCfzE AxBy+qcRu3oq4NPY1kGEEVqB+e2XL8cpuV/wgzwjhNQP8khaPeJJLVtyCDYBaRL7 LBRJNfmxMAgl32hB+hruZDiMVxdDomjzVvKFvvtG+sY4gBR3LfCQnbowX/KEcGEO 3Pf7iKZytUlZDXwv6TFtkdralrIZSg283nRqZ+J9Q0ATryDBJ+6pPh6uXMog7Yot Q4BbLc2Wk65ryOyEpDTbfRFGjENp2Df2ACvrZEh46/NyJ8tLNOW3D1JjbQ2yqORf Niv6PUCr12sXicAsoPrFq/r2idF3twA3VbOET51VfD9GAvmMUHSBIknpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2jyENsLEWctMPBYHXINLvNdUvQMB8GA1UdIwQY MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4 LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVubamDk0 C8yRlP7zA9lcoBgr5Uox+qM1eXs378NuOPtIDDD3FOoDkAcpuhwRG+Igd8n3GsCH DGDexPLqad8H8DZKVGb6GXh2du0eDZGRwzsFsJtl0tHbM6QqAI/V5Wchfaea5Vhe F6cSKXjmxOH7+7gbGi3VuObFbD5cno1S4CaM1J8Fjt5KKrke0A9Pf03Ct/7+8MYt 11af/qBXDf54943uf592vH9qQ4b47IG7yrbcU5FxyLfD1oWcPi1DEZpNws3+b4RH P4m33H2GXaCmAIto+Ezp1YaNDENpWsHWP1QUaivml43R7J8C7uxHJnXKUtfGISQC dWdJDtEK1tdo4Q== -----END CERTIFICATE-----Generated at Sun Dec 28 20:16:43 2025 by rpki-client