This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json) Hash identifier: y8wDh+/rCtEWemqLTM9cjA9osZQHoQiu67jOwV6l6FA= Subject key identifier: 9C:63:D9:7E:4F:4A:6A:C4:7B:CC:C3:26:91:21:F5:3D:C0:8F:78:55 Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1 Certificate serial: 019B465D28D688F6F0F30234C59FEAB3DDB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft Manifest number: 0D3A Signing time: Mon 22 Dec 2025 14:01:08 +0000 Manifest this update: Mon 22 Dec 2025 14:01:08 +0000 Manifest next update: Tue 23 Dec 2025 14:01:08 +0000 Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: LhZvp2Avazl7N6/zk3lLYsURCHokmWddFpa2EO5sgPc=) 2: dBKhxuJSL53c965dxWDnC2hqswk.roa (hash: r+a1Cg72eHOGch8WK+OGEhGG31PFatTfiOwYRDsGjJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:28:d6:88:f6:f0:f3:02:34:c5:9f:ea:b3:dd:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1 Validity Not Before: Dec 22 14:01:08 2025 GMT Not After : Dec 23 14:01:08 2025 GMT Subject: CN=9c63d97e4f4a6ac47bccc3269121f53dc08f7855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b9:90:ac:36:5a:2e:0c:1c:10:9f:a6:b7:50: 1c:39:b9:76:24:75:66:97:bc:8e:e6:66:b8:72:b4: 08:e2:af:ee:95:69:0d:58:9f:24:9b:02:f1:a0:fc: c8:e5:92:53:98:1d:09:6d:1f:53:3d:55:4f:1b:1d: 3d:4a:c4:05:30:15:d4:93:0d:17:db:09:93:71:21: 99:28:62:c9:a1:67:6e:40:c9:05:1f:dd:81:b8:cf: 4b:f3:68:47:7c:2e:fe:a5:cc:35:bd:b3:b7:5c:05: b0:68:06:89:e0:b0:e2:00:c6:9e:1d:f3:d6:84:27: cb:d3:8a:7b:c9:c0:e6:72:62:49:c2:ee:ec:0f:79: da:22:d6:ac:e2:43:fd:96:f5:db:1c:6b:85:88:4d: 27:be:dc:a8:e3:27:ea:94:51:f8:4b:8d:1f:c1:90: b1:6b:88:ee:25:10:69:16:8a:c7:e8:9c:a1:f5:58: ea:74:c6:32:64:40:35:32:c2:62:ec:8c:fc:b1:fe: 80:98:2d:ae:b2:93:50:37:ed:6c:b4:68:a1:9f:92: 63:fa:e5:12:26:d8:74:73:e2:27:98:f4:f9:ad:d2: 7a:75:1a:6f:33:ec:e6:f5:10:1a:30:ce:c7:10:8c: b0:24:01:d3:2e:ac:b4:9e:c7:11:cf:16:7f:ea:34: af:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:63:D9:7E:4F:4A:6A:C4:7B:CC:C3:26:91:21:F5:3D:C0:8F:78:55 X509v3 Authority Key Identifier: keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:aa:87:d6:0b:9f:87:83:57:2a:cd:6d:8e:47:2a:d4:a4:12: a3:8b:3a:3f:6d:91:d1:98:99:4b:08:61:6a:f6:17:e5:c2:ff: 61:f5:df:fd:6a:af:28:5e:5a:73:b2:81:1d:c4:67:22:d2:cf: 03:df:9e:b9:a9:63:7a:92:dd:2e:65:e5:29:0e:a4:2b:8c:3c: 1c:6a:2e:ad:16:20:cf:e8:49:bc:42:fb:1f:18:fe:8b:44:99: 47:02:df:85:a7:15:70:2f:e1:37:76:d7:f5:3c:35:16:9f:74: 59:20:ea:c5:2a:7d:2d:9d:43:d5:50:4a:cd:cb:4b:79:c9:df: dd:26:4b:37:3a:74:b2:7e:e4:f2:40:ce:4f:a2:37:13:43:a4: 47:b8:df:71:2d:6c:99:ae:a9:56:3b:10:50:a2:6f:b5:11:0e: 3d:03:12:df:b4:a7:40:3d:70:63:95:0a:e0:80:99:64:57:48: 33:d7:25:45:d0:b2:03:cd:de:e4:b4:d5:a7:3d:61:16:33:46: 94:d1:93:cb:89:45:a0:0d:a1:54:65:90:bb:1d:8b:26:75:5f: ef:d5:5b:74:4b:c2:73:07:8c:ec:3b:dd:a6:30:cb:e5:f0:2a: 23:c4:79:08:c7:d5:1d:fa:d8:9d:bf:bb:f7:1f:17:57:92:49: 35:c2:54:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXSjWiPbw8wI0xZ/qs920MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll NWJmZDEwHhcNMjUxMjIyMTQwMTA4WhcNMjUxMjIzMTQwMTA4WjAzMTEwLwYDVQQD Eyg5YzYzZDk3ZTRmNGE2YWM0N2JjY2MzMjY5MTIxZjUzZGMwOGY3ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbmQrDZaLgwcEJ+mt1AcObl2JHVm l7yO5ma4crQI4q/ulWkNWJ8kmwLxoPzI5ZJTmB0JbR9TPVVPGx09SsQFMBXUkw0X 2wmTcSGZKGLJoWduQMkFH92BuM9L82hHfC7+pcw1vbO3XAWwaAaJ4LDiAMaeHfPW hCfL04p7ycDmcmJJwu7sD3naItas4kP9lvXbHGuFiE0nvtyo4yfqlFH4S40fwZCx a4juJRBpForH6Jyh9VjqdMYyZEA1MsJi7Iz8sf6AmC2uspNQN+1stGihn5Jj+uUS Jth0c+InmPT5rdJ6dRpvM+zm9RAaMM7HEIywJAHTLqy0nscRzxZ/6jSvWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxj2X5PSmrEe8zDJpEh9T3Aj3hVMB8GA1UdIwQY MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4 LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh6qH1guf h4NXKs1tjkcq1KQSo4s6P22R0ZiZSwhhavYX5cL/YfXf/WqvKF5ac7KBHcRnItLP A9+eualjepLdLmXlKQ6kK4w8HGourRYgz+hJvEL7Hxj+i0SZRwLfhacVcC/hN3bX 9Tw1Fp90WSDqxSp9LZ1D1VBKzctLecnf3SZLNzp0sn7k8kDOT6I3E0OkR7jfcS1s ma6pVjsQUKJvtREOPQMS37SnQD1wY5UK4ICZZFdIM9clRdCyA83e5LTVpz1hFjNG lNGTy4lFoA2hVGWQux2LJnVf79VbdEvCcweM7DvdpjDL5fAqI8R5CMfVHfrYnb+7 9x8XV5JJNcJUUw== -----END CERTIFICATE-----Generated at Mon Dec 22 20:42:14 2025 by rpki-client