This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json) Hash identifier: FDfYwBkELcx7wzEmfNkarPVbJq7GmPOq3amzu4RX2NY= Subject key identifier: 57:17:AB:1D:60:4B:EE:2C:A6:85:FE:9D:82:35:D3:9D:43:10:0E:AD Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Certificate serial: 019B559A4C65D4B7206E0ED0E2197808A16C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft Manifest number: 17A2 Signing time: Thu 25 Dec 2025 13:02:13 +0000 Manifest this update: Thu 25 Dec 2025 13:02:13 +0000 Manifest next update: Fri 26 Dec 2025 13:02:13 +0000 Files and hashes: 1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: mGdaBO3rhvO87V5ibw2X5J+oW9nowffv0MxHlG82qhI=) 2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=) 3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=) 4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=) 5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=) 6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=) 7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 13:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:9a:4c:65:d4:b7:20:6e:0e:d0:e2:19:78:08:a1:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Validity Not Before: Dec 25 13:02:13 2025 GMT Not After : Dec 26 13:02:13 2025 GMT Subject: CN=5717ab1d604bee2ca685fe9d8235d39d43100ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:34:3c:24:b1:ac:37:1c:ec:48:08:af:67:e4: dd:b3:72:a1:53:bd:fd:e9:ad:4f:c9:5a:a8:de:f6: 02:0d:e7:03:ec:41:55:1d:21:ec:b7:9a:87:3b:b2: 7d:f2:22:29:4b:df:fd:0b:a2:cd:7c:45:05:5b:e8: b6:8d:31:4d:20:c1:c4:e5:0c:7a:67:41:d4:e0:66: 4a:0f:6b:1b:d6:7d:91:16:85:8e:95:8d:4c:bb:4a: 25:29:23:59:35:56:b5:88:48:53:7b:b8:ef:3d:73: b7:48:ec:97:65:38:7c:a6:df:21:10:70:f0:87:e4: 7d:ae:dd:04:b9:ef:0b:8e:7a:f1:24:2f:72:39:a7: 17:68:3c:fe:88:2d:85:8e:8f:fa:44:13:44:63:cf: ec:76:6d:de:a9:3f:ba:1f:63:45:24:f2:85:b8:f6: 32:7d:a5:49:b9:2b:9f:77:e2:c7:66:68:b9:f7:7b: 49:01:0f:fa:ba:89:7d:dd:ad:33:ba:0e:08:42:5c: 90:f9:e8:43:38:73:5c:4f:21:22:36:95:10:05:8e: 92:ce:c9:2e:f8:76:e3:3b:5f:e8:66:ea:e7:d0:b6: 98:7e:99:23:0e:1c:ca:e5:e1:24:85:e1:9e:4f:74: a7:98:c2:cd:af:cb:8d:74:80:92:0b:ca:8a:30:6e: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:17:AB:1D:60:4B:EE:2C:A6:85:FE:9D:82:35:D3:9D:43:10:0E:AD X509v3 Authority Key Identifier: keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:55:fe:9f:37:b1:4f:97:c1:3e:c5:79:99:5d:8e:12:b7:45: aa:a0:99:a4:09:53:a1:52:a3:22:b9:14:99:87:1f:6f:22:bf: cb:37:4f:29:f8:43:7e:38:18:0b:d8:f4:ac:87:54:51:64:66: 8f:7b:eb:e5:38:3b:99:a6:e2:c2:18:b1:b6:95:28:52:5f:00: 9f:f3:ae:88:95:4b:96:63:1f:c9:90:15:c7:de:fa:14:39:8f: de:a7:cd:22:f5:71:57:63:69:1e:e2:28:90:92:f7:08:ca:a7: d9:dc:2e:c0:b5:3c:c5:62:69:e1:af:cd:15:b3:c1:af:21:10: 7e:26:7e:f0:8b:e3:9f:76:b3:bb:52:47:4c:14:70:8a:de:01: da:99:51:a9:c7:8b:7e:56:85:35:10:6b:ae:87:34:62:c0:80: e8:a4:5d:d9:a2:c2:55:07:99:1d:95:63:b5:c5:8f:99:34:78: a0:0f:59:ca:04:73:5a:90:46:4a:99:1b:e2:4d:a4:17:8d:79: dc:4e:71:8d:0a:9a:b7:50:ad:df:39:d8:0b:e6:c8:a1:65:dc: 72:2a:96:d3:c0:70:62:1f:9d:d6:33:f4:0d:65:39:6b:b2:ce: e4:39:b2:eb:c9:ed:b7:34:9c:e6:55:44:fb:b0:55:82:27:cf: cd:13:26:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVmkxl1Lcgbg7Q4hl4CKFsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0 NTBhZWIwHhcNMjUxMjI1MTMwMjEzWhcNMjUxMjI2MTMwMjEzWjAzMTEwLwYDVQQD Eyg1NzE3YWIxZDYwNGJlZTJjYTY4NWZlOWQ4MjM1ZDM5ZDQzMTAwZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzQ8JLGsNxzsSAivZ+Tds3KhU739 6a1PyVqo3vYCDecD7EFVHSHst5qHO7J98iIpS9/9C6LNfEUFW+i2jTFNIMHE5Qx6 Z0HU4GZKD2sb1n2RFoWOlY1Mu0olKSNZNVa1iEhTe7jvPXO3SOyXZTh8pt8hEHDw h+R9rt0Eue8LjnrxJC9yOacXaDz+iC2Fjo/6RBNEY8/sdm3eqT+6H2NFJPKFuPYy faVJuSufd+LHZmi593tJAQ/6uol93a0zug4IQlyQ+ehDOHNcTyEiNpUQBY6Szsku +HbjO1/oZurn0LaYfpkjDhzK5eEkheGeT3SnmMLNr8uNdICSC8qKMG42+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcXqx1gS+4spoX+nYI1051DEA6tMB8GA1UdIwQY MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt YTRkYjM5NmM4OTg3LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3 LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqFX+nzex T5fBPsV5mV2OErdFqqCZpAlToVKjIrkUmYcfbyK/yzdPKfhDfjgYC9j0rIdUUWRm j3vr5Tg7mabiwhixtpUoUl8An/OuiJVLlmMfyZAVx976FDmP3qfNIvVxV2NpHuIo kJL3CMqn2dwuwLU8xWJp4a/NFbPBryEQfiZ+8Ivjn3azu1JHTBRwit4B2plRqceL flaFNRBrroc0YsCA6KRd2aLCVQeZHZVjtcWPmTR4oA9ZygRzWpBGSpkb4k2kF415 3E5xjQqat1Ct3znYC+bIoWXcciqW08BwYh+d1jP0DWU5a7LO5Dmy68nttzSc5lVE +7BVgifPzRMmOw== -----END CERTIFICATE-----Generated at Thu Dec 25 22:25:44 2025 by rpki-client