This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json) Hash identifier: zCh0FPw78O9MCvuaWHc8LwBIKwmpC9LTllQyyqe+MeU= Subject key identifier: BA:2F:43:34:2B:F3:39:D2:AA:AF:B9:66:0E:6A:D6:35:C0:E1:74:E4 Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Certificate serial: 019B3A90D277BFC0837E9B75ECD0EBDFC6E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 07:02:08 +0000 Manifest this update: Sat 20 Dec 2025 07:02:08 +0000 Manifest next update: Sun 21 Dec 2025 07:02:08 +0000 Files and hashes: 1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: JpJXXHymyPxsp1qE46NpDAau5CxC7R0H+jFobkwdnEw=) 2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=) 3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=) 4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=) 5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=) 6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=) 7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:d2:77:bf:c0:83:7e:9b:75:ec:d0:eb:df:c6:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Validity Not Before: Dec 20 07:02:08 2025 GMT Not After : Dec 21 07:02:08 2025 GMT Subject: CN=ba2f43342bf339d2aaafb9660e6ad635c0e174e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f8:2a:bf:b4:e4:74:3a:66:d1:4d:00:fd:b8: 5a:33:09:4b:fa:3f:2f:fb:73:13:d9:7d:6a:d9:b4: db:98:3f:65:1e:8a:ec:b6:ce:d8:3f:b1:f3:d9:95: 29:23:bc:c0:ee:4d:4d:bc:79:c9:1b:4d:f0:17:c6: b5:80:c7:5b:6e:6f:39:59:28:c1:18:41:e6:fa:36: 7a:57:52:c8:1f:0e:6d:eb:4a:6d:0a:60:17:a7:1e: c9:b5:2d:2d:39:e9:55:37:2a:b1:0d:6b:8d:c7:1f: f6:f6:0c:61:7d:50:2c:98:e4:e7:1d:e4:3a:b6:2b: ba:b1:b5:18:bb:5e:51:b8:ae:f6:58:7d:bf:08:b1: 43:4b:d5:d6:3a:48:d7:ff:eb:71:c0:a7:5c:b3:ee: 18:bb:72:ba:e5:c5:ac:71:23:2a:f7:55:d7:fd:fc: 90:c3:0b:81:a6:3f:a5:fb:41:eb:f6:d9:04:6f:87: 05:00:cb:f3:06:59:92:3d:e7:9f:01:28:0e:38:29: 44:86:a8:2e:97:ac:7a:3f:bc:bb:d6:7b:30:67:26: f8:8e:f9:83:dc:3d:29:6e:c2:1c:ed:04:f8:2f:91: b2:05:7a:a7:44:67:11:41:48:c5:d8:71:64:7f:90: bf:92:3d:fb:71:c1:85:10:d1:b3:51:3e:48:59:35: f8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2F:43:34:2B:F3:39:D2:AA:AF:B9:66:0E:6A:D6:35:C0:E1:74:E4 X509v3 Authority Key Identifier: keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:57:69:c8:2e:7f:52:f0:02:57:ac:d8:50:e1:b7:e4:ac:d1: 29:79:3c:16:d0:61:19:0b:ed:7d:92:d3:2d:b4:a0:c4:b7:0c: 33:31:3e:9a:77:9e:61:32:dc:89:e6:e0:63:8f:b0:4c:2c:80: bb:d0:c3:5e:29:7c:b2:0e:fb:c1:9c:90:39:55:a1:8d:91:46: 64:00:7c:ce:72:5c:22:8e:b0:34:60:5b:00:67:6f:64:77:72: 9a:0e:22:6b:8d:48:b9:4b:22:cb:d2:57:00:27:ea:97:84:88: 95:73:f6:c4:8b:7b:a2:78:36:c6:4c:bb:1e:e6:7f:05:55:49: 2f:45:d0:49:64:8b:ed:89:95:d1:4a:f6:08:17:1e:14:3f:71: f8:88:03:f0:3e:ec:da:55:4e:f9:6f:a2:da:e4:89:80:05:7e: 82:db:d9:c4:69:fd:dc:1d:50:fe:7f:95:48:f6:dd:24:62:18: 09:cd:8e:70:8d:cb:fe:d5:56:fb:d5:8a:87:a4:58:9a:7c:8f: 80:e4:db:be:9c:34:b0:ae:44:4c:66:b7:2c:c3:1b:fb:c3:be: 8c:d0:a1:62:98:85:96:29:ea:76:16:9a:49:5c:87:82:ba:c9: 37:89:b1:41:68:5f:93:fd:1d:02:da:30:b7:12:af:92:3d:6e: e1:4c:a5:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kNJ3v8CDfpt17NDr38bkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0 NTBhZWIwHhcNMjUxMjIwMDcwMjA4WhcNMjUxMjIxMDcwMjA4WjAzMTEwLwYDVQQD EyhiYTJmNDMzNDJiZjMzOWQyYWFhZmI5NjYwZTZhZDYzNWMwZTE3NGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/gqv7TkdDpm0U0A/bhaMwlL+j8v +3MT2X1q2bTbmD9lHorsts7YP7Hz2ZUpI7zA7k1NvHnJG03wF8a1gMdbbm85WSjB GEHm+jZ6V1LIHw5t60ptCmAXpx7JtS0tOelVNyqxDWuNxx/29gxhfVAsmOTnHeQ6 tiu6sbUYu15RuK72WH2/CLFDS9XWOkjX/+txwKdcs+4Yu3K65cWscSMq91XX/fyQ wwuBpj+l+0Hr9tkEb4cFAMvzBlmSPeefASgOOClEhqgul6x6P7y71nswZyb4jvmD 3D0pbsIc7QT4L5GyBXqnRGcRQUjF2HFkf5C/kj37ccGFENGzUT5IWTX4jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLovQzQr8znSqq+5Zg5q1jXA4XTkMB8GA1UdIwQY MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt YTRkYjM5NmM4OTg3LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3 LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAildpyC5/ UvACV6zYUOG35KzRKXk8FtBhGQvtfZLTLbSgxLcMMzE+mneeYTLciebgY4+wTCyA u9DDXil8sg77wZyQOVWhjZFGZAB8znJcIo6wNGBbAGdvZHdymg4ia41IuUsiy9JX ACfql4SIlXP2xIt7ong2xky7HuZ/BVVJL0XQSWSL7YmV0Ur2CBceFD9x+IgD8D7s 2lVO+W+i2uSJgAV+gtvZxGn93B1Q/n+VSPbdJGIYCc2OcI3L/tVW+9WKh6RYmnyP gOTbvpw0sK5ETGa3LMMb+8O+jNChYpiFlinqdhaaSVyHgrrJN4mxQWhfk/0dAtow txKvkj1u4Uyl9w== -----END CERTIFICATE-----Generated at Sat Dec 20 10:01:26 2025 by rpki-client