This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft File: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json) Hash identifier: DwuF5EsLDQJOq7Arj7jDckpEKt9rvuPEPdNjLSKUDak= Subject key identifier: CD:96:B1:41:42:57:35:CD:D5:72:85:F7:4D:EB:8C:9F:0A:D3:5C:99 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019B3BA228BB6ECB18587A78C2437F3677FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft Manifest number: 31 Signing time: Sat 20 Dec 2025 12:00:41 +0000 Manifest this update: Sat 20 Dec 2025 12:00:41 +0000 Manifest next update: Sun 21 Dec 2025 12:00:41 +0000 Files and hashes: 1: UeQMQKBSHdroxIS0vXmTkkgb_kw.roa (hash: 3drND/9p9/h8FwC5YZRmAUwNKn5zQHLox5Z2I6On0f4=) 2: VMmg_hoECr2h5_VWWytxSyvcL-Q.roa (hash: SkKfiuZXr1b9jgYau6J5ZFLluNCuffm/Ryzfe71CDeo=) 3: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: a49Z2bnolqPgy0kPWPYBukqcxi5lOtCrF3GEX9stkks=) 4: yhhCzt4IpqhONpxIRsB9W6AXEGY.roa (hash: njnq+R46IxMluyP1lNXUl3Hmykg2ym4U9EP0GSKKu5k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:28:bb:6e:cb:18:58:7a:78:c2:43:7f:36:77:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Dec 20 12:00:41 2025 GMT Not After : Dec 21 12:00:41 2025 GMT Subject: CN=cd96b141425735cdd57285f74deb8c9f0ad35c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5b:0c:4e:ea:9f:25:36:ea:44:c0:9c:13:31: 16:f8:9c:dd:3b:1c:86:0b:bd:17:18:84:df:61:42: 85:0f:08:8c:c3:e4:42:c8:59:14:00:af:64:e9:2c: ae:3c:f3:87:ae:99:29:45:c1:d9:8e:de:5f:61:b3: f5:a0:c4:04:0b:09:ac:4e:ab:22:cf:58:4c:bc:ed: 96:f8:83:f7:92:5e:5d:33:fa:df:3e:73:f1:ca:60: 79:73:82:cb:e0:fa:3e:9a:d8:50:26:a2:e7:ca:d2: 1f:3d:ca:3a:46:ce:0d:88:c4:39:e7:4b:18:7f:33: 74:44:87:13:27:e3:2b:8f:35:5a:42:4d:b6:f1:52: f9:7c:7d:72:9a:a4:05:db:ad:04:ba:86:50:fe:6b: 67:4d:4d:b9:09:e7:b5:0e:51:56:b2:1a:5c:7b:1d: 83:18:9a:f6:2d:01:55:7c:3a:03:1b:b0:ca:9a:4e: 09:43:4f:f3:b9:20:48:cb:82:ee:93:0c:50:25:5b: f9:31:01:60:12:72:be:de:17:2d:bb:0b:20:80:99: ea:63:96:c4:b7:90:cf:3a:99:b1:0b:aa:81:49:b0: 30:12:7a:fd:ec:61:70:8a:39:20:ab:0e:b4:9d:24: 6e:f2:68:8c:2e:48:50:af:f4:82:58:37:98:3e:9a: 85:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:96:B1:41:42:57:35:CD:D5:72:85:F7:4D:EB:8C:9F:0A:D3:5C:99 X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:86:5e:b2:be:1e:bc:13:6d:bc:23:88:8d:9a:2f:44:1e:eb: b8:07:87:8f:b2:dc:3d:8c:46:b5:6e:a1:28:63:80:40:7b:df: bb:48:95:d7:12:8d:c6:b4:78:5d:b5:91:c9:ea:05:58:54:20: f7:8f:09:6c:30:0b:ba:46:8e:4a:b5:15:e9:eb:ac:4e:3a:88: 58:22:3d:a2:08:8a:96:da:4d:93:eb:46:e2:a2:65:d4:71:49: db:b1:bb:34:ce:52:bf:3a:3f:6a:15:bf:25:dd:c0:ac:4f:20: ab:c3:1a:1e:f5:d9:3e:a4:12:c7:72:5f:62:9b:c2:03:60:94: b2:c2:b9:48:69:0f:bb:82:fe:19:7e:0a:33:25:70:77:7a:e3: 02:cd:cd:96:3a:24:e1:8a:74:96:82:b0:34:4b:9d:04:2d:0e: b5:62:5d:47:34:61:ed:d4:13:dd:90:8e:a1:98:4f:f9:e3:c3: 2b:6f:c4:6d:80:ce:06:80:23:8d:c9:29:31:62:56:59:32:6f: 4a:12:63:93:6b:cb:fc:5e:39:0f:82:9b:e7:81:ce:08:c5:eb: 64:6e:bc:7a:8d:f1:20:50:1d:d7:8c:f3:60:31:73:fd:31:3f: 67:f8:2e:d4:59:96:fb:fe:2d:63:e8:5d:38:83:9b:13:7a:45: 7b:9c:3c:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oii7bssYWHp4wkN/Nnf9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjUxMjIwMTIwMDQxWhcNMjUxMjIxMTIwMDQxWjAzMTEwLwYDVQQD EyhjZDk2YjE0MTQyNTczNWNkZDU3Mjg1Zjc0ZGViOGM5ZjBhZDM1Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVsMTuqfJTbqRMCcEzEW+JzdOxyG C70XGITfYUKFDwiMw+RCyFkUAK9k6SyuPPOHrpkpRcHZjt5fYbP1oMQECwmsTqsi z1hMvO2W+IP3kl5dM/rfPnPxymB5c4LL4Po+mthQJqLnytIfPco6Rs4NiMQ550sY fzN0RIcTJ+MrjzVaQk228VL5fH1ymqQF260EuoZQ/mtnTU25Cee1DlFWshpcex2D GJr2LQFVfDoDG7DKmk4JQ0/zuSBIy4LukwxQJVv5MQFgEnK+3hctuwsggJnqY5bE t5DPOpmxC6qBSbAwEnr97GFwijkgqw60nSRu8miMLkhQr/SCWDeYPpqF4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2WsUFCVzXN1XKF903rjJ8K01yZMB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk4Zesr4e vBNtvCOIjZovRB7ruAeHj7LcPYxGtW6hKGOAQHvfu0iV1xKNxrR4XbWRyeoFWFQg 948JbDALukaOSrUV6eusTjqIWCI9ogiKltpNk+tG4qJl1HFJ27G7NM5Svzo/ahW/ Jd3ArE8gq8MaHvXZPqQSx3JfYpvCA2CUssK5SGkPu4L+GX4KMyVwd3rjAs3Nljok 4Yp0loKwNEudBC0OtWJdRzRh7dQT3ZCOoZhP+ePDK2/EbYDOBoAjjckpMWJWWTJv ShJjk2vL/F45D4Kb54HOCMXrZG68eo3xIFAd14zzYDFz/TE/Z/gu1FmW+/4tY+hd OIObE3pFe5w8gg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:13:58 2025 by rpki-client