This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json) Hash identifier: ATqnYlyI/ylp+Hnj0qP35BD4PFOGUEjK3GoF/pAZhjY= Subject key identifier: 86:27:2A:C3:E9:10:72:87:B5:60:A5:E2:83:E9:2F:1C:1D:5B:D0:CD Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42 Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442 Certificate serial: 019B31FA9254B567323CFC6DE20742E54C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft Manifest number: 1249 Signing time: Thu 18 Dec 2025 15:01:03 +0000 Manifest this update: Thu 18 Dec 2025 15:01:03 +0000 Manifest next update: Fri 19 Dec 2025 15:01:03 +0000 Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: YJnfM4eaggPtZUxmwo6CyJRQPcoFxMbs8FWiIkdfmsA=) 2: yY1iNFVSPGpVBCv6e5Q4VD19NB8.roa (hash: Xz+3ntm5iVPl2B9YcE2P65g+xG5FxMjLX4w1n0LEPnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:92:54:b5:67:32:3c:fc:6d:e2:07:42:e5:4c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442 Validity Not Before: Dec 18 15:01:03 2025 GMT Not After : Dec 19 15:01:03 2025 GMT Subject: CN=86272ac3e9107287b560a5e283e92f1c1d5bd0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ab:80:9b:98:12:fb:e7:c2:1f:f2:e3:a8:9c: fa:82:0f:7f:e7:3e:f1:cb:00:74:d1:70:30:3a:81: dc:87:70:3f:0a:f4:9c:cc:0e:62:d3:df:61:43:59: fb:8a:30:fb:53:d8:f0:11:53:3b:56:24:ec:83:df: ca:40:b4:82:67:c9:6d:1e:62:be:64:4d:03:a6:8f: c9:76:4d:f7:b6:35:94:0d:21:c2:5d:cb:5e:6d:a4: b6:8d:53:7d:07:68:9a:bd:af:ed:c9:24:dd:0d:d1: f8:55:0d:c6:c9:33:d9:a1:f1:74:42:96:21:b3:f1: ce:9d:ff:3f:b3:02:5d:ee:6d:1a:a0:28:37:d7:c8: 77:82:a6:74:6a:c8:f3:47:e1:ae:a9:de:e3:f0:8a: 7b:67:88:0d:b8:cc:26:aa:7c:a5:4b:06:f9:00:1c: 3c:94:a1:4f:e2:20:37:9b:88:58:26:5b:9e:a4:33: bf:44:b6:fe:3d:27:91:04:6a:53:1c:3d:2f:f0:83: 59:77:47:85:25:88:17:ed:42:1d:42:d6:04:d5:af: cc:f9:cb:be:19:8b:f6:be:de:48:e2:94:3d:dc:6a: 06:7b:98:49:c7:95:2e:80:f8:21:35:2e:04:c7:d5: 0d:63:ac:e2:a0:27:85:2a:cf:87:fc:d6:cf:d7:79: ec:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:2A:C3:E9:10:72:87:B5:60:A5:E2:83:E9:2F:1C:1D:5B:D0:CD X509v3 Authority Key Identifier: keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7f:02:3e:89:0e:29:71:db:b2:0a:84:bd:b4:ae:3f:0d:a7: eb:e6:9b:8f:19:ea:1e:ab:d5:eb:b3:eb:7f:64:15:3a:98:58: d0:f9:82:d1:43:3c:bc:09:c1:c8:d4:42:f2:91:53:e7:06:5e: 69:51:fd:5e:3d:30:72:4e:91:1d:53:a1:c2:a0:e9:57:28:42: 74:c0:98:f8:87:db:c1:0a:a8:90:a1:da:54:bf:93:c7:45:f8: 82:fb:07:08:bc:b6:5c:90:d6:e6:b6:eb:ce:8f:93:92:13:7a: f5:83:6b:f7:fa:93:62:3e:8d:cf:ce:05:dc:e0:f0:df:ba:9e: 1f:03:14:19:cd:eb:ee:8d:e1:6b:4c:25:75:98:4a:df:7b:71: 78:7b:60:92:da:77:c0:18:e0:06:04:12:22:a3:29:ab:8e:b9: c6:e2:cd:db:ca:fc:09:6d:1a:c9:8b:3e:6d:32:dd:4b:88:ef: a3:3f:64:cf:c6:dc:16:c8:19:ae:2c:72:a3:60:66:76:05:52: cc:bb:00:e2:4a:64:d6:43:40:46:24:f5:f7:c4:43:b9:65:fb: 2d:5b:eb:01:1c:dd:c8:d8:24:dd:8a:1e:d4:bd:0e:65:49:55: 0a:2d:b0:82:84:72:d2:2f:5d:07:7e:17:54:32:3e:91:3c:86: 46:8e:bd:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+pJUtWcyPPxt4gdC5UxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4 NmI0NDIwHhcNMjUxMjE4MTUwMTAzWhcNMjUxMjE5MTUwMTAzWjAzMTEwLwYDVQQD Eyg4NjI3MmFjM2U5MTA3Mjg3YjU2MGE1ZTI4M2U5MmYxYzFkNWJkMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06uAm5gS++fCH/LjqJz6gg9/5z7x ywB00XAwOoHch3A/CvSczA5i099hQ1n7ijD7U9jwEVM7ViTsg9/KQLSCZ8ltHmK+ ZE0Dpo/Jdk33tjWUDSHCXctebaS2jVN9B2iava/tySTdDdH4VQ3GyTPZofF0QpYh s/HOnf8/swJd7m0aoCg318h3gqZ0asjzR+Guqd7j8Ip7Z4gNuMwmqnylSwb5ABw8 lKFP4iA3m4hYJluepDO/RLb+PSeRBGpTHD0v8INZd0eFJYgX7UIdQtYE1a/M+cu+ GYv2vt5I4pQ93GoGe5hJx5UugPghNS4Ex9UNY6zioCeFKs+H/NbP13ns/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIYnKsPpEHKHtWCl4oPpLxwdW9DNMB8GA1UdIwQY MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5 LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH8CPokO KXHbsgqEvbSuPw2n6+abjxnqHqvV67Prf2QVOphY0PmC0UM8vAnByNRC8pFT5wZe aVH9Xj0wck6RHVOhwqDpVyhCdMCY+IfbwQqokKHaVL+Tx0X4gvsHCLy2XJDW5rbr zo+TkhN69YNr9/qTYj6Nz84F3ODw37qeHwMUGc3r7o3ha0wldZhK33txeHtgktp3 wBjgBgQSIqMpq465xuLN28r8CW0ayYs+bTLdS4jvoz9kz8bcFsgZrixyo2BmdgVS zLsA4kpk1kNARiT198RDuWX7LVvrARzdyNgk3Yoe1L0OZUlVCi2wgoRy0i9dB34X VDI+kTyGRo69+Q== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:41 2025 by rpki-client