This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json) Hash identifier: Cab1jcImEDmhxvOMaX1DHfEFBSSigzFs3apa4CAGCdU= Subject key identifier: EC:AC:FC:A7:43:39:C9:35:F5:D5:38:E3:C1:88:DB:A1:C5:87:F8:36 Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78 Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978 Certificate serial: 019B40C96EE89FB55F810DFCAB9132559EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft Manifest number: 0E35 Signing time: Sun 21 Dec 2025 12:01:41 +0000 Manifest this update: Sun 21 Dec 2025 12:01:41 +0000 Manifest next update: Mon 22 Dec 2025 12:01:41 +0000 Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: 6afrX0LSgoKLvVhXu837G5QNmj/QI3cQKVSLE6YLlpY=) 2: XD9exolZuPQ40dkfdus25Vf9rII.roa (hash: FmLN+c/lhCwCKONje2+AaEBWa+VnuluALCFAOq2/rro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:6e:e8:9f:b5:5f:81:0d:fc:ab:91:32:55:9e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978 Validity Not Before: Dec 21 12:01:41 2025 GMT Not After : Dec 22 12:01:41 2025 GMT Subject: CN=ecacfca74339c935f5d538e3c188dba1c587f836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d5:f8:54:06:44:c1:c6:3e:ff:56:30:62:f9: 62:32:38:64:c6:48:f4:3b:89:66:a3:19:13:21:bc: 1a:e0:00:76:f6:0a:fd:cf:2a:38:f6:de:82:dc:11: 28:c3:13:ba:44:3b:92:44:d8:4a:58:6d:cf:9b:69: 2c:06:fa:33:84:85:67:4a:78:bb:0b:9c:13:ee:02: ae:7d:c5:63:f1:83:bf:84:98:96:ce:80:f4:79:e0: ae:a7:e3:b2:cb:62:39:15:58:e8:9a:2d:50:7c:26: 40:6a:4f:0c:2d:35:46:e4:97:51:fa:99:39:35:92: 1e:fe:7e:8b:55:dc:11:87:54:5a:61:7e:37:27:52: 6f:f0:75:b1:97:e1:2f:e7:68:f3:da:37:94:e5:36: 87:5c:54:08:9d:41:c5:19:0d:fd:a7:29:7b:18:c4: 47:61:30:b5:67:e8:fe:72:e9:99:9a:4b:3b:84:e5: c2:c9:dc:d3:65:a1:d4:cb:b5:ab:a2:d6:44:a5:d5: 9b:73:36:e8:0f:be:7f:e8:f2:c9:38:a9:4d:db:3c: 0c:40:b9:ae:19:1a:f7:6d:10:cc:84:c5:de:fe:1f: a2:a9:6d:25:39:db:d0:7c:73:74:bc:6f:1a:10:74: 8f:3c:6c:5a:87:a0:c9:a4:24:fe:d4:20:d8:de:3c: d0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AC:FC:A7:43:39:C9:35:F5:D5:38:E3:C1:88:DB:A1:C5:87:F8:36 X509v3 Authority Key Identifier: keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:11:11:63:a1:b9:93:ed:9c:8f:8a:e0:c6:49:9e:8e:82:71: de:ed:2b:1f:e2:3d:b4:df:a1:ff:0f:66:37:d8:ab:d8:5d:2f: ee:15:18:ed:a7:fc:2a:66:fe:dc:13:ee:28:9a:cb:e1:88:02: 5b:16:48:1f:12:7a:e9:ce:ca:39:80:50:2d:08:1e:e5:42:5b: d6:96:a0:5c:93:d3:3a:6f:25:4c:b7:2d:7c:a0:20:11:bf:31: b4:7e:72:9a:e1:2e:c2:95:50:d5:d6:d8:3f:a6:f3:53:9e:b6: 82:f2:e6:27:ca:34:a8:b9:73:ad:96:0d:30:b3:70:f2:4f:16: 99:e6:90:8e:eb:b3:0b:e1:af:f7:2f:c2:2d:4a:2d:71:4a:23: ae:76:37:e1:48:2a:28:c5:e2:b1:d7:e2:a1:9a:2b:bb:c2:45: bf:6f:3d:47:1b:b3:97:35:c2:fc:69:0d:c0:4c:d7:c3:38:3c: 3a:41:ff:2d:bf:3e:0f:a1:8e:c0:3a:40:37:3a:1f:39:79:ea: dd:24:31:f8:d2:33:a2:aa:57:14:7b:06:5f:37:92:6b:30:d0: a3:b8:31:0a:a8:dd:b8:53:85:34:2f:37:84:58:40:76:9e:c4: 99:5a:72:89:49:02:db:ae:d6:10:31:57:1e:50:a2:a7:bc:05: a7:3e:71:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyW7on7VfgQ38q5EyVZ7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm YzA5NzgwHhcNMjUxMjIxMTIwMTQxWhcNMjUxMjIyMTIwMTQxWjAzMTEwLwYDVQQD EyhlY2FjZmNhNzQzMzljOTM1ZjVkNTM4ZTNjMTg4ZGJhMWM1ODdmODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNX4VAZEwcY+/1YwYvliMjhkxkj0 O4lmoxkTIbwa4AB29gr9zyo49t6C3BEowxO6RDuSRNhKWG3Pm2ksBvozhIVnSni7 C5wT7gKufcVj8YO/hJiWzoD0eeCup+Oyy2I5FVjomi1QfCZAak8MLTVG5JdR+pk5 NZIe/n6LVdwRh1RaYX43J1Jv8HWxl+Ev52jz2jeU5TaHXFQInUHFGQ39pyl7GMRH YTC1Z+j+cumZmks7hOXCydzTZaHUy7WrotZEpdWbczboD75/6PLJOKlN2zwMQLmu GRr3bRDMhMXe/h+iqW0lOdvQfHN0vG8aEHSPPGxah6DJpCT+1CDY3jzQowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOys/KdDOck19dU448GI26HFh/g2MB8GA1UdIwQY MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmBERY6G5 k+2cj4rgxkmejoJx3u0rH+I9tN+h/w9mN9ir2F0v7hUY7af8Kmb+3BPuKJrL4YgC WxZIHxJ66c7KOYBQLQge5UJb1pagXJPTOm8lTLctfKAgEb8xtH5ymuEuwpVQ1dbY P6bzU562gvLmJ8o0qLlzrZYNMLNw8k8WmeaQjuuzC+Gv9y/CLUotcUojrnY34Ugq KMXisdfioZoru8JFv289RxuzlzXC/GkNwEzXwzg8OkH/Lb8+D6GOwDpANzofOXnq 3SQx+NIzoqpXFHsGXzeSazDQo7gxCqjduFOFNC83hFhAdp7EmVpyiUkC267WEDFX HlCip7wFpz5xHQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:28:17 2025 by rpki-client