This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json) Hash identifier: nRu5DN1v2ZVugV6ocdelY5VHhHP1Lnhc3jBG2E36PL0= Subject key identifier: 2C:13:4C:28:21:F8:8E:2B:55:06:8F:4E:F9:B6:83:9E:A2:E9:A2:06 Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6 Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6 Certificate serial: 019B3D5A49AE5DBDAD80CEA677A356D9D51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft Manifest number: 0B96 Signing time: Sat 20 Dec 2025 20:01:25 +0000 Manifest this update: Sat 20 Dec 2025 20:01:25 +0000 Manifest next update: Sun 21 Dec 2025 20:01:25 +0000 Files and hashes: 1: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: 9tVgB2ZFvzvrLd4qBCLUyA4557FcQ5+Lb+3h2ggUcHg=) 2: xCIH9wp6RKlehql4M5SLCZPHQEs.roa (hash: 80w1j7Z/qMuNCNOWS8szAQAtDk98iD2/lDFP83CUU3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:49:ae:5d:bd:ad:80:ce:a6:77:a3:56:d9:d5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6 Validity Not Before: Dec 20 20:01:25 2025 GMT Not After : Dec 21 20:01:25 2025 GMT Subject: CN=2c134c2821f88e2b55068f4ef9b6839ea2e9a206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:07:d7:5a:94:05:e1:28:a3:95:95:3c:04: 10:a0:42:04:02:19:1f:ad:d3:68:23:21:98:fb:cc: a0:4c:e7:2f:95:82:08:58:e1:40:b6:9c:46:c3:14: 15:59:c6:2c:bf:7d:41:d3:0f:b9:b0:1a:49:85:36: bc:b7:39:61:60:d4:ed:b7:ca:bf:7f:45:3d:6e:e9: 0a:52:5d:a3:02:14:76:1d:a6:d3:45:44:37:f4:57: d6:41:7f:a5:55:9f:7f:6c:ac:61:f4:9c:c7:9b:bb: f6:27:1e:87:99:25:4f:98:bf:fd:12:e4:e2:8b:bd: 26:a6:a4:00:c6:8b:11:df:66:12:71:d0:76:e6:b1: 8d:0a:fe:23:9d:4f:5e:eb:b1:e8:f9:c3:d7:3a:17: 66:ac:66:0c:83:72:bc:2f:a8:72:ea:50:66:be:df: 3f:4f:36:12:d6:44:8f:15:26:6f:f2:25:c5:5a:ca: 7b:e3:17:5d:50:e4:4f:7e:7b:34:29:ba:69:79:0a: 4f:17:90:2b:6a:d6:8f:6b:66:04:3a:9c:b9:b2:d3: 02:94:54:e5:d0:c1:5f:2d:8c:a3:70:cc:94:56:4a: 0f:26:f7:36:a4:f5:bd:55:fe:e5:c5:86:e3:93:54: af:89:91:d0:34:03:e3:ea:07:fe:fd:b5:c0:9e:78: d7:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:13:4C:28:21:F8:8E:2B:55:06:8F:4E:F9:B6:83:9E:A2:E9:A2:06 X509v3 Authority Key Identifier: keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:12:68:26:83:9c:29:8b:40:7e:ab:46:4c:41:83:16:e1:7d: cd:29:61:b9:0a:60:5b:ee:8a:f2:79:ea:7e:bd:b9:47:f5:4d: 78:53:14:33:c2:c8:62:39:29:6b:ab:73:10:eb:72:5f:47:7c: 36:61:29:17:07:b2:3e:56:ec:c5:0d:c5:38:9c:74:19:1f:79: b4:96:32:33:8e:05:a0:2e:40:73:ff:f1:a0:5e:05:1b:4d:16: ab:af:73:5a:be:d5:b8:25:81:ad:db:f1:c9:f4:6f:4b:52:eb: b2:fc:76:40:d2:bf:80:0c:86:2b:d8:4d:8b:1c:d1:d5:54:08: 28:23:25:58:e3:92:05:b5:14:56:0e:45:1e:d8:d4:03:5b:a4: 89:28:9a:86:7b:2e:4a:d4:15:b5:aa:da:19:2c:99:6c:28:ec: 38:a9:34:e2:55:b4:e9:3a:4a:4d:1c:78:48:1c:5a:6c:e2:f0: 91:3e:76:35:af:9d:b8:5d:1c:e1:ad:cb:4f:09:d3:f8:73:8e: 23:35:d2:48:dd:92:a5:76:7c:8f:d3:84:33:28:75:99:76:cb: 5f:57:4b:e5:cc:05:5b:b7:3c:90:3c:39:5c:1b:63:bf:3f:58: 0e:1f:f5:d7:78:bc:2a:f1:c4:e0:d3:d7:88:6e:2f:ac:57:d0: 39:a6:cc:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WkmuXb2tgM6md6NW2dUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzJlM2EwY2Q3NDkwMDUzNWI2YTZmOGZmYzY1N2Q5M2Ew OTA3YTYwHhcNMjUxMjIwMjAwMTI1WhcNMjUxMjIxMjAwMTI1WjAzMTEwLwYDVQQD EygyYzEzNGMyODIxZjg4ZTJiNTUwNjhmNGVmOWI2ODM5ZWEyZTlhMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB0H11qUBeEoo5WVPAQQoEIEAhkf rdNoIyGY+8ygTOcvlYIIWOFAtpxGwxQVWcYsv31B0w+5sBpJhTa8tzlhYNTtt8q/ f0U9bukKUl2jAhR2HabTRUQ39FfWQX+lVZ9/bKxh9JzHm7v2Jx6HmSVPmL/9EuTi i70mpqQAxosR32YScdB25rGNCv4jnU9e67Ho+cPXOhdmrGYMg3K8L6hy6lBmvt8/ TzYS1kSPFSZv8iXFWsp74xddUORPfns0KbppeQpPF5ArataPa2YEOpy5stMClFTl 0MFfLYyjcMyUVkoPJvc2pPW9Vf7lxYbjk1SviZHQNAPj6gf+/bXAnnjXiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwTTCgh+I4rVQaPTvm2g56i6aIGMB8GA1UdIwQY MBaAFJ9y46DNdJAFNbam+P/GV9k6CQemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5Yzkt MTBhY2EzMzEzMzg3LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy82NDQ1MDEtOWQ0Mi00ODE2LTg5YzktMTBhY2EzMzEzMzg3 LzEvbjNMam9NMTBrQVUxdHFiNF84WlgyVG9KQjZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBJoJoOc KYtAfqtGTEGDFuF9zSlhuQpgW+6K8nnqfr25R/VNeFMUM8LIYjkpa6tzEOtyX0d8 NmEpFweyPlbsxQ3FOJx0GR95tJYyM44FoC5Ac//xoF4FG00Wq69zWr7VuCWBrdvx yfRvS1Lrsvx2QNK/gAyGK9hNixzR1VQIKCMlWOOSBbUUVg5FHtjUA1ukiSiahnsu StQVtaraGSyZbCjsOKk04lW06TpKTRx4SBxabOLwkT52Na+duF0c4a3LTwnT+HOO IzXSSN2SpXZ8j9OEMyh1mXbLX1dL5cwFW7c8kDw5XBtjvz9YDh/113i8KvHE4NPX iG4vrFfQOabMlA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:38:07 2025 by rpki-client