This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft File: n3g9_Cib-qPEuhsyTx27V_WGoB0.mft (raw, json) Hash identifier: vb5o4f8ETH3SbRSv+UCbPLQBX44Oe6mbkckC1jWClvw= Subject key identifier: 8C:C2:37:8E:6C:9A:DF:B3:D2:3B:DD:0A:E0:87:41:DA:3E:18:6C:1D Authority key identifier: 9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D Certificate issuer: /CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d Certificate serial: 019B30E84D87F8A0D0255AEB0793ECFD80EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft Manifest number: 03D6 Signing time: Thu 18 Dec 2025 10:01:29 +0000 Manifest this update: Thu 18 Dec 2025 10:01:29 +0000 Manifest next update: Fri 19 Dec 2025 10:01:29 +0000 Files and hashes: 1: AE5IQSZ07aDFdSNH0kV7_4HeAEw.roa (hash: urftXRrLYNfHknYhlBilfeq0wuuzqoCnp0BIMu9jSb4=) 2: n3g9_Cib-qPEuhsyTx27V_WGoB0.crl (hash: PLDFeX/kbyzbCskxJDxrOLo8AIvSEjGWliHtX02dhiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:4d:87:f8:a0:d0:25:5a:eb:07:93:ec:fd:80:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f783dfc289bfaa3c4ba1b324f1dbb57f586a01d Validity Not Before: Dec 18 10:01:29 2025 GMT Not After : Dec 19 10:01:29 2025 GMT Subject: CN=8cc2378e6c9adfb3d23bdd0ae08741da3e186c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:56:b9:51:54:6d:eb:a7:42:2d:06:c2:50:cb: 06:3c:00:a0:52:25:03:2d:88:0c:29:66:8e:62:f0: b1:a1:b8:64:1c:6e:40:fc:20:aa:4e:1e:0c:94:ec: 10:82:57:b2:b0:92:b4:9f:3d:ab:3c:24:4d:b7:8d: 8d:0b:f6:6a:a5:b5:c5:c9:97:c3:3e:a8:cc:8c:96: 2a:b1:e6:6e:e6:92:cc:2d:76:ed:ce:bf:4b:54:ec: 97:d1:a7:e5:55:3c:2b:0c:fb:42:4c:e9:0e:f0:59: 16:69:e2:5e:0b:49:14:04:10:33:03:f9:83:cd:ba: 8c:ce:4f:0e:31:04:2b:13:47:1c:c7:09:30:5c:49: aa:48:71:58:e7:94:51:b9:79:c0:1c:7b:ac:b0:7d: e8:ca:6b:9e:b2:79:48:89:df:87:78:5f:ea:36:47: 5b:cd:a1:1f:38:50:5b:26:ab:b7:e2:5a:7b:2a:68: c5:b0:6c:4c:e1:f8:1e:b1:8f:82:77:c3:02:17:ba: ee:dc:48:1e:8f:a5:12:c7:cd:44:e5:a5:cf:f5:72: 50:b8:3e:42:bd:c5:79:0b:f1:00:0b:bc:99:bc:33: a6:bc:21:d1:39:df:5c:78:00:38:b1:59:74:a7:fb: e0:01:23:c3:ca:b9:d6:af:de:73:5c:10:34:ba:8f: 70:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:C2:37:8E:6C:9A:DF:B3:D2:3B:DD:0A:E0:87:41:DA:3E:18:6C:1D X509v3 Authority Key Identifier: keyid:9F:78:3D:FC:28:9B:FA:A3:C4:BA:1B:32:4F:1D:BB:57:F5:86:A0:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3g9_Cib-qPEuhsyTx27V_WGoB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/2b0928-5cb6-4d6b-a8ad-00e55a2499d0/1/n3g9_Cib-qPEuhsyTx27V_WGoB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:55:e0:4b:e1:2e:2d:48:0b:ad:dd:68:96:83:ba:06:f8:dd: 07:50:a3:d5:66:a5:75:f8:08:57:fd:84:eb:86:8c:02:31:6c: dd:71:91:96:c2:d1:51:d3:d6:43:c8:24:db:42:1f:b2:18:09: 07:c7:69:11:5d:74:7d:0c:73:0f:57:5f:d3:a0:41:9a:b1:f7: d2:cc:c0:29:ed:90:ea:5c:54:02:d2:7c:97:f1:f1:8f:73:22: 1e:ac:21:cd:56:5d:f8:d1:3f:53:c9:b9:cd:19:c2:bf:3b:e8: 0c:56:b2:66:a9:ab:05:02:41:1f:9c:a8:ef:79:d6:1f:91:cd: 98:45:df:b7:cc:ef:0b:1b:4c:35:17:1e:d0:2f:ca:32:ce:31: c5:f2:fd:0d:ec:b2:08:89:1d:30:3a:4a:3a:7e:9f:42:74:76: e2:1d:1b:19:ad:8a:ab:4b:04:02:4d:54:15:01:75:5e:1d:f3: 22:d2:8e:e3:ab:df:20:44:00:a8:d1:ec:47:37:4b:f8:dd:ca: a1:b8:50:e2:83:54:f0:c3:04:18:05:46:72:9c:1c:bc:87:81: c2:72:47:fe:7d:5c:ca:fc:84:73:74:31:49:86:f8:81:00:e8: 85:d5:92:3e:90:1b:aa:ba:07:c1:b6:6d:d1:73:d6:08:df:95: bf:a8:55:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6E2H+KDQJVrrB5Ps/YDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNzgzZGZjMjg5YmZhYTNjNGJhMWIzMjRmMWRiYjU3ZjU4 NmEwMWQwHhcNMjUxMjE4MTAwMTI5WhcNMjUxMjE5MTAwMTI5WjAzMTEwLwYDVQQD Eyg4Y2MyMzc4ZTZjOWFkZmIzZDIzYmRkMGFlMDg3NDFkYTNlMTg2YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFa5UVRt66dCLQbCUMsGPACgUiUD LYgMKWaOYvCxobhkHG5A/CCqTh4MlOwQgleysJK0nz2rPCRNt42NC/ZqpbXFyZfD PqjMjJYqseZu5pLMLXbtzr9LVOyX0aflVTwrDPtCTOkO8FkWaeJeC0kUBBAzA/mD zbqMzk8OMQQrE0ccxwkwXEmqSHFY55RRuXnAHHussH3oymuesnlIid+HeF/qNkdb zaEfOFBbJqu34lp7KmjFsGxM4fgesY+Cd8MCF7ru3Egej6USx81E5aXP9XJQuD5C vcV5C/EAC7yZvDOmvCHROd9ceAA4sVl0p/vgASPDyrnWr95zXBA0uo9w/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzCN45smt+z0jvdCuCHQdo+GGwdMB8GA1UdIwQY MBaAFJ94Pfwom/qjxLobMk8du1f1hqAdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQt MDBlNTVhMjQ5OWQwLzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8yYjA5MjgtNWNiNi00ZDZiLWE4YWQtMDBlNTVhMjQ5OWQw LzEvbjNnOV9DaWItcVBFdWhzeVR4MjdWX1dHb0IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFXgS+Eu LUgLrd1oloO6BvjdB1Cj1WaldfgIV/2E64aMAjFs3XGRlsLRUdPWQ8gk20IfshgJ B8dpEV10fQxzD1df06BBmrH30szAKe2Q6lxUAtJ8l/Hxj3MiHqwhzVZd+NE/U8m5 zRnCvzvoDFayZqmrBQJBH5yo73nWH5HNmEXft8zvCxtMNRce0C/KMs4xxfL9Deyy CIkdMDpKOn6fQnR24h0bGa2Kq0sEAk1UFQF1Xh3zItKO46vfIEQAqNHsRzdL+N3K obhQ4oNU8MMEGAVGcpwcvIeBwnJH/n1cyvyEc3QxSYb4gQDohdWSPpAbqroHwbZt 0XPWCN+Vv6hVoQ== -----END CERTIFICATE-----Generated at Thu Dec 18 11:56:53 2025 by rpki-client