This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json) Hash identifier: FPcNkQXZLDde6lIdYwyi/2F1ntKfzLfe7EMZ5DdRDkE= Subject key identifier: BF:F3:16:98:5D:6A:62:BD:E7:9C:AE:B4:E5:DD:F2:4F:A4:CD:9F:61 Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Certificate serial: 019B3569D45696DCE6020BBD3552E1DDBAAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft Manifest number: 0D8B Signing time: Fri 19 Dec 2025 07:01:26 +0000 Manifest this update: Fri 19 Dec 2025 07:01:26 +0000 Manifest next update: Sat 20 Dec 2025 07:01:26 +0000 Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=) 2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: 136esWy1RL0Nfue8WJsTcix4uaM22/FZ3Ep6sc9Ut64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:d4:56:96:dc:e6:02:0b:bd:35:52:e1:dd:ba:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Validity Not Before: Dec 19 07:01:26 2025 GMT Not After : Dec 20 07:01:26 2025 GMT Subject: CN=bff316985d6a62bde79caeb4e5ddf24fa4cd9f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8e:ab:b3:ae:d8:82:7c:b2:ba:6e:d3:33:7b: 0d:c0:4f:a4:88:5e:50:cf:28:e0:8f:04:61:55:87: 7c:e1:ce:64:4e:80:8a:f3:22:fb:07:70:60:fd:51: 38:fd:5e:6a:71:da:dd:2e:7f:c3:5b:24:d9:db:ab: 15:d1:97:ce:47:48:0b:fb:19:1b:62:d1:fb:5c:26: 72:5e:e3:1e:7c:c3:98:76:ff:47:93:24:23:18:f2: 56:04:98:58:97:aa:77:02:56:4a:95:9b:79:6a:80: 3f:d6:31:2b:66:8b:c2:62:86:40:ce:ce:c7:76:a0: d8:81:f5:91:a5:aa:d9:99:02:33:c0:4c:c0:85:64: 91:a7:25:5c:d6:00:17:1e:df:de:59:66:28:32:a0: 4c:51:7f:9a:b6:ed:b1:52:d9:c9:4e:e3:07:66:a8: 2b:5f:32:5d:0b:bf:f6:57:bb:ba:68:73:64:ef:8f: e4:7b:36:49:b5:9f:a9:18:d0:ca:23:35:62:f8:65: 80:80:65:63:ad:99:1b:35:e1:0d:e6:09:3f:88:d7: 4a:6a:97:3c:fc:c9:b7:8c:cb:5d:20:96:53:12:ae: 82:94:93:5c:81:0b:7c:80:d7:0b:4c:7a:c0:27:34: 4b:54:6b:f7:59:0a:c2:06:05:a0:71:cd:56:2b:08: 13:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F3:16:98:5D:6A:62:BD:E7:9C:AE:B4:E5:DD:F2:4F:A4:CD:9F:61 X509v3 Authority Key Identifier: keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d5:c1:bd:3a:92:70:5f:0e:c3:0a:9d:3a:b7:7a:c8:16:cb: ca:0b:31:dd:10:ab:99:13:c5:84:40:77:a6:04:da:cd:ab:4c: 17:68:5f:44:0f:d7:23:82:2b:41:25:70:2b:d2:1f:98:72:26: 6a:81:f9:53:19:a6:60:aa:b1:ca:67:ff:0e:47:0c:b1:d2:d0: 57:00:91:61:76:d7:42:f1:92:36:75:12:8d:05:37:fa:f1:b1: fe:c7:ea:d5:37:ab:67:dc:4f:83:01:b1:83:64:ac:f4:59:8d: 02:c6:54:5d:2f:aa:0a:1e:87:75:d7:ee:3c:8c:a8:36:cd:63: 90:d8:29:6e:8c:59:75:88:ee:e8:5e:8a:b0:0f:ec:ee:12:9a: 58:16:44:b1:04:24:9d:30:f4:6f:a2:8b:ce:af:43:38:87:9a: 24:73:50:0b:48:04:0c:47:91:f8:a2:fb:12:4a:ae:da:e3:98: 2c:71:d9:6f:15:dc:09:cf:53:9d:9a:eb:93:c5:d5:95:e2:10: ce:f3:e4:61:0e:36:1e:eb:e1:bb:70:dc:29:29:c7:39:56:d2: 53:df:14:85:b4:a0:e6:f1:25:d9:5d:5b:e4:3c:54:e0:3d:3f: e2:ad:6f:d7:2a:33:15:28:2e:c7:95:30:37:f9:29:f2:39:18: 5c:a0:17:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1adRWltzmAgu9NVLh3bqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3 ZGEyY2EwHhcNMjUxMjE5MDcwMTI2WhcNMjUxMjIwMDcwMTI2WjAzMTEwLwYDVQQD EyhiZmYzMTY5ODVkNmE2MmJkZTc5Y2FlYjRlNWRkZjI0ZmE0Y2Q5ZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw46rs67Ygnyyum7TM3sNwE+kiF5Q zyjgjwRhVYd84c5kToCK8yL7B3Bg/VE4/V5qcdrdLn/DWyTZ26sV0ZfOR0gL+xkb YtH7XCZyXuMefMOYdv9HkyQjGPJWBJhYl6p3AlZKlZt5aoA/1jErZovCYoZAzs7H dqDYgfWRparZmQIzwEzAhWSRpyVc1gAXHt/eWWYoMqBMUX+atu2xUtnJTuMHZqgr XzJdC7/2V7u6aHNk74/kezZJtZ+pGNDKIzVi+GWAgGVjrZkbNeEN5gk/iNdKapc8 /Mm3jMtdIJZTEq6ClJNcgQt8gNcLTHrAJzRLVGv3WQrCBgWgcc1WKwgTbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/zFphdamK955yutOXd8k+kzZ9hMB8GA1UdIwQY MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3 LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARtXBvTqS cF8OwwqdOrd6yBbLygsx3RCrmRPFhEB3pgTazatMF2hfRA/XI4IrQSVwK9IfmHIm aoH5UxmmYKqxymf/DkcMsdLQVwCRYXbXQvGSNnUSjQU3+vGx/sfq1TerZ9xPgwGx g2Ss9FmNAsZUXS+qCh6HddfuPIyoNs1jkNgpboxZdYju6F6KsA/s7hKaWBZEsQQk nTD0b6KLzq9DOIeaJHNQC0gEDEeR+KL7Ekqu2uOYLHHZbxXcCc9TnZrrk8XVleIQ zvPkYQ42Huvhu3DcKSnHOVbSU98UhbSg5vEl2V1b5DxU4D0/4q1v1yozFSgux5Uw N/kp8jkYXKAX9A== -----END CERTIFICATE-----Generated at Fri Dec 19 09:46:35 2025 by rpki-client