This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json) Hash identifier: 6PMRbHpQu/jfQBJXDJ5U2lcNCnabkuMhcoeWkQvL4J0= Subject key identifier: 80:E8:95:90:D4:22:DE:8F:4D:CE:21:6E:61:C6:D3:5F:26:4D:C8:05 Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Certificate serial: 019B3CEBC4FCF2730F1AA6E48DF3F9C47DBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft Manifest number: 0E3F Signing time: Sat 20 Dec 2025 18:00:42 +0000 Manifest this update: Sat 20 Dec 2025 18:00:42 +0000 Manifest next update: Sun 21 Dec 2025 18:00:42 +0000 Files and hashes: 1: 58JHZYwChQxy5A0DEGSJKm5qgGY.roa (hash: xeMISReSvUH9kHX33+O3dRk8u4xWQHey/QlYUL5cwIs=) 2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: w8FYxCfvfETHx4e9GF2ek+ar8baJ/dvcDCU977F0z+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:c4:fc:f2:73:0f:1a:a6:e4:8d:f3:f9:c4:7d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Validity Not Before: Dec 20 18:00:42 2025 GMT Not After : Dec 21 18:00:42 2025 GMT Subject: CN=80e89590d422de8f4dce216e61c6d35f264dc805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:97:d9:5d:03:20:ce:ec:82:b4:ac:ca:60:f0: c4:4d:cd:5e:4a:25:0c:61:4b:b5:5b:7f:75:44:b5: 1c:02:6d:ac:e9:83:01:4d:2b:51:ad:c0:36:b1:3e: 73:8d:2c:d4:8e:68:16:78:2c:26:57:d3:52:d7:0d: d3:f4:8e:1a:14:50:70:eb:21:e3:5b:e4:14:6d:af: bb:ca:e3:4d:e9:6b:90:d4:30:b7:e8:78:b2:74:be: 60:8a:db:67:2d:2f:69:b6:cf:39:bb:3e:76:f4:c3: 80:3f:25:de:40:ec:d8:6b:61:ae:a3:53:e3:eb:98: c0:dd:68:86:e3:31:b0:7c:32:5f:7a:36:dd:6a:15: cf:68:e9:af:b9:82:e6:d2:86:6e:b9:53:8a:5b:ae: 7a:27:34:ba:8d:05:68:4c:c6:61:00:62:46:0d:88: 42:72:53:37:bb:c6:39:68:bf:95:4d:d6:f1:2f:18: 4e:a2:b6:93:fc:a1:fb:d6:fc:e9:78:80:b3:59:d8: 6e:2f:b2:1a:ab:34:ee:ac:3e:a0:30:8b:bb:f0:e7: 89:d9:85:7a:40:b2:e7:98:30:23:dc:4e:f9:fc:ad: 83:b7:97:a1:cc:6b:bb:88:86:5b:84:d5:cb:a5:63: b2:d6:d2:b3:49:eb:5c:a5:53:e6:c7:14:4a:58:4b: ba:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:95:90:D4:22:DE:8F:4D:CE:21:6E:61:C6:D3:5F:26:4D:C8:05 X509v3 Authority Key Identifier: keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:23:0b:be:88:6e:8e:b5:d9:17:b1:6c:74:0a:08:94:9b:b4: 98:98:4a:76:fd:65:96:bb:e0:b4:dd:4d:a3:dc:0e:fc:8b:c8: 36:06:92:4b:85:24:40:82:e0:78:37:bf:df:d2:ed:0f:ae:c2: 13:e1:25:30:2b:d6:45:88:49:5c:a4:58:5b:dd:26:05:c4:8f: 07:f2:51:b4:a0:56:67:04:13:b8:20:f5:19:f1:33:3d:29:c4: df:f1:c8:6c:9f:59:d2:be:a0:e8:fb:45:03:67:25:29:3c:c7: 84:3c:10:ae:a7:6c:b9:bd:2c:17:b8:a4:af:28:a0:8f:1a:c4: e7:69:ba:82:f8:5c:fb:14:cd:db:16:b7:6c:4c:b0:9d:41:95: 74:31:a4:40:f9:70:6c:cb:02:0c:c5:29:f4:2e:9b:42:df:c2: de:6c:97:79:ef:73:30:ac:19:b1:bf:e8:ea:b4:cd:da:4a:6b: ae:e5:19:e1:6a:0f:30:68:e0:f2:ba:4d:b3:38:31:5c:92:59: 80:dd:c7:8b:59:a2:b0:fd:2e:88:95:1d:55:75:b8:5f:b8:c6: bc:ca:93:0c:a5:b7:f7:b3:f7:b3:f2:3d:74:a1:67:6b:01:75: 44:f8:40:8a:b2:27:35:41:ce:38:42:0e:e6:dd:1a:ac:0e:5b: 4a:fd:c1:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs868T88nMPGqbkjfP5xH26MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1 Njc0YzUwHhcNMjUxMjIwMTgwMDQyWhcNMjUxMjIxMTgwMDQyWjAzMTEwLwYDVQQD Eyg4MGU4OTU5MGQ0MjJkZThmNGRjZTIxNmU2MWM2ZDM1ZjI2NGRjODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5fZXQMgzuyCtKzKYPDETc1eSiUM YUu1W391RLUcAm2s6YMBTStRrcA2sT5zjSzUjmgWeCwmV9NS1w3T9I4aFFBw6yHj W+QUba+7yuNN6WuQ1DC36HiydL5gittnLS9pts85uz529MOAPyXeQOzYa2Guo1Pj 65jA3WiG4zGwfDJfejbdahXPaOmvuYLm0oZuuVOKW656JzS6jQVoTMZhAGJGDYhC clM3u8Y5aL+VTdbxLxhOoraT/KH71vzpeICzWdhuL7IaqzTurD6gMIu78OeJ2YV6 QLLnmDAj3E75/K2Dt5ehzGu7iIZbhNXLpWOy1tKzSetcpVPmxxRKWEu6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDolZDUIt6PTc4hbmHG018mTcgFMB8GA1UdIwQY MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt MDc2ZTFkNzdhZWJlLzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCMLvohu jrXZF7FsdAoIlJu0mJhKdv1llrvgtN1No9wO/IvINgaSS4UkQILgeDe/39LtD67C E+ElMCvWRYhJXKRYW90mBcSPB/JRtKBWZwQTuCD1GfEzPSnE3/HIbJ9Z0r6g6PtF A2clKTzHhDwQrqdsub0sF7ikryigjxrE52m6gvhc+xTN2xa3bEywnUGVdDGkQPlw bMsCDMUp9C6bQt/C3myXee9zMKwZsb/o6rTN2kprruUZ4WoPMGjg8rpNszgxXJJZ gN3Hi1misP0uiJUdVXW4X7jGvMqTDKW397P3s/I9dKFnawF1RPhAirInNUHOOEIO 5t0arA5bSv3B8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 01:19:29 2025 by rpki-client