This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json) Hash identifier: WY6ZNa6u9L66QbC0AOM4AV3JsQqshqMVBf8PEBYAs3w= Subject key identifier: 4E:39:72:98:42:DF:DA:82:49:49:F8:27:1C:CA:81:CC:C8:FD:9D:A8 Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca Certificate serial: 019B7222B060A1E2FF1712C8882BBE970EF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft Manifest number: 14A8 Signing time: Wed 31 Dec 2025 02:00:34 +0000 Manifest this update: Wed 31 Dec 2025 02:00:34 +0000 Manifest next update: Thu 01 Jan 2026 02:00:34 +0000 Files and hashes: 1: 7YrGIJ8Lq47CmtHh_aA30VmkPjo.roa (hash: hoLOmqh1vosQ/NxuWEBoizkiy56HJ0MD/vugBLaASkY=) 2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: P5NovijseIbxnds+kLv145YVEsT222+djtf8H4USw1E=) 3: bWi2Mkf_arohbIgqpZEaCaewlho.roa (hash: o4YIfYScSNSPxx9rfmbXoBu7Bh9velBEqxyrfd2MDmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:22:b0:60:a1:e2:ff:17:12:c8:88:2b:be:97:0e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca Validity Not Before: Dec 31 02:00:34 2025 GMT Not After : Jan 1 02:00:34 2026 GMT Subject: CN=4e39729842dfda824949f8271cca81ccc8fd9da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8b:ec:88:2f:34:cc:b9:68:b7:17:3d:5d:91: ca:ba:eb:56:52:2f:a5:cc:df:35:35:90:eb:ba:e5: a2:d0:92:97:e5:20:35:f1:52:cc:ad:b8:ee:38:a3: 58:6e:4e:d5:57:ce:58:c1:cd:b6:99:73:f4:44:54: 63:19:d8:c3:9c:e0:f7:af:84:4b:ff:dc:17:a3:73: 40:41:f7:b2:4c:0d:f3:19:4b:0e:50:8b:55:84:86: c4:19:b7:ab:3c:50:52:6d:ab:65:6b:63:4f:4b:d7: 9a:7d:68:bb:3a:35:78:06:3d:86:5f:48:53:01:9d: 12:9d:1f:f5:a5:45:b4:97:34:3b:2a:be:9f:6c:8d: e9:43:1c:c7:c1:32:e3:fd:a9:51:18:a0:e7:27:b6: a1:b5:be:de:bc:cf:71:53:c5:e2:8f:bd:10:37:f6: dd:48:42:07:45:88:85:15:d4:48:45:e8:7e:ba:b7: 55:bd:00:c3:98:45:d4:8b:fb:8e:9c:34:bf:d4:f0: 95:ba:61:f6:dd:6a:bb:60:75:15:4f:ab:ea:18:e8: aa:60:59:d9:c7:a3:43:4d:4f:4c:66:1a:ab:8f:77: 39:68:34:54:69:af:63:ae:22:5b:43:c7:84:23:10: 39:2e:8c:c0:62:10:2e:b6:e7:51:91:85:0c:e5:e3: d4:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:39:72:98:42:DF:DA:82:49:49:F8:27:1C:CA:81:CC:C8:FD:9D:A8 X509v3 Authority Key Identifier: keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e2:a5:c0:c6:ff:82:9f:d7:24:47:88:74:f2:74:bc:8a:c3: fa:e9:6d:50:33:49:f8:6e:76:ca:65:f8:b7:38:26:dc:c9:73: 94:91:50:92:ee:a0:6b:3c:98:ba:9f:bb:b8:84:cb:58:60:7e: 0d:c3:3e:26:95:ae:58:1a:1e:b9:b4:ab:18:ed:6a:a0:9b:4c: ae:ef:4a:ff:bd:ed:42:ef:fa:ad:5a:f4:59:14:17:15:9c:bf: eb:ec:40:61:21:d5:c9:9e:28:c0:f1:41:c2:d7:77:7a:c9:85: 83:42:ed:40:86:46:c8:f6:3a:20:a6:92:f5:d9:ad:e8:5e:86: d1:b5:37:f8:e3:ec:2b:6c:d0:9d:3c:3a:36:19:bc:1d:eb:9e: 35:1e:c9:33:c0:b1:eb:5b:0b:57:a9:1c:a6:25:b6:5d:f4:45: cb:62:17:5b:41:0a:20:7e:09:34:fb:ec:39:7a:6a:5d:44:24: 1b:98:f7:6d:7f:c5:70:32:c0:85:9b:44:fb:72:4d:59:83:18: 0b:09:5c:9b:b5:1b:da:f2:47:66:9c:f3:e4:ab:00:ba:88:f2: 5c:f2:d0:4c:bb:39:9d:e0:98:4b:8f:99:d3:04:1f:dc:44:3c: 5c:93:ca:51:03:8a:5a:6b:7e:7e:5a:69:21:ad:77:aa:60:dd: f3:30:2f:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyIrBgoeL/FxLIiCu+lw7zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZDY3MDZhMmUyNzBjYjQ4NmJiNDcyNDM0NjNjY2JiZjlm NGQ1Y2EwHhcNMjUxMjMxMDIwMDM0WhcNMjYwMTAxMDIwMDM0WjAzMTEwLwYDVQQD Eyg0ZTM5NzI5ODQyZGZkYTgyNDk0OWY4MjcxY2NhODFjY2M4ZmQ5ZGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYvsiC80zLlotxc9XZHKuutWUi+l zN81NZDruuWi0JKX5SA18VLMrbjuOKNYbk7VV85Ywc22mXP0RFRjGdjDnOD3r4RL /9wXo3NAQfeyTA3zGUsOUItVhIbEGberPFBSbatla2NPS9eafWi7OjV4Bj2GX0hT AZ0SnR/1pUW0lzQ7Kr6fbI3pQxzHwTLj/alRGKDnJ7ahtb7evM9xU8Xij70QN/bd SEIHRYiFFdRIReh+urdVvQDDmEXUi/uOnDS/1PCVumH23Wq7YHUVT6vqGOiqYFnZ x6NDTU9MZhqrj3c5aDRUaa9jriJbQ8eEIxA5LozAYhAutudRkYUM5ePUowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE45cphC39qCSUn4JxzKgczI/Z2oMB8GA1UdIwQY MBaAFDfWcGouJwy0hrtHJDRjzLv59NXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kYzc2ZmYtMmIzNS00MmJlLWFiNTYt NWRmMmRlMDhiNjk1LzEvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kYzc2ZmYtMmIzNS00MmJlLWFiNTYtNWRmMmRlMDhiNjk1 LzEvTjlad2FpNG5ETFNHdTBja05HUE11X24wMWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuKlwMb/ gp/XJEeIdPJ0vIrD+ultUDNJ+G52ymX4tzgm3MlzlJFQku6gazyYup+7uITLWGB+ DcM+JpWuWBoeubSrGO1qoJtMru9K/73tQu/6rVr0WRQXFZy/6+xAYSHVyZ4owPFB wtd3esmFg0LtQIZGyPY6IKaS9dmt6F6G0bU3+OPsK2zQnTw6Nhm8HeueNR7JM8Cx 61sLV6kcpiW2XfRFy2IXW0EKIH4JNPvsOXpqXUQkG5j3bX/FcDLAhZtE+3JNWYMY Cwlcm7Ub2vJHZpzz5KsAuojyXPLQTLs5neCYS4+Z0wQf3EQ8XJPKUQOKWmt+flpp Ia13qmDd8zAvAQ== -----END CERTIFICATE-----Generated at Wed Dec 31 06:29:13 2025 by rpki-client