This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json) Hash identifier: qFItWguj0llGu0YSjRe4Pby7e6mkJhUVvlP2hKZqN88= Subject key identifier: DA:CC:98:2C:1D:F5:1B:DC:B1:55:02:B6:54:87:E8:5E:04:55:16:AD Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e Certificate serial: 019B3A22107C4D24204C88FF8633F224555F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 05:01:09 +0000 Manifest this update: Sat 20 Dec 2025 05:01:09 +0000 Manifest next update: Sun 21 Dec 2025 05:01:09 +0000 Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: +PtT/BKpCc7a5Zd+MzZbWyseTT6CSCWPrHk+0e/txDs=) 2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=) 3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:10:7c:4d:24:20:4c:88:ff:86:33:f2:24:55:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e Validity Not Before: Dec 20 05:01:09 2025 GMT Not After : Dec 21 05:01:09 2025 GMT Subject: CN=dacc982c1df51bdcb15502b65487e85e045516ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:5b:96:6c:a5:6c:bb:de:16:9a:36:6c:bf: 95:63:2e:51:f7:3e:d4:22:54:da:bd:7d:b8:fe:52: ff:64:91:29:22:17:5e:13:ba:f9:1b:5f:33:00:76: ac:ad:77:78:41:0e:8e:17:d0:9a:91:dd:88:38:ef: fc:ff:bf:21:02:56:38:bc:73:69:c2:3e:9f:43:f9: a5:89:99:d1:ba:a8:7f:23:e5:9a:62:0b:96:99:b8: 2b:f5:12:0c:c4:a8:58:74:17:a5:4a:25:fa:e1:ba: 4a:eb:9b:cb:cb:94:1c:fc:2f:fb:1c:d0:3b:77:88: fb:6a:65:28:6c:1d:ab:13:f6:b0:0a:fe:a1:55:9d: 21:e4:74:5e:e8:af:2e:ea:d1:e7:26:2f:ee:0b:8a: 42:e0:13:b5:b8:89:18:0d:60:e8:ab:b5:38:f6:32: 7f:89:8f:4c:f5:32:4b:4d:c0:b9:2f:dd:70:50:57: 3c:67:6c:9c:6b:7b:e3:40:3d:6d:78:52:97:0d:7a: 72:de:44:b5:5f:a9:5f:ca:0b:ea:4a:28:dd:b9:b4: 98:ff:5b:a9:94:92:da:1c:43:c0:b6:ac:27:00:2f: e8:2c:d8:b2:57:81:eb:86:a0:81:5b:b8:5d:bd:87: 9c:ef:91:2f:a3:5c:61:16:61:44:9f:c3:9b:90:a5: 02:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CC:98:2C:1D:F5:1B:DC:B1:55:02:B6:54:87:E8:5E:04:55:16:AD X509v3 Authority Key Identifier: keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:88:d4:c0:0f:3a:a9:6c:31:7c:2b:fe:39:15:72:b5:1c:eb: cd:c7:63:97:f2:a7:ea:7a:12:75:48:e0:57:08:d0:0c:79:cb: 62:e6:db:3f:9f:04:2e:d4:9b:82:83:99:80:0d:52:67:08:0e: 0b:52:bd:04:31:b3:1b:89:c9:b3:81:eb:74:a9:71:d4:ba:e8: e4:60:e3:9a:bc:e3:47:e2:e1:d8:35:ca:8a:3e:e8:58:8d:94: 18:29:08:6a:cb:b7:04:90:b2:3b:23:79:3a:60:7c:f4:54:08: 10:a1:4d:dc:2d:ef:c9:8d:68:cc:77:c3:4e:71:73:2d:b7:84: c4:34:f9:fa:61:e1:3d:45:80:08:9f:be:97:0a:b8:55:bc:bf: e8:7c:f9:f2:db:1e:83:60:a1:ea:76:5f:33:09:74:7a:b6:82: 06:87:7d:08:01:ce:35:88:81:c8:6e:13:e6:29:3d:12:b0:9a: 46:72:83:47:5f:22:ec:93:dc:40:47:b7:de:cb:06:58:bd:0a: 2b:d5:07:f4:6f:ea:df:21:fc:35:90:d6:ba:0c:b4:cf:db:ff: e1:5e:91:3c:ca:b5:75:14:19:e5:ba:55:ce:7e:b7:79:a3:f9: 01:d4:a3:1d:6d:de:d5:36:5e:ec:ac:01:8f:e6:74:f8:71:30: aa:f8:1f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IhB8TSQgTIj/hjPyJFVfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy ODlmOWUwHhcNMjUxMjIwMDUwMTA5WhcNMjUxMjIxMDUwMTA5WjAzMTEwLwYDVQQD EyhkYWNjOTgyYzFkZjUxYmRjYjE1NTAyYjY1NDg3ZTg1ZTA0NTUxNmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwZblmylbLveFpo2bL+VYy5R9z7U IlTavX24/lL/ZJEpIhdeE7r5G18zAHasrXd4QQ6OF9Cakd2IOO/8/78hAlY4vHNp wj6fQ/mliZnRuqh/I+WaYguWmbgr9RIMxKhYdBelSiX64bpK65vLy5Qc/C/7HNA7 d4j7amUobB2rE/awCv6hVZ0h5HRe6K8u6tHnJi/uC4pC4BO1uIkYDWDoq7U49jJ/ iY9M9TJLTcC5L91wUFc8Z2yca3vjQD1teFKXDXpy3kS1X6lfygvqSijdubSY/1up lJLaHEPAtqwnAC/oLNiyV4HrhqCBW7hdvYec75Evo1xhFmFEn8ObkKUCoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrMmCwd9RvcsVUCtlSH6F4EVRatMB8GA1UdIwQY MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt NDhiMTY2NGQ0MGQ1LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1 LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOojUwA86 qWwxfCv+ORVytRzrzcdjl/Kn6noSdUjgVwjQDHnLYubbP58ELtSbgoOZgA1SZwgO C1K9BDGzG4nJs4HrdKlx1Lro5GDjmrzjR+Lh2DXKij7oWI2UGCkIasu3BJCyOyN5 OmB89FQIEKFN3C3vyY1ozHfDTnFzLbeExDT5+mHhPUWACJ++lwq4Vby/6Hz58tse g2Ch6nZfMwl0eraCBod9CAHONYiByG4T5ik9ErCaRnKDR18i7JPcQEe33ssGWL0K K9UH9G/q3yH8NZDWugy0z9v/4V6RPMq1dRQZ5bpVzn63eaP5AdSjHW3e1TZe7KwB j+Z0+HEwqvgf1g== -----END CERTIFICATE-----Generated at Sat Dec 20 08:52:23 2025 by rpki-client