This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json) Hash identifier: ZuFlVbQhjt+CieQn3ZAID4J+2JhNiIoCGm2qXjATBQM= Subject key identifier: 68:F6:99:0E:8A:83:2B:29:F2:29:82:AC:AF:D9:5B:E2:5E:60:52:AF Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24 Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224 Certificate serial: 019B4392ACE6CB44B4CB656C32BB0AFA4BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft Manifest number: 0F12 Signing time: Mon 22 Dec 2025 01:00:44 +0000 Manifest this update: Mon 22 Dec 2025 01:00:44 +0000 Manifest next update: Tue 23 Dec 2025 01:00:44 +0000 Files and hashes: 1: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: SO+WWVJ0NLtKI4y+d3/Vs2njKOWYZS12mcEAMLv3OYA=) 2: OMa6gi_iwh1hBu7tbqj9s02UqHs.roa (hash: MtN6hH7mkES8J6BxizWre+aErU3W714/kzoONVlpny4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:ac:e6:cb:44:b4:cb:65:6c:32:bb:0a:fa:4b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224 Validity Not Before: Dec 22 01:00:44 2025 GMT Not After : Dec 23 01:00:44 2025 GMT Subject: CN=68f6990e8a832b29f22982acafd95be25e6052af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:88:16:6a:c7:22:dd:b7:16:89:24:69:da:6c: 22:4d:4e:e4:a4:56:4c:63:16:87:62:07:ea:2f:81: 28:40:41:dd:f3:80:33:30:be:ba:4c:2c:2a:ac:49: 56:06:d7:c9:a7:95:67:6f:df:d6:c8:61:52:ca:a9: eb:ad:ee:10:61:32:51:56:cc:0b:a3:56:c3:ba:60: a8:66:b4:02:3f:3a:ee:88:15:64:94:63:69:4e:ab: bf:ac:b6:aa:d2:dc:b1:93:c5:16:06:6f:49:3b:ff: da:24:b6:7a:15:19:a5:83:1d:1c:c8:95:d7:96:99: a2:fd:6e:e8:7b:49:db:21:2b:bd:58:70:c9:50:5a: 86:a1:f5:55:a3:75:94:8c:41:ac:b0:c5:08:30:7e: 0c:ea:f0:cd:8b:e6:a0:22:99:b3:ed:a4:d2:b2:0c: be:c3:50:a4:3f:f3:a2:a0:e9:0e:e5:be:4a:b9:67: c9:21:ce:1e:82:af:b6:a7:46:3d:5b:b9:b3:8c:c0: 23:0a:ea:34:8e:74:bc:5f:b2:91:15:0a:c5:80:0d: 7d:66:9f:09:d1:0e:2a:f1:b7:79:db:aa:e0:bc:45: a0:a8:a1:89:3f:8d:74:c4:30:ba:c8:96:5e:00:c5: 8e:02:d8:47:27:7c:c2:db:9d:b4:19:e7:30:56:8b: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F6:99:0E:8A:83:2B:29:F2:29:82:AC:AF:D9:5B:E2:5E:60:52:AF X509v3 Authority Key Identifier: keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:75:97:65:11:86:43:0a:89:f7:bd:8f:be:36:66:cf:6f:2f: c1:99:95:ea:36:42:b9:b0:c6:85:4b:a8:05:fc:44:df:3f:b6: 42:8c:4a:93:11:2c:6d:6c:39:52:98:da:67:bd:73:7e:1e:96: 30:0d:1f:af:7b:35:30:f7:56:82:bb:9a:35:d9:8d:70:96:36: fb:73:a3:27:2c:a1:58:13:3a:0a:6b:3f:83:22:93:4f:40:c9: 7b:ae:92:3b:3d:bd:e0:99:c0:a6:83:e9:36:cf:d4:f2:a6:77: 4f:ba:6b:ad:9e:ea:be:43:7c:91:08:94:c8:11:d5:63:01:b2: be:02:4c:8b:f4:df:71:c0:e2:6c:0c:1a:a0:c3:bf:c1:78:fd: 86:d2:7a:e4:24:93:35:a8:e1:5c:96:ad:b1:96:fd:af:85:8b: 31:d3:d5:ec:3a:35:43:7a:74:c2:6d:d6:53:63:25:52:7b:fa: 19:55:43:39:31:51:0c:ac:34:1c:87:d4:83:80:46:f6:a3:1d: d0:97:82:0f:be:55:a3:9f:59:1c:7e:39:a6:df:8e:85:12:c2: e2:40:1d:89:41:00:c5:e7:91:34:4e:87:dc:43:3d:8a:90:7a: 5d:68:68:6d:42:da:08:80:be:8d:e9:58:ae:7a:aa:83:4c:dd: 56:fa:4b:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkqzmy0S0y2VsMrsK+kv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3N2JkMTBmN2Q5MDZjMTMxYzhjOWUyZmM3MzE2NDE2ZGY0 YWUyMjQwHhcNMjUxMjIyMDEwMDQ0WhcNMjUxMjIzMDEwMDQ0WjAzMTEwLwYDVQQD Eyg2OGY2OTkwZThhODMyYjI5ZjIyOTgyYWNhZmQ5NWJlMjVlNjA1MmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIgWasci3bcWiSRp2mwiTU7kpFZM YxaHYgfqL4EoQEHd84AzML66TCwqrElWBtfJp5Vnb9/WyGFSyqnrre4QYTJRVswL o1bDumCoZrQCPzruiBVklGNpTqu/rLaq0tyxk8UWBm9JO//aJLZ6FRmlgx0cyJXX lpmi/W7oe0nbISu9WHDJUFqGofVVo3WUjEGssMUIMH4M6vDNi+agIpmz7aTSsgy+ w1CkP/OioOkO5b5KuWfJIc4egq+2p0Y9W7mzjMAjCuo0jnS8X7KRFQrFgA19Zp8J 0Q4q8bd526rgvEWgqKGJP410xDC6yJZeAMWOAthHJ3zC2520GecwVov+rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGj2mQ6Kgysp8imCrK/ZW+JeYFKvMB8GA1UdIwQY MBaAFDd70Q99kGwTHIyeL8cxZBbfSuIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzct NWE5YWM3ZjM5MDIzLzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzctNWE5YWM3ZjM5MDIz LzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXWXZRGG QwqJ972PvjZmz28vwZmV6jZCubDGhUuoBfxE3z+2QoxKkxEsbWw5UpjaZ71zfh6W MA0fr3s1MPdWgruaNdmNcJY2+3OjJyyhWBM6Cms/gyKTT0DJe66SOz294JnApoPp Ns/U8qZ3T7prrZ7qvkN8kQiUyBHVYwGyvgJMi/TfccDibAwaoMO/wXj9htJ65CST NajhXJatsZb9r4WLMdPV7Do1Q3p0wm3WU2MlUnv6GVVDOTFRDKw0HIfUg4BG9qMd 0JeCD75Vo59ZHH45pt+OhRLC4kAdiUEAxeeRNE6H3EM9ipB6XWhobULaCIC+jelY rnqqg0zdVvpLWQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:21:38 2025 by rpki-client