This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json) Hash identifier: mPKJS4OeRW7ij+1XXi3KCbgjwi+4lnhZy9+Y5slwDYI= Subject key identifier: EE:AB:22:8C:6D:C2:55:8D:79:66:02:2A:2A:F3:91:A8:46:6F:C1:55 Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004 Certificate serial: 019B0EC95ABCBCAD3804870957A4173E52FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft Manifest number: 16CB Signing time: Thu 11 Dec 2025 19:00:35 +0000 Manifest this update: Thu 11 Dec 2025 19:00:35 +0000 Manifest next update: Fri 12 Dec 2025 19:00:35 +0000 Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: CsSZNv0jn8Z9yLwL/nT5y1qqzhYqR7rUz21+ZHjAXko=) 2: n9uV52lUlBfny_mibwK9eMiu_og.roa (hash: 54PSRM/jpJmSMS9ihIFUAJNjZSe2qLiVsg1xoZD4Jhk=) 3: spA2D5bFhwjtsAUrsUVWAYuQYCw.roa (hash: G0F7ImWqWoF9HSrIReZ5ZDnra1S9Yg59kPLrgfQKBWo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:5a:bc:bc:ad:38:04:87:09:57:a4:17:3e:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004 Validity Not Before: Dec 11 19:00:35 2025 GMT Not After : Dec 12 19:00:35 2025 GMT Subject: CN=eeab228c6dc2558d7966022a2af391a8466fc155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:56:97:f8:01:c4:99:b5:3a:d1:35:2d:40:a8: a8:5b:3b:20:e5:79:23:f1:c5:40:75:8b:24:97:d2: 85:34:e6:9c:e7:21:ad:49:87:fc:c2:0a:2d:2f:27: 50:05:0a:25:eb:c5:d9:f2:2e:68:02:fd:c3:db:f7: 12:73:51:aa:ee:d5:07:b1:6f:b9:47:4a:14:11:da: e4:2d:c2:e0:11:5e:fe:49:29:35:17:ac:18:f6:d4: ee:df:37:73:7c:de:02:90:36:55:b9:28:97:dd:8f: 67:f0:b4:14:8b:53:8c:25:e4:b3:1c:78:6e:fd:4a: 43:5d:28:59:f7:bb:89:52:87:32:e0:87:5e:73:c4: b1:a7:2b:2c:88:9a:6c:02:98:e2:99:da:d0:1c:4c: 29:04:17:50:8e:aa:37:ca:e0:b9:05:33:a4:e0:d7: cf:94:28:dd:da:49:77:eb:be:29:29:f7:72:79:fc: 39:6e:6b:f8:7a:a1:2b:ed:95:af:28:29:d9:52:0e: bf:da:46:f5:32:86:c0:f9:c6:91:a2:07:92:5c:ba: b7:0f:f9:d8:55:74:88:75:48:d7:df:87:d7:91:5a: 8d:25:c6:51:f3:d5:49:e1:73:1f:76:d5:02:5b:d9: ea:37:31:1e:11:25:7d:d3:f7:a5:da:28:bc:5b:4a: 02:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:AB:22:8C:6D:C2:55:8D:79:66:02:2A:2A:F3:91:A8:46:6F:C1:55 X509v3 Authority Key Identifier: keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e1:ec:f1:38:46:1c:e3:2e:ce:10:92:2b:5c:2e:e2:4a:a7: e4:5f:be:6c:81:ca:94:84:58:37:4e:31:91:85:74:70:32:1b: 76:5e:64:d2:a6:ca:e6:4a:a7:bd:61:ac:74:37:38:61:e1:f8: e3:e6:79:d1:d7:5d:f1:0c:33:8f:6e:a6:13:4b:dc:1f:a8:2d: 0f:55:bc:d4:ed:44:24:de:b6:64:ba:50:27:d3:fb:9b:9b:f9: 02:ed:97:ba:c2:b9:23:63:94:09:e9:fe:6e:e5:3b:df:33:a4: 7e:08:8c:ef:17:06:28:9c:05:af:4d:81:92:cd:bd:fd:1f:f2: ec:9c:a7:64:3d:5a:5f:1e:7e:6a:a6:1a:e0:0d:6e:96:8c:57: 64:bd:96:1a:a3:35:25:8b:ce:15:e4:78:e3:80:b6:2f:b7:8f: f1:a9:9d:4d:ad:0a:b1:cc:20:fb:c6:27:54:bc:7a:12:07:3b: ee:f9:fe:92:3a:f7:0d:2c:28:bd:27:13:79:b0:a5:0e:5d:de: 5b:69:b5:3f:09:92:f5:20:16:16:90:77:ee:86:21:84:25:ca: 8a:19:6f:5d:47:60:4f:87:9f:49:c6:48:30:88:9a:40:41:fe: f8:3c:51:e7:82:98:72:0e:85:3c:f6:01:61:cc:a9:72:b5:70: a8:46:60:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyVq8vK04BIcJV6QXPlL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz ODMwMDQwHhcNMjUxMjExMTkwMDM1WhcNMjUxMjEyMTkwMDM1WjAzMTEwLwYDVQQD EyhlZWFiMjI4YzZkYzI1NThkNzk2NjAyMmEyYWYzOTFhODQ2NmZjMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VaX+AHEmbU60TUtQKioWzsg5Xkj 8cVAdYskl9KFNOac5yGtSYf8wgotLydQBQol68XZ8i5oAv3D2/cSc1Gq7tUHsW+5 R0oUEdrkLcLgEV7+SSk1F6wY9tTu3zdzfN4CkDZVuSiX3Y9n8LQUi1OMJeSzHHhu /UpDXShZ97uJUocy4Idec8SxpyssiJpsApjimdrQHEwpBBdQjqo3yuC5BTOk4NfP lCjd2kl3674pKfdyefw5bmv4eqEr7ZWvKCnZUg6/2kb1MobA+caRogeSXLq3D/nY VXSIdUjX34fXkVqNJcZR89VJ4XMfdtUCW9nqNzEeESV90/el2ii8W0oCrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6rIoxtwlWNeWYCKirzkahGb8FVMB8GA1UdIwQY MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+Hs8ThG HOMuzhCSK1wu4kqn5F++bIHKlIRYN04xkYV0cDIbdl5k0qbK5kqnvWGsdDc4YeH4 4+Z50ddd8Qwzj26mE0vcH6gtD1W81O1EJN62ZLpQJ9P7m5v5Au2XusK5I2OUCen+ buU73zOkfgiM7xcGKJwFr02Bks29/R/y7JynZD1aXx5+aqYa4A1uloxXZL2WGqM1 JYvOFeR444C2L7eP8amdTa0Kscwg+8YnVLx6Egc77vn+kjr3DSwovScTebClDl3e W2m1PwmS9SAWFpB37oYhhCXKihlvXUdgT4efScZIMIiaQEH++DxR54KYcg6FPPYB YcypcrVwqEZgRQ== -----END CERTIFICATE-----Generated at Fri Dec 12 01:41:43 2025 by rpki-client