This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json) Hash identifier: evRnov+rrpDCeuRYscD6EP6ILo8Z86pn9YVZVNg1CTU= Subject key identifier: 0C:62:79:4B:C2:F8:BD:DE:4D:AC:A2:A7:EA:6E:F5:88:3F:A4:19:54 Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d Certificate serial: 019B59E367E0AAAFA1E5DD857ECE76E09B4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft Manifest number: 092A Signing time: Fri 26 Dec 2025 09:00:33 +0000 Manifest this update: Fri 26 Dec 2025 09:00:33 +0000 Manifest next update: Sat 27 Dec 2025 09:00:33 +0000 Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: 3bWtqrrQYvwRBSj1ROJPlmi8fbqw6rCjqmzWsiT2N+g=) 2: hS4qE69cRzq1LeuTH9FbxF7EdCM.roa (hash: CNvb1FlCruFxVWACj7/lI66W2B3Fn96cjXQxKd7K6v8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:67:e0:aa:af:a1:e5:dd:85:7e:ce:76:e0:9b:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d Validity Not Before: Dec 26 09:00:33 2025 GMT Not After : Dec 27 09:00:33 2025 GMT Subject: CN=0c62794bc2f8bdde4daca2a7ea6ef5883fa41954 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:da:fd:76:2c:3c:3d:6d:0f:33:2c:0b:98:11: 6e:97:2f:93:24:7a:5e:bd:ee:3f:ed:6d:75:94:25: 4e:92:37:ee:79:73:8c:61:96:7f:ec:1d:bc:5e:09: 44:77:5f:1a:d3:60:cf:81:11:76:1d:f9:ee:29:90: de:53:79:1c:9c:8e:53:e2:a5:33:8c:42:4f:97:b6: c0:7c:88:bc:8f:e0:6e:36:90:ba:ab:55:ee:de:77: b7:77:07:dc:df:3d:b5:e9:23:76:32:bf:f3:41:d4: 4f:3c:2b:3d:af:37:e4:40:31:c4:1f:79:be:f4:93: 9e:71:6c:58:e4:17:7a:1a:a5:aa:c4:68:d7:fd:ac: b8:55:fb:5f:8b:ad:a8:9d:ba:17:8e:58:f5:0b:36: 86:11:a6:b6:62:8d:75:f1:69:3f:4e:5a:66:51:50: ea:d6:2f:5c:97:87:e7:44:d7:87:9c:75:87:95:d0: d5:ed:c7:de:2d:82:38:c6:6a:c3:3f:f3:28:21:76: cc:48:dd:d8:ff:73:82:82:99:3d:02:2a:5d:31:07: c5:3c:56:a3:95:c7:a2:19:62:26:89:f0:40:fb:c9: e1:a4:0a:2a:eb:92:0e:bb:32:0f:a3:2f:90:ad:3a: d3:ec:d4:72:5f:63:c5:7b:6a:34:b2:9c:39:ce:7e: 8c:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:62:79:4B:C2:F8:BD:DE:4D:AC:A2:A7:EA:6E:F5:88:3F:A4:19:54 X509v3 Authority Key Identifier: keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:bc:d9:95:3c:f0:fe:94:aa:2d:bc:5f:cf:e5:76:da:75:7f: 38:41:19:4d:1a:9a:ac:f2:5e:d1:6b:d4:6c:60:62:ef:c1:bd: dd:41:ed:f4:2a:04:e4:a5:5b:41:d7:ca:9f:4d:fa:70:8d:ae: ef:2b:59:0d:52:1a:80:17:99:c3:1b:80:27:af:00:ea:3b:ec: c9:fd:e3:8b:ca:d4:42:4a:92:07:5a:2d:ce:9d:4e:1d:a9:32: f3:bd:92:95:86:a4:0e:17:5a:30:31:74:cf:32:ec:eb:89:44: eb:e9:b4:e8:0d:40:89:75:8b:d0:8b:89:a0:5d:b1:a4:57:cc: c0:57:b7:a3:69:38:8e:b3:2e:5e:f7:bd:78:e6:72:18:f1:80: c8:57:c6:88:b8:3d:82:4f:f1:ab:f3:9b:3a:6d:5a:09:67:83: d5:da:42:10:3e:d0:01:7c:58:52:ea:1a:3c:49:48:58:9b:38: 06:80:55:ce:88:59:e7:c0:1e:93:67:f0:72:bc:ea:73:ad:da: af:93:95:0e:f5:8d:98:8c:44:69:2c:25:82:39:4e:06:39:c8: 55:5b:77:1a:14:e9:63:ca:82:78:d2:c3:4a:7c:3d:1a:75:d9: 81:4e:80:2a:b2:03:70:63:0c:c7:b5:ec:2c:9b:58:d2:c7:63: 22:70:34:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42fgqq+h5d2Ffs524JtLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZjRiOTFhM2ZmY2U5Zjk3NTA1YTczY2ZkNWU0YWQ0ZTM1 ZTA0MmQwHhcNMjUxMjI2MDkwMDMzWhcNMjUxMjI3MDkwMDMzWjAzMTEwLwYDVQQD EygwYzYyNzk0YmMyZjhiZGRlNGRhY2EyYTdlYTZlZjU4ODNmYTQxOTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtr9diw8PW0PMywLmBFuly+TJHpe ve4/7W11lCVOkjfueXOMYZZ/7B28XglEd18a02DPgRF2HfnuKZDeU3kcnI5T4qUz jEJPl7bAfIi8j+BuNpC6q1Xu3ne3dwfc3z216SN2Mr/zQdRPPCs9rzfkQDHEH3m+ 9JOecWxY5Bd6GqWqxGjX/ay4Vftfi62onboXjlj1CzaGEaa2Yo118Wk/TlpmUVDq 1i9cl4fnRNeHnHWHldDV7cfeLYI4xmrDP/MoIXbMSN3Y/3OCgpk9AipdMQfFPFaj lceiGWImifBA+8nhpAoq65IOuzIPoy+QrTrT7NRyX2PFe2o0spw5zn6M8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxieUvC+L3eTayip+pu9Yg/pBlUMB8GA1UdIwQY MBaAFDf0uRo//On5dQWnPP1eStTjXgQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQt YWIyYmFmYTFhZTRkLzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQtYWIyYmFmYTFhZTRk LzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLzZlTzw /pSqLbxfz+V22nV/OEEZTRqarPJe0WvUbGBi78G93UHt9CoE5KVbQdfKn036cI2u 7ytZDVIagBeZwxuAJ68A6jvsyf3ji8rUQkqSB1otzp1OHaky872SlYakDhdaMDF0 zzLs64lE6+m06A1AiXWL0IuJoF2xpFfMwFe3o2k4jrMuXve9eOZyGPGAyFfGiLg9 gk/xq/ObOm1aCWeD1dpCED7QAXxYUuoaPElIWJs4BoBVzohZ58Aek2fwcrzqc63a r5OVDvWNmIxEaSwlgjlOBjnIVVt3GhTpY8qCeNLDSnw9GnXZgU6AKrIDcGMMx7Xs LJtY0sdjInA0XA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:47 2025 by rpki-client