This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json) Hash identifier: /UGm9noMDIGEKKXQ8fMCBXeVx0T+oXPODRBj+qUcA2k= Subject key identifier: EB:79:9F:A8:B1:BA:A5:15:40:6E:4E:F0:71:C6:C1:49:8C:D6:A4:58 Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Certificate serial: 019B1BA9777577F37EFE786F0F3E48AB86FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft Manifest number: 0525 Signing time: Sun 14 Dec 2025 07:00:49 +0000 Manifest this update: Sun 14 Dec 2025 07:00:49 +0000 Manifest next update: Mon 15 Dec 2025 07:00:49 +0000 Files and hashes: 1: gLvldii-qJB8VCnJaWDvi5QbXt8.roa (hash: 9RxPQGeD0pT2vqVcsjjJurQ/oZ8JH2GkOiJjJQsHTb0=) 2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: Kl9/wpN2cnJsdLek/3uwqkLvUtWbr9WIR2VBI8L4ZXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:a9:77:75:77:f3:7e:fe:78:6f:0f:3e:48:ab:86:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b Validity Not Before: Dec 14 07:00:49 2025 GMT Not After : Dec 15 07:00:49 2025 GMT Subject: CN=eb799fa8b1baa515406e4ef071c6c1498cd6a458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:ad:4d:8a:04:3c:0a:08:73:0d:38:f4:94: 29:85:b5:1c:de:59:f5:9c:f5:91:9b:13:89:ea:bf: 00:7e:2f:03:77:67:79:da:56:69:cb:ea:cf:e8:b6: fe:d2:87:aa:48:5f:94:70:cc:c9:30:37:45:83:7a: 19:d8:5f:5f:a0:6b:ae:f9:c4:34:31:e5:78:90:f1: eb:a4:d7:f2:ff:2e:b9:f8:25:05:ac:59:e5:59:5c: 3c:16:c6:c8:38:4d:1b:88:46:53:f0:4c:a0:c8:2b: 0c:79:a8:19:8f:e8:09:2d:da:0c:67:f7:ed:3c:8f: f5:77:ea:ed:0b:5a:fa:e6:41:05:02:8a:43:03:dc: 9b:48:b7:f9:a5:5b:ec:3a:68:4e:59:4d:4e:67:e8: 06:2f:10:a8:ed:ef:12:d7:77:43:ad:20:19:76:51: c6:1b:4c:46:74:f4:35:d2:1a:4b:0d:87:b5:b2:d3: 49:10:dd:1b:24:a6:4a:85:c3:d6:86:15:3f:d2:1b: 1e:1c:1d:c3:b6:c1:df:34:54:01:2a:1f:bc:a6:57: 21:b6:9e:ef:0c:90:c9:fb:30:9e:af:0c:0a:17:f0: 4e:72:fc:7a:42:af:e5:fb:47:ef:03:3c:c2:17:7c: c5:bc:36:87:67:57:98:c4:d5:9e:1e:f5:5f:ca:97: a5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:79:9F:A8:B1:BA:A5:15:40:6E:4E:F0:71:C6:C1:49:8C:D6:A4:58 X509v3 Authority Key Identifier: keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:fb:45:c5:a5:6f:56:5b:8a:a4:e4:fe:38:4a:22:ec:1e:17: 52:02:59:90:49:ca:bd:33:04:6d:b9:68:07:d0:b0:aa:92:d0: 79:02:ee:4d:e6:f9:62:3f:cd:f9:98:23:3c:bb:e5:0f:7a:9f: 78:7b:11:af:06:74:f2:86:91:57:a3:f5:6e:c0:6c:86:77:fd: 20:32:cd:57:38:12:7f:5a:8f:17:e3:b0:e5:da:bc:0c:6e:6d: 31:39:c1:22:ab:c9:f4:2a:a6:bb:e7:86:35:49:40:2e:15:9d: 0b:2a:92:7f:1e:97:9f:aa:f5:be:67:2a:3f:fb:30:fd:8a:45: 17:cf:a4:1c:ac:16:d7:65:25:32:db:6d:d2:2b:34:5f:d2:ff: 03:17:cd:a7:f7:70:50:8b:f8:71:cb:66:e9:89:ec:b3:91:e6: 77:87:e4:07:00:bc:32:53:5e:d7:9a:4f:ce:d0:5a:64:9f:eb: ea:b1:3d:c0:13:61:1d:9d:e6:c1:2e:2f:c4:6b:49:04:1c:c1: 37:9b:ad:c8:11:b3:0c:e9:ba:71:ea:d2:b6:43:d5:9b:7c:3d: 51:92:ef:de:f8:2c:8f:1c:3b:5d:86:87:4c:59:e1:0c:32:4e: 00:a2:cb:34:18:78:bf:cf:9a:70:ff:e0:99:c4:dc:1f:c5:ae: 66:f1:d0:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqXd1d/N+/nhvDz5Iq4b7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx YTVmOGIwHhcNMjUxMjE0MDcwMDQ5WhcNMjUxMjE1MDcwMDQ5WjAzMTEwLwYDVQQD EyhlYjc5OWZhOGIxYmFhNTE1NDA2ZTRlZjA3MWM2YzE0OThjZDZhNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptOtTYoEPAoIcw049JQphbUc3ln1 nPWRmxOJ6r8Afi8Dd2d52lZpy+rP6Lb+0oeqSF+UcMzJMDdFg3oZ2F9foGuu+cQ0 MeV4kPHrpNfy/y65+CUFrFnlWVw8FsbIOE0biEZT8EygyCsMeagZj+gJLdoMZ/ft PI/1d+rtC1r65kEFAopDA9ybSLf5pVvsOmhOWU1OZ+gGLxCo7e8S13dDrSAZdlHG G0xGdPQ10hpLDYe1stNJEN0bJKZKhcPWhhU/0hseHB3DtsHfNFQBKh+8plchtp7v DJDJ+zCerwwKF/BOcvx6Qq/l+0fvAzzCF3zFvDaHZ1eYxNWeHvVfypelIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt5n6ixuqUVQG5O8HHGwUmM1qRYMB8GA1UdIwQY MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuftFxaVv VluKpOT+OEoi7B4XUgJZkEnKvTMEbbloB9CwqpLQeQLuTeb5Yj/N+ZgjPLvlD3qf eHsRrwZ08oaRV6P1bsBshnf9IDLNVzgSf1qPF+Ow5dq8DG5tMTnBIqvJ9Cqmu+eG NUlALhWdCyqSfx6Xn6r1vmcqP/sw/YpFF8+kHKwW12UlMttt0is0X9L/AxfNp/dw UIv4cctm6Ynss5Hmd4fkBwC8MlNe15pPztBaZJ/r6rE9wBNhHZ3mwS4vxGtJBBzB N5utyBGzDOm6cerStkPVm3w9UZLv3vgsjxw7XYaHTFnhDDJOAKLLNBh4v8+acP/g mcTcH8WuZvHQBg== -----END CERTIFICATE-----Generated at Sun Dec 14 16:59:34 2025 by rpki-client