This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json) Hash identifier: THMzuvQTPVgRZO+tjm0gA8GtPUTYi9XEM1zhpA0E4Bo= Subject key identifier: A5:D1:71:E9:D8:BD:83:F8:54:34:41:61:EF:E2:9E:EA:5C:6D:66:FC Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1 Certificate serial: 019B2E546E0C35CA7F28F7381C05CEAF16D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft Manifest number: 0D2D Signing time: Wed 17 Dec 2025 22:00:43 +0000 Manifest this update: Wed 17 Dec 2025 22:00:43 +0000 Manifest next update: Thu 18 Dec 2025 22:00:43 +0000 Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: njZQeoZ3TiAJPjpDcPsjif4mlocYo+RH8KgwHR7VQiU=) 2: vmuvpxt5NWFRchGpjymjM-OTFyk.roa (hash: xudIwgzuBx5c488Lg5NntvMmtHShvLXZUS8ATmxeVvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:6e:0c:35:ca:7f:28:f7:38:1c:05:ce:af:16:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1 Validity Not Before: Dec 17 22:00:43 2025 GMT Not After : Dec 18 22:00:43 2025 GMT Subject: CN=a5d171e9d8bd83f854344161efe29eea5c6d66fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:14:1b:b9:c5:07:fd:3f:43:36:d0:b1:81: cf:b4:eb:a8:e8:e9:bf:2d:68:85:fc:cf:c4:46:09: a0:a2:1e:d3:a0:ed:98:f7:6b:44:0b:97:ae:ac:91: dc:d8:a0:49:07:fb:55:0b:70:66:fe:63:22:a4:74: 02:3d:17:56:47:64:7a:72:a3:de:8f:c6:07:44:7d: 44:05:51:a6:fc:08:99:c7:e8:8a:d6:80:0a:ca:e9: a2:0a:31:49:61:d3:9e:01:fd:45:97:f5:a4:a6:2a: 6a:83:14:d6:a2:8d:74:15:65:80:28:ae:49:e3:b8: 31:da:b9:9c:ef:e4:ce:48:4f:89:b4:9e:3b:a5:b2: f4:ad:ec:83:db:c7:c7:b5:c7:bc:7a:f6:02:a5:c5: cb:74:65:0c:73:27:e4:05:e6:78:a7:85:4f:13:74: 7a:2d:ac:56:26:2f:9c:51:ba:7d:e4:78:f6:4d:3d: a5:80:fd:de:c6:a6:e1:dd:8f:b5:8b:08:5e:6a:19: e3:af:ad:b2:6e:01:e6:c4:5b:70:dd:d6:ec:ca:2d: ee:5f:9e:65:40:87:1c:f1:e6:92:15:01:c7:72:9d: 3e:76:ce:8b:65:f5:4b:b2:2c:33:4a:d3:1e:e2:41: 66:76:69:f9:0b:00:57:f0:a0:4b:d5:5a:21:fa:2d: e3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D1:71:E9:D8:BD:83:F8:54:34:41:61:EF:E2:9E:EA:5C:6D:66:FC X509v3 Authority Key Identifier: keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fb:4c:05:16:f2:14:2b:b9:d7:7c:d9:2b:92:87:8f:05:d1: 4e:c9:dc:d2:63:72:45:bb:c3:ec:f7:f5:3f:c0:ee:be:71:94: c7:e4:fc:f7:57:48:6a:c9:8f:0b:37:62:01:9f:f4:90:51:43: e8:0d:e0:0a:a6:4a:0f:ac:08:81:2a:60:04:7d:b2:86:ab:87: 25:52:92:63:28:bb:40:27:c1:40:74:b0:40:00:d6:5e:b3:73: 96:0a:bb:fb:92:c7:a0:c6:94:50:8d:4c:01:61:07:8c:3b:6a: d4:ef:46:7e:35:60:07:11:a6:d5:a8:15:d6:8a:14:18:26:e5: dd:f1:bf:c2:bf:df:f0:a8:c6:57:c4:b3:17:de:c7:24:92:d9: 42:82:e1:96:ec:3a:d3:b3:7e:44:26:e0:05:f3:fe:05:15:a0: 8d:2b:d4:64:2c:ea:04:73:d1:fd:f9:27:81:51:45:49:c7:ba: f9:be:a5:58:ee:50:97:6d:b7:fd:10:a8:aa:f2:ac:c6:ce:8e: a6:5e:31:29:c2:b8:fd:24:19:dd:da:e1:76:8a:53:28:cf:db: 88:ab:5a:bc:fc:d7:d2:c2:96:9e:38:0a:11:0a:51:09:71:d7: 48:3b:25:df:e8:3a:a7:05:3e:4b:07:82:12:9d:92:ab:ad:aa: 5c:47:a5:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVG4MNcp/KPc4HAXOrxbQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3Nzc4NjgxMzYxYjFmZmY4N2NlMzk4NDAyZWZhNjM4Njll NWJmZDEwHhcNMjUxMjE3MjIwMDQzWhcNMjUxMjE4MjIwMDQzWjAzMTEwLwYDVQQD EyhhNWQxNzFlOWQ4YmQ4M2Y4NTQzNDQxNjFlZmUyOWVlYTVjNmQ2NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvsUG7nFB/0/QzbQsYHPtOuo6Om/ LWiF/M/ERgmgoh7ToO2Y92tEC5eurJHc2KBJB/tVC3Bm/mMipHQCPRdWR2R6cqPe j8YHRH1EBVGm/AiZx+iK1oAKyumiCjFJYdOeAf1Fl/WkpipqgxTWoo10FWWAKK5J 47gx2rmc7+TOSE+JtJ47pbL0reyD28fHtce8evYCpcXLdGUMcyfkBeZ4p4VPE3R6 LaxWJi+cUbp95Hj2TT2lgP3exqbh3Y+1iwheahnjr62ybgHmxFtw3dbsyi3uX55l QIcc8eaSFQHHcp0+ds6LZfVLsiwzStMe4kFmdmn5CwBX8KBL1Voh+i3jEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXRcenYvYP4VDRBYe/inupcbWb8MB8GA1UdIwQY MBaAFDd3hoE2Gx//h845hALvpjhp5b/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUt ZTUzZjkwNGExZjU4LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC82NjBjY2EtYzFhYS00NTU4LWFkMWUtZTUzZjkwNGExZjU4 LzEvTjNlR2dUWWJIXy1IemptRUF1LW1PR25sdjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhftMBRby FCu513zZK5KHjwXRTsnc0mNyRbvD7Pf1P8DuvnGUx+T891dIasmPCzdiAZ/0kFFD 6A3gCqZKD6wIgSpgBH2yhquHJVKSYyi7QCfBQHSwQADWXrNzlgq7+5LHoMaUUI1M AWEHjDtq1O9GfjVgBxGm1agV1ooUGCbl3fG/wr/f8KjGV8SzF97HJJLZQoLhluw6 07N+RCbgBfP+BRWgjSvUZCzqBHPR/fkngVFFSce6+b6lWO5Ql223/RCoqvKsxs6O pl4xKcK4/SQZ3drhdopTKM/biKtavPzX0sKWnjgKEQpRCXHXSDsl3+g6pwU+SweC Ep2Sq62qXEeltg== -----END CERTIFICATE-----Generated at Thu Dec 18 04:21:05 2025 by rpki-client