This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json) Hash identifier: 5g6qB6G2Xt3XLC2zAxBm3hVqi2OQmfX//BP/IjcS9fc= Subject key identifier: B7:8F:75:93:7D:08:02:32:A9:79:BA:FE:95:0A:54:73:6A:89:1A:65 Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Certificate serial: 019B5976EF54B49286EDC5A08DE6CD5C1055 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft Manifest number: 17A4 Signing time: Fri 26 Dec 2025 07:02:05 +0000 Manifest this update: Fri 26 Dec 2025 07:02:05 +0000 Manifest next update: Sat 27 Dec 2025 07:02:05 +0000 Files and hashes: 1: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: X8Rq9bBCVcmfpBM/Tt7Zw6JSZacnlQZ3AiVITf+jxZo=) 2: PRhohmSPpTdafiCYHQlb6tS5RSA.roa (hash: rmrtG9C35CBJyHZUuhN45njc7Z7w311hCWAJB2ctSsg=) 3: U3FGMgcx33zABNd6WUQZ6FgIXMg.roa (hash: Wpl9P0cBekHap/iywSD8clsCi8JMACpk0Rm1bx3lrQQ=) 4: ag6Uw2WZeIksxGOXDr4DgUkmA5c.roa (hash: Dv4MeWf6ZNTTsICz0sxMh5s96US2ndB/BMpQt263Gn0=) 5: hn5PYDOLpsdmTwt2qZTXNCawnyY.roa (hash: 3JeglmLM9o2mfs2x0MSYzgxU3A+vKl/1QHtc/EU9QCM=) 6: ncXYiMMk7Py1Om5tGMqWGLBtpDE.roa (hash: ue3PRYMatnVnCc7uFg9uHpheEoijmvmRSQgE1aUj8Qs=) 7: pehnBB-B-wysgLV5x41--aRvVZU.roa (hash: znIOUjgtTlPjJizZbJTREWW6ctyWS6FYMjde0/qvy2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:ef:54:b4:92:86:ed:c5:a0:8d:e6:cd:5c:10:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb Validity Not Before: Dec 26 07:02:05 2025 GMT Not After : Dec 27 07:02:05 2025 GMT Subject: CN=b78f75937d080232a979bafe950a54736a891a65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:f5:22:cb:79:01:66:8b:41:fc:05:c3:25: 6a:f9:c3:22:b4:41:44:ee:92:57:30:40:71:63:ec: 2b:0a:60:4c:88:d1:87:44:39:bf:b1:0d:24:56:57: 06:7d:f3:05:08:eb:af:0b:c8:be:ed:65:d5:2b:ba: 1e:35:25:00:28:e9:56:a4:24:c4:9f:f5:bb:11:56: 52:a2:4b:bd:23:2a:2d:73:e1:6a:cc:29:f4:98:16: 2c:73:44:c4:8a:23:42:f7:9c:b9:fd:b3:d4:df:1b: ef:8e:6c:51:8c:31:61:70:28:e7:7e:d8:7a:fd:63: dd:e6:e1:4a:61:d6:c3:07:2c:8c:2b:06:ca:c1:75: 7e:0b:7b:4e:bc:fd:c4:fa:a0:e5:e3:4b:42:e9:a7: d2:e1:3c:a3:ed:4e:1c:1c:42:84:2d:c5:94:66:68: ff:cf:50:fb:47:19:49:f2:ab:1e:8e:5b:56:b8:b6: cd:fa:a9:31:b6:d4:aa:ac:de:7d:e9:39:30:28:7a: dd:a7:ee:42:11:cf:73:ab:4a:30:e9:62:e6:04:e6: 60:76:b3:1b:7c:01:98:e4:f6:3e:9e:78:43:ce:40: f7:b1:fb:22:89:df:e8:dc:7b:70:84:be:bd:18:3f: 91:22:8a:56:79:50:7a:d1:48:21:2f:d2:9b:4d:09: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8F:75:93:7D:08:02:32:A9:79:BA:FE:95:0A:54:73:6A:89:1A:65 X509v3 Authority Key Identifier: keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:88:b2:52:d0:8b:7b:99:01:3e:2e:5e:3f:1a:f7:86:9f:c3: 1c:fb:a5:b4:83:38:c2:6e:40:c7:2a:69:ab:1d:9a:02:9d:9d: 32:1f:7c:de:b7:21:d0:70:e7:9e:68:e3:e5:54:01:4b:0c:4a: 09:39:b4:fe:9d:3d:29:5e:47:6e:18:87:d7:f8:e6:99:96:8c: 22:93:20:89:07:d9:4f:b6:b5:b5:10:dd:3a:3f:f3:98:ea:58: 9e:c8:15:c6:4e:bb:6b:00:c1:18:7f:7b:6a:f8:37:95:aa:81: 8a:39:c8:e5:07:58:26:fd:31:f7:53:18:11:95:93:69:2d:44: f7:ba:d7:d8:82:1c:0c:44:29:98:ad:d8:0c:6d:5e:49:8c:57: 9f:06:e2:73:e1:cf:54:04:f6:89:82:f0:6e:b6:a2:3d:1c:5a: 47:50:71:7c:49:b2:e3:a2:2f:12:86:ff:96:75:f5:1c:a7:b6: 92:25:9f:10:ee:1d:c1:78:e8:22:a0:38:8f:fb:ca:e8:68:b8: 5b:78:71:05:27:09:af:2d:5f:8c:11:05:07:d4:64:c4:50:bd: 6c:87:dd:83:c6:c9:70:40:ac:e5:36:6e:d3:a6:49:24:bb:fb: 9d:12:d7:e7:d9:49:c9:8b:14:40:3a:de:2f:cd:37:6f:33:c9: 32:b5:bb:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdu9UtJKG7cWgjebNXBBVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0 NTBhZWIwHhcNMjUxMjI2MDcwMjA1WhcNMjUxMjI3MDcwMjA1WjAzMTEwLwYDVQQD EyhiNzhmNzU5MzdkMDgwMjMyYTk3OWJhZmU5NTBhNTQ3MzZhODkxYTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUP1Ist5AWaLQfwFwyVq+cMitEFE 7pJXMEBxY+wrCmBMiNGHRDm/sQ0kVlcGffMFCOuvC8i+7WXVK7oeNSUAKOlWpCTE n/W7EVZSoku9Iyotc+FqzCn0mBYsc0TEiiNC95y5/bPU3xvvjmxRjDFhcCjnfth6 /WPd5uFKYdbDByyMKwbKwXV+C3tOvP3E+qDl40tC6afS4Tyj7U4cHEKELcWUZmj/ z1D7RxlJ8qsejltWuLbN+qkxttSqrN596TkwKHrdp+5CEc9zq0ow6WLmBOZgdrMb fAGY5PY+nnhDzkD3sfsiid/o3HtwhL69GD+RIopWeVB60UghL9KbTQkwVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLePdZN9CAIyqXm6/pUKVHNqiRplMB8GA1UdIwQY MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt YTRkYjM5NmM4OTg3LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3 LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJIiyUtCL e5kBPi5ePxr3hp/DHPultIM4wm5Axyppqx2aAp2dMh983rch0HDnnmjj5VQBSwxK CTm0/p09KV5HbhiH1/jmmZaMIpMgiQfZT7a1tRDdOj/zmOpYnsgVxk67awDBGH97 avg3laqBijnI5QdYJv0x91MYEZWTaS1E97rX2IIcDEQpmK3YDG1eSYxXnwbic+HP VAT2iYLwbraiPRxaR1BxfEmy46IvEob/lnX1HKe2kiWfEO4dwXjoIqA4j/vK6Gi4 W3hxBScJry1fjBEFB9RkxFC9bIfdg8bJcECs5TZu06ZJJLv7nRLX59lJyYsUQDre L803bzPJMrW7Zg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:13:14 2025 by rpki-client