This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json) Hash identifier: wu17z3Oh3ikfqMYse7Duni+q+slOwt3TmLR7XZ0Lf20= Subject key identifier: E8:9E:92:10:80:A9:56:70:63:F2:1D:86:12:84:00:3F:5E:BE:88:A0 Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97 Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97 Certificate serial: 019B0DB6EE9801442583BA23311CDF900517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 14:00:50 +0000 Manifest this update: Thu 11 Dec 2025 14:00:50 +0000 Manifest next update: Fri 12 Dec 2025 14:00:50 +0000 Files and hashes: 1: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: 6OOtP/VpYqrh7r7+lQ8p03btR1e3Ad516tnLIH9z7l4=) 2: UOgjlDZ-hlIE51uRVoyR7KP99NE.roa (hash: 1AY5DsB6GoL7krCLNb7v1DdRQDuAlUbr226PuiYccH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:ee:98:01:44:25:83:ba:23:31:1c:df:90:05:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97 Validity Not Before: Dec 11 14:00:50 2025 GMT Not After : Dec 12 14:00:50 2025 GMT Subject: CN=e89e921080a9567063f21d861284003f5ebe88a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a8:a4:06:90:6c:79:38:ff:0d:f4:03:5d:8c: 8d:b2:30:f2:70:a4:7e:92:8a:76:24:8d:4a:49:c2: db:ea:10:8c:20:da:2c:cd:5d:84:87:0f:58:03:c7: c1:42:da:38:41:8c:d1:90:c1:6f:61:1e:7d:cf:99: 08:c7:d3:5a:a7:5a:b8:58:04:e9:04:21:22:61:04: 58:53:e7:60:14:dc:ea:7c:bc:f4:3b:be:d7:4c:db: b3:88:34:e7:d4:af:06:e8:78:2c:75:7c:2e:b0:b7: 08:87:55:7e:cb:6e:2d:32:92:8a:d5:f1:ed:29:79: 1e:ed:55:2c:f5:58:19:28:85:a9:d2:2e:ad:15:d3: 15:a1:53:89:41:fc:e4:02:20:38:be:d0:cc:32:3f: 8b:61:18:75:03:e8:12:b9:90:94:9a:ae:99:54:1c: 62:4c:8b:44:82:55:fe:ef:98:2a:12:39:97:3b:7d: 85:34:09:80:01:d7:50:6a:b0:90:bc:25:09:c7:63: 1b:c0:c0:07:37:7d:d2:a7:84:ef:49:b7:07:1a:b0: 8a:65:d7:1c:a3:7d:9c:61:2e:2f:f7:03:4f:ca:ce: 6e:c2:73:5c:8f:49:43:83:7c:69:dc:db:37:48:1d: db:ef:f5:69:f1:c0:3e:c3:05:86:fd:b1:b6:36:0a: 58:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:9E:92:10:80:A9:56:70:63:F2:1D:86:12:84:00:3F:5E:BE:88:A0 X509v3 Authority Key Identifier: keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:59:63:dd:db:5e:94:8b:da:cd:94:2d:e8:50:c7:41:db:d3: 4d:fb:1f:b6:8b:45:7f:7b:30:20:19:e8:de:cd:75:2c:b5:e4: 42:99:1c:90:c8:68:58:23:69:5f:15:f0:25:06:2e:3e:53:bf: 07:14:fa:f4:b1:d5:e9:1b:6e:e2:ca:69:b4:9f:4d:8f:81:43: a0:ea:e3:7a:c4:9d:aa:4d:f7:ed:b1:41:ee:0d:3e:f4:2e:58: 9b:98:d2:d1:a1:ab:f8:bf:56:e8:7c:3a:e1:8b:03:13:ce:d0: f6:81:67:df:6c:9f:9a:9e:a7:8a:69:c4:b1:28:c0:a3:dc:76: a6:1f:9d:a7:bf:5d:c7:12:6a:10:2f:09:10:46:78:ef:00:e3: d1:2c:f2:8b:9f:2b:0b:e5:15:54:fb:7e:c1:f7:4e:b1:3a:40: 9a:2d:ba:bd:19:bb:81:a7:c5:19:b3:24:fb:c1:de:4f:87:08: 0c:37:91:34:c9:b3:58:84:fb:91:49:a9:ba:20:db:40:6a:ce: 75:96:e9:cd:da:dc:19:06:9a:e0:24:58:16:79:19:7a:04:6a: 01:93:21:e2:6b:91:b1:0a:1f:32:c7:ec:3a:8f:28:98:86:92: a6:c2:f8:65:64:61:22:cc:39:e4:20:11:b5:cd:22:5d:34:12: ee:9d:89:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtu6YAUQlg7ojMRzfkAUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmY1NWI5NTc0M2E5MTViNzkzZDcyZGU3MWFjOTZjZTYx OThhOTcwHhcNMjUxMjExMTQwMDUwWhcNMjUxMjEyMTQwMDUwWjAzMTEwLwYDVQQD EyhlODllOTIxMDgwYTk1NjcwNjNmMjFkODYxMjg0MDAzZjVlYmU4OGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaikBpBseTj/DfQDXYyNsjDycKR+ kop2JI1KScLb6hCMINoszV2Ehw9YA8fBQto4QYzRkMFvYR59z5kIx9Nap1q4WATp BCEiYQRYU+dgFNzqfLz0O77XTNuziDTn1K8G6HgsdXwusLcIh1V+y24tMpKK1fHt KXke7VUs9VgZKIWp0i6tFdMVoVOJQfzkAiA4vtDMMj+LYRh1A+gSuZCUmq6ZVBxi TItEglX+75gqEjmXO32FNAmAAddQarCQvCUJx2MbwMAHN33Sp4TvSbcHGrCKZdcc o32cYS4v9wNPys5uwnNcj0lDg3xp3Ns3SB3b7/Vp8cA+wwWG/bG2NgpY+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiekhCAqVZwY/IdhhKEAD9evoigMB8GA1UdIwQY MBaAFDf/VblXQ6kVt5PXLecayWzmGYqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEt Nzc1MDk3MjI2NWFhLzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9lMDA1OWYtYjkxMC00YmI3LTkzNDEtNzc1MDk3MjI2NWFh LzEvTl85VnVWZERxUlczazljdDV4ckpiT1laaXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVlj3dte lIvazZQt6FDHQdvTTfsftotFf3swIBno3s11LLXkQpkckMhoWCNpXxXwJQYuPlO/ BxT69LHV6Rtu4spptJ9Nj4FDoOrjesSdqk337bFB7g0+9C5Ym5jS0aGr+L9W6Hw6 4YsDE87Q9oFn32yfmp6nimnEsSjAo9x2ph+dp79dxxJqEC8JEEZ47wDj0Szyi58r C+UVVPt+wfdOsTpAmi26vRm7gafFGbMk+8HeT4cIDDeRNMmzWIT7kUmpuiDbQGrO dZbpzdrcGQaa4CRYFnkZegRqAZMh4muRsQofMsfsOo8omIaSpsL4ZWRhIsw55CAR tc0iXTQS7p2Jhw== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:20 2025 by rpki-client