This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json) Hash identifier: jUnbRmoz3YZ89D28kG7b10zOq9sT5vw88Bqvq0Ixbpg= Subject key identifier: 9E:B2:68:32:B6:87:77:98:49:8F:3D:09:0F:CE:81:E4:3C:5D:46:10 Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Certificate serial: 019B0E92641FDCBDE4AF4AADE14BB6D89E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft Manifest number: 0E27 Signing time: Thu 11 Dec 2025 18:00:33 +0000 Manifest this update: Thu 11 Dec 2025 18:00:33 +0000 Manifest next update: Fri 12 Dec 2025 18:00:33 +0000 Files and hashes: 1: 58JHZYwChQxy5A0DEGSJKm5qgGY.roa (hash: xeMISReSvUH9kHX33+O3dRk8u4xWQHey/QlYUL5cwIs=) 2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: UR7LhTY+mjvI6mMC/wyiZsvbQlU2/6+zcQVGE/a0C+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:64:1f:dc:bd:e4:af:4a:ad:e1:4b:b6:d8:9e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5 Validity Not Before: Dec 11 18:00:33 2025 GMT Not After : Dec 12 18:00:33 2025 GMT Subject: CN=9eb26832b6877798498f3d090fce81e43c5d4610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:93:cd:7c:e7:3d:61:44:3a:d2:e2:5d:e0: af:34:95:0b:db:18:fa:90:94:cf:42:33:8b:d2:ca: 97:aa:18:48:49:b9:c4:14:4e:50:38:42:73:31:d6: 21:96:62:0c:ff:57:11:5c:2f:c2:ea:4c:d9:f4:d3: 90:c3:d3:02:1b:74:f6:86:67:ea:97:21:80:24:43: 33:12:13:eb:36:f5:6f:40:b1:7e:46:91:f0:50:b8: 98:66:5b:52:06:99:61:f9:b4:d0:2e:ae:ce:fb:e3: 95:f8:9a:6c:31:9a:47:85:bc:c5:6e:58:c8:25:6c: 6d:5d:5c:ee:26:a6:4f:a5:f3:17:0c:9e:0c:45:33: 6a:36:95:29:a5:f8:bc:9a:60:98:9b:c6:1b:e9:b3: f4:2a:7a:d5:54:cd:36:48:d9:26:f7:5b:c1:41:bf: 4a:7b:9b:f5:ed:64:8b:cc:c5:31:43:6b:df:fa:2f: 0b:16:38:1e:c3:f4:ab:0e:e7:af:e8:cb:9f:12:b6: 38:45:7c:e1:e0:b1:3a:16:e1:88:d8:23:4e:9e:71: 20:03:5d:0b:69:f1:68:e5:90:50:84:0e:7c:a8:6f: 1a:4d:58:67:15:43:b2:bc:e6:34:28:21:13:62:f6: 47:b2:05:ec:0a:98:21:62:0c:69:c0:94:ab:8b:cc: 2b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B2:68:32:B6:87:77:98:49:8F:3D:09:0F:CE:81:E4:3C:5D:46:10 X509v3 Authority Key Identifier: keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d1:da:2b:83:c0:d7:34:96:d7:2d:e2:9f:a8:55:58:70:e7: cf:57:6e:86:9b:22:d5:46:cf:98:6a:56:db:e2:5e:9a:dc:78: 17:1b:03:6e:a3:15:9f:b5:4e:0f:62:a7:4d:6b:22:26:e3:48: 0c:cc:ee:cb:b5:53:35:ff:e6:06:ba:fe:81:68:52:2f:8e:c4: 70:3f:e3:37:7b:e1:17:bb:61:a4:9a:9d:07:9a:17:87:a9:01: df:e3:ae:73:83:b6:41:66:d8:86:51:98:b4:c9:8e:7e:d3:6f: 92:0e:33:96:2f:36:62:92:53:36:12:6e:34:5c:20:db:17:e1: 55:70:10:5f:84:0b:9d:fd:80:51:33:f3:36:78:67:6f:ca:e9: 99:ae:98:92:d0:4a:5a:27:08:cf:6f:ac:31:28:63:85:dd:4b: 62:57:c9:6f:65:e8:17:93:4b:39:81:61:e1:6e:a3:f5:a1:83: cb:bf:48:a5:84:76:a7:cb:29:31:a2:f5:b7:a6:d1:6f:95:53: 27:fe:b8:d5:df:3e:b4:39:1d:b8:50:53:5d:1a:01:23:14:c9: 3e:c1:d8:e7:41:fc:67:b1:fd:70:f5:36:11:f8:03:65:c4:2c: f9:d9:9f:02:ef:2f:97:5a:45:ec:50:57:05:ee:7e:cf:b7:7f: d3:cf:9a:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkmQf3L3kr0qt4Uu22J4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NjAyNTM5ZWMzMmMzOTE5ZmYxY2JjOTU5NGRkY2FiODE1 Njc0YzUwHhcNMjUxMjExMTgwMDMzWhcNMjUxMjEyMTgwMDMzWjAzMTEwLwYDVQQD Eyg5ZWIyNjgzMmI2ODc3Nzk4NDk4ZjNkMDkwZmNlODFlNDNjNWQ0NjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljSTzXznPWFEOtLiXeCvNJUL2xj6 kJTPQjOL0sqXqhhISbnEFE5QOEJzMdYhlmIM/1cRXC/C6kzZ9NOQw9MCG3T2hmfq lyGAJEMzEhPrNvVvQLF+RpHwULiYZltSBplh+bTQLq7O++OV+JpsMZpHhbzFbljI JWxtXVzuJqZPpfMXDJ4MRTNqNpUppfi8mmCYm8Yb6bP0KnrVVM02SNkm91vBQb9K e5v17WSLzMUxQ2vf+i8LFjgew/SrDuev6MufErY4RXzh4LE6FuGI2CNOnnEgA10L afFo5ZBQhA58qG8aTVhnFUOyvOY0KCETYvZHsgXsCpghYgxpwJSri8wrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6yaDK2h3eYSY89CQ/OgeQ8XUYQMB8GA1UdIwQY MBaAFDdgJTnsMsORn/HLyVlN3KuBVnTFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQt MDc2ZTFkNzdhZWJlLzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8yMTU1ZjEtOTc2YS00ZjdlLTk1YTQtMDc2ZTFkNzdhZWJl LzEvTjJBbE9ld3l3NUdmOGN2SldVM2NxNEZXZE1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9HaK4PA 1zSW1y3in6hVWHDnz1duhpsi1UbPmGpW2+Jemtx4FxsDbqMVn7VOD2KnTWsiJuNI DMzuy7VTNf/mBrr+gWhSL47EcD/jN3vhF7thpJqdB5oXh6kB3+Ouc4O2QWbYhlGY tMmOftNvkg4zli82YpJTNhJuNFwg2xfhVXAQX4QLnf2AUTPzNnhnb8rpma6YktBK WicIz2+sMShjhd1LYlfJb2XoF5NLOYFh4W6j9aGDy79IpYR2p8spMaL1t6bRb5VT J/641d8+tDkduFBTXRoBIxTJPsHY50H8Z7H9cPU2EfgDZcQs+dmfAu8vl1pF7FBX Be5+z7d/08+aDg== -----END CERTIFICATE-----Generated at Fri Dec 12 01:29:25 2025 by rpki-client