This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json) Hash identifier: 8h1paafMl59Jhzvz0tP8epEp33X23LiB136IsRZCMdo= Subject key identifier: D9:CC:E3:6A:87:F9:D2:E2:2F:39:E8:49:2F:3C:5D:DE:67:F2:91:54 Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9 Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9 Certificate serial: 019B1A28DEA365E165C0639EEEDF462FB6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 00:00:44 +0000 Manifest this update: Sun 14 Dec 2025 00:00:44 +0000 Manifest next update: Mon 15 Dec 2025 00:00:44 +0000 Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: VvZC6mubO/OlMcr13sJkZGip7O3k2WpQw6RzIGmLm2U=) 2: Ofe5y963IBdAewU6cuUJ3GOhnPg.roa (hash: wYPWSR0SRCo8lw+izQyw6mN43vzofM40zE5eYO1oT9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:28:de:a3:65:e1:65:c0:63:9e:ee:df:46:2f:b6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9 Validity Not Before: Dec 14 00:00:44 2025 GMT Not After : Dec 15 00:00:44 2025 GMT Subject: CN=d9cce36a87f9d2e22f39e8492f3c5dde67f29154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:12:6b:f7:d6:18:54:98:72:fd:0e:06:cf:a0: 6a:27:96:b0:0e:27:95:0f:5b:05:7c:08:a4:ff:80: 06:28:6d:51:cc:53:d6:7f:6c:54:13:26:af:09:2f: 2a:28:b0:58:bf:e3:8e:86:f8:a9:5a:57:2b:70:1f: ee:86:11:17:77:e4:7a:70:4d:64:a3:da:18:9b:be: da:51:b3:3f:68:12:4c:17:fa:fb:c8:da:6c:f3:52: 73:c5:7f:d7:2f:a3:68:dd:e1:b5:44:87:fc:2e:84: 2b:b8:77:4f:75:82:5b:ed:c1:b7:e0:51:8f:88:fa: 92:b7:e6:99:a7:e9:39:15:fe:89:02:c9:75:8e:35: 1e:5b:7c:57:31:44:5a:5f:66:9d:ef:cc:e9:61:a4: bd:48:94:30:f5:f3:6f:64:17:28:59:7f:4a:54:1a: be:66:0b:6d:75:ff:8e:d1:2a:7d:69:77:66:0b:4c: 22:66:a9:55:7f:ef:a7:62:d0:34:47:ca:92:8d:17: 9b:f2:50:78:f6:67:80:f6:ef:3a:2b:62:c9:25:f6: 3c:83:bf:5a:71:64:20:a1:b6:7c:f4:43:05:8c:b9: d0:7c:31:4c:1c:fb:66:87:a1:3d:09:6a:96:1a:53: 3c:00:f9:f3:27:af:97:c7:a1:13:e8:01:99:16:7e: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CC:E3:6A:87:F9:D2:E2:2F:39:E8:49:2F:3C:5D:DE:67:F2:91:54 X509v3 Authority Key Identifier: keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:07:28:e9:a5:b2:f5:31:5f:cf:c4:65:90:94:21:4b:6d:52: d0:aa:da:5a:40:86:b5:a9:3e:a1:2c:55:3e:75:a4:54:37:30: d6:a1:b1:ee:fc:2c:11:af:18:fb:71:29:3f:25:ae:92:15:17: 7f:dd:f9:e8:47:d4:3c:d0:ed:83:a1:3d:c1:10:18:06:1c:39: 5a:0d:8f:7e:9f:2d:aa:d8:59:69:d6:9b:93:70:b5:c1:f8:3f: 43:32:47:e0:df:17:47:fc:73:df:d2:29:d6:22:df:7d:9d:e9: 28:b9:d4:78:fa:17:e2:54:bf:50:c8:50:94:9a:22:32:16:54: c0:98:70:6a:17:64:cf:53:07:1d:4b:cc:27:b8:33:a4:a6:cc: d4:0a:77:59:96:26:6d:1d:a2:d7:01:b8:dc:33:9a:a7:7f:59: 1d:f3:00:9c:10:2b:87:8c:82:72:ed:1b:ce:7f:a0:e0:90:f2: b5:02:f8:65:f0:85:49:51:14:be:14:9e:2f:da:6f:dd:96:52: e6:7d:b3:11:c7:ff:ea:fb:d1:ce:30:41:99:1e:22:23:08:e9: 7f:d1:95:a9:93:e2:e6:fc:b6:dc:da:1d:ab:17:56:d5:51:bd: 95:91:35:0b:d1:ca:fc:44:d6:8a:b5:4b:fb:d5:d0:0b:3a:36: 09:ec:11:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaKN6jZeFlwGOe7t9GL7b+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTViOGNkZmQxZDc5N2Q4NjA2NjBlMzRiZmExYTJhZDg1 ZmY5ZDkwHhcNMjUxMjE0MDAwMDQ0WhcNMjUxMjE1MDAwMDQ0WjAzMTEwLwYDVQQD EyhkOWNjZTM2YTg3ZjlkMmUyMmYzOWU4NDkyZjNjNWRkZTY3ZjI5MTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxJr99YYVJhy/Q4Gz6BqJ5awDieV D1sFfAik/4AGKG1RzFPWf2xUEyavCS8qKLBYv+OOhvipWlcrcB/uhhEXd+R6cE1k o9oYm77aUbM/aBJMF/r7yNps81JzxX/XL6No3eG1RIf8LoQruHdPdYJb7cG34FGP iPqSt+aZp+k5Ff6JAsl1jjUeW3xXMURaX2ad78zpYaS9SJQw9fNvZBcoWX9KVBq+ Zgttdf+O0Sp9aXdmC0wiZqlVf++nYtA0R8qSjReb8lB49meA9u86K2LJJfY8g79a cWQgobZ89EMFjLnQfDFMHPtmh6E9CWqWGlM8APnzJ6+Xx6ET6AGZFn4PkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnM42qH+dLiLznoSS88Xd5n8pFUMB8GA1UdIwQY MBaAFDeluM39HXl9hgZg40v6GirYX/nZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUt ODExNDRmZDAxNTY0LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUtODExNDRmZDAxNTY0 LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArAco6aWy 9TFfz8RlkJQhS21S0KraWkCGtak+oSxVPnWkVDcw1qGx7vwsEa8Y+3EpPyWukhUX f9356EfUPNDtg6E9wRAYBhw5Wg2Pfp8tqthZadabk3C1wfg/QzJH4N8XR/xz39Ip 1iLffZ3pKLnUePoX4lS/UMhQlJoiMhZUwJhwahdkz1MHHUvMJ7gzpKbM1Ap3WZYm bR2i1wG43DOap39ZHfMAnBArh4yCcu0bzn+g4JDytQL4ZfCFSVEUvhSeL9pv3ZZS 5n2zEcf/6vvRzjBBmR4iIwjpf9GVqZPi5vy23NodqxdW1VG9lZE1C9HK/ETWirVL +9XQCzo2CewRAg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:41:23 2025 by rpki-client