This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json) Hash identifier: S4AifSIreySYL8f/lQerc2BSgYRf2kf9vBOv3e23N4I= Subject key identifier: 38:AC:8E:1E:A6:24:C1:D3:B6:D8:26:00:28:D4:E3:5F:7F:7E:F1:2B Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e Certificate serial: 019B3268E0AD394CE7979149B95F10C3E2A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 17:01:32 +0000 Manifest this update: Thu 18 Dec 2025 17:01:32 +0000 Manifest next update: Fri 19 Dec 2025 17:01:32 +0000 Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: PzCUM4Unuetu9FHJi6FW0tQ+pzYkoRDwja0WHkHnGp4=) 2: TLZrPYGbv3OSz3l-n9m1uFTtYyY.roa (hash: BAfT0SDdeatk44A0MoM3KqLiELOkYEeVNpqrfHgFPvo=) 3: fTuGHUDbLXIf1K1JGZkDmgp4h30.roa (hash: CE5/seUejdLKBZqDs568ZVcYXPKEXW1OP4zxVz04Gmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:e0:ad:39:4c:e7:97:91:49:b9:5f:10:c3:e2:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e Validity Not Before: Dec 18 17:01:32 2025 GMT Not After : Dec 19 17:01:32 2025 GMT Subject: CN=38ac8e1ea624c1d3b6d8260028d4e35f7f7ef12b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:6b:81:61:ac:c5:69:3a:81:83:93:af:ef: 03:0a:e8:5b:a8:b6:f0:b3:3a:4f:de:a9:ba:ea:96: d8:c7:71:fc:a0:5b:e4:7b:59:af:03:63:5b:51:2b: fe:41:9c:95:0a:1c:e3:2a:74:7c:db:ef:c4:a6:2e: d0:e2:dc:0d:10:0f:df:f9:d3:1b:84:b1:a7:84:2d: 0f:72:cf:60:0d:db:07:13:38:f2:4d:f5:fe:bb:06: 90:b0:17:6a:40:38:f2:5c:a7:06:fc:96:70:17:81: 1b:60:c9:0b:91:0a:31:f6:eb:5e:36:41:42:52:32: 94:e3:f4:aa:1e:82:b9:62:7f:43:9a:dd:33:21:38: b7:cd:de:7e:d6:f4:b4:41:08:48:85:71:41:56:85: 5f:80:ef:8e:d2:97:89:45:a1:aa:6d:fd:d3:bb:20: 3d:4a:c8:6b:ae:85:e2:3d:77:0e:16:b7:f9:08:be: b7:15:17:f9:80:a3:03:16:53:b7:fa:59:9c:e3:7f: ad:0f:e8:a9:c7:d2:e6:38:ab:a5:18:c4:18:ad:50: 9b:7d:83:d4:7d:9e:30:97:b1:0b:1d:7c:52:56:19: 3c:be:b9:05:c7:bc:d7:d4:8b:31:5f:2b:7b:65:c9: a6:78:0a:d7:7b:7e:be:75:ca:7a:18:61:b4:50:76: 1d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:AC:8E:1E:A6:24:C1:D3:B6:D8:26:00:28:D4:E3:5F:7F:7E:F1:2B X509v3 Authority Key Identifier: keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:13:d6:81:16:7b:ac:59:e3:7f:f6:63:13:01:ee:ec:c1:14: 08:67:21:7f:07:37:40:e1:2e:ed:d7:75:60:d1:fc:a2:b8:a2: 33:3c:37:1a:6e:7d:45:a5:60:09:60:28:c6:cd:7e:79:13:cb: 66:8c:9b:14:a1:65:07:11:9b:11:fd:fd:93:2b:9c:67:28:18: 54:45:cc:c3:ef:00:54:ce:c9:00:56:70:a4:30:3b:fa:19:85: 78:e3:82:0a:79:2e:09:5a:26:72:63:38:ea:23:d9:ae:e1:50: d7:0b:c0:d6:37:55:ec:e6:7a:51:7e:fa:ea:1b:4b:bf:54:ed: b8:12:6b:d8:c6:ca:3c:4b:47:2b:5f:72:9a:1d:4d:a8:28:72: 35:5e:83:3c:24:eb:14:4c:0d:74:94:8d:a9:17:ec:55:9a:37: 95:bf:a3:e5:39:ac:11:9a:ac:1e:8e:d5:e5:06:54:71:99:b6: 69:8c:41:d7:86:be:81:f7:23:38:81:fd:57:4e:44:91:54:26: e1:a7:c8:56:69:77:bc:93:9a:ac:43:64:1b:87:e9:43:6a:60: 19:ab:e5:8a:f4:85:e3:75:ff:fa:2d:7d:0b:d2:e1:08:a2:64: b5:45:e3:d5:64:85:93:c2:72:0c:21:a2:fe:50:6d:bd:4c:b1: fe:da:9b:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaOCtOUznl5FJuV8Qw+KmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy ODlmOWUwHhcNMjUxMjE4MTcwMTMyWhcNMjUxMjE5MTcwMTMyWjAzMTEwLwYDVQQD EygzOGFjOGUxZWE2MjRjMWQzYjZkODI2MDAyOGQ0ZTM1ZjdmN2VmMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslhrgWGsxWk6gYOTr+8DCuhbqLbw szpP3qm66pbYx3H8oFvke1mvA2NbUSv+QZyVChzjKnR82+/Epi7Q4twNEA/f+dMb hLGnhC0Pcs9gDdsHEzjyTfX+uwaQsBdqQDjyXKcG/JZwF4EbYMkLkQox9uteNkFC UjKU4/SqHoK5Yn9Dmt0zITi3zd5+1vS0QQhIhXFBVoVfgO+O0peJRaGqbf3TuyA9 SshrroXiPXcOFrf5CL63FRf5gKMDFlO3+lmc43+tD+ipx9LmOKulGMQYrVCbfYPU fZ4wl7ELHXxSVhk8vrkFx7zX1IsxXyt7ZcmmeArXe36+dcp6GGG0UHYdtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDisjh6mJMHTttgmACjU419/fvErMB8GA1UdIwQY MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt NDhiMTY2NGQ0MGQ1LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1 LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxPWgRZ7 rFnjf/ZjEwHu7MEUCGchfwc3QOEu7dd1YNH8oriiMzw3Gm59RaVgCWAoxs1+eRPL ZoybFKFlBxGbEf39kyucZygYVEXMw+8AVM7JAFZwpDA7+hmFeOOCCnkuCVomcmM4 6iPZruFQ1wvA1jdV7OZ6UX766htLv1TtuBJr2MbKPEtHK19ymh1NqChyNV6DPCTr FEwNdJSNqRfsVZo3lb+j5TmsEZqsHo7V5QZUcZm2aYxB14a+gfcjOIH9V05EkVQm 4afIVml3vJOarENkG4fpQ2pgGavlivSF43X/+i19C9LhCKJktUXj1WSFk8JyDCGi /lBtvUyx/tqbyA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:54:33 2025 by rpki-client