This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json) Hash identifier: IXlwh+LLTFnFwpDKcOWVdZMPPCO9g1fo8Ok1aT683oI= Subject key identifier: A4:4D:4D:7B:08:47:BF:39:F8:D7:0A:A9:64:74:56:73:B1:DE:E3:55 Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Certificate serial: 019AF31BF84BE8D4FC277C5E0BDD89E76FF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft Manifest number: 0722 Signing time: Sat 06 Dec 2025 10:01:27 +0000 Manifest this update: Sat 06 Dec 2025 10:01:27 +0000 Manifest next update: Sun 07 Dec 2025 10:01:27 +0000 Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: T6To9A8bE7zBPmnRNBplrj4W1LgB+JyRpDfATwuHir8=) 2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f8:4b:e8:d4:fc:27:7c:5e:0b:dd:89:e7:6f:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Validity Not Before: Dec 6 10:01:27 2025 GMT Not After : Dec 7 10:01:27 2025 GMT Subject: CN=a44d4d7b0847bf39f8d70aa964745673b1dee355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:30:45:d9:a0:57:c6:28:50:3b:bc:dc:d6:3b: b8:18:76:0c:4f:27:a3:cd:96:c2:6d:31:3a:c4:60: 1e:8d:b1:8c:54:d3:78:89:00:1d:58:f5:c8:57:43: 4f:1b:f6:6a:35:1c:8a:02:1c:d2:68:56:ca:ce:39: c0:73:c3:b2:56:f0:7f:dd:55:02:0a:ae:f7:c0:0b: 80:aa:e0:ea:62:40:e1:65:e4:4e:35:a9:26:03:d7: 1e:9d:88:11:ce:c2:35:bd:0b:01:0f:ae:23:6e:59: 82:18:7f:21:5e:51:ff:e5:85:ce:78:12:6c:d7:ae: dc:13:c5:f2:bc:c5:80:05:6b:f8:75:38:f4:39:d8: 15:a8:bc:12:91:d7:ca:49:81:3f:5c:f5:99:15:07: 7a:58:4d:20:ec:0b:d4:18:af:4b:0f:84:f6:18:6e: d5:35:8e:64:50:7b:92:29:16:41:97:8c:5b:27:81: ea:a8:ac:bf:b5:47:8f:b7:93:d6:d4:98:f3:5f:b8: a5:e3:2b:93:b1:85:01:5f:cc:04:db:ff:49:94:ff: 19:23:99:26:41:cf:1b:6f:e8:a7:98:91:24:03:b0: ba:7d:8f:77:fc:dd:f0:71:76:f0:71:75:52:4f:71: f0:f9:3d:3d:05:09:2d:2b:60:d2:d8:c3:ce:6e:33: d6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4D:4D:7B:08:47:BF:39:F8:D7:0A:A9:64:74:56:73:B1:DE:E3:55 X509v3 Authority Key Identifier: keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:2d:d0:d2:4b:c9:a7:bd:17:24:88:6f:21:0d:57:ea:da:cf: a6:f8:19:76:1a:3e:54:08:f5:d7:22:86:85:2f:e2:7c:c8:d2: 85:5f:d5:43:fe:42:5f:9e:0e:5f:12:d7:fb:b2:d6:8a:61:e0: 33:8e:66:7c:5b:98:27:2f:1e:cd:e4:82:0f:ad:f1:cb:2c:6a: 76:65:f3:04:df:bd:e2:78:19:a1:b8:75:86:bf:57:d3:b3:b2: 13:88:34:63:4a:5c:c5:69:40:70:40:38:00:85:7e:60:58:c4: 9f:7e:26:c6:22:f0:86:78:9e:88:23:f6:df:ea:0f:b9:f7:ca: e9:88:12:06:49:e1:5b:aa:cb:c9:5b:3c:c4:7f:d3:d1:df:3d: ed:8e:09:62:1f:00:41:36:21:4c:5a:94:ee:9d:ae:1f:c7:67: f7:5d:25:7c:f5:4c:48:4b:4f:b7:44:ea:44:3b:d5:fe:c7:43: 1a:0a:20:97:4d:7d:ae:ed:51:c6:b3:bb:22:48:74:f1:c3:00: 5f:a7:74:b6:9e:04:4f:d7:86:82:ed:ef:c4:4f:b1:f2:ec:84: de:45:25:15:b7:40:5a:fe:79:72:70:20:51:2d:43:05:17:b1: d4:a2:50:01:c8:7f:26:b4:f3:63:a9:b3:f9:e0:86:0f:49:2c: f9:f8:7b:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/hL6NT8J3xeC92J52/yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGNjMmZmZDc2OWMxOGU1ZTZmMGRmYzlhMGVhNzRmYjNm OGMxMDgwHhcNMjUxMjA2MTAwMTI3WhcNMjUxMjA3MTAwMTI3WjAzMTEwLwYDVQQD EyhhNDRkNGQ3YjA4NDdiZjM5ZjhkNzBhYTk2NDc0NTY3M2IxZGVlMzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzBF2aBXxihQO7zc1ju4GHYMTyej zZbCbTE6xGAejbGMVNN4iQAdWPXIV0NPG/ZqNRyKAhzSaFbKzjnAc8OyVvB/3VUC Cq73wAuAquDqYkDhZeRONakmA9cenYgRzsI1vQsBD64jblmCGH8hXlH/5YXOeBJs 167cE8XyvMWABWv4dTj0OdgVqLwSkdfKSYE/XPWZFQd6WE0g7AvUGK9LD4T2GG7V NY5kUHuSKRZBl4xbJ4HqqKy/tUePt5PW1JjzX7il4yuTsYUBX8wE2/9JlP8ZI5km Qc8bb+inmJEkA7C6fY93/N3wcXbwcXVST3Hw+T09BQktK2DS2MPObjPWGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKRNTXsIR785+NcKqWR0VnOx3uNVMB8GA1UdIwQY MBaAFDdMwv/XacGOXm8N/JoOp0+z+MEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUt MjY4MDZlYzM1YzIwLzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUtMjY4MDZlYzM1YzIw LzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUS3Q0kvJ p70XJIhvIQ1X6trPpvgZdho+VAj11yKGhS/ifMjShV/VQ/5CX54OXxLX+7LWimHg M45mfFuYJy8ezeSCD63xyyxqdmXzBN+94ngZobh1hr9X07OyE4g0Y0pcxWlAcEA4 AIV+YFjEn34mxiLwhnieiCP23+oPuffK6YgSBknhW6rLyVs8xH/T0d897Y4JYh8A QTYhTFqU7p2uH8dn910lfPVMSEtPt0TqRDvV/sdDGgogl019ru1RxrO7Ikh08cMA X6d0tp4ET9eGgu3vxE+x8uyE3kUlFbdAWv55cnAgUS1DBRex1KJQAch/JrTzY6mz +eCGD0ks+fh7mg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:06:12 2025 by rpki-client