This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json) Hash identifier: DUZJTjhFyv8HGH/ePZtzNdX6j6PmkAySeFDiQRI1c+0= Subject key identifier: 23:1B:6E:8D:16:09:F2:57:88:E9:1D:AC:9E:AE:31:02:28:3D:50:4C Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Certificate serial: 019B2D0B7EF6CFBE7754A925336A5FD88C09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft Manifest number: 0740 Signing time: Wed 17 Dec 2025 16:01:26 +0000 Manifest this update: Wed 17 Dec 2025 16:01:26 +0000 Manifest next update: Thu 18 Dec 2025 16:01:26 +0000 Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: YKyvJEjlqFNwzaSWEy1ro1GqZWzeXIH7LwyBsLk+6kM=) 2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:7e:f6:cf:be:77:54:a9:25:33:6a:5f:d8:8c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Validity Not Before: Dec 17 16:01:26 2025 GMT Not After : Dec 18 16:01:26 2025 GMT Subject: CN=231b6e8d1609f25788e91dac9eae3102283d504c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7e:68:48:8c:ca:b7:92:fa:ec:19:8f:4c:fe: a6:6b:5d:c5:c8:37:af:d8:10:b3:ab:84:d1:5e:62: 5e:be:77:06:d2:1d:c3:92:f0:ff:6e:01:07:91:78: 52:19:aa:d2:57:41:28:ae:3f:58:aa:a7:a0:e4:c6: 9a:fb:54:c5:53:96:a8:2c:bf:fe:8b:84:cb:d2:11: 88:de:9d:19:26:50:f4:f6:49:ee:e2:fa:2d:53:8e: 51:cf:6d:a7:3a:1e:47:9f:5b:cb:80:d3:54:8b:1d: 4e:bc:f0:85:e2:ff:ae:36:1e:79:bd:2c:c1:ce:6b: 48:bd:02:d2:46:41:a2:30:5e:ca:56:86:03:f4:54: f9:62:e7:75:68:75:ca:d1:55:92:24:0c:d7:80:d5: a1:ef:18:95:2d:cc:9c:eb:e9:d3:aa:43:fe:33:c9: c8:a0:bd:32:22:99:a9:2c:08:67:b4:f8:54:99:03: 3f:89:94:a7:61:ed:6c:15:18:76:7d:b3:62:31:ab: 36:a6:65:fb:f9:2d:8b:da:a0:88:ed:d6:42:20:17: a0:0d:38:89:81:b7:6a:1e:f2:a1:d8:cb:c3:f9:d4: 37:1a:2e:6b:93:31:80:02:8e:5d:82:fa:b8:9d:2e: da:0e:14:81:38:73:1c:ef:d5:24:84:4b:42:15:99: b9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:6E:8D:16:09:F2:57:88:E9:1D:AC:9E:AE:31:02:28:3D:50:4C X509v3 Authority Key Identifier: keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3e:67:b7:f3:15:7d:f6:4a:a7:89:d8:1c:68:0f:38:3b:1c: 0d:c6:b8:bf:fc:6a:ac:ec:2e:b7:75:23:7f:e5:be:c5:40:b2: 48:ab:4f:4e:fd:b2:d7:ef:5f:34:8b:60:1e:46:4e:6c:80:24: b9:ad:26:62:be:11:0d:ac:ab:69:88:03:0d:91:a9:df:48:04: 01:78:68:ae:78:a0:ef:3a:f6:84:00:85:2c:15:e5:9f:83:f0: 27:69:71:50:21:41:61:88:45:d1:ca:db:77:71:83:7b:87:be: 41:e9:dd:4d:f9:76:99:9e:e6:86:b3:c1:92:27:2a:28:f8:30: 83:2d:ea:07:a5:49:5d:1e:02:10:2f:3d:73:67:83:f2:61:9e: eb:7b:56:85:4e:ef:d4:ac:3f:73:f0:08:cd:af:42:c6:e5:8f: e0:56:da:ab:22:30:15:41:6b:17:39:c6:97:9b:54:82:c1:1d: 6b:13:10:a5:84:58:2e:7a:fc:ce:c3:b5:47:48:ca:f8:21:8a: ba:e4:13:2c:80:00:6a:3e:d8:a7:72:20:b5:87:78:9f:1f:be: 35:e9:82:af:5d:a7:84:1b:94:0e:a7:30:1e:01:eb:3e:be:b7: ab:ac:d8:2e:7a:f8:8b:a0:36:84:50:91:3b:6a:b7:a5:7e:40: 50:38:d9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC372z753VKklM2pf2IwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGNjMmZmZDc2OWMxOGU1ZTZmMGRmYzlhMGVhNzRmYjNm OGMxMDgwHhcNMjUxMjE3MTYwMTI2WhcNMjUxMjE4MTYwMTI2WjAzMTEwLwYDVQQD EygyMzFiNmU4ZDE2MDlmMjU3ODhlOTFkYWM5ZWFlMzEwMjI4M2Q1MDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X5oSIzKt5L67BmPTP6ma13FyDev 2BCzq4TRXmJevncG0h3DkvD/bgEHkXhSGarSV0Eorj9Yqqeg5Maa+1TFU5aoLL/+ i4TL0hGI3p0ZJlD09knu4votU45Rz22nOh5Hn1vLgNNUix1OvPCF4v+uNh55vSzB zmtIvQLSRkGiMF7KVoYD9FT5Yud1aHXK0VWSJAzXgNWh7xiVLcyc6+nTqkP+M8nI oL0yIpmpLAhntPhUmQM/iZSnYe1sFRh2fbNiMas2pmX7+S2L2qCI7dZCIBegDTiJ gbdqHvKh2MvD+dQ3Gi5rkzGAAo5dgvq4nS7aDhSBOHMc79UkhEtCFZm5WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMbbo0WCfJXiOkdrJ6uMQIoPVBMMB8GA1UdIwQY MBaAFDdMwv/XacGOXm8N/JoOp0+z+MEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUt MjY4MDZlYzM1YzIwLzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUtMjY4MDZlYzM1YzIw LzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAID5nt/MV ffZKp4nYHGgPODscDca4v/xqrOwut3Ujf+W+xUCySKtPTv2y1+9fNItgHkZObIAk ua0mYr4RDayraYgDDZGp30gEAXhornig7zr2hACFLBXln4PwJ2lxUCFBYYhF0crb d3GDe4e+QendTfl2mZ7mhrPBkicqKPgwgy3qB6VJXR4CEC89c2eD8mGe63tWhU7v 1Kw/c/AIza9CxuWP4FbaqyIwFUFrFznGl5tUgsEdaxMQpYRYLnr8zsO1R0jK+CGK uuQTLIAAaj7Yp3IgtYd4nx++NemCr12nhBuUDqcwHgHrPr63q6zYLnr4i6A2hFCR O2q3pX5AUDjZ1w== -----END CERTIFICATE-----Generated at Wed Dec 17 17:48:43 2025 by rpki-client