This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft File: N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft (raw, json) Hash identifier: HLh+JhG7LWwZh9clv4oS3boLLXsYBZCF9RCAOFwh/qg= Subject key identifier: 5C:8C:59:19:1D:01:56:4B:DB:7B:8C:F7:AE:BB:38:91:40:F6:B2:A8 Authority key identifier: 37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9 Certificate issuer: /CN=37493000b9a704531da1a1766be538271ee0ccc9 Certificate serial: 019AF49BB82ECDBCA1B96ADCC47FB176E067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft Manifest number: 0135 Signing time: Sat 06 Dec 2025 17:00:37 +0000 Manifest this update: Sat 06 Dec 2025 17:00:37 +0000 Manifest next update: Sun 07 Dec 2025 17:00:37 +0000 Files and hashes: 1: DWNtN1UdTBREYyaanUpXB_FD8t4.roa (hash: xHaaIDZ06J/70dT/JEm/SEDUNciR+mQ5wcEXZY/Pc2k=) 2: N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl (hash: Z1BPK3+0LLML4A+CMEvN4R4XuXig+jvDSPwi761VGBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:b8:2e:cd:bc:a1:b9:6a:dc:c4:7f:b1:76:e0:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37493000b9a704531da1a1766be538271ee0ccc9 Validity Not Before: Dec 6 17:00:37 2025 GMT Not After : Dec 7 17:00:37 2025 GMT Subject: CN=5c8c59191d01564bdb7b8cf7aebb389140f6b2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:37:32:31:72:4b:66:5c:50:4a:92:49:97:3e: 8b:6a:61:b5:c0:3d:a8:bd:3e:3e:33:0f:7b:14:78: af:07:ef:63:8e:60:2c:a9:c3:ee:cf:ab:1d:a9:98: 15:c2:5d:86:fc:29:2f:f5:16:ff:80:5e:fd:8c:af: 7a:b3:42:d1:76:44:ab:dd:3b:e0:16:9a:c6:d2:81: 44:1c:ad:54:c1:e7:df:c9:a0:cf:e4:ec:1e:d3:db: 06:3e:cd:c8:a9:27:1f:5a:9c:7f:ea:d7:a5:c7:80: 23:49:be:12:f0:b7:f5:c4:75:c2:44:90:a3:65:7e: 46:81:fd:05:08:12:f2:45:1d:07:89:0c:a4:67:1d: 31:09:b5:6a:1e:73:e6:fd:29:5b:39:9c:38:87:40: 42:59:a9:10:92:84:46:e4:b6:35:bb:ba:7b:59:f1: 2e:af:22:85:80:65:fa:1d:1b:05:13:39:26:f4:6e: c9:b8:6c:b3:14:7a:50:9c:97:0a:c5:ce:d4:4c:de: b0:a1:74:11:5c:ce:3e:b2:24:cc:65:cb:b9:29:5e: 62:34:65:e1:b5:5f:38:6f:86:fb:7e:db:0e:af:f9: fd:10:ee:77:f0:95:c0:30:f6:10:a1:fe:e7:f0:14: f6:47:b7:64:94:4d:cd:da:dd:60:64:4c:c6:c1:3c: 6b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8C:59:19:1D:01:56:4B:DB:7B:8C:F7:AE:BB:38:91:40:F6:B2:A8 X509v3 Authority Key Identifier: keyid:37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:1b:d8:89:dc:a9:80:07:d0:7f:9d:02:bc:3c:be:f7:ac:2b: 68:19:07:20:a1:40:ec:db:ae:42:63:95:21:cb:20:14:eb:c0: f2:4f:6f:7c:15:b7:0c:99:af:79:21:f2:e4:1c:9e:3f:49:fd: d2:a5:8d:96:2c:b6:ab:68:f6:30:b3:05:87:f4:5d:3e:c8:99: fb:e0:f8:f3:f8:14:89:e3:6a:35:cd:df:e3:c3:d0:0c:3d:9b: 33:67:27:a7:87:fc:dd:f7:84:a9:3f:f8:c1:92:f3:d5:9a:cc: f0:96:44:0d:fe:09:48:bf:ea:41:a5:9b:6e:3d:3d:93:77:ab: dc:75:d0:75:28:a4:a6:07:67:32:4d:84:8c:af:11:f0:ee:f0: fd:c0:f5:ac:8a:77:7a:30:34:8b:20:18:25:ea:fd:9c:08:2a: f8:41:33:04:0e:0a:22:f7:de:7c:43:6e:0d:5d:87:c9:e0:49: b3:4b:2c:d9:4a:bd:f4:af:0a:5a:0f:13:e7:09:5f:4d:05:41: c9:81:60:ad:60:56:77:89:9e:6b:ea:9b:23:ee:40:b1:c2:41: bf:6b:d8:71:e5:bb:3f:46:d9:d5:17:7f:f0:2c:9c:1f:d5:4a: 17:c0:8c:76:f2:31:3e:3e:02:5e:91:57:98:3e:e6:44:56:ac: db:81:7e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m7guzbyhuWrcxH+xduBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDkzMDAwYjlhNzA0NTMxZGExYTE3NjZiZTUzODI3MWVl MGNjYzkwHhcNMjUxMjA2MTcwMDM3WhcNMjUxMjA3MTcwMDM3WjAzMTEwLwYDVQQD Eyg1YzhjNTkxOTFkMDE1NjRiZGI3YjhjZjdhZWJiMzg5MTQwZjZiMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTcyMXJLZlxQSpJJlz6LamG1wD2o vT4+Mw97FHivB+9jjmAsqcPuz6sdqZgVwl2G/Ckv9Rb/gF79jK96s0LRdkSr3Tvg FprG0oFEHK1UweffyaDP5Owe09sGPs3IqScfWpx/6telx4AjSb4S8Lf1xHXCRJCj ZX5Ggf0FCBLyRR0HiQykZx0xCbVqHnPm/SlbOZw4h0BCWakQkoRG5LY1u7p7WfEu ryKFgGX6HRsFEzkm9G7JuGyzFHpQnJcKxc7UTN6woXQRXM4+siTMZcu5KV5iNGXh tV84b4b7ftsOr/n9EO538JXAMPYQof7n8BT2R7dklE3N2t1gZEzGwTxrnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyMWRkdAVZL23uM9667OJFA9rKoMB8GA1UdIwQY MBaAFDdJMAC5pwRTHaGhdmvlOCce4MzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9iMWMzMWEtZmMzOS00MTYwLWIxZGEt ODM3M2E2YTQxMWJmLzEvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9iMWMzMWEtZmMzOS00MTYwLWIxZGEtODM3M2E2YTQxMWJm LzEvTjBrd0FMbW5CRk1kb2FGMmEtVTRKeDdnek1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShvYidyp gAfQf50CvDy+96wraBkHIKFA7NuuQmOVIcsgFOvA8k9vfBW3DJmveSHy5ByeP0n9 0qWNliy2q2j2MLMFh/RdPsiZ++D48/gUieNqNc3f48PQDD2bM2cnp4f83feEqT/4 wZLz1ZrM8JZEDf4JSL/qQaWbbj09k3er3HXQdSikpgdnMk2EjK8R8O7w/cD1rIp3 ejA0iyAYJer9nAgq+EEzBA4KIvfefENuDV2HyeBJs0ss2Uq99K8KWg8T5wlfTQVB yYFgrWBWd4mea+qbI+5AscJBv2vYceW7P0bZ1Rd/8CycH9VKF8CMdvIxPj4CXpFX mD7mRFas24F+Tg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:42:46 2025 by rpki-client