This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json) Hash identifier: m2zNo8gbrlGcd6AIegvuLnouPgKFdspbadWFMEdCFxE= Subject key identifier: 29:C6:DE:F4:CC:42:F6:21:93:48:17:66:67:B0:72:27:7A:21:26:CC Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Certificate serial: 019AF209580F70B87F145137A7EFE77A13ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:29 +0000 Manifest this update: Sat 06 Dec 2025 05:01:29 +0000 Manifest next update: Sun 07 Dec 2025 05:01:29 +0000 Files and hashes: 1: MstP95zOzuruszF1xnk5WwohZes.roa (hash: Dd3ffiYJWQ1ODq8HBmZJ5uvdbho1vmy4ZZ9l1KbRzqQ=) 2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: vsASomszRaJZqB/UwNrOGhBTm/GtIbZZULH0SIL1JFw=) 3: hZQ03z7hQseGqeqTK23z9sR3KoU.roa (hash: BE/vA6xe/FX485GgKXSnHBPVCcNJNeizsyA4atJDjzU=) 4: mZJe0dOtlVGQXR5nCGtTxDjtYUg.roa (hash: vhmVQoIhA3FIJBKAD6bm8klXoG45fnkM5F0sTYLfvS8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:58:0f:70:b8:7f:14:51:37:a7:ef:e7:7a:13:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e Validity Not Before: Dec 6 05:01:29 2025 GMT Not After : Dec 7 05:01:29 2025 GMT Subject: CN=29c6def4cc42f6219348176667b072277a2126cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:08:9e:e1:e2:88:d2:8e:45:91:08:48:d7:e0: e1:f0:24:5a:76:d1:7a:1d:45:3b:c5:44:07:99:3b: 12:69:37:c1:8a:00:8d:42:c5:4d:9f:6d:b6:95:e1: a8:80:b1:80:67:3c:f6:39:d9:cf:09:86:80:22:39: 75:73:79:67:b7:b3:87:a4:80:7a:69:f7:12:af:c7: 56:c6:cd:57:b5:6f:9f:e3:c3:0d:cd:29:b7:31:9b: 62:ac:27:13:44:23:32:9d:de:d8:c5:9e:85:67:da: 42:cf:3a:c1:fc:e5:89:0f:27:23:49:c5:58:c3:e9: cc:94:45:28:34:bf:3a:67:f9:78:5a:9d:de:26:54: 03:23:23:e8:9d:b0:76:b3:63:45:31:e9:a9:80:d3: 1b:81:f6:2f:89:22:26:fd:32:e2:a9:2f:07:68:26: 19:69:37:17:1e:ed:68:8e:09:f5:e1:40:92:ea:58: 13:ca:42:28:91:78:f8:bb:2c:2c:c7:35:af:97:b3: ee:42:01:8d:3e:80:a8:c4:7b:dd:96:6c:ff:5d:2c: 08:1b:55:df:be:95:3b:d3:cf:27:51:1b:72:a9:bb: 81:5c:a3:a2:89:40:d2:4d:94:42:92:f8:64:f8:5c: 60:db:ae:1c:13:41:fd:ba:84:c7:60:7a:c5:b6:de: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:C6:DE:F4:CC:42:F6:21:93:48:17:66:67:B0:72:27:7A:21:26:CC X509v3 Authority Key Identifier: keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:95:d8:39:6a:9d:88:63:15:57:29:d2:c1:a9:ce:a5:f0:21: c6:3e:1c:27:7a:eb:c0:9d:ce:4f:75:b0:fe:31:24:de:69:ef: e2:41:d6:5d:e7:09:10:89:88:de:b9:7d:7b:b9:38:1e:a1:5c: 72:8b:db:fc:08:9f:cb:ea:7a:9f:ee:05:2e:bf:df:27:46:1f: bf:94:91:aa:f0:45:20:68:66:76:0a:65:f1:1b:b9:39:82:6e: a8:ba:f6:9c:9d:47:e8:eb:79:bf:50:4d:c7:47:57:e4:05:14: 47:ac:95:56:64:26:26:b5:68:20:f7:b3:f1:d7:97:5f:40:69: 8e:77:22:ce:84:f6:1c:83:6a:cc:5d:73:f7:af:80:4b:04:34: 5e:8e:2b:ba:47:a7:1c:b3:01:7b:89:8c:46:e0:87:b6:ac:d8: a7:e1:4d:b1:f6:14:c7:fc:3f:07:0d:5c:04:22:e8:64:8f:7e: bf:a6:92:45:d4:1a:47:3c:09:d3:2e:dc:6e:8e:71:85:be:95: 20:73:ba:cb:ca:30:c5:1e:df:75:be:12:26:47:a5:f9:8d:40: e2:d2:bb:d0:31:75:3c:32:33:b3:65:86:40:85:84:71:8f:bf: d5:82:b4:48:ab:d6:5e:ac:3e:a0:ce:42:5f:03:d7:a7:60:67: e5:51:fe:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVgPcLh/FFE3p+/nehPtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw MDA4MGUwHhcNMjUxMjA2MDUwMTI5WhcNMjUxMjA3MDUwMTI5WjAzMTEwLwYDVQQD EygyOWM2ZGVmNGNjNDJmNjIxOTM0ODE3NjY2N2IwNzIyNzdhMjEyNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgie4eKI0o5FkQhI1+Dh8CRadtF6 HUU7xUQHmTsSaTfBigCNQsVNn222leGogLGAZzz2OdnPCYaAIjl1c3lnt7OHpIB6 afcSr8dWxs1XtW+f48MNzSm3MZtirCcTRCMynd7YxZ6FZ9pCzzrB/OWJDycjScVY w+nMlEUoNL86Z/l4Wp3eJlQDIyPonbB2s2NFMempgNMbgfYviSIm/TLiqS8HaCYZ aTcXHu1ojgn14UCS6lgTykIokXj4uywsxzWvl7PuQgGNPoCoxHvdlmz/XSwIG1Xf vpU7088nURtyqbuBXKOiiUDSTZRCkvhk+Fxg264cE0H9uoTHYHrFtt7NBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnG3vTMQvYhk0gXZmewcid6ISbMMB8GA1UdIwQY MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopXYOWqd iGMVVynSwanOpfAhxj4cJ3rrwJ3OT3Ww/jEk3mnv4kHWXecJEImI3rl9e7k4HqFc covb/Aify+p6n+4FLr/fJ0Yfv5SRqvBFIGhmdgpl8Ru5OYJuqLr2nJ1H6Ot5v1BN x0dX5AUUR6yVVmQmJrVoIPez8deXX0BpjncizoT2HINqzF1z96+ASwQ0Xo4ruken HLMBe4mMRuCHtqzYp+FNsfYUx/w/Bw1cBCLoZI9+v6aSRdQaRzwJ0y7cbo5xhb6V IHO6y8owxR7fdb4SJkel+Y1A4tK70DF1PDIzs2WGQIWEcY+/1YK0SKvWXqw+oM5C XwPXp2Bn5VH+QQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:17:40 2025 by rpki-client