This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json) Hash identifier: oC3xhNzLXzcrwQLnwciGeyKj4v+iChXqaKDKxjXCU5o= Subject key identifier: 7B:33:4B:4D:A3:98:82:E6:B3:62:0A:6F:66:F2:81:B5:8E:0B:04:2F Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019AF68A5F1F785A2365D9542B48215181E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft Manifest number: 17B7 Signing time: Sun 07 Dec 2025 02:00:54 +0000 Manifest this update: Sun 07 Dec 2025 02:00:54 +0000 Manifest next update: Mon 08 Dec 2025 02:00:54 +0000 Files and hashes: 1: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (hash: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=) 2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=) 3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: KNlQhMT6tEvGuva1sO5kD9jYPHdfktrnZ44X9doLf9s=) 4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=) 5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=) 6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=) 7: nGBZ2oFLBzTV4cx47rC7uQ_qFOU.roa (hash: LCvJu/W+zfVHarypo5pA1Xtug5Ld+cxDTIz4mN49xiU=) 8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:5f:1f:78:5a:23:65:d9:54:2b:48:21:51:81:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Dec 7 02:00:54 2025 GMT Not After : Dec 8 02:00:54 2025 GMT Subject: CN=7b334b4da39882e6b3620a6f66f281b58e0b042f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:80:23:e7:29:42:3d:70:e5:1e:38:21:ed:db: 94:93:46:91:dd:ee:9a:3b:db:f0:97:0f:21:70:0e: 44:f2:83:06:71:c5:73:e8:eb:93:c2:9d:ec:de:76: 45:f2:66:ee:28:dc:6d:2d:6e:63:47:a8:b8:bc:c2: 93:56:9b:e9:52:78:a5:1a:80:e4:56:34:5f:73:8c: 6c:88:21:92:26:ef:56:33:82:62:3c:77:b2:82:03: f1:f2:86:3f:84:28:46:14:00:02:49:37:13:47:7c: 7e:06:40:20:cb:d1:b7:7c:d8:e3:1c:1b:db:17:fe: c7:43:da:67:8b:66:59:8c:31:31:34:89:ac:06:04: d5:66:88:34:73:a7:79:2a:53:e9:01:59:b2:47:82: 51:45:39:f8:9f:08:93:03:b0:37:04:cf:b4:05:95: db:9a:59:13:f9:df:d3:1d:a4:f3:93:27:5c:aa:52: 4c:c9:9e:d2:85:a4:f0:36:70:7b:57:65:d2:df:36: bc:0b:31:23:cf:39:ab:61:fb:d0:8a:e3:25:a4:cc: 46:17:01:33:c1:64:24:37:9e:1b:6a:c7:73:fa:0f: 6b:da:cd:4b:2d:b7:53:64:a9:d9:dc:f1:04:b3:ea: 86:5d:ee:b5:ca:aa:ad:03:53:7c:e3:6f:6e:2e:80: 29:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:4B:4D:A3:98:82:E6:B3:62:0A:6F:66:F2:81:B5:8E:0B:04:2F X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a4:d1:d1:8c:b2:0c:e9:ef:85:a0:ca:c1:d3:39:8b:ca:56: be:10:b0:6c:91:0b:37:27:28:0e:7b:54:b5:f5:a8:6f:1d:6e: 2a:c8:be:ed:ef:f1:1d:54:77:28:95:e9:4c:ef:2c:e6:3d:a0: 45:0b:ee:c5:57:db:ca:af:eb:8c:65:74:fb:67:59:82:0d:a3: 5d:fc:e6:36:51:59:fa:ec:1a:06:8d:ef:b5:f4:1c:18:2a:09: 3e:c1:84:f6:64:82:c0:1e:37:3c:a5:4c:9e:36:74:ea:e1:da: c9:f8:94:1b:7a:4a:fb:0f:bc:dc:07:1d:7c:2a:62:6b:a5:a4: 03:cf:c8:7a:31:06:b0:ba:e5:2c:00:4f:10:51:be:e1:0e:01: a1:fb:ec:98:99:c4:1d:e3:84:da:94:2b:18:25:c3:19:6a:79: 77:c0:4a:fe:81:14:58:0f:d6:d3:c8:7a:9c:66:6f:f2:7c:50: 4f:b9:23:3e:4b:8b:cd:fa:f3:6a:65:88:d5:7c:63:7a:f6:6d: 20:71:50:fa:e5:55:6a:ef:fe:38:0b:e0:ca:73:b5:01:0d:3e: bd:0d:63:66:2c:a6:cd:c2:aa:a7:39:81:a4:90:56:fa:2f:ca: 6c:4c:f6:22:4f:74:08:d6:3c:0d:50:ef:94:cb:87:5a:43:a3: 70:a8:b1:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2il8feFojZdlUK0ghUYHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjUxMjA3MDIwMDU0WhcNMjUxMjA4MDIwMDU0WjAzMTEwLwYDVQQD Eyg3YjMzNGI0ZGEzOTg4MmU2YjM2MjBhNmY2NmYyODFiNThlMGIwNDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYAj5ylCPXDlHjgh7duUk0aR3e6a O9vwlw8hcA5E8oMGccVz6OuTwp3s3nZF8mbuKNxtLW5jR6i4vMKTVpvpUnilGoDk VjRfc4xsiCGSJu9WM4JiPHeyggPx8oY/hChGFAACSTcTR3x+BkAgy9G3fNjjHBvb F/7HQ9pni2ZZjDExNImsBgTVZog0c6d5KlPpAVmyR4JRRTn4nwiTA7A3BM+0BZXb mlkT+d/THaTzkydcqlJMyZ7ShaTwNnB7V2XS3za8CzEjzzmrYfvQiuMlpMxGFwEz wWQkN54basdz+g9r2s1LLbdTZKnZ3PEEs+qGXe61yqqtA1N8429uLoApsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHszS02jmILms2IKb2bygbWOCwQvMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaTR0Yyy DOnvhaDKwdM5i8pWvhCwbJELNycoDntUtfWobx1uKsi+7e/xHVR3KJXpTO8s5j2g RQvuxVfbyq/rjGV0+2dZgg2jXfzmNlFZ+uwaBo3vtfQcGCoJPsGE9mSCwB43PKVM njZ06uHayfiUG3pK+w+83AcdfCpia6WkA8/IejEGsLrlLABPEFG+4Q4BofvsmJnE HeOE2pQrGCXDGWp5d8BK/oEUWA/W08h6nGZv8nxQT7kjPkuLzfrzamWI1XxjevZt IHFQ+uVVau/+OAvgynO1AQ0+vQ1jZiymzcKqpzmBpJBW+i/KbEz2Ik90CNY8DVDv lMuHWkOjcKixDg== -----END CERTIFICATE-----Generated at Sun Dec 7 06:21:31 2025 by rpki-client