This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json) Hash identifier: MH72SEBtyY+v2bmNiCz4O0Pdx9AX5ybEoA3JwH72tC4= Subject key identifier: CD:49:4F:44:00:60:62:6E:CE:1C:26:EE:9F:BD:23:14:01:09:89:39 Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Certificate serial: 019AF12CE6257ACEAC3052C77DEE923C5E35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft Manifest number: 05E6 Signing time: Sat 06 Dec 2025 01:00:42 +0000 Manifest this update: Sat 06 Dec 2025 01:00:42 +0000 Manifest next update: Sun 07 Dec 2025 01:00:42 +0000 Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: ZMhwYWxKcWD3Q+RYQuzkwl3OdqT7dR1D59uMbr3n3kk=) 2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:e6:25:7a:ce:ac:30:52:c7:7d:ee:92:3c:5e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Validity Not Before: Dec 6 01:00:42 2025 GMT Not After : Dec 7 01:00:42 2025 GMT Subject: CN=cd494f440060626ece1c26ee9fbd231401098939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c8:5b:a3:2f:7b:8e:94:e1:a9:65:aa:a0:03: 34:b3:75:dc:da:2f:af:33:e7:82:50:0a:a5:83:7e: d0:0f:f8:be:2b:3e:7c:3f:39:40:66:4f:e5:d0:aa: 00:73:e1:3f:c1:89:6c:c2:f5:67:b6:e3:70:29:24: cb:b3:bf:e7:6b:0c:7a:d5:7a:06:7b:90:e7:c8:7a: 5d:37:b9:37:5a:0b:76:67:47:9f:44:7c:be:3c:bf: a2:4f:2d:a8:7b:55:12:1a:84:9d:e4:87:15:4a:c6: 82:81:d0:c0:35:f2:4f:a2:0f:dc:8a:d8:f3:f6:17: f1:2c:51:39:59:e6:76:45:5a:82:37:0b:d2:60:33: 34:f9:a9:e6:c3:65:33:fa:14:b0:01:a5:2f:1d:d1: e3:de:05:c8:c2:68:6f:5c:ea:98:0f:ba:c1:cd:df: fe:60:9d:cb:e2:c3:f9:12:93:51:8e:41:79:ee:ba: 36:1b:54:43:fa:a3:54:4c:aa:0b:c9:d1:49:d3:82: eb:91:3b:03:fc:54:ca:26:50:58:8c:6a:aa:f3:f2: 4a:bf:ed:be:98:31:b3:fb:82:5f:0e:66:92:77:22: 04:e8:b4:46:c5:c8:78:91:d4:ca:be:b7:99:aa:2d: c5:8b:94:87:59:34:6f:91:e9:ed:ea:2f:fd:4a:57: e0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:49:4F:44:00:60:62:6E:CE:1C:26:EE:9F:BD:23:14:01:09:89:39 X509v3 Authority Key Identifier: keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:da:10:45:ce:bd:ee:47:07:88:82:94:88:29:34:a8:7c:11: 1f:d0:74:4a:55:06:29:69:0a:0c:e0:7a:51:ab:33:a9:88:eb: e4:f1:32:4a:51:fa:22:40:ec:4e:d9:0e:dc:29:29:01:bc:18: c2:eb:10:91:e0:7b:a5:f7:76:c9:13:8a:e5:ef:41:27:10:6e: 7b:f1:fb:9d:99:13:ca:27:f9:bc:57:0a:28:c5:f6:8b:ef:be: a0:25:7a:36:5d:06:88:2c:03:23:d1:42:43:f2:d2:f3:7d:34: 5f:63:22:ca:72:2b:c7:d5:f1:a8:8a:98:0b:e4:2f:a7:e8:9f: 04:25:43:a2:3b:26:c8:c7:16:39:c0:05:e2:1f:57:30:12:16: 05:f8:b7:91:41:ff:69:da:46:5c:18:ec:31:08:0f:9a:f7:7c: 34:1b:4c:84:83:4f:32:1a:3a:65:02:9c:d5:64:6a:2a:0f:80: d4:7a:72:8d:a6:2f:9d:d2:17:14:56:30:e4:3b:51:ab:ac:42: b6:35:4a:bb:e0:b1:33:41:d5:1e:64:78:55:50:6e:16:7d:54: ff:82:97:ef:7c:c2:db:ab:3a:58:1c:78:df:13:d0:20:b8:8c: e7:9b:56:7f:9c:66:66:2c:94:6b:6c:1f:f2:6e:48:fa:f1:c4: c7:e3:39:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLOYles6sMFLHfe6SPF41MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2 ZWNhMTkwHhcNMjUxMjA2MDEwMDQyWhcNMjUxMjA3MDEwMDQyWjAzMTEwLwYDVQQD EyhjZDQ5NGY0NDAwNjA2MjZlY2UxYzI2ZWU5ZmJkMjMxNDAxMDk4OTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMhboy97jpThqWWqoAM0s3Xc2i+v M+eCUAqlg37QD/i+Kz58PzlAZk/l0KoAc+E/wYlswvVntuNwKSTLs7/nawx61XoG e5DnyHpdN7k3Wgt2Z0efRHy+PL+iTy2oe1USGoSd5IcVSsaCgdDANfJPog/citjz 9hfxLFE5WeZ2RVqCNwvSYDM0+anmw2Uz+hSwAaUvHdHj3gXIwmhvXOqYD7rBzd/+ YJ3L4sP5EpNRjkF57ro2G1RD+qNUTKoLydFJ04LrkTsD/FTKJlBYjGqq8/JKv+2+ mDGz+4JfDmaSdyIE6LRGxch4kdTKvreZqi3Fi5SHWTRvkent6i/9SlfgHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1JT0QAYGJuzhwm7p+9IxQBCYk5MB8GA1UdIwQY MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNoQRc69 7kcHiIKUiCk0qHwRH9B0SlUGKWkKDOB6UaszqYjr5PEySlH6IkDsTtkO3CkpAbwY wusQkeB7pfd2yROK5e9BJxBue/H7nZkTyif5vFcKKMX2i+++oCV6Nl0GiCwDI9FC Q/LS8300X2MiynIrx9XxqIqYC+Qvp+ifBCVDojsmyMcWOcAF4h9XMBIWBfi3kUH/ adpGXBjsMQgPmvd8NBtMhINPMho6ZQKc1WRqKg+A1HpyjaYvndIXFFYw5DtRq6xC tjVKu+CxM0HVHmR4VVBuFn1U/4KX73zC26s6WBx43xPQILiM55tWf5xmZiyUa2wf 8m5I+vHEx+M5Yw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:42 2025 by rpki-client