This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json) Hash identifier: Ajb2BM0T5jKM7isXKKz9sgLBWfAG84mGr/ABgM+kuOI= Subject key identifier: 42:78:79:9B:82:CA:76:78:CB:94:CF:72:0A:E4:A8:59:40:C9:75:3C Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd Certificate serial: 019AF2098CD87DDE72F0F1436A77DEF9E953 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: Pd6y31NGl2E53PuxfNWQ2uuokU4.roa (hash: JFGjsWEPBeCuSIlrpF4Du2GayxrXTaSof5LXDS+PGd4=) 2: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: oGS/6oZhDFlojbzcCQ+KhZkOXQMJhR45VmxFIFA/u0M=) 3: dUNsJzgqtJkMy1l0L21Y0Zsy2ts.roa (hash: 1X+g9lFYFIJoJGwfwGANKciE/PMScLctb1+/RsHdL0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8c:d8:7d:de:72:f0:f1:43:6a:77:de:f9:e9:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=4278799b82ca7678cb94cf720ae4a85940c9753c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:e5:44:43:38:ed:a1:5a:4e:62:11:7c:59: 6f:a0:ee:56:8c:af:da:89:a4:e0:4b:8d:7c:92:a0: f3:06:ee:dc:3e:3d:a7:1c:8c:74:a4:d2:b0:54:41: da:23:18:c6:7a:37:cf:73:76:c0:a9:dd:94:30:20: f1:16:1c:aa:c6:03:18:8a:e0:78:dc:29:8c:35:b2: 19:7f:7d:8a:30:e4:44:c9:85:3a:df:b5:fa:69:0d: 2d:e8:d7:85:5b:bb:ec:da:77:02:87:ef:e5:5b:54: 59:91:32:32:1b:7b:b1:b6:2c:c6:9b:1a:d7:93:6e: 86:23:8a:0b:8e:f0:47:a0:98:e3:e1:ad:08:f4:01: 43:18:01:df:88:5b:d0:a3:d4:c9:58:aa:07:ca:ac: 5e:05:29:53:ee:ee:dd:e2:5a:64:13:0c:49:b6:26: 12:bb:c3:5d:04:7f:93:97:3d:b5:15:86:99:64:2a: 18:3a:c7:f2:f2:86:2c:d2:97:ea:4a:ab:dc:00:45: 6e:3a:d0:ad:07:45:d9:91:01:19:f5:ac:08:d8:37: 53:d0:26:b2:de:12:02:e5:c6:7c:10:65:bb:d8:62: fb:d1:f2:5b:7c:9c:b9:9e:f3:7b:63:d6:2f:3f:91: ce:2b:67:d8:d9:42:47:2f:b7:47:56:2b:0d:4a:3e: 94:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:78:79:9B:82:CA:76:78:CB:94:CF:72:0A:E4:A8:59:40:C9:75:3C X509v3 Authority Key Identifier: keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ae:5b:83:41:f8:a4:0f:96:58:99:98:39:8f:b5:65:71:aa: 4d:14:97:b9:f6:83:75:e7:5c:cc:61:d5:6d:32:00:29:c9:ba: 23:42:0c:be:fa:d9:3c:0a:8e:8b:91:11:88:dc:e3:5c:e8:a3: 44:71:f2:d3:79:64:34:87:bd:27:aa:2a:46:f0:17:7c:a5:b4: 02:2b:f2:f6:f1:6b:e9:29:23:b4:77:03:f6:20:96:e3:61:45: 50:2e:71:be:cf:c5:2d:1c:b1:b8:54:4d:a0:f7:9d:60:8a:f9: d3:dc:ca:f6:f1:d9:d8:ca:5b:56:81:b7:ab:cd:5d:9c:66:ad: a1:57:21:5b:e0:93:ff:a0:56:d4:51:ce:78:41:2f:b0:97:f2: 81:e5:5d:29:b7:42:a9:dd:50:6f:1f:4c:da:7f:93:53:3d:22: 3f:e7:d5:0c:43:80:98:ea:60:55:04:b6:80:69:9f:22:8a:0d: 80:82:f2:50:62:e9:16:1b:81:4b:64:05:f5:65:6e:95:7f:b4: 3f:76:75:46:6d:fe:65:e4:48:c3:6a:8e:85:9f:59:d3:8f:0d: 34:93:26:6e:26:28:01:83:42:7b:79:ad:50:99:cb:53:2a:fc: ab:46:1e:7d:99:76:de:97:1c:6e:4f:79:43:f6:34:d7:2f:5f: 06:85:40:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYzYfd5y8PFDanfe+elTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjM3ZTYxNDRiZTdmNWRkOTNhZGI5YmFiZDgzZDQ4ZDUx ODk0ZmQwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg0Mjc4Nzk5YjgyY2E3Njc4Y2I5NGNmNzIwYWU0YTg1OTQwYzk3NTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpXlREM47aFaTmIRfFlvoO5WjK/a iaTgS418kqDzBu7cPj2nHIx0pNKwVEHaIxjGejfPc3bAqd2UMCDxFhyqxgMYiuB4 3CmMNbIZf32KMOREyYU637X6aQ0t6NeFW7vs2ncCh+/lW1RZkTIyG3uxtizGmxrX k26GI4oLjvBHoJjj4a0I9AFDGAHfiFvQo9TJWKoHyqxeBSlT7u7d4lpkEwxJtiYS u8NdBH+Tlz21FYaZZCoYOsfy8oYs0pfqSqvcAEVuOtCtB0XZkQEZ9awI2DdT0Cay 3hIC5cZ8EGW72GL70fJbfJy5nvN7Y9YvP5HOK2fY2UJHL7dHVisNSj6UTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ4eZuCynZ4y5TPcgrkqFlAyXU8MB8GA1UdIwQY MBaAFP/zfmFEvn9d2Trbm6vYPUjVGJT9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYt MGJjZTgwZDRkZmY5LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8zMmZlMGYtYmNjOS00MmJjLTkyMjYtMGJjZTgwZDRkZmY5 LzEvX19OLVlVUy1mMTNaT3R1YnE5ZzlTTlVZbFAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqa5bg0H4 pA+WWJmYOY+1ZXGqTRSXufaDdedczGHVbTIAKcm6I0IMvvrZPAqOi5ERiNzjXOij RHHy03lkNIe9J6oqRvAXfKW0Aivy9vFr6SkjtHcD9iCW42FFUC5xvs/FLRyxuFRN oPedYIr509zK9vHZ2MpbVoG3q81dnGatoVchW+CT/6BW1FHOeEEvsJfygeVdKbdC qd1Qbx9M2n+TUz0iP+fVDEOAmOpgVQS2gGmfIooNgILyUGLpFhuBS2QF9WVulX+0 P3Z1Rm3+ZeRIw2qOhZ9Z048NNJMmbiYoAYNCe3mtUJnLUyr8q0YefZl23pccbk95 Q/Y01y9fBoVAkg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:18 2025 by rpki-client