This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: XEaAdZrwsJFtkAFB6HidDzYM1OKI/HkuRa+jkpItwDU= Subject key identifier: 4B:49:29:9E:32:53:CD:4D:B3:C8:7F:59:8F:0F:22:C1:4F:15:63:8D Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019AF208FFFC147066487A7B62E0E9DA6985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 0429 Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: cfaHRLNkkWYbgwKYYmUvf+oKh4xhRW3ZbIleIec2XP4=) 2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ff:fc:14:70:66:48:7a:7b:62:e0:e9:da:69:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=4b49299e3253cd4db3c87f598f0f22c14f15638d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:96:b2:72:38:10:60:a5:b9:68:6f:6f:90: 58:c4:c3:f6:df:4d:19:7c:e5:e2:8d:55:14:3e:a9: ee:b7:da:aa:8e:a8:73:5c:b0:4d:26:81:10:fa:82: 42:57:9b:73:29:41:33:41:5c:c1:da:f4:cf:ad:22: c6:59:c5:e3:aa:9d:ae:dc:76:55:34:c1:70:0f:8d: 63:1c:f7:f8:b9:86:18:93:b6:62:a2:4a:6b:66:9e: 80:a1:7d:ea:52:27:c8:74:5e:a7:96:bd:c6:fb:c0: a9:29:24:c4:68:04:33:17:a5:fe:6f:2a:92:cf:f7: b0:da:90:0e:86:43:c8:36:c1:79:57:9b:e6:2a:e4: 53:5b:62:27:74:fb:98:80:b5:df:7f:fd:36:a0:4b: fe:b7:4d:55:39:fc:f6:80:d9:da:4e:e3:2c:6b:cc: 93:a2:95:85:34:4d:ec:aa:6e:5d:0b:ac:55:8c:48: 88:5f:03:72:7c:75:dd:74:67:6e:4a:21:a4:be:01: 40:30:f9:86:5c:cf:1d:70:a3:d3:a2:5f:f5:7f:58: 93:eb:3b:81:e2:d1:5a:06:69:36:c6:67:39:52:35: 5e:dc:e3:bf:9a:c1:58:ab:be:fb:f5:cb:5d:a5:25: d4:30:83:62:45:9f:05:fb:82:38:c3:c5:d5:42:e8: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:49:29:9E:32:53:CD:4D:B3:C8:7F:59:8F:0F:22:C1:4F:15:63:8D X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:82:33:f7:8c:c3:5a:9f:66:45:1d:1a:9a:0d:a8:6b:56:2e: ec:4b:85:36:56:1b:8e:8a:cd:fd:c3:ea:51:52:03:4b:89:21: 8e:e7:62:47:bb:46:36:33:72:8d:24:97:bc:78:da:44:e6:ac: 75:24:0b:fe:90:c8:71:a0:17:65:7b:3c:a1:ee:60:59:90:5d: 20:52:36:44:d9:de:be:61:0c:31:30:4e:d9:af:d6:1d:f7:0e: 7d:1e:8f:0b:0a:6e:be:8e:e0:fe:24:c8:92:29:94:bb:a9:cd: 5a:f9:89:01:b4:a3:96:29:5e:5c:cd:5e:66:a0:5b:29:39:bb: f9:81:14:b0:ea:a0:36:0a:46:2c:bd:23:2a:9d:1e:52:c6:4e: b4:f3:ca:c7:93:3f:db:26:31:27:b2:4b:8c:1b:25:9a:d4:35: 9b:da:2f:9a:68:23:23:96:96:ad:e0:fe:a3:a7:af:d8:d5:d3: d5:e8:ed:69:98:f2:e2:30:b9:cf:63:a0:b5:f3:2c:05:d8:84: c6:f7:f0:3f:57:5d:49:86:31:0d:c7:f6:da:09:11:fc:a3:97: 83:16:0b:11:4d:da:50:3f:6f:13:e5:b8:88:87:2e:98:45:cd: 80:22:46:56:6c:a9:cb:c4:ba:bf:3a:f9:a9:7d:4e:08:93:af: 7d:d4:82:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCP/8FHBmSHp7YuDp2mmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD Eyg0YjQ5Mjk5ZTMyNTNjZDRkYjNjODdmNTk4ZjBmMjJjMTRmMTU2MzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VmWsnI4EGCluWhvb5BYxMP2300Z fOXijVUUPqnut9qqjqhzXLBNJoEQ+oJCV5tzKUEzQVzB2vTPrSLGWcXjqp2u3HZV NMFwD41jHPf4uYYYk7ZiokprZp6AoX3qUifIdF6nlr3G+8CpKSTEaAQzF6X+byqS z/ew2pAOhkPINsF5V5vmKuRTW2IndPuYgLXff/02oEv+t01VOfz2gNnaTuMsa8yT opWFNE3sqm5dC6xVjEiIXwNyfHXddGduSiGkvgFAMPmGXM8dcKPTol/1f1iT6zuB 4tFaBmk2xmc5UjVe3OO/msFYq7779ctdpSXUMINiRZ8F+4I4w8XVQugPWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtJKZ4yU81Ns8h/WY8PIsFPFWONMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf4Iz94zD Wp9mRR0amg2oa1Yu7EuFNlYbjorN/cPqUVIDS4khjudiR7tGNjNyjSSXvHjaROas dSQL/pDIcaAXZXs8oe5gWZBdIFI2RNnevmEMMTBO2a/WHfcOfR6PCwpuvo7g/iTI kimUu6nNWvmJAbSjlileXM1eZqBbKTm7+YEUsOqgNgpGLL0jKp0eUsZOtPPKx5M/ 2yYxJ7JLjBslmtQ1m9ovmmgjI5aWreD+o6ev2NXT1ejtaZjy4jC5z2OgtfMsBdiE xvfwP1ddSYYxDcf22gkR/KOXgxYLEU3aUD9vE+W4iIcumEXNgCJGVmypy8S6vzr5 qX1OCJOvfdSCLw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:11:29 2025 by rpki-client