This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json) Hash identifier: mAx6Fhrwh4RuksIt/nteUzY3yLfBcnlqwIjVmRwfbGk= Subject key identifier: BD:64:8D:74:0D:45:96:AD:B8:12:28:46:4E:0C:81:94:E2:64:FF:DB Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b Certificate serial: 019AF27716BA7D8CA2F43AA6FBDDA37FF757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft Manifest number: 10DC Signing time: Sat 06 Dec 2025 07:01:21 +0000 Manifest this update: Sat 06 Dec 2025 07:01:21 +0000 Manifest next update: Sun 07 Dec 2025 07:01:21 +0000 Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: PHdT7wvAbuVBSk5XEOcSUx0+BAGaUGWk9rDsBAOiQ1w=) 2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:16:ba:7d:8c:a2:f4:3a:a6:fb:dd:a3:7f:f7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b Validity Not Before: Dec 6 07:01:21 2025 GMT Not After : Dec 7 07:01:21 2025 GMT Subject: CN=bd648d740d4596adb81228464e0c8194e264ffdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:94:7e:e5:ac:fb:29:7d:41:5e:c1:9e:12:a7: 88:43:12:8b:d8:06:69:d7:4c:28:f0:3d:24:9a:79: b8:6d:94:b1:86:b8:3b:37:2b:2f:cb:07:be:5d:a5: 9f:23:cf:a1:d2:81:9b:81:18:8e:29:13:e6:17:eb: af:66:9b:dc:eb:80:0e:fd:2a:bc:0d:c1:9f:ad:ef: 4c:4d:63:3b:9f:78:73:15:7e:c1:f8:95:e9:96:7d: 5b:a9:c0:1d:1f:e4:23:e9:4c:18:05:25:ec:36:f3: 12:ac:16:4f:ca:f1:37:1a:86:57:45:06:71:81:39: 1d:91:fc:2c:bf:4a:d0:80:a0:ab:4a:1b:e8:14:f0: 5f:3a:04:fe:b0:e4:12:2e:14:f4:02:27:e1:a3:8a: 49:db:fb:be:c0:d9:bf:a6:10:55:fb:c2:c9:df:4a: b6:ff:fd:e1:aa:fb:80:64:bb:39:a0:bd:cf:0b:7a: 7e:da:ab:d7:88:cf:21:35:30:35:b6:85:9b:c0:87: b2:c7:0c:25:cc:c0:eb:1b:a7:bc:b8:36:2e:0f:46: e2:a4:5f:86:51:19:fc:bd:5d:09:07:15:23:49:21: f9:ce:4b:74:51:05:d9:67:03:5f:d3:57:15:05:27: 04:52:33:d8:a9:1a:1b:b2:a2:d0:bb:81:1c:20:61: 3c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:64:8D:74:0D:45:96:AD:B8:12:28:46:4E:0C:81:94:E2:64:FF:DB X509v3 Authority Key Identifier: keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3f:5d:0e:e3:ec:7f:ff:f3:f2:04:37:5f:c9:2b:de:99:1b: c9:bb:69:6c:82:8e:13:32:ce:bc:55:f2:e2:ba:5a:aa:93:b0: d4:5a:06:10:8c:e7:89:81:70:c1:4e:e6:c8:94:51:ea:35:6b: ce:eb:ff:12:d2:14:1b:59:23:12:7f:21:a5:5b:a9:eb:bc:6a: f3:8b:c5:0d:13:39:67:d3:36:9c:4a:2a:87:db:d5:f2:21:bb: 19:f5:20:61:a1:df:cd:2d:f1:4b:aa:0b:35:80:9f:1d:c9:b0: 40:24:ee:f8:a3:71:25:0d:d8:02:30:d1:a8:92:8c:f3:b8:53: 25:df:a4:1c:d8:28:cd:1b:82:99:e8:74:20:fc:a3:ea:8f:41: 98:56:2a:da:65:a1:a3:d3:9d:66:d2:2c:3a:ac:9b:53:d7:1e: 3c:f8:c6:9a:02:fa:b5:e7:f6:2d:18:c4:44:da:5b:94:ca:d1: 86:b9:00:26:e8:92:7f:25:30:35:e1:d8:18:35:cd:17:1a:9a: 8f:59:d9:23:4b:77:77:cd:4b:2d:a7:dd:69:2d:e0:9d:f4:2b: 51:66:51:4c:64:4a:3c:bc:ab:69:60:d4:3f:d3:5d:2c:ba:b0: af:be:7b:ce:ef:84:00:5c:29:2b:f1:8b:02:68:b1:82:b9:2b: 81:e5:5a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxa6fYyi9Dqm+92jf/dXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTdlMDM5ZjAyNWEyNWFhNmU5OTIzOTFkOTI0MjYwNjk5 YmE2N2IwHhcNMjUxMjA2MDcwMTIxWhcNMjUxMjA3MDcwMTIxWjAzMTEwLwYDVQQD EyhiZDY0OGQ3NDBkNDU5NmFkYjgxMjI4NDY0ZTBjODE5NGUyNjRmZmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJR+5az7KX1BXsGeEqeIQxKL2AZp 10wo8D0kmnm4bZSxhrg7Nysvywe+XaWfI8+h0oGbgRiOKRPmF+uvZpvc64AO/Sq8 DcGfre9MTWM7n3hzFX7B+JXpln1bqcAdH+Qj6UwYBSXsNvMSrBZPyvE3GoZXRQZx gTkdkfwsv0rQgKCrShvoFPBfOgT+sOQSLhT0Aifho4pJ2/u+wNm/phBV+8LJ30q2 //3hqvuAZLs5oL3PC3p+2qvXiM8hNTA1toWbwIeyxwwlzMDrG6e8uDYuD0bipF+G URn8vV0JBxUjSSH5zkt0UQXZZwNf01cVBScEUjPYqRobsqLQu4EcIGE89QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1kjXQNRZatuBIoRk4MgZTiZP/bMB8GA1UdIwQY MBaAFDeX4DnwJaJapumSOR2SQmBpm6Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEt YzFjMDVjZGI3ODQxLzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEtYzFjMDVjZGI3ODQx LzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND9dDuPs f//z8gQ3X8kr3pkbybtpbIKOEzLOvFXy4rpaqpOw1FoGEIzniYFwwU7myJRR6jVr zuv/EtIUG1kjEn8hpVup67xq84vFDRM5Z9M2nEoqh9vV8iG7GfUgYaHfzS3xS6oL NYCfHcmwQCTu+KNxJQ3YAjDRqJKM87hTJd+kHNgozRuCmeh0IPyj6o9BmFYq2mWh o9OdZtIsOqybU9cePPjGmgL6tef2LRjERNpblMrRhrkAJuiSfyUwNeHYGDXNFxqa j1nZI0t3d81LLafdaS3gnfQrUWZRTGRKPLyraWDUP9NdLLqwr757zu+EAFwpK/GL AmixgrkrgeVavQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:26:05 2025 by rpki-client