This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json) Hash identifier: ASc6wPPYcEzkPMPZFuH1Z9lBivSByQPuUmfSPcbgpoM= Subject key identifier: 0E:31:A0:92:5D:21:00:B3:92:C9:48:9B:FF:66:BF:44:4B:1D:41:73 Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36 Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36 Certificate serial: 019AF12D9EDB6F81322363C0046326B818D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft Manifest number: 16F0 Signing time: Sat 06 Dec 2025 01:01:29 +0000 Manifest this update: Sat 06 Dec 2025 01:01:29 +0000 Manifest next update: Sun 07 Dec 2025 01:01:29 +0000 Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: fi7YIE1wI769jqPfLbqhMZBme0sBrSWG1CF+tW9IMKw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:9e:db:6f:81:32:23:63:c0:04:63:26:b8:18:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36 Validity Not Before: Dec 6 01:01:29 2025 GMT Not After : Dec 7 01:01:29 2025 GMT Subject: CN=0e31a0925d2100b392c9489bff66bf444b1d4173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7d:16:95:c3:a2:b8:8f:42:33:10:e0:97:8f: 82:68:74:fa:46:30:e1:ce:80:46:a6:4a:23:b8:3f: 2d:cf:99:d5:b2:a9:2d:3c:75:85:8a:11:db:c0:02: 9f:c9:af:a5:2d:70:83:18:37:45:b0:e6:f6:c4:e5: 84:41:66:1d:32:0e:93:28:0b:41:96:b3:fb:c1:4b: c8:69:d6:50:4a:0b:9b:b8:05:4b:0c:4b:60:5e:e2: c2:1e:c2:0e:3b:63:40:90:bd:99:6e:bc:43:63:82: 54:a3:b6:17:bb:fc:04:b4:16:99:27:7e:f2:95:c2: 24:f6:c9:b2:66:95:b0:78:87:80:41:6b:18:c0:00: c1:1a:45:f3:c7:ce:8d:1f:8c:85:f3:4d:6b:c5:f6: 3e:f2:ce:fb:ea:6d:c3:99:a6:5f:49:cc:fe:d9:7a: 11:ba:3b:f1:72:d1:c2:1c:77:c4:79:b4:5f:ca:de: 62:e5:5b:b0:c0:26:b2:58:a9:97:2f:fe:56:19:bb: 9c:55:44:05:a2:c1:2d:a0:c4:8a:09:9e:6a:6a:14: 16:6b:4b:5c:a7:6b:fa:e1:01:c5:4d:8f:6f:5b:73: 8a:97:df:da:5a:57:89:8d:cc:98:b2:9d:fb:4e:5c: 2d:81:e4:21:5b:c6:3c:bb:ac:76:41:27:d4:72:d7: e8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:31:A0:92:5D:21:00:B3:92:C9:48:9B:FF:66:BF:44:4B:1D:41:73 X509v3 Authority Key Identifier: keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:48:87:30:32:70:c9:ce:fb:32:50:1b:44:ab:96:7f:35:ad: b8:06:3c:23:44:d1:a2:1d:0f:1a:43:65:bf:63:7a:6b:e9:d0: 60:13:68:19:c9:a3:4e:08:72:12:8f:ef:d9:b5:55:df:7e:bd: c6:7b:ca:84:13:86:67:8b:02:de:e4:3c:e7:57:70:96:f3:79: e0:bd:24:1d:e5:1f:af:cc:ed:26:00:a3:e3:7c:eb:f6:5b:5a: 21:06:b0:de:dc:ac:81:f5:24:bd:e5:6a:7b:d2:78:4a:9a:de: 54:35:4c:dc:ea:ca:7f:3c:0b:b3:e1:4f:4e:79:56:fa:5a:d1: 04:1a:1f:40:ee:4a:f5:3c:62:05:f6:9f:18:de:9c:55:c5:bc: 31:8d:2d:04:56:92:7b:bc:85:a6:36:f2:09:d9:80:af:64:8b: 48:e6:c8:4c:f1:43:2e:fb:2f:66:7e:7f:b7:3a:34:8f:ff:12: df:20:9e:92:fd:2b:18:f7:a8:ed:94:84:d9:bf:73:ef:c2:ce: 8f:25:fc:03:f5:bf:e6:71:e5:61:fc:e2:9c:70:26:50:3a:12: 83:f8:2e:08:d0:e9:be:03:02:09:5d:73:1b:98:2f:c2:34:94: cb:26:e8:b1:1f:e6:15:a1:7a:fd:e2:0e:f4:7c:2b:a9:48:a0: 8e:76:24:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZ7bb4EyI2PABGMmuBjVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWZkOTk1NGU3ZDVkMzU5ZjkzZjUyMTgyMWQ4NTE2OTUz YzlkMzYwHhcNMjUxMjA2MDEwMTI5WhcNMjUxMjA3MDEwMTI5WjAzMTEwLwYDVQQD EygwZTMxYTA5MjVkMjEwMGIzOTJjOTQ4OWJmZjY2YmY0NDRiMWQ0MTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX0WlcOiuI9CMxDgl4+CaHT6RjDh zoBGpkojuD8tz5nVsqktPHWFihHbwAKfya+lLXCDGDdFsOb2xOWEQWYdMg6TKAtB lrP7wUvIadZQSgubuAVLDEtgXuLCHsIOO2NAkL2ZbrxDY4JUo7YXu/wEtBaZJ37y lcIk9smyZpWweIeAQWsYwADBGkXzx86NH4yF801rxfY+8s776m3DmaZfScz+2XoR ujvxctHCHHfEebRfyt5i5VuwwCayWKmXL/5WGbucVUQFosEtoMSKCZ5qahQWa0tc p2v64QHFTY9vW3OKl9/aWleJjcyYsp37TlwtgeQhW8Y8u6x2QSfUctfogwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4xoJJdIQCzkslIm/9mv0RLHUFzMB8GA1UdIwQY MBaAFDdf2ZVOfV01n5P1IYIdhRaVPJ02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODct ODUxZDU3N2QxNmFiLzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODctODUxZDU3N2QxNmFi LzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEiHMDJw yc77MlAbRKuWfzWtuAY8I0TRoh0PGkNlv2N6a+nQYBNoGcmjTghyEo/v2bVV3369 xnvKhBOGZ4sC3uQ851dwlvN54L0kHeUfr8ztJgCj43zr9ltaIQaw3tysgfUkveVq e9J4SpreVDVM3OrKfzwLs+FPTnlW+lrRBBofQO5K9TxiBfafGN6cVcW8MY0tBFaS e7yFpjbyCdmAr2SLSObITPFDLvsvZn5/tzo0j/8S3yCekv0rGPeo7ZSE2b9z78LO jyX8A/W/5nHlYfzinHAmUDoSg/guCNDpvgMCCV1zG5gvwjSUyybosR/mFaF6/eIO 9HwrqUigjnYkbA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:55 2025 by rpki-client