This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json) Hash identifier: 5Twx9Vea7vfGJCowcUF4PUlj09f/DLisXZgjKhfrOCI= Subject key identifier: 19:F5:6F:DD:34:2B:B7:21:BF:BF:06:4E:15:6E:5B:A0:B7:81:54:49 Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53 Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53 Certificate serial: 019AF464BE1FDC40E3386286F91C50C5C183 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft Manifest number: 120E Signing time: Sat 06 Dec 2025 16:00:34 +0000 Manifest this update: Sat 06 Dec 2025 16:00:34 +0000 Manifest next update: Sun 07 Dec 2025 16:00:34 +0000 Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: i/0sJy67y9IQFd/USzYHI2/9T/KD56gM9s1j9WaWWNk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:be:1f:dc:40:e3:38:62:86:f9:1c:50:c5:c1:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53 Validity Not Before: Dec 6 16:00:34 2025 GMT Not After : Dec 7 16:00:34 2025 GMT Subject: CN=19f56fdd342bb721bfbf064e156e5ba0b7815449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:57:85:35:c4:56:c5:a7:f9:40:52:2e:65:d4: c4:b6:5b:fa:ae:4a:6c:6a:fa:bf:fa:df:48:92:99: d9:72:18:bc:1d:5f:f1:62:53:58:4d:6e:94:41:5f: cc:38:38:b7:e2:15:c0:bc:13:b5:56:18:b2:e8:16: 70:94:30:7d:9d:d4:dc:0b:63:2b:da:78:1d:a6:1f: db:05:ab:60:49:02:01:d9:c6:bf:20:6a:7c:88:04: 50:12:7c:e1:2d:1e:60:08:30:d8:d2:97:64:32:85: 06:93:f8:a8:a7:cc:ac:56:8b:6c:f1:e7:54:ce:31: d3:37:d0:3f:81:7f:e4:30:4a:d9:73:5c:cb:45:8e: 16:07:08:ea:59:4c:d3:61:82:96:44:14:b1:c6:88: 30:c3:42:39:06:c7:64:76:48:73:c1:d3:81:88:93: e6:f5:07:6b:1e:2c:0f:d8:37:b0:54:40:eb:82:47: 4c:28:32:3f:c5:16:4f:d7:e4:00:27:2f:80:d8:19: 68:d5:35:0f:99:bd:21:b0:ab:b7:03:30:b4:4c:85: 96:5f:a9:23:22:bf:d7:87:05:8c:1c:24:d2:f6:c0: d7:d9:91:98:99:2c:30:62:54:db:a8:73:6c:bb:b3: b6:b3:ed:5f:3c:42:c4:21:e1:75:51:c5:b4:69:5b: 40:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F5:6F:DD:34:2B:B7:21:BF:BF:06:4E:15:6E:5B:A0:B7:81:54:49 X509v3 Authority Key Identifier: keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:2c:91:20:eb:ae:45:79:75:16:96:bc:89:e1:3a:0b:83:97: 97:1c:82:df:01:e3:e8:30:b5:45:e3:bf:d9:48:33:ce:87:4b: 6d:c0:21:76:2a:26:28:5d:88:05:68:2a:4b:c9:09:13:ab:fa: 58:19:1d:e8:28:8a:43:fc:b6:31:4d:f8:e0:42:ad:f6:73:72: 56:2e:1d:0c:c8:04:81:73:6f:31:a4:25:04:c4:2d:23:88:b0: 4a:42:99:79:55:84:93:6c:4a:34:a8:06:fa:11:8c:dc:72:58: d3:30:f5:cb:bd:fe:f4:58:1d:f2:9c:1d:1f:39:a3:04:20:dc: a9:91:5f:c0:c5:ec:0b:ab:8d:bf:1a:e3:d0:e8:ad:d9:e9:8a: 81:93:7f:52:3c:14:55:29:fd:ec:ab:0f:59:7b:52:4e:94:a2: 60:42:27:c7:05:5a:05:f9:5b:b9:71:af:4a:ac:c1:0e:7b:34: 9b:ff:d5:9e:68:31:e8:29:be:07:e5:28:d7:ab:c8:e4:0f:a4: 2c:bf:01:bf:70:12:e3:3d:cb:f7:3e:99:75:20:d3:2c:03:f2: 82:e9:5f:ba:7d:20:24:f3:c8:41:f5:cc:ac:a7:8b:90:c3:79: fe:eb:4a:22:87:5a:93:35:1a:ce:fa:c8:10:ac:d5:ca:c2:43: 17:f6:87:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZL4f3EDjOGKG+RxQxcGDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmYyZjRlZGIyMzIzMGM2NGI3OTNiNDE5NTdlZjRhMzIz ZTNjNTMwHhcNMjUxMjA2MTYwMDM0WhcNMjUxMjA3MTYwMDM0WjAzMTEwLwYDVQQD EygxOWY1NmZkZDM0MmJiNzIxYmZiZjA2NGUxNTZlNWJhMGI3ODE1NDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FeFNcRWxaf5QFIuZdTEtlv6rkps avq/+t9IkpnZchi8HV/xYlNYTW6UQV/MODi34hXAvBO1Vhiy6BZwlDB9ndTcC2Mr 2ngdph/bBatgSQIB2ca/IGp8iARQEnzhLR5gCDDY0pdkMoUGk/iop8ysVots8edU zjHTN9A/gX/kMErZc1zLRY4WBwjqWUzTYYKWRBSxxogww0I5BsdkdkhzwdOBiJPm 9QdrHiwP2DewVEDrgkdMKDI/xRZP1+QAJy+A2Blo1TUPmb0hsKu3AzC0TIWWX6kj Ir/XhwWMHCTS9sDX2ZGYmSwwYlTbqHNsu7O2s+1fPELEIeF1UcW0aVtA/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBn1b900K7chv78GThVuW6C3gVRJMB8GA1UdIwQY MBaAFDdvL07bIyMMZLeTtBlX70oyPjxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjI4dlR0c2pJd3hrdDVPMEdWZnZTakktUEZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTlkMzQtZTRkMC00YjgwLThlY2Qt Yjc4OTJmNzZlOGM1LzEvTjI4dlR0c2pJd3hrdDVPMEdWZnZTakktUEZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zOTlkMzQtZTRkMC00YjgwLThlY2QtYjc4OTJmNzZlOGM1 LzEvTjI4dlR0c2pJd3hrdDVPMEdWZnZTakktUEZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcSyRIOuu RXl1Fpa8ieE6C4OXlxyC3wHj6DC1ReO/2UgzzodLbcAhdiomKF2IBWgqS8kJE6v6 WBkd6CiKQ/y2MU344EKt9nNyVi4dDMgEgXNvMaQlBMQtI4iwSkKZeVWEk2xKNKgG +hGM3HJY0zD1y73+9Fgd8pwdHzmjBCDcqZFfwMXsC6uNvxrj0Oit2emKgZN/UjwU VSn97KsPWXtSTpSiYEInxwVaBflbuXGvSqzBDns0m//Vnmgx6Cm+B+Uo16vI5A+k LL8Bv3AS4z3L9z6ZdSDTLAPygulfun0gJPPIQfXMrKeLkMN5/utKIodakzUazvrI EKzVysJDF/aH4A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:56:08 2025 by rpki-client