This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json) Hash identifier: 0gOg8M0Ysz+SySFdKcFzwcvzE6NiwEnR93xLz+xlueU= Subject key identifier: E0:C5:7D:01:A9:26:C1:27:15:BF:33:C4:20:18:E2:52:05:7F:CC:30 Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38 Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438 Certificate serial: 019AF19B0F3878D9AFAECD1268F5F112DB60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: tktkchBJeDV+Cz9A+DLEDx4NsZ0VffBQA4AthPC+L+Y=) 2: PSL2OSxsoutF8sVX_uvIaiWUApI.roa (hash: IoDHAxb+U2Gaz8HUwj/mdMtnodnlu8iYqMMfCwQw35I=) 3: t0FWDnJPs6XvZokHfTcCnjKRaeE.roa (hash: Aou1i/O3zguK2P9WdtUpbw8G9iRuYff1/7SNrw+Pohw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0f:38:78:d9:af:ae:cd:12:68:f5:f1:12:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=e0c57d01a926c12715bf33c42018e252057fcc30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ff:2f:9a:9f:d8:ce:f5:81:da:e7:fd:4a:a9: a1:62:bd:15:08:f2:f2:84:de:6d:91:4f:5d:b5:e4: 6a:d4:5c:dd:8a:cf:d3:a0:fd:71:36:4e:63:91:e3: 32:2d:d0:af:a8:71:78:96:f1:ea:88:df:0c:fb:94: 44:be:56:8a:d5:6c:77:08:59:4c:09:5b:97:57:88: 99:bd:a0:6e:ff:3c:52:35:d9:f5:95:e4:b1:49:e6: 3f:2a:84:d6:84:b9:9e:4c:51:ae:87:ef:a0:06:a1: af:12:24:be:38:73:39:0a:13:4c:6b:20:c9:13:9d: 31:b9:f5:e0:57:b4:9f:5f:9f:aa:f7:75:4a:ea:c9: 2d:4c:31:49:f1:b9:40:bd:90:ce:5b:59:cd:c5:9c: 58:e4:52:29:e8:6d:24:26:c8:cb:26:9f:c6:f9:0e: 31:28:93:7f:b5:1c:38:73:d9:49:bc:99:43:b5:b8: 51:b0:90:0f:f7:cc:b7:c6:a8:47:1f:29:0c:5c:b2: 39:d7:46:ff:11:f5:1d:55:80:43:2d:c6:7a:0f:3e: de:fa:bf:c4:08:df:31:b7:0a:1c:ea:e8:01:82:63: ba:5b:0c:a9:a3:b5:a5:70:71:f4:94:32:d4:a4:0c: 32:fc:2c:e7:c3:8b:88:d7:29:1f:47:d6:b0:34:f3: 77:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C5:7D:01:A9:26:C1:27:15:BF:33:C4:20:18:E2:52:05:7F:CC:30 X509v3 Authority Key Identifier: keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:60:92:c3:33:37:54:6a:10:45:ab:0e:77:23:d3:90:5b:40: 9e:5f:6c:8f:e9:44:eb:bf:e6:c4:fe:a8:31:03:c8:8f:f3:df: a0:f4:eb:a1:de:29:bb:75:1d:61:35:cb:9f:1c:b2:9a:4c:02: 14:84:1c:8d:c1:96:7f:b8:37:29:23:7b:43:c6:a3:6c:85:84: da:e9:a1:83:0f:e7:4a:e1:29:43:7a:c5:c0:63:41:3b:18:9b: b2:97:11:e5:09:e8:32:d1:ea:2d:9e:2a:6a:c1:6a:e7:c0:33: 36:21:48:30:f9:82:83:6a:ff:68:ba:c2:ff:b9:a7:90:fa:54: a3:a2:9c:74:4a:d6:c7:4b:d2:4a:27:93:a1:b8:87:da:89:01: 05:a3:b3:b0:88:94:2e:2d:15:ec:9b:79:54:f1:31:b4:ff:2d: 16:53:1a:db:6f:e0:2b:05:e4:1f:06:17:87:fd:83:0c:f9:41: 7c:99:9c:b2:4f:ab:c1:a7:93:5a:8b:f7:01:10:64:0c:8b:47: 58:1e:79:7b:d7:dc:b5:b1:9b:43:4e:8b:f0:a4:3a:4c:94:16: 18:bd:8a:ea:b2:d5:27:02:e0:90:50:f1:42:b6:3a:e2:2e:17: 5b:fa:5c:14:a7:5d:e1:3f:11:5b:ff:87:3e:64:ef:9e:89:f8: 23:0e:c7:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw84eNmvrs0SaPXxEttgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3 YjQ0MzgwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EyhlMGM1N2QwMWE5MjZjMTI3MTViZjMzYzQyMDE4ZTI1MjA1N2ZjYzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7f8vmp/YzvWB2uf9SqmhYr0VCPLy hN5tkU9dteRq1Fzdis/ToP1xNk5jkeMyLdCvqHF4lvHqiN8M+5REvlaK1Wx3CFlM CVuXV4iZvaBu/zxSNdn1leSxSeY/KoTWhLmeTFGuh++gBqGvEiS+OHM5ChNMayDJ E50xufXgV7SfX5+q93VK6sktTDFJ8blAvZDOW1nNxZxY5FIp6G0kJsjLJp/G+Q4x KJN/tRw4c9lJvJlDtbhRsJAP98y3xqhHHykMXLI510b/EfUdVYBDLcZ6Dz7e+r/E CN8xtwoc6ugBgmO6Wwypo7WlcHH0lDLUpAwy/Cznw4uI1ykfR9awNPN3swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODFfQGpJsEnFb8zxCAY4lIFf8wwMB8GA1UdIwQY MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct ZjQ0MTY2YmIyZGIwLzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGCSwzM3 VGoQRasOdyPTkFtAnl9sj+lE67/mxP6oMQPIj/PfoPTrod4pu3UdYTXLnxyymkwC FIQcjcGWf7g3KSN7Q8ajbIWE2umhgw/nSuEpQ3rFwGNBOxibspcR5QnoMtHqLZ4q asFq58AzNiFIMPmCg2r/aLrC/7mnkPpUo6KcdErWx0vSSieTobiH2okBBaOzsIiU Li0V7Jt5VPExtP8tFlMa22/gKwXkHwYXh/2DDPlBfJmcsk+rwaeTWov3ARBkDItH WB55e9fctbGbQ06L8KQ6TJQWGL2K6rLVJwLgkFDxQrY64i4XW/pcFKdd4T8RW/+H PmTvnon4Iw7Haw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:59 2025 by rpki-client