This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json) Hash identifier: 7wAfl8O0WvLDcB1VVR9XEkucxuX1//7M6e+hzwlLCzQ= Subject key identifier: DC:E5:B0:7A:AD:73:C3:F0:D9:29:9F:D2:DF:9F:CB:E5:F0:C9:A9:30 Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf Certificate serial: 019AF1D1A960BA322AE9C0586EC9C2850B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft Manifest number: 1345 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: GxeqdmyEQd+vsRv4E9no4weo7tb5jhh1lRk3F4/SnBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:60:ba:32:2a:e9:c0:58:6e:c9:c2:85:0b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=dce5b07aad73c3f0d9299fd2df9fcbe5f0c9a930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:c9:e7:99:2c:72:19:32:69:81:a7:29:38: b1:8f:0c:f4:dc:0b:79:49:43:cd:a7:71:41:c0:bd: 15:1d:bd:5a:27:f7:cc:67:a7:78:4f:78:b5:5d:15: e7:ac:68:cd:48:6a:e6:e3:96:2d:02:f3:dd:5c:b0: f2:44:e8:50:2e:bb:69:e6:a5:d9:34:bb:81:62:18: fe:ea:f4:c1:60:60:4d:e4:f2:c6:0f:51:dd:c3:08: 6b:b9:88:59:f8:a0:14:11:b4:c6:b7:8f:65:e1:f2: 3a:01:90:9a:b6:c2:3e:90:00:07:63:39:22:e9:64: 59:b9:fa:69:04:d9:2c:6d:72:41:33:f6:b4:4d:49: 7f:ce:b9:eb:5b:4e:cc:d4:57:49:3a:60:d3:cb:34: b9:f2:40:c1:c3:17:1a:71:8a:50:50:57:07:09:0a: bd:c0:0a:96:2a:36:9c:68:9a:8a:f4:04:c3:90:74: ab:bc:9a:9a:7e:59:83:63:4d:79:5b:73:27:f2:9d: 0f:f8:3f:42:ab:92:aa:be:6b:b5:79:89:a6:52:a9: 05:c6:8c:f1:72:98:a5:35:4c:89:80:81:55:92:27: a9:87:5d:2a:ee:96:99:8e:fc:1d:e6:22:0e:b8:1c: f4:17:df:ea:cf:b7:11:28:07:9e:41:d3:6a:30:55: 3e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E5:B0:7A:AD:73:C3:F0:D9:29:9F:D2:DF:9F:CB:E5:F0:C9:A9:30 X509v3 Authority Key Identifier: keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:27:36:95:18:20:02:17:bc:0d:74:12:53:01:54:7c:89: 60:1c:6a:3d:db:72:61:65:0c:d0:cd:37:cf:fa:f9:22:1a:de: e9:6e:9b:04:ed:36:1a:6e:13:f6:a6:d7:8c:34:45:0a:1f:4e: a9:37:d3:15:98:c1:c4:82:63:ae:f9:8d:29:18:43:ec:87:11: c0:de:47:aa:9e:87:4e:18:be:3a:5f:d9:4a:b6:51:a8:46:63: fd:71:a0:5c:19:5b:fa:8d:82:61:23:96:f5:be:e9:e5:8c:35: a2:7f:11:6b:6a:1f:d1:28:58:b5:6f:40:14:35:27:f0:eb:fa: 07:a2:b5:f9:b1:b6:a1:5f:d1:17:0d:c6:bb:5f:14:01:1c:a2: 8d:c7:70:69:9d:d8:4e:89:6f:73:8b:02:fa:bf:13:52:9e:19: 3e:04:5a:cb:90:91:01:42:1e:2c:15:f6:32:5d:c3:4e:1e:aa: f5:de:bf:aa:d3:7b:ff:ac:ba:63:69:54:e3:af:a6:2f:3f:82: 68:54:81:9d:22:5f:45:01:c5:c6:0d:65:e2:f6:99:12:52:3e: ed:5e:d1:68:c5:23:c8:f6:a1:af:17:30:30:40:5a:0c:cf:fb: 91:77:ba:db:95:5a:81:96:3e:8e:08:dd:65:87:98:c7:70:aa: 0f:37:ba:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0algujIq6cBYbsnChQtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDA4M2FmMGZmZjE3NjhhMDdjNjU1ZjFmZTM4NjAwOWM1 MjJjY2YwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD EyhkY2U1YjA3YWFkNzNjM2YwZDkyOTlmZDJkZjlmY2JlNWYwYzlhOTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWvJ55kschkyaYGnKTixjwz03At5 SUPNp3FBwL0VHb1aJ/fMZ6d4T3i1XRXnrGjNSGrm45YtAvPdXLDyROhQLrtp5qXZ NLuBYhj+6vTBYGBN5PLGD1HdwwhruYhZ+KAUEbTGt49l4fI6AZCatsI+kAAHYzki 6WRZufppBNksbXJBM/a0TUl/zrnrW07M1FdJOmDTyzS58kDBwxcacYpQUFcHCQq9 wAqWKjacaJqK9ATDkHSrvJqaflmDY015W3Mn8p0P+D9Cq5Kqvmu1eYmmUqkFxozx cpilNUyJgIFVkieph10q7paZjvwd5iIOuBz0F9/qz7cRKAeeQdNqMFU+LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzlsHqtc8Pw2Smf0t+fy+XwyakwMB8GA1UdIwQY MBaAFDdAg68P/xdooHxlXx/jhgCcUizPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMt ZTRjYTZiNzNhYzc2LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMtZTRjYTZiNzNhYzc2 LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTAnNpUY IAIXvA10ElMBVHyJYBxqPdtyYWUM0M03z/r5Ihre6W6bBO02Gm4T9qbXjDRFCh9O qTfTFZjBxIJjrvmNKRhD7IcRwN5Hqp6HThi+Ol/ZSrZRqEZj/XGgXBlb+o2CYSOW 9b7p5Yw1on8Ra2of0ShYtW9AFDUn8Ov6B6K1+bG2oV/RFw3Gu18UARyijcdwaZ3Y Tolvc4sC+r8TUp4ZPgRay5CRAUIeLBX2Ml3DTh6q9d6/qtN7/6y6Y2lU46+mLz+C aFSBnSJfRQHFxg1l4vaZElI+7V7RaMUjyPahrxcwMEBaDM/7kXe625VagZY+jgjd ZYeYx3CqDze6Zg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:08 2025 by rpki-client