This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json) Hash identifier: C59aw3dlLmHdQ5Pz5PTbvF9YP+hCDlOi16FknaefdT4= Subject key identifier: C2:EC:E4:F0:C6:90:AB:2F:BD:06:AF:B5:D3:F8:C5:E0:F2:E1:3C:6A Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d Certificate serial: 019AF12E09A6BC218A5AA8B4266F43039397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft Manifest number: 115A Signing time: Sat 06 Dec 2025 01:01:57 +0000 Manifest this update: Sat 06 Dec 2025 01:01:57 +0000 Manifest next update: Sun 07 Dec 2025 01:01:57 +0000 Files and hashes: 1: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: UymIeSnAVUabdmnbc89uCPHN5Ebc/SHvs52i6sUv1/Q=) 2: cxXgE4ze3p5Y_SSxlmeJ4o5QzaU.roa (hash: VnVBSnuyvJSL8u2y/xmozn76q7jfteZhwwoJt7Qqpuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:09:a6:bc:21:8a:5a:a8:b4:26:6f:43:03:93:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d Validity Not Before: Dec 6 01:01:57 2025 GMT Not After : Dec 7 01:01:57 2025 GMT Subject: CN=c2ece4f0c690ab2fbd06afb5d3f8c5e0f2e13c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f0:4b:e9:4b:c3:5f:55:7f:9c:c5:d0:cc:88: 40:4d:ab:4e:8b:94:d5:ec:ac:74:a4:f1:be:97:b9: e8:bb:cd:74:c8:07:50:cb:1e:43:0b:cb:18:05:23: 00:a9:18:74:df:0b:f1:ad:d7:19:d1:4a:bc:d8:2e: 7d:40:f8:83:ab:bf:9a:4d:71:04:41:e9:68:74:7b: fb:09:08:20:3a:9d:a3:cc:d2:1b:74:f5:ba:6b:76: 0c:1d:10:a0:61:01:e9:2a:fe:c3:c8:a9:71:8a:a9: 60:b0:ea:9a:9f:75:6e:32:81:7e:57:1a:57:3d:17: 58:c2:ba:b2:d4:7d:88:bf:fc:02:70:56:aa:42:ed: 94:a9:a1:ec:f0:7e:6a:b3:75:83:11:60:91:38:7e: d9:85:28:5d:65:97:3a:83:75:4c:fc:75:b2:17:9b: 12:72:23:65:40:fe:45:df:c0:54:da:ea:1d:f7:ad: 4a:6c:3a:c5:16:29:d0:36:7e:ea:92:e0:e3:2a:db: 9e:b5:13:00:68:a3:05:6a:5b:16:4a:a6:9a:29:ee: 74:d8:cf:2b:e5:6a:02:60:38:f8:7e:5e:f2:62:cb: 10:e4:87:c0:6f:28:11:35:f6:b3:7f:cc:7a:bb:41: ba:6e:76:3a:bf:11:c4:77:c8:b6:ba:84:aa:44:e5: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EC:E4:F0:C6:90:AB:2F:BD:06:AF:B5:D3:F8:C5:E0:F2:E1:3C:6A X509v3 Authority Key Identifier: keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:23:93:97:f5:cf:a8:53:e5:c0:59:61:b4:45:cf:58:db:71: 2f:95:32:b2:c8:53:a5:c5:07:5c:55:d8:2f:f4:20:d9:a2:25: 52:f0:36:0e:f3:10:ed:da:72:c8:cf:4d:23:e4:4a:c5:18:49: f0:b6:1b:a1:f8:bc:3c:32:13:f0:2b:ad:4f:59:21:a1:ed:e9: 2c:1f:c6:c7:4d:fd:42:7f:6f:f9:5b:f5:26:9c:ee:80:b7:ab: 09:e0:ce:c6:07:09:7a:46:e8:7d:ac:62:c4:b2:a8:43:37:2e: 80:ac:14:91:8c:e3:df:5f:fd:b4:7a:ff:58:d2:9f:c5:b3:b0: da:c4:31:ca:24:be:55:c4:8e:bb:81:ea:02:6c:a8:50:f9:ba: 3a:57:95:46:de:92:ae:47:c2:5f:51:6e:fe:46:8b:3a:e0:ea: f2:32:74:f9:54:fd:e1:30:ba:a2:2c:dc:79:d5:3d:78:1e:73: b8:84:42:a0:2e:ff:7a:98:c0:0d:23:0a:ef:17:e3:6f:f0:46: 09:da:a2:bc:94:eb:88:f5:51:44:1c:53:4e:e9:f6:bb:1d:ee: 30:de:5c:e1:30:24:21:73:d1:90:14:37:d4:11:73:e9:5d:49: f0:78:61:7e:62:8d:11:ba:d8:aa:f0:50:d6:6e:15:0c:9a:17: 18:58:32:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgmmvCGKWqi0Jm9DA5OXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZTBjYjU4YWUyM2Q0NzNhZTEzYTczNDFiN2E3M2JkZDEw MjhhMGQwHhcNMjUxMjA2MDEwMTU3WhcNMjUxMjA3MDEwMTU3WjAzMTEwLwYDVQQD EyhjMmVjZTRmMGM2OTBhYjJmYmQwNmFmYjVkM2Y4YzVlMGYyZTEzYzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fBL6UvDX1V/nMXQzIhATatOi5TV 7Kx0pPG+l7nou810yAdQyx5DC8sYBSMAqRh03wvxrdcZ0Uq82C59QPiDq7+aTXEE QelodHv7CQggOp2jzNIbdPW6a3YMHRCgYQHpKv7DyKlxiqlgsOqan3VuMoF+VxpX PRdYwrqy1H2Iv/wCcFaqQu2UqaHs8H5qs3WDEWCROH7ZhShdZZc6g3VM/HWyF5sS ciNlQP5F38BU2uod961KbDrFFinQNn7qkuDjKtuetRMAaKMFalsWSqaaKe502M8r 5WoCYDj4fl7yYssQ5IfAbygRNfazf8x6u0G6bnY6vxHEd8i2uoSqROWnKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLs5PDGkKsvvQavtdP4xeDy4TxqMB8GA1UdIwQY MBaAFDfgy1iuI9RzrhOnNBt6c73RAooNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUt Mzg2OTEwZGNiOTAzLzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUtMzg2OTEwZGNiOTAz LzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJiOTl/XP qFPlwFlhtEXPWNtxL5UysshTpcUHXFXYL/Qg2aIlUvA2DvMQ7dpyyM9NI+RKxRhJ 8LYbofi8PDIT8CutT1khoe3pLB/Gx039Qn9v+Vv1JpzugLerCeDOxgcJekbofaxi xLKoQzcugKwUkYzj31/9tHr/WNKfxbOw2sQxyiS+VcSOu4HqAmyoUPm6OleVRt6S rkfCX1Fu/kaLOuDq8jJ0+VT94TC6oizcedU9eB5zuIRCoC7/epjADSMK7xfjb/BG CdqivJTriPVRRBxTTun2ux3uMN5c4TAkIXPRkBQ31BFz6V1J8HhhfmKNEbrYqvBQ 1m4VDJoXGFgyqw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:10 2025 by rpki-client