This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json) Hash identifier: slLVS8aVRVKraCV/nLGK+PXOsfrTRep8Ev85ZazWWsc= Subject key identifier: 95:23:A2:BA:59:D4:3C:80:02:1A:0A:BB:26:74:99:69:BB:F0:B3:A3 Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b Certificate serial: 019B3F7ECDDBC6B2DB1E4786A593CE1BF844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 06:00:33 +0000 Manifest this update: Sun 21 Dec 2025 06:00:33 +0000 Manifest next update: Mon 22 Dec 2025 06:00:33 +0000 Files and hashes: 1: MbrCU5EWrzqFZBAeUe4bUJd8wew.roa (hash: 5Pva3cv3+IYsnuZvSImhrKouYMj9MMRYEIbLj8Bzi98=) 2: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: EhHB2Twhuxsso2+p7TOVgb1Vru4869nUo15M5Fnf+CY=) 3: zQEfbksVhhA2S7Y-4p6fScJooW4.roa (hash: wml6Lhyvjtk0nrkWUQQ2ofJbLrbKj1m4u8FJSWuGbD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:cd:db:c6:b2:db:1e:47:86:a5:93:ce:1b:f8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b Validity Not Before: Dec 21 06:00:33 2025 GMT Not After : Dec 22 06:00:33 2025 GMT Subject: CN=9523a2ba59d43c80021a0abb26749969bbf0b3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:d1:b9:da:a0:16:55:2f:21:32:54:da:3e: 58:c3:33:bd:6b:4c:c5:ca:7e:d1:fe:dc:69:67:c0: 41:16:9c:03:c7:f8:aa:ac:77:20:09:14:e5:ae:26: eb:88:df:93:37:41:47:b9:1e:47:36:68:dc:e2:d3: a0:06:bb:08:5c:54:6b:0f:65:46:13:98:b0:87:c2: ca:9e:f3:d7:65:03:9e:5a:e0:0d:e0:ec:e1:1e:85: 93:7b:77:7b:8a:6b:33:08:6f:41:e4:d6:75:1d:90: a2:c6:37:bb:50:ee:ac:7b:67:d5:5e:04:8f:df:03: 82:ab:8e:f4:03:f1:c7:e6:c2:af:28:f4:ef:86:4e: 0f:62:85:1f:fb:a2:99:f2:27:02:37:1f:48:ac:5a: 5c:2b:2d:f7:3c:39:36:5b:c0:13:5c:b4:c2:fb:4c: b6:8b:84:20:8c:ce:b4:b5:a0:54:1c:10:b5:be:bb: 93:a4:80:36:7b:e2:62:be:30:93:d1:5f:3f:72:1d: 8f:f2:d9:74:4a:89:ab:ba:79:d2:53:a9:54:ef:c1: ab:50:11:d5:7f:b8:dd:f5:06:aa:b0:05:f0:64:e4: d4:c6:ae:c7:a4:f7:a9:e8:6b:71:77:bd:61:3f:3c: b5:f0:ff:42:0a:ee:07:75:cf:ee:88:89:07:e1:a9: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:23:A2:BA:59:D4:3C:80:02:1A:0A:BB:26:74:99:69:BB:F0:B3:A3 X509v3 Authority Key Identifier: keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:30:27:c5:9f:9d:c7:bc:92:00:2f:52:72:18:67:e9:25:71: d9:44:0a:65:f3:6d:94:61:d9:bd:a4:87:be:f5:84:8e:eb:f1: b3:f4:3d:69:29:03:5f:b7:11:4c:79:fd:88:ee:34:30:2a:2e: 75:ae:ce:e9:21:bd:be:d9:2a:36:7d:aa:e4:9d:04:d9:4b:f2: 84:ea:53:79:30:1e:0a:6b:2e:d2:4b:2d:e2:ee:d7:0d:12:18: 8a:94:52:1d:45:4c:b7:84:5f:8c:54:d2:04:38:01:9d:27:0d: 25:c3:e1:13:b6:64:b1:95:6e:c8:73:4a:30:10:28:87:30:05: a1:a6:f2:e3:7b:dd:f4:e8:b5:9c:ef:a6:50:7f:55:47:d3:93: ab:6e:2a:dc:0b:8f:77:33:25:b9:54:ee:65:12:0e:e9:40:e5: 68:9a:b4:aa:74:c2:9c:06:cd:f8:ec:6f:8d:98:50:4c:2b:05: 4e:78:43:91:18:16:d6:0f:21:c9:e5:e7:62:23:cc:da:70:0b: 59:40:19:f6:06:65:d0:24:ba:61:d0:4c:80:fb:e9:43:f3:c9: 58:11:87:86:db:ce:9b:cc:aa:cd:bc:1a:25:fc:ba:4c:b2:1a: 5d:12:3c:cb:bf:21:2a:f0:88:f3:9d:0c:f9:f6:65:1b:77:ca: 7f:7a:c5:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fs3bxrLbHkeGpZPOG/hEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZGVlNmFjYmM3ODJiOGM3Njk2YTQwYjI4ZTgwMzM5NjE5 ZDBmMWIwHhcNMjUxMjIxMDYwMDMzWhcNMjUxMjIyMDYwMDMzWjAzMTEwLwYDVQQD Eyg5NTIzYTJiYTU5ZDQzYzgwMDIxYTBhYmIyNjc0OTk2OWJiZjBiM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLfRudqgFlUvITJU2j5YwzO9a0zF yn7R/txpZ8BBFpwDx/iqrHcgCRTlribriN+TN0FHuR5HNmjc4tOgBrsIXFRrD2VG E5iwh8LKnvPXZQOeWuAN4OzhHoWTe3d7imszCG9B5NZ1HZCixje7UO6se2fVXgSP 3wOCq470A/HH5sKvKPTvhk4PYoUf+6KZ8icCNx9IrFpcKy33PDk2W8ATXLTC+0y2 i4QgjM60taBUHBC1vruTpIA2e+JivjCT0V8/ch2P8tl0SomrunnSU6lU78GrUBHV f7jd9QaqsAXwZOTUxq7HpPep6Gtxd71hPzy18P9CCu4Hdc/uiIkH4anZGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUjorpZ1DyAAhoKuyZ0mWm78LOjMB8GA1UdIwQY MBaAFDfe5qy8eCuMdpakCyjoAzlhnQ8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5Zjkt YjczYmZjY2I0ZTA4LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wMjBkNDctMmNjMC00MzZiLWI5ZjktYjczYmZjY2I0ZTA4 LzEvTjk3bXJMeDRLNHgybHFRTEtPZ0RPV0dkRHhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANDAnxZ+d x7ySAC9Schhn6SVx2UQKZfNtlGHZvaSHvvWEjuvxs/Q9aSkDX7cRTHn9iO40MCou da7O6SG9vtkqNn2q5J0E2UvyhOpTeTAeCmsu0kst4u7XDRIYipRSHUVMt4RfjFTS BDgBnScNJcPhE7ZksZVuyHNKMBAohzAFoaby43vd9Oi1nO+mUH9VR9OTq24q3AuP dzMluVTuZRIO6UDlaJq0qnTCnAbN+OxvjZhQTCsFTnhDkRgW1g8hyeXnYiPM2nAL WUAZ9gZl0CS6YdBMgPvpQ/PJWBGHhtvOm8yqzbwaJfy6TLIaXRI8y78hKvCI850M +fZlG3fKf3rF7A== -----END CERTIFICATE-----Generated at Sun Dec 21 08:37:46 2025 by rpki-client