This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json) Hash identifier: M34ewBOEYCD8O+5GNU9ylWbtSl98yaWOyOwjJounx3s= Subject key identifier: 21:17:07:1C:A3:C2:F7:71:AF:74:3D:4A:52:80:8A:FD:A3:72:87:AC Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Certificate serial: 019AF352A85B83CDA35B2AD4A43252CC53D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: Q1a66W5FRuCt3l85hCDbNBXvUVmAPhzn4wUV3q7gASo=) 2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a8:5b:83:cd:a3:5b:2a:d4:a4:32:52:cc:53:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=2117071ca3c2f771af743d4a52808afda37287ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c4:a1:0e:30:1c:d0:8b:ef:e2:67:be:a9:27: 48:f6:00:57:1c:b4:f0:53:cd:bf:10:13:5c:a4:a5: c1:e6:21:f4:ec:e8:c4:e0:65:e2:2b:17:3b:fb:e1: 3e:da:5e:f9:23:f6:43:8f:7c:30:4a:07:56:85:28: 95:9f:4e:08:26:82:1e:7c:4f:93:c9:ae:00:49:ef: 5d:ec:0b:7c:96:0e:49:31:0a:8c:38:27:2e:95:91: 77:b1:86:6a:44:46:c9:85:85:08:fb:e2:54:ce:8d: 63:31:5f:7f:de:c4:1d:26:ff:88:8b:1b:d4:07:c6: 51:64:64:7c:0b:d8:9a:a9:a0:be:c4:1b:1e:ad:be: 1e:15:f0:1c:99:08:73:f7:e3:6c:f3:bd:16:56:bc: 33:34:5e:a7:be:a5:77:a7:71:a7:e7:85:06:b3:d2: 4d:00:ec:9a:af:32:da:85:f7:63:05:c9:47:4c:85: a4:e4:cc:57:a7:83:a3:d3:93:bb:08:bb:07:6c:83: 9b:93:dc:f0:05:15:f1:7c:a6:f2:b3:0c:ea:97:95: 12:ef:f7:18:91:58:d4:6e:fd:3f:0f:f9:59:a0:29: e8:ae:7f:27:67:4f:b8:a4:29:d5:55:27:0b:8f:bb: af:01:ca:a3:c9:b5:bf:21:72:57:93:6f:b3:34:98: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:17:07:1C:A3:C2:F7:71:AF:74:3D:4A:52:80:8A:FD:A3:72:87:AC X509v3 Authority Key Identifier: keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c9:0b:f9:ef:59:21:be:0b:2f:23:d1:d7:5d:58:94:c3:29: 8d:dd:e9:bd:8e:f1:61:9d:50:db:d2:fa:28:61:11:3e:f8:d7: 51:5e:5b:98:26:8b:f8:9e:2c:4a:a4:cc:be:0d:df:e4:03:ab: bf:d3:2f:b4:a0:77:3c:14:18:bd:36:82:2a:9c:49:f3:ed:15: ec:51:68:2b:61:0a:3c:c8:33:9c:e3:25:b0:50:2c:f8:48:50: 0a:a1:91:03:0f:ec:2b:5d:9b:a4:36:91:fc:d5:f8:30:a7:2a: f3:a4:15:42:7c:11:e5:d0:09:cf:43:5e:52:ae:92:8d:e6:bb: 22:13:46:5b:0b:7d:4e:4c:ac:25:c3:19:7d:33:59:af:41:22: 6d:74:e4:9c:65:77:95:aa:9d:96:9e:41:cf:79:56:e5:9e:d2: e8:18:85:a2:5f:fc:20:cc:08:33:70:1b:fe:9a:fd:7c:f6:46: af:f0:9b:6e:b5:ac:5b:76:3a:5e:ea:88:02:3d:4b:b6:19:24: ab:63:89:ac:2d:00:d0:65:72:32:f2:29:28:b8:04:16:59:d6: a7:ea:f3:65:11:80:e6:39:b8:48:46:03:2e:74:ce:8c:69:a4: 07:a1:c0:93:0d:a6:9d:ff:74:d5:e6:05:a7:81:9a:13:ef:5f: 3c:c2:e9:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqhbg82jWyrUpDJSzFPVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj OGE3MzAwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EygyMTE3MDcxY2EzYzJmNzcxYWY3NDNkNGE1MjgwOGFmZGEzNzI4N2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68ShDjAc0Ivv4me+qSdI9gBXHLTw U82/EBNcpKXB5iH07OjE4GXiKxc7++E+2l75I/ZDj3wwSgdWhSiVn04IJoIefE+T ya4ASe9d7At8lg5JMQqMOCculZF3sYZqREbJhYUI++JUzo1jMV9/3sQdJv+IixvU B8ZRZGR8C9iaqaC+xBserb4eFfAcmQhz9+Ns870WVrwzNF6nvqV3p3Gn54UGs9JN AOyarzLahfdjBclHTIWk5MxXp4Oj05O7CLsHbIObk9zwBRXxfKbyswzql5US7/cY kVjUbv0/D/lZoCnorn8nZ0+4pCnVVScLj7uvAcqjybW/IXJXk2+zNJjWiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEXBxyjwvdxr3Q9SlKAiv2jcoesMB8GA1UdIwQY MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt ZWUyOGE2NWM4YTIyLzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJMkL+e9Z Ib4LLyPR111YlMMpjd3pvY7xYZ1Q29L6KGERPvjXUV5bmCaL+J4sSqTMvg3f5AOr v9MvtKB3PBQYvTaCKpxJ8+0V7FFoK2EKPMgznOMlsFAs+EhQCqGRAw/sK12bpDaR /NX4MKcq86QVQnwR5dAJz0NeUq6Sjea7IhNGWwt9TkysJcMZfTNZr0EibXTknGV3 laqdlp5Bz3lW5Z7S6BiFol/8IMwIM3Ab/pr9fPZGr/CbbrWsW3Y6XuqIAj1Lthkk q2OJrC0A0GVyMvIpKLgEFlnWp+rzZRGA5jm4SEYDLnTOjGmkB6HAkw2mnf901eYF p4GaE+9fPMLpVg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:08:00 2025 by rpki-client