This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json) Hash identifier: kVNVkBJ8qFq2Z9OJlGZXVLyjoCmgtUiu1JN11ZYJihM= Subject key identifier: 2F:07:1F:C9:4A:3E:CC:4D:E2:DA:05:83:5F:71:59:14:DD:90:26:A1 Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa Certificate serial: 019AF276CD254E78F5BE45B5C7B4E9856AF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft Manifest number: 0587 Signing time: Sat 06 Dec 2025 07:01:02 +0000 Manifest this update: Sat 06 Dec 2025 07:01:02 +0000 Manifest next update: Sun 07 Dec 2025 07:01:02 +0000 Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: +y6GKdDdbd/R8Pb+CT6H2QQaefI2ZicPdhL77PIOYX4=) 2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:cd:25:4e:78:f5:be:45:b5:c7:b4:e9:85:6a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa Validity Not Before: Dec 6 07:01:02 2025 GMT Not After : Dec 7 07:01:02 2025 GMT Subject: CN=2f071fc94a3ecc4de2da05835f715914dd9026a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d5:ab:e7:dd:5a:f5:dd:0d:13:86:da:64:68: d2:0a:ac:3d:bf:b3:b6:c7:6e:fd:06:ca:2a:87:f8: cf:e0:63:77:2f:bc:5c:ce:01:8b:20:03:57:90:09: f0:39:ec:58:f0:8f:76:64:7f:a0:62:96:0a:c8:8b: 92:a6:07:da:c0:a8:f6:39:f2:0c:da:83:da:04:c1: a6:5b:0b:46:25:f3:ab:43:76:59:99:40:fc:7f:da: 34:6c:36:82:58:42:c5:02:d3:69:64:f8:92:61:94: 3e:a6:18:f9:a0:1a:ec:77:36:88:4f:8c:a6:06:83: e5:ae:73:be:04:f9:14:9c:81:20:d3:5c:f6:c4:ee: a5:e1:82:04:cc:26:ce:f9:de:dc:1a:a7:40:70:aa: c2:c4:4f:f9:cc:a9:e6:3c:2c:3d:30:5f:1d:14:85: c0:a6:35:ca:1f:40:db:4c:1a:6a:e4:62:c1:2b:fd: c1:cc:4b:04:7e:6c:24:07:df:cf:4e:ba:9f:25:9e: cf:df:d1:c1:49:02:bf:04:96:32:cb:19:6e:42:80: 09:6f:42:81:9d:9d:af:2e:3f:84:73:52:b0:c7:ab: b9:4a:62:eb:e3:05:26:89:10:44:88:e5:1d:05:47: 97:e6:2b:5f:38:ca:2b:ce:56:99:e7:dc:59:17:58: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:07:1F:C9:4A:3E:CC:4D:E2:DA:05:83:5F:71:59:14:DD:90:26:A1 X509v3 Authority Key Identifier: keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:df:b6:6b:7d:fe:a1:d5:0f:69:9d:52:e6:de:44:d6:dc:c6: d1:0f:bb:2c:31:3b:ce:e3:69:db:3b:87:99:2c:b2:b2:b8:3d: a8:f3:61:06:fa:5d:07:e2:ca:82:8b:09:ee:ec:e1:78:da:30: bc:c3:4c:bb:46:ed:b8:f1:b8:33:82:39:88:5c:70:e5:81:cb: 15:2d:2f:c1:74:4f:d5:65:cb:19:ff:74:99:a7:60:78:90:50: 6d:8a:0d:95:cd:0d:93:1d:cf:d1:4b:df:b9:9d:a7:49:d8:e6: ba:fd:e8:e7:9f:14:a8:ff:8b:97:0d:3f:6a:28:5b:3f:38:96: cc:ad:57:79:c9:23:71:42:a6:b6:ca:50:d5:09:c6:a0:ac:8d: 13:aa:27:06:4a:b2:d4:fc:db:8f:0d:15:a4:de:fd:ce:3f:77: 8a:71:d1:87:4e:f8:30:b2:76:3b:b5:e7:39:aa:21:dd:06:68: b9:cf:a4:dc:59:8c:b8:20:77:4a:33:65:a0:f5:98:84:48:ae: 89:95:39:0c:bf:03:cb:f8:1a:0e:88:3f:2f:97:a1:a3:d7:11: 72:9a:68:d5:ea:3d:d3:63:e3:2c:37:95:e5:1a:95:b9:9b:38: a9:db:1c:b4:d9:ff:24:ff:e3:eb:0f:c8:4b:9a:8f:be:e1:71: 96:92:fa:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryds0lTnj1vkW1x7TphWrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi ODA2YWEwHhcNMjUxMjA2MDcwMTAyWhcNMjUxMjA3MDcwMTAyWjAzMTEwLwYDVQQD EygyZjA3MWZjOTRhM2VjYzRkZTJkYTA1ODM1ZjcxNTkxNGRkOTAyNmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytWr591a9d0NE4baZGjSCqw9v7O2 x279Bsoqh/jP4GN3L7xczgGLIANXkAnwOexY8I92ZH+gYpYKyIuSpgfawKj2OfIM 2oPaBMGmWwtGJfOrQ3ZZmUD8f9o0bDaCWELFAtNpZPiSYZQ+phj5oBrsdzaIT4ym BoPlrnO+BPkUnIEg01z2xO6l4YIEzCbO+d7cGqdAcKrCxE/5zKnmPCw9MF8dFIXA pjXKH0DbTBpq5GLBK/3BzEsEfmwkB9/PTrqfJZ7P39HBSQK/BJYyyxluQoAJb0KB nZ2vLj+Ec1Kwx6u5SmLr4wUmiRBEiOUdBUeX5itfOMorzlaZ59xZF1je/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8HH8lKPsxN4toFg19xWRTdkCahMB8GA1UdIwQY MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt MDM3OTkzMGY4Mjg2LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2 LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoN+2a33+ odUPaZ1S5t5E1tzG0Q+7LDE7zuNp2zuHmSyysrg9qPNhBvpdB+LKgosJ7uzheNow vMNMu0btuPG4M4I5iFxw5YHLFS0vwXRP1WXLGf90madgeJBQbYoNlc0Nkx3P0Uvf uZ2nSdjmuv3o558UqP+Llw0/aihbPziWzK1XeckjcUKmtspQ1QnGoKyNE6onBkqy 1Pzbjw0VpN79zj93inHRh074MLJ2O7XnOaoh3QZouc+k3FmMuCB3SjNloPWYhEiu iZU5DL8Dy/gaDog/L5eho9cRcppo1eo902PjLDeV5RqVuZs4qdsctNn/JP/j6w/I S5qPvuFxlpL6vA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:11 2025 by rpki-client