This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json) Hash identifier: br+PRA/DkR9AUIYGEal1JDLXFhJeJU4dHVRnKmn5eF4= Subject key identifier: 8D:95:9B:89:DB:C8:1D:C4:AB:3B:4B:3F:82:A3:13:72:E4:24:B9:39 Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00 Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700 Certificate serial: 019B31563C9C19BE39418F76810F83AFABBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft Manifest number: 10F7 Signing time: Thu 18 Dec 2025 12:01:33 +0000 Manifest this update: Thu 18 Dec 2025 12:01:33 +0000 Manifest next update: Fri 19 Dec 2025 12:01:33 +0000 Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: WK95sywDebCYlOu+xkHYjkIGL7Wj+kg/n41aOsmqeJc=) 2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:3c:9c:19:be:39:41:8f:76:81:0f:83:af:ab:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700 Validity Not Before: Dec 18 12:01:33 2025 GMT Not After : Dec 19 12:01:33 2025 GMT Subject: CN=8d959b89dbc81dc4ab3b4b3f82a31372e424b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:d1:9b:e2:e8:69:9d:3c:8d:64:52:26:16: 50:ef:c0:0e:f5:34:2f:a4:50:5f:fa:f5:4e:62:69: 2e:55:83:98:99:9b:7e:3c:0b:ba:77:69:22:ed:df: 8d:4a:60:63:c2:dd:85:ec:90:21:4b:04:fb:2b:88: f9:b5:b7:20:01:5d:d7:d8:d1:1c:6f:2f:1b:ca:d9: b8:48:69:ee:81:6f:f2:c6:a2:8f:60:0c:ca:5e:16: 11:7e:c5:e9:8e:66:fd:97:22:71:6a:10:ab:ed:0d: e2:a3:ce:97:1b:ce:61:35:c4:00:c1:4c:ed:c5:dc: ee:de:2a:ae:2b:81:42:8f:73:8d:06:50:23:48:8f: 7c:25:4b:ff:60:e1:4f:88:11:f1:08:87:87:37:ff: 5a:fa:f4:f6:56:81:fd:63:c5:7d:1f:df:9f:ad:cc: 2b:a6:b8:b3:5f:96:1d:ba:8a:30:cc:03:79:5a:75: 74:e8:9c:8a:52:89:8a:a3:2b:68:a6:52:a1:d7:70: a3:20:93:d1:5d:4d:0f:30:51:ec:b4:43:1e:ea:91: 2c:61:bf:8c:63:48:fb:6a:d2:74:29:82:6f:db:b5: 78:ce:93:59:40:ae:50:be:71:3b:c8:0d:fc:56:a0: c4:0e:cf:50:b7:4e:9a:5d:01:66:63:48:f2:a5:a3: 00:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:95:9B:89:DB:C8:1D:C4:AB:3B:4B:3F:82:A3:13:72:E4:24:B9:39 X509v3 Authority Key Identifier: keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:18:88:51:d9:30:85:8f:40:75:8c:34:b3:87:a3:ff:95:f7: 04:b9:1b:ab:cd:30:c8:d7:0c:0d:78:d1:5b:70:fb:5f:08:45: 7d:81:a4:76:43:f2:02:53:4b:ad:22:f5:99:d0:1d:f9:a7:43: 6d:cf:9d:45:ef:e3:24:ea:5e:67:12:8a:17:0d:09:ac:fd:22: 56:0b:d4:fd:06:e2:6c:4d:49:77:62:59:92:18:7f:4b:97:99: e9:9a:13:b3:c3:80:47:1b:3d:90:bc:97:97:1c:77:8f:cb:47: 0a:be:80:f0:5c:89:93:82:53:07:82:94:28:c6:5b:90:88:29: c2:8c:13:0d:e2:b1:79:dc:6a:03:af:ec:c3:42:8b:60:1f:24: 4a:06:a0:c9:2e:78:20:54:1a:90:13:f6:b4:47:8e:93:0c:8a: df:c9:a2:7c:65:a2:94:a1:a7:8f:e7:fb:66:6c:35:86:ce:b3: 20:1b:f9:7e:b4:2d:4c:e6:89:b4:50:29:25:43:bc:ec:a7:e6: 08:45:ec:df:14:e6:0a:f5:3e:d0:8b:2e:e6:51:80:02:ef:6e: 9c:d8:70:fc:42:7c:0d:49:5e:cb:41:6a:9e:a1:9e:18:13:96: 47:17:ca:aa:ce:a9:9e:e8:72:b5:75:a2:3f:1e:2f:97:1e:d2: 2f:ad:c6:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVjycGb45QY92gQ+Dr6u8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YjgyMjEwOTk0ODZhM2IxMzNlMDEzOWUzNGI5MzQyNjRj ZGQ3MDAwHhcNMjUxMjE4MTIwMTMzWhcNMjUxMjE5MTIwMTMzWjAzMTEwLwYDVQQD Eyg4ZDk1OWI4OWRiYzgxZGM0YWIzYjRiM2Y4MmEzMTM3MmU0MjRiOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiDRm+LoaZ08jWRSJhZQ78AO9TQv pFBf+vVOYmkuVYOYmZt+PAu6d2ki7d+NSmBjwt2F7JAhSwT7K4j5tbcgAV3X2NEc by8bytm4SGnugW/yxqKPYAzKXhYRfsXpjmb9lyJxahCr7Q3io86XG85hNcQAwUzt xdzu3iquK4FCj3ONBlAjSI98JUv/YOFPiBHxCIeHN/9a+vT2VoH9Y8V9H9+frcwr prizX5YduoowzAN5WnV06JyKUomKoytoplKh13CjIJPRXU0PMFHstEMe6pEsYb+M Y0j7atJ0KYJv27V4zpNZQK5QvnE7yA38VqDEDs9Qt06aXQFmY0jypaMA4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI2Vm4nbyB3EqztLP4KjE3LkJLk5MB8GA1UdIwQY MBaAFDe4IhCZSGo7Ez4BOeNLk0JkzdcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDkt Njg2ZjgzNmNiY2FkLzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDktNjg2ZjgzNmNiY2Fk LzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxiIUdkw hY9AdYw0s4ej/5X3BLkbq80wyNcMDXjRW3D7XwhFfYGkdkPyAlNLrSL1mdAd+adD bc+dRe/jJOpeZxKKFw0JrP0iVgvU/QbibE1Jd2JZkhh/S5eZ6ZoTs8OARxs9kLyX lxx3j8tHCr6A8FyJk4JTB4KUKMZbkIgpwowTDeKxedxqA6/sw0KLYB8kSgagyS54 IFQakBP2tEeOkwyK38mifGWilKGnj+f7Zmw1hs6zIBv5frQtTOaJtFApJUO87Kfm CEXs3xTmCvU+0Isu5lGAAu9unNhw/EJ8DUley0FqnqGeGBOWRxfKqs6pnuhytXWi Px4vlx7SL63GWQ== -----END CERTIFICATE-----Generated at Thu Dec 18 16:18:14 2025 by rpki-client