This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json) Hash identifier: YuRDPqxlHkqPZbFGnSb/naUcdM3+fkKJ8yjOj44Cy7w= Subject key identifier: C6:D2:0A:2B:AC:13:44:FB:0B:B3:8F:6A:7D:58:35:A4:23:3D:8E:29 Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Certificate serial: 019AB92C21F2DBC8A92EBD086D931D556B0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft Manifest number: 0704 Signing time: Tue 25 Nov 2025 04:01:08 +0000 Manifest this update: Tue 25 Nov 2025 04:01:08 +0000 Manifest next update: Wed 26 Nov 2025 04:01:08 +0000 Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: MJQo8iqtZIYddAPWvusxaO7tG7GtwNSgPNJcDOsz6XA=) 2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:2c:21:f2:db:c8:a9:2e:bd:08:6d:93:1d:55:6b:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Validity Not Before: Nov 25 04:01:08 2025 GMT Not After : Nov 26 04:01:08 2025 GMT Subject: CN=c6d20a2bac1344fb0bb38f6a7d5835a4233d8e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fd:96:a1:94:87:1e:ef:66:22:6d:77:41:17: e2:5d:49:23:9b:ae:8b:9c:10:f8:b1:c1:dd:c7:d5: 7b:0e:53:41:82:fc:cc:94:c2:f4:20:a7:41:07:b1: 56:6d:58:d7:f7:10:e1:77:33:90:62:fd:52:2d:b0: eb:f3:d0:31:c2:7f:9f:46:d9:93:79:3c:a2:3e:8d: e8:ab:22:2a:ba:53:16:56:c3:b8:09:63:0b:35:f2: 5c:eb:59:9b:fc:60:b2:fa:e3:02:de:c4:bf:79:e0: 18:47:75:14:e1:99:82:36:7e:52:4c:a2:95:85:43: 49:40:5c:99:ce:05:d6:b4:30:26:94:0c:b3:12:f3: b2:8d:49:31:4a:68:f0:25:9e:42:9d:82:73:4d:33: ef:5c:20:1d:01:54:7d:34:1e:7e:03:a5:45:a6:ea: e9:55:73:c5:71:a7:7e:0e:bb:35:d1:e1:a9:85:e9: a8:98:05:16:e6:5d:b7:02:e9:ed:34:15:8e:36:a6: a4:ad:b4:a5:71:b3:18:e5:3a:5d:f4:5e:fb:d2:51: 0e:bb:81:63:1f:b9:ce:ce:cd:63:7d:26:6a:74:98: 04:d7:31:e3:e1:d9:3a:a7:3b:26:21:31:4d:8a:03: 3c:66:21:93:04:13:b6:af:c5:d8:59:e6:62:68:75: 4e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:D2:0A:2B:AC:13:44:FB:0B:B3:8F:6A:7D:58:35:A4:23:3D:8E:29 X509v3 Authority Key Identifier: keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ca:ef:ff:07:2f:5c:b2:af:07:e4:2e:82:0b:f6:46:63:77: 1a:98:47:94:35:0d:81:b7:57:c3:af:3a:71:66:a8:15:26:cc: c2:74:66:7a:99:7d:25:59:51:d8:fe:b0:6d:f0:b7:1b:86:fd: f9:7f:97:6c:06:b9:43:c8:42:4d:04:ce:22:0e:25:d4:9a:e0: f9:bf:5b:91:e3:78:74:1f:55:cf:80:7a:48:5a:35:19:03:6c: 03:37:92:bf:4f:e9:3e:ad:54:95:13:f4:6d:6d:27:96:06:11: b6:c8:86:16:2a:93:11:a6:18:b3:ec:75:c6:bf:cb:5a:a3:91: 36:13:74:7a:74:18:82:ff:04:d8:ca:2f:b8:f1:bf:d6:fa:f9: 16:af:e2:60:ff:8a:bb:60:95:9f:fb:4f:38:eb:1d:db:9c:7b: 0c:48:50:8a:bf:b5:91:89:b9:05:a6:da:48:d0:24:54:b5:5d: 36:c4:3f:fc:3e:56:2a:34:33:19:f4:3a:ce:ca:e3:6c:c2:cb: 7d:b5:83:08:32:48:09:b0:2e:c1:5f:a0:7e:b9:68:48:69:27: 44:b0:78:a6:a7:bc:6b:93:d6:4f:9e:94:2c:54:09:d5:86:26: 90:aa:28:77:49:0b:3f:a1:12:93:59:85:7d:f1:ee:2f:c3:ab: 36:bf:c9:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq5LCHy28ipLr0IbZMdVWsNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGNjMmZmZDc2OWMxOGU1ZTZmMGRmYzlhMGVhNzRmYjNm OGMxMDgwHhcNMjUxMTI1MDQwMTA4WhcNMjUxMTI2MDQwMTA4WjAzMTEwLwYDVQQD EyhjNmQyMGEyYmFjMTM0NGZiMGJiMzhmNmE3ZDU4MzVhNDIzM2Q4ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/2WoZSHHu9mIm13QRfiXUkjm66L nBD4scHdx9V7DlNBgvzMlML0IKdBB7FWbVjX9xDhdzOQYv1SLbDr89Axwn+fRtmT eTyiPo3oqyIqulMWVsO4CWMLNfJc61mb/GCy+uMC3sS/eeAYR3UU4ZmCNn5STKKV hUNJQFyZzgXWtDAmlAyzEvOyjUkxSmjwJZ5CnYJzTTPvXCAdAVR9NB5+A6VFpurp VXPFcad+Drs10eGphemomAUW5l23AuntNBWONqakrbSlcbMY5Tpd9F770lEOu4Fj H7nOzs1jfSZqdJgE1zHj4dk6pzsmITFNigM8ZiGTBBO2r8XYWeZiaHVOFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbSCiusE0T7C7OPan1YNaQjPY4pMB8GA1UdIwQY MBaAFDdMwv/XacGOXm8N/JoOp0+z+MEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUt MjY4MDZlYzM1YzIwLzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUtMjY4MDZlYzM1YzIw LzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8rv/wcv XLKvB+Quggv2RmN3GphHlDUNgbdXw686cWaoFSbMwnRmepl9JVlR2P6wbfC3G4b9 +X+XbAa5Q8hCTQTOIg4l1Jrg+b9bkeN4dB9Vz4B6SFo1GQNsAzeSv0/pPq1UlRP0 bW0nlgYRtsiGFiqTEaYYs+x1xr/LWqORNhN0enQYgv8E2MovuPG/1vr5Fq/iYP+K u2CVn/tPOOsd25x7DEhQir+1kYm5BabaSNAkVLVdNsQ//D5WKjQzGfQ6zsrjbMLL fbWDCDJICbAuwV+gfrloSGknRLB4pqe8a5PWT56ULFQJ1YYmkKood0kLP6ESk1mF ffHuL8OrNr/JAw== -----END CERTIFICATE-----Generated at Tue Nov 25 13:37:07 2025 by rpki-client