This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft File: 1-N164S0qN_IarG-Btq9n1mF8oo4.mft (raw, json) Hash identifier: Q74v71jyAYy78+TbRG+zY4PsgB6WmpEBo/nnei/cD5k= Subject key identifier: A0:C7:D5:E7:93:CA:31:69:79:9E:78:37:AA:08:92:DD:F6:DE:C0:CD Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Certificate serial: 019B21E2B9E2D08A4BDB6E4184C16E332656 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft Manifest number: 0DB0 Signing time: Mon 15 Dec 2025 12:01:05 +0000 Manifest this update: Mon 15 Dec 2025 12:01:05 +0000 Manifest next update: Tue 16 Dec 2025 12:01:05 +0000 Files and hashes: 1: 1-N164S0qN_IarG-Btq9n1mF8oo4.crl (hash: AdoOyqZ8LEbq16rFm/RYVDbWDokC0VsuOGYMCrC0NN8=) 2: 6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa (hash: TuEDPLOZHzrwGKuGu5WkL6I1wv3+goqCPl2BGjRQIWw=) 3: C_PGOc03jGMSWjD8mAR0igEEyyQ.roa (hash: C4bHsZyQHmYG17oRmY2GwNsr94o4S9tEWANWUmFjfac=) 4: YS8fn_l74imFCNkcNVvUSOlCEEc.roa (hash: 8POCWM71NgjblaW0PGPjWaKSeiuviZ9/gLwwgo+p/hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:e2:b9:e2:d0:8a:4b:db:6e:41:84:c1:6e:33:26:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Validity Not Before: Dec 15 12:01:05 2025 GMT Not After : Dec 16 12:01:05 2025 GMT Subject: CN=a0c7d5e793ca3169799e7837aa0892ddf6dec0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:04:81:ac:13:56:54:03:5c:07:64:5d:d5: 8c:22:2c:53:7e:7e:b3:98:4f:01:0d:b5:7c:24:44: 43:41:2f:ad:9d:51:a4:4a:cd:a8:db:05:fb:24:44: 59:31:2e:96:29:c2:38:13:0a:bd:49:41:72:af:1c: bf:48:81:2c:14:16:6b:bc:25:d6:12:26:75:11:2c: 3d:a3:6b:8b:ff:eb:cc:89:22:3e:90:9a:53:dd:a9: b4:2d:ac:39:28:0c:9e:ab:ce:27:b2:d9:71:df:b7: c7:6f:46:28:e8:47:14:1c:19:d3:1e:50:1d:c2:8d: 8b:89:cb:cf:84:b1:df:e7:99:b8:c6:2f:1c:17:23: e8:67:18:ec:98:4d:bd:f7:24:bc:26:be:c7:7b:eb: de:e9:2c:43:8d:be:8b:3b:de:58:72:81:71:d8:d6: 91:40:0a:ce:cd:35:b4:24:1f:91:23:60:19:c1:68: 67:4d:44:40:fb:88:75:5f:44:48:fa:18:a9:f6:98: d4:89:5b:42:0e:43:99:5a:f6:2a:fd:22:ff:8e:6d: b0:54:38:71:0a:d1:d2:1f:0e:11:0c:da:02:3e:71: 06:0e:b3:1a:07:72:1e:26:9d:09:7f:7b:3d:e4:43: 56:48:52:7b:69:d3:4e:50:86:c2:30:b3:0a:4c:df: b0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C7:D5:E7:93:CA:31:69:79:9E:78:37:AA:08:92:DD:F6:DE:C0:CD X509v3 Authority Key Identifier: keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:63:63:6e:cf:d7:78:f0:04:79:4d:78:ab:85:2d:45:5c:42: 48:00:06:2c:57:3e:53:fa:8b:f0:e2:ee:2c:b0:c6:32:22:e9: 63:90:6d:74:fa:e8:b4:f5:00:84:47:8a:00:b9:ff:b7:60:2a: 04:b8:e8:36:92:c5:b4:97:01:c9:8f:bd:1c:24:92:1f:8c:88: 7f:86:cb:f2:58:f2:03:b3:05:88:bd:eb:e9:08:94:02:39:f6: 0c:a6:22:2a:05:fa:58:b2:c4:40:40:9b:ca:53:c5:c6:65:96: 2a:dc:53:a2:59:1c:0c:37:78:b1:8c:5d:e5:fc:41:d6:e4:93: e0:bd:d3:37:cd:49:b3:c2:c3:45:00:c7:a5:e9:a4:c8:5b:7b: 40:66:2f:52:9b:64:2d:11:4f:6f:bb:8b:e7:bc:26:44:1f:00: 9a:3e:e0:14:0d:70:a7:84:67:a6:80:09:34:80:15:51:9c:ef: b5:df:7a:d9:b1:a2:2a:ce:d9:1e:c6:be:ed:18:86:fe:6f:0d: e6:76:1e:a9:48:7a:63:0e:f1:a0:02:43:7b:3a:37:50:7a:e7: 10:b1:59:9c:b6:90:da:46:57:a4:4f:1a:2f:eb:36:8c:0a:d8: 35:cf:37:85:a4:6a:aa:83:fa:e9:2e:eb:90:67:0d:25:2f:27: 69:5b:79:d2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsh4rni0IpL225BhMFuMyZWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3 Y2EyOGUwHhcNMjUxMjE1MTIwMTA1WhcNMjUxMjE2MTIwMTA1WjAzMTEwLwYDVQQD EyhhMGM3ZDVlNzkzY2EzMTY5Nzk5ZTc4MzdhYTA4OTJkZGY2ZGVjMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRwEgawTVlQDXAdkXdWMIixTfn6z mE8BDbV8JERDQS+tnVGkSs2o2wX7JERZMS6WKcI4Ewq9SUFyrxy/SIEsFBZrvCXW EiZ1ESw9o2uL/+vMiSI+kJpT3am0Law5KAyeq84nstlx37fHb0Yo6EcUHBnTHlAd wo2LicvPhLHf55m4xi8cFyPoZxjsmE299yS8Jr7He+ve6SxDjb6LO95YcoFx2NaR QArOzTW0JB+RI2AZwWhnTURA+4h1X0RI+hip9pjUiVtCDkOZWvYq/SL/jm2wVDhx CtHSHw4RDNoCPnEGDrMaB3IeJp0Jf3s95ENWSFJ7adNOUIbCMLMKTN+wdQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKDH1eeTyjFpeZ54N6oIkt323sDNMB8GA1UdIwQY MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm LTJiNGEzNTM4YzVlMy8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA2LzJjMGQ4MC0zOTM3LTQ0NTUtYjljZi0yYjRhMzUzOGM1 ZTMvMS8xLU4xNjRTMHFOX0lhckctQnRxOW4xbUY4b280LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWNj bs/XePAEeU14q4UtRVxCSAAGLFc+U/qL8OLuLLDGMiLpY5BtdProtPUAhEeKALn/ t2AqBLjoNpLFtJcByY+9HCSSH4yIf4bL8ljyA7MFiL3r6QiUAjn2DKYiKgX6WLLE QECbylPFxmWWKtxTolkcDDd4sYxd5fxB1uST4L3TN81Js8LDRQDHpemkyFt7QGYv UptkLRFPb7uL57wmRB8Amj7gFA1wp4RnpoAJNIAVUZzvtd962bGiKs7ZHsa+7RiG /m8N5nYeqUh6Yw7xoAJDezo3UHrnELFZnLaQ2kZXpE8aL+s2jArYNc83haRqqoP6 6S7rkGcNJS8naVt50g== -----END CERTIFICATE-----Generated at Mon Dec 15 18:04:33 2025 by rpki-client