This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json) Hash identifier: XM5xxjRcLpgXjUyRTIanZeEHuXzIfpJaBy2fe+qcIxM= Subject key identifier: AC:1C:76:99:FE:2B:F2:E9:17:BC:44:62:DC:58:14:6A:B0:AE:57:1A Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019B47A674933FE3A1DD14273D3D038E8552 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft Manifest number: 17E1 Signing time: Mon 22 Dec 2025 20:00:49 +0000 Manifest this update: Mon 22 Dec 2025 20:00:49 +0000 Manifest next update: Tue 23 Dec 2025 20:00:49 +0000 Files and hashes: 1: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (hash: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=) 2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=) 3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: s++XjdSIXjH1Ioi6bMKJ52JtWRON4fF81XNcNIJwZ3o=) 4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=) 5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=) 6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=) 7: nGBZ2oFLBzTV4cx47rC7uQ_qFOU.roa (hash: LCvJu/W+zfVHarypo5pA1Xtug5Ld+cxDTIz4mN49xiU=) 8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:74:93:3f:e3:a1:dd:14:27:3d:3d:03:8e:85:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Dec 22 20:00:49 2025 GMT Not After : Dec 23 20:00:49 2025 GMT Subject: CN=ac1c7699fe2bf2e917bc4462dc58146ab0ae571a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a4:24:f6:18:f7:12:7e:fa:04:4b:b8:09:1c: c4:d4:01:a6:bd:55:e9:d6:74:5c:f6:d9:f5:b0:e9: 75:73:79:5e:c0:0e:b5:4b:1a:ba:7f:8c:f9:02:13: db:73:f5:d9:22:10:e5:3f:f1:68:4f:63:cb:f3:e8: 2e:d0:2b:ec:95:3b:29:79:ae:31:80:8d:3e:3c:00: 0e:37:f0:3e:00:d4:0d:07:0b:3d:dd:ee:eb:58:cb: 8e:b2:55:0a:4d:29:81:f9:51:a9:93:38:27:6e:7f: 95:d0:31:3c:9c:dd:f9:80:38:fd:e4:5a:53:b8:3e: 31:c3:8e:fa:ed:35:70:3f:a2:57:41:c1:bd:4e:55: e0:c9:fc:06:58:76:28:7e:62:0c:71:8e:aa:dc:11: 9f:5e:31:ab:c1:58:5e:28:f7:ad:68:87:bc:ff:68: 41:cd:23:25:c0:ef:89:7b:83:aa:fd:ca:33:97:00: e7:60:05:9c:41:ae:6f:98:d1:1b:be:a9:81:a3:f7: f7:c0:e2:2e:e9:ab:70:42:50:2f:7c:ff:b9:0f:eb: 97:f3:da:eb:03:ca:43:69:1a:78:54:19:99:fc:19: 82:8c:d2:72:b7:26:31:66:13:f4:ea:83:f6:9c:60: dc:47:2e:1d:7e:f2:f3:d5:18:cf:7e:ce:46:a4:89: 65:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1C:76:99:FE:2B:F2:E9:17:BC:44:62:DC:58:14:6A:B0:AE:57:1A X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a1:81:3e:20:f7:24:92:05:09:e3:f8:a3:80:36:bd:7a:eb: 46:e3:a8:31:35:e8:01:fa:e7:b7:36:83:2e:fb:84:4f:4d:3f: ab:50:8a:5b:fd:fc:98:fd:c1:68:97:85:31:ba:e6:92:7d:c8: 92:a1:e8:41:c1:f3:df:66:d5:c7:be:61:02:85:20:fd:25:ea: f6:18:b7:fc:44:1e:3d:b6:de:cb:68:50:47:e1:25:c1:06:aa: db:79:32:37:85:12:ce:8a:c9:7e:22:04:f3:23:6f:33:39:72: 4c:5f:88:e1:da:cf:dd:38:5b:fa:1f:a2:c4:6a:7c:9d:69:7a: 75:e0:7b:93:ca:5e:dc:4f:29:ba:d0:e6:66:0d:ee:be:31:29: a1:a6:5e:ba:b6:d9:e7:2f:87:57:6c:a2:6f:c4:a3:9e:80:7a: fc:6c:ab:46:8d:c4:9d:0e:bb:29:b9:5c:9f:dd:38:e7:3d:ef: ae:f3:f8:74:0e:b8:71:e5:e7:e1:05:92:cb:44:98:a6:de:08: 99:b7:d9:88:64:c0:85:34:03:b5:27:23:fe:7a:20:7f:30:cb: 7e:e6:ad:63:dc:2e:98:00:c8:82:d3:39:06:f7:55:78:74:78: 0e:4e:05:2b:20:b4:b7:b4:5e:81:8b:f8:18:0c:ed:3e:1d:9f: b8:16:b6:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpnSTP+Oh3RQnPT0DjoVSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjUxMjIyMjAwMDQ5WhcNMjUxMjIzMjAwMDQ5WjAzMTEwLwYDVQQD EyhhYzFjNzY5OWZlMmJmMmU5MTdiYzQ0NjJkYzU4MTQ2YWIwYWU1NzFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqQk9hj3En76BEu4CRzE1AGmvVXp 1nRc9tn1sOl1c3lewA61Sxq6f4z5AhPbc/XZIhDlP/FoT2PL8+gu0CvslTspea4x gI0+PAAON/A+ANQNBws93e7rWMuOslUKTSmB+VGpkzgnbn+V0DE8nN35gDj95FpT uD4xw4767TVwP6JXQcG9TlXgyfwGWHYofmIMcY6q3BGfXjGrwVheKPetaIe8/2hB zSMlwO+Je4Oq/cozlwDnYAWcQa5vmNEbvqmBo/f3wOIu6atwQlAvfP+5D+uX89rr A8pDaRp4VBmZ/BmCjNJytyYxZhP06oP2nGDcRy4dfvLz1RjPfs5GpIllDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwcdpn+K/LpF7xEYtxYFGqwrlcaMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6GBPiD3 JJIFCeP4o4A2vXrrRuOoMTXoAfrntzaDLvuET00/q1CKW/38mP3BaJeFMbrmkn3I kqHoQcHz32bVx75hAoUg/SXq9hi3/EQePbbey2hQR+ElwQaq23kyN4USzorJfiIE 8yNvMzlyTF+I4drP3Thb+h+ixGp8nWl6deB7k8pe3E8putDmZg3uvjEpoaZeurbZ 5y+HV2yib8SjnoB6/GyrRo3EnQ67Kblcn9045z3vrvP4dA64ceXn4QWSy0SYpt4I mbfZiGTAhTQDtScj/nogfzDLfuatY9wumADIgtM5BvdVeHR4Dk4FKyC0t7RegYv4 GAztPh2fuBa21Q== -----END CERTIFICATE-----Generated at Tue Dec 23 03:19:57 2025 by rpki-client