This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json) Hash identifier: zvnf7d4RrqzoFOOqiqqUO9r5dqVqAVCpkGQhgbErdAw= Subject key identifier: D8:06:32:91:DD:A3:3B:07:CD:7C:02:B1:8C:AA:BE:DD:B2:46:D0:5E Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Certificate serial: 019B3A8F959385295BB0F7B8382EF978F939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft Manifest number: 060C Signing time: Sat 20 Dec 2025 07:00:46 +0000 Manifest this update: Sat 20 Dec 2025 07:00:46 +0000 Manifest next update: Sun 21 Dec 2025 07:00:46 +0000 Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: +A/h4u1HT8MrTC1DCHiXRyZ8whMM5Hi9DNKTOohuY9s=) 2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:95:93:85:29:5b:b0:f7:b8:38:2e:f9:78:f9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Validity Not Before: Dec 20 07:00:46 2025 GMT Not After : Dec 21 07:00:46 2025 GMT Subject: CN=d8063291dda33b07cd7c02b18caabeddb246d05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e7:16:a9:87:68:6c:31:47:1b:7d:ef:d0:28: 9a:50:dc:d8:e7:41:ce:cb:8f:15:7a:e6:ea:ff:2c: 5e:a6:ae:01:1c:c6:ca:0e:d3:f9:e4:2d:1e:0e:72: 52:51:63:65:06:8e:93:fc:e2:c5:75:32:de:1c:c6: e4:97:96:76:13:29:ed:d9:16:7e:4b:b3:fd:ad:84: 15:3e:c2:26:7b:43:ec:39:c3:03:de:cf:84:a2:c3: 88:ca:62:ff:4b:1d:ff:6a:11:94:5e:eb:b2:c6:ec: 12:12:31:b8:55:d6:e1:b8:ab:58:3f:fa:17:9f:a5: 2d:bc:26:1f:60:85:33:56:67:7d:04:66:74:13:4c: da:66:74:09:12:eb:b0:c3:81:d4:59:2a:c3:a1:1f: b3:fb:2c:6b:b3:fa:9c:44:a0:a2:7b:6d:5a:eb:2d: 6c:c4:e2:2c:b4:5c:a7:65:4a:49:32:3f:af:d8:ab: 9a:b8:a5:ed:d6:76:f5:0f:ff:c8:97:94:13:0b:f9: 6f:c6:75:fb:4f:0b:0c:70:05:2b:cd:46:ed:b1:75: 87:b7:f6:7f:d0:02:91:2c:cb:74:7c:cb:8c:a3:51: 27:ea:62:b7:18:e1:85:8c:f0:b1:f2:db:1c:3f:6f: ac:09:a7:4f:d0:64:62:a2:36:dc:a1:65:6a:00:ed: c5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:32:91:DD:A3:3B:07:CD:7C:02:B1:8C:AA:BE:DD:B2:46:D0:5E X509v3 Authority Key Identifier: keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c6:b0:6e:10:a9:7d:fd:5f:65:4e:bc:81:ea:18:a9:47:fe: 28:98:75:61:78:23:93:ad:8d:29:60:bc:72:37:1a:e0:f4:57: 8d:48:29:3f:74:60:18:f9:dc:f2:7e:72:e0:50:fd:aa:36:c7: 4b:4e:48:97:8b:ca:91:9f:60:6b:43:b6:e8:34:80:a2:40:aa: 42:19:af:20:99:67:42:a9:4f:96:37:6e:de:c4:9b:c0:bb:ce: a4:ba:96:5c:ac:3a:23:e9:8b:3d:b1:d3:a7:c8:a6:2e:b8:ed: 0a:d6:4d:be:1e:5e:9e:f4:44:a9:d6:06:ad:0b:6b:a4:2c:d9: 9c:5c:4b:46:4b:c4:d9:56:4b:80:9c:9d:db:7e:70:fc:ec:4d: 51:e9:9b:62:64:be:82:d6:17:d7:1c:29:30:bd:0b:88:fb:2a: ea:49:f3:3b:0e:f9:17:01:e4:d5:0e:ce:af:36:f3:ba:b4:4f: e4:c0:4a:94:7e:0b:69:21:67:a3:3c:da:f3:c1:01:09:83:57: 74:ea:49:5c:8b:39:12:db:01:82:99:d9:18:0d:3b:24:9e:30: 69:e6:27:cc:32:19:53:6e:89:b1:f1:ca:56:17:1d:ce:83:ec: 57:75:06:24:5e:a3:08:df:00:87:35:c6:69:40:26:1c:75:6a: 70:20:97:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j5WThSlbsPe4OC75ePk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2 ZWNhMTkwHhcNMjUxMjIwMDcwMDQ2WhcNMjUxMjIxMDcwMDQ2WjAzMTEwLwYDVQQD EyhkODA2MzI5MWRkYTMzYjA3Y2Q3YzAyYjE4Y2FhYmVkZGIyNDZkMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOcWqYdobDFHG33v0CiaUNzY50HO y48Veubq/yxepq4BHMbKDtP55C0eDnJSUWNlBo6T/OLFdTLeHMbkl5Z2Eynt2RZ+ S7P9rYQVPsIme0PsOcMD3s+EosOIymL/Sx3/ahGUXuuyxuwSEjG4VdbhuKtYP/oX n6UtvCYfYIUzVmd9BGZ0E0zaZnQJEuuww4HUWSrDoR+z+yxrs/qcRKCie21a6y1s xOIstFynZUpJMj+v2KuauKXt1nb1D//Il5QTC/lvxnX7TwsMcAUrzUbtsXWHt/Z/ 0AKRLMt0fMuMo1En6mK3GOGFjPCx8tscP2+sCadP0GRiojbcoWVqAO3FvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgGMpHdozsHzXwCsYyqvt2yRtBeMB8GA1UdIwQY MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMawbhCp ff1fZU68geoYqUf+KJh1YXgjk62NKWC8cjca4PRXjUgpP3RgGPnc8n5y4FD9qjbH S05Il4vKkZ9ga0O26DSAokCqQhmvIJlnQqlPljdu3sSbwLvOpLqWXKw6I+mLPbHT p8imLrjtCtZNvh5envREqdYGrQtrpCzZnFxLRkvE2VZLgJyd235w/OxNUembYmS+ gtYX1xwpML0LiPsq6knzOw75FwHk1Q7OrzbzurRP5MBKlH4LaSFnozza88EBCYNX dOpJXIs5EtsBgpnZGA07JJ4waeYnzDIZU26JsfHKVhcdzoPsV3UGJF6jCN8AhzXG aUAmHHVqcCCXJw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:03:49 2025 by rpki-client