This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json) Hash identifier: 7ZVQFu9IO///xHnf4WWb3ANRA2TOX38QpBDke40lvy4= Subject key identifier: 9F:7D:BF:FF:20:D7:06:E8:E9:A6:85:A6:99:AE:15:CC:41:60:93:29 Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Certificate serial: 019B3C7DF5462DAE2CE2AC7CB25910F18FD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft Manifest number: 060D Signing time: Sat 20 Dec 2025 16:00:46 +0000 Manifest this update: Sat 20 Dec 2025 16:00:46 +0000 Manifest next update: Sun 21 Dec 2025 16:00:46 +0000 Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: 6JItuA2j625p5Y4rNpbklf9U3xrBXt9W/RNjAgxI4qE=) 2: W09Hs7YV_rlCMmFfP5OjxUCv0DQ.roa (hash: zUsXUKlv5KVQErO/W3pmAzbRpm0hLO9n4LhnJ2Df8ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:f5:46:2d:ae:2c:e2:ac:7c:b2:59:10:f1:8f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Validity Not Before: Dec 20 16:00:46 2025 GMT Not After : Dec 21 16:00:46 2025 GMT Subject: CN=9f7dbfff20d706e8e9a685a699ae15cc41609329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:92:ed:8e:26:f8:e3:0f:a4:2a:a3:4c:3b:07: 69:c7:c2:eb:16:09:33:ff:51:b9:f3:58:1b:f9:05: 4d:89:50:5a:c7:3c:ec:7b:d1:89:d8:4b:c2:f8:51: eb:da:11:31:2d:13:8d:f4:35:17:f4:a0:aa:67:45: b0:51:97:2c:ea:97:96:86:a2:a7:03:a6:6c:1b:38: be:b6:5d:91:a2:9c:16:62:0c:c8:62:db:51:d1:51: e2:8c:4d:c3:32:15:62:a9:d1:02:8f:b2:3f:cb:d0: d9:02:31:f4:fb:32:4d:82:10:91:2f:4d:5d:6f:a2: ee:a9:14:84:a1:2b:e4:ae:b4:b9:52:b1:08:95:01: 5b:33:ce:82:5b:21:e8:54:c0:7a:f7:26:de:47:d7: 03:32:7e:9a:c6:c3:4c:56:b2:6e:37:39:65:a8:94: 4b:6e:a1:ca:7e:6b:fd:df:40:a2:c2:99:25:b6:73: b9:0d:4a:0b:bd:e0:60:01:0e:58:43:65:e3:44:45: fa:ec:28:8b:97:af:39:83:f9:05:d8:9a:57:39:53: 73:c4:aa:8d:4a:7b:f0:09:14:de:20:2c:2a:e1:3c: 49:17:30:c5:12:25:f9:3f:1c:0e:be:76:4b:ce:64: 08:fd:97:23:41:db:56:6e:e2:37:6e:c4:67:2f:95: ac:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7D:BF:FF:20:D7:06:E8:E9:A6:85:A6:99:AE:15:CC:41:60:93:29 X509v3 Authority Key Identifier: keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:04:2a:de:c7:ef:8b:59:ec:0a:01:5f:71:da:7d:f8:01:7d: 19:72:89:62:86:bf:cc:5c:da:83:e3:8b:66:e5:d8:7b:f4:00: ad:b0:20:df:9b:cc:47:57:b3:a4:41:ea:b2:74:e6:04:ec:3a: b4:91:fe:7d:05:df:3c:52:db:6b:60:b7:2c:42:5c:d3:e0:88: b6:60:0d:58:14:b1:d8:e9:13:f4:06:ff:2c:df:50:48:c3:0b: 34:6f:4d:e1:7e:3a:97:b6:33:50:9f:37:b9:48:55:c1:6b:6c: b1:f9:7b:c5:2e:61:10:69:c1:8e:06:84:69:db:12:92:7b:cc: f4:6e:1f:d5:54:5e:04:cc:71:5f:24:be:a0:0d:7e:d3:99:46: 80:af:b8:54:81:11:7f:48:6e:c4:55:c9:60:6a:69:3a:65:88: 07:c0:1c:89:ee:c7:59:61:b4:0f:44:d1:2f:5d:51:4b:af:9f: 21:b5:44:3d:58:1f:9e:e3:5d:99:c7:07:33:b1:97:81:fa:cb: 89:30:c8:97:4d:f7:2e:8c:a7:ef:2f:5e:73:04:82:43:65:85: 12:86:1b:c4:84:99:d2:b8:02:db:ac:06:67:77:16:7f:e6:0e: 49:ba:04:5c:87:5b:ab:43:d1:aa:48:2e:f7:9f:06:3c:66:e9: 77:f3:ad:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8ffVGLa4s4qx8slkQ8Y/QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2 ZWNhMTkwHhcNMjUxMjIwMTYwMDQ2WhcNMjUxMjIxMTYwMDQ2WjAzMTEwLwYDVQQD Eyg5ZjdkYmZmZjIwZDcwNmU4ZTlhNjg1YTY5OWFlMTVjYzQxNjA5MzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJLtjib44w+kKqNMOwdpx8LrFgkz /1G581gb+QVNiVBaxzzse9GJ2EvC+FHr2hExLRON9DUX9KCqZ0WwUZcs6peWhqKn A6ZsGzi+tl2RopwWYgzIYttR0VHijE3DMhViqdECj7I/y9DZAjH0+zJNghCRL01d b6LuqRSEoSvkrrS5UrEIlQFbM86CWyHoVMB69ybeR9cDMn6axsNMVrJuNzllqJRL bqHKfmv930CiwpkltnO5DUoLveBgAQ5YQ2XjREX67CiLl685g/kF2JpXOVNzxKqN SnvwCRTeICwq4TxJFzDFEiX5PxwOvnZLzmQI/ZcjQdtWbuI3bsRnL5WsJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ99v/8g1wbo6aaFppmuFcxBYJMpMB8GA1UdIwQY MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwQq3sfv i1nsCgFfcdp9+AF9GXKJYoa/zFzag+OLZuXYe/QArbAg35vMR1ezpEHqsnTmBOw6 tJH+fQXfPFLba2C3LEJc0+CItmANWBSx2OkT9Ab/LN9QSMMLNG9N4X46l7YzUJ83 uUhVwWtssfl7xS5hEGnBjgaEadsSknvM9G4f1VReBMxxXyS+oA1+05lGgK+4VIER f0huxFXJYGppOmWIB8Acie7HWWG0D0TRL11RS6+fIbVEPVgfnuNdmccHM7GXgfrL iTDIl033Loyn7y9ecwSCQ2WFEoYbxISZ0rgC26wGZ3cWf+YOSboEXIdbq0PRqkgu 958GPGbpd/OtyQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:51 2025 by rpki-client