This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json) Hash identifier: d0mJeTePI7r5PyKqBe4SjFo9HLF6oBZ0ZW9sk1rWw3g= Subject key identifier: 8C:E2:CD:BA:F1:09:FC:60:76:C7:CD:8A:6A:5F:6E:1F:83:0F:84:5D Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e Certificate serial: 019B31562B1D9A61D4435B39C7B5204DE334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft Manifest number: 14CE Signing time: Thu 18 Dec 2025 12:01:29 +0000 Manifest this update: Thu 18 Dec 2025 12:01:29 +0000 Manifest next update: Fri 19 Dec 2025 12:01:29 +0000 Files and hashes: 1: 1iavcJFqwR6rzZKxM06ahcbF1Us.roa (hash: AJ47Zqj/T7JKUetOVwikynuHEcJu1eg9YDS731mpe6I=) 2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: JjZbMVSkHOjBoSiH4fW7c/pVyyFLooslGRS0t4ShRqE=) 3: dqEoxI3WEV2rOPAYE8C4EEj1ebI.roa (hash: nVo4yJxw9EhxkUipVljpw16vPXrVAlAiSw+4KWPaovY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:2b:1d:9a:61:d4:43:5b:39:c7:b5:20:4d:e3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e Validity Not Before: Dec 18 12:01:29 2025 GMT Not After : Dec 19 12:01:29 2025 GMT Subject: CN=8ce2cdbaf109fc6076c7cd8a6a5f6e1f830f845d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:4c:99:fb:66:b9:cb:3a:6c:ed:3a:f8:99: b0:41:79:e4:54:00:bc:92:ea:81:de:a7:32:9e:73: 1a:29:78:92:0f:72:57:f9:f4:d2:f4:5d:d1:9d:dc: ee:7d:9e:40:d6:ee:92:fa:93:80:8a:d9:37:92:ab: 20:2d:62:76:c6:39:42:1d:eb:ba:4f:33:cd:a5:9d: 53:fa:f6:c7:10:94:80:1a:c1:2f:4a:c1:04:65:19: 4a:04:79:40:45:4e:ac:08:ca:51:6f:e7:c6:4d:df: 79:41:38:66:fa:58:86:10:df:ae:26:54:7d:27:e9: ac:69:db:0c:dd:47:6f:37:68:8c:79:f9:c6:84:8a: 1e:6f:8f:af:81:fb:b4:b5:9a:4a:1d:65:bf:2d:64: 00:36:ed:d4:5f:0f:b1:77:e3:9f:82:9a:5e:d7:66: 39:e2:34:0e:6e:f2:55:9a:6c:e6:b8:e1:c7:a6:69: e3:dd:0c:c9:2d:ec:0e:60:8d:8e:d4:cb:9f:5f:67: 12:d4:bf:a3:41:fe:88:4e:dc:01:48:de:d0:dc:ce: ea:51:fe:c8:b4:21:7f:68:7d:f3:cc:e6:d5:c3:c9: dc:66:8b:12:b6:f0:49:16:21:0d:ea:ab:1b:06:2b: cb:27:af:44:19:9b:19:03:e1:28:3d:c3:6f:b9:fa: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E2:CD:BA:F1:09:FC:60:76:C7:CD:8A:6A:5F:6E:1F:83:0F:84:5D X509v3 Authority Key Identifier: keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:13:29:74:5e:b0:96:94:48:a5:cf:7d:5b:e1:42:e3:ae:b8: eb:97:0c:c2:f9:04:5e:5d:10:f3:31:20:99:2c:cd:27:12:84: 47:b6:e1:47:31:3b:32:bf:f6:73:b0:0d:4e:cb:5f:4b:82:63: b0:9a:67:a8:7b:d5:e0:5d:a2:08:89:d8:fd:2d:62:03:73:84: b7:e7:2c:b6:24:c8:32:dc:df:3d:5a:11:d8:2d:df:8b:fe:96: e4:a0:a8:ce:c7:41:dd:58:8c:b4:a1:bf:f2:5c:b9:a9:67:ce: 97:e4:e5:85:0d:fa:f7:38:7c:e4:c4:39:d7:11:ef:61:0c:69: 14:47:15:2d:93:74:6c:41:1a:e8:64:fd:e9:8e:b2:39:cf:c0: be:07:28:48:d6:77:4b:e5:59:1d:0a:1b:91:27:ee:e8:b9:aa: 79:3d:80:0e:8e:a9:7e:e1:44:36:26:d4:d6:fc:66:c2:47:ef: 51:db:77:8a:31:bd:7e:02:5d:eb:6d:db:02:e0:e7:e0:e6:5f: 64:59:8a:03:2c:2d:c8:d5:b1:72:2b:e1:12:ea:3d:d5:d7:65: 96:4b:f1:b3:d6:9e:a1:81:b5:79:78:68:f8:16:d0:f3:88:ba: 12:c0:e8:ab:fc:80:1c:cc:0e:45:3b:80:76:b9:8a:91:17:88: 73:ec:c9:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVisdmmHUQ1s5x7UgTeM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZTc1MWExMWMxYTc4ODhmYTU4ZGJmYzMyYzg5NTliYzk0 NjMwM2UwHhcNMjUxMjE4MTIwMTI5WhcNMjUxMjE5MTIwMTI5WjAzMTEwLwYDVQQD Eyg4Y2UyY2RiYWYxMDlmYzYwNzZjN2NkOGE2YTVmNmUxZjgzMGY4NDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd5Mmftmucs6bO06+JmwQXnkVAC8 kuqB3qcynnMaKXiSD3JX+fTS9F3RndzufZ5A1u6S+pOAitk3kqsgLWJ2xjlCHeu6 TzPNpZ1T+vbHEJSAGsEvSsEEZRlKBHlARU6sCMpRb+fGTd95QThm+liGEN+uJlR9 J+msadsM3UdvN2iMefnGhIoeb4+vgfu0tZpKHWW/LWQANu3UXw+xd+Ofgppe12Y5 4jQObvJVmmzmuOHHpmnj3QzJLewOYI2O1MufX2cS1L+jQf6ITtwBSN7Q3M7qUf7I tCF/aH3zzObVw8ncZosStvBJFiEN6qsbBivLJ69EGZsZA+EoPcNvufoUlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzizbrxCfxgdsfNimpfbh+DD4RdMB8GA1UdIwQY MBaAFDfnUaEcGniI+ljb/DLIlZvJRjA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgt OGNlN2M0ZmM1ZTBiLzEvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgtOGNlN2M0ZmM1ZTBi LzEvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBMpdF6w lpRIpc99W+FC466465cMwvkEXl0Q8zEgmSzNJxKER7bhRzE7Mr/2c7ANTstfS4Jj sJpnqHvV4F2iCInY/S1iA3OEt+cstiTIMtzfPVoR2C3fi/6W5KCozsdB3ViMtKG/ 8ly5qWfOl+TlhQ369zh85MQ51xHvYQxpFEcVLZN0bEEa6GT96Y6yOc/AvgcoSNZ3 S+VZHQobkSfu6LmqeT2ADo6pfuFENibU1vxmwkfvUdt3ijG9fgJd623bAuDn4OZf ZFmKAywtyNWxcivhEuo91ddllkvxs9aeoYG1eXho+BbQ84i6EsDoq/yAHMwORTuA drmKkReIc+zJDg== -----END CERTIFICATE-----Generated at Thu Dec 18 20:12:17 2025 by rpki-client