This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft File: N1_CEWNZalFHLA_xhKZJkdyDpsE.mft (raw, json) Hash identifier: PAKoGeFnszjdPzWl9gG3502sAN+CLpj/f/Tl/AY4nm8= Subject key identifier: 1D:C0:05:57:98:BB:AD:AF:E9:C4:00:C9:DA:9D:E2:F7:1B:60:23:50 Authority key identifier: 37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1 Certificate issuer: /CN=375fc21163596a51472c0ff184a64991dc83a6c1 Certificate serial: 019B36EA0CAB78C597F0B4A2FB14A968E128 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft Manifest number: 0F58 Signing time: Fri 19 Dec 2025 14:01:06 +0000 Manifest this update: Fri 19 Dec 2025 14:01:06 +0000 Manifest next update: Sat 20 Dec 2025 14:01:06 +0000 Files and hashes: 1: H84HwKjNe_aIYRNxZuH7G-Lr_Yg.roa (hash: BInhIf7xKGiyoM8/t65lkgiaRfMv7QEIqjDpHSYHK0c=) 2: N1_CEWNZalFHLA_xhKZJkdyDpsE.crl (hash: OPZVSqsqdBWcz1PLyB1Odnq93f/zFu+iKZsLPAElaMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:ea:0c:ab:78:c5:97:f0:b4:a2:fb:14:a9:68:e1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375fc21163596a51472c0ff184a64991dc83a6c1 Validity Not Before: Dec 19 14:01:06 2025 GMT Not After : Dec 20 14:01:06 2025 GMT Subject: CN=1dc0055798bbadafe9c400c9da9de2f71b602350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:fe:95:e4:51:b1:ec:3e:cd:b4:a7:e7:4f: 24:92:e5:0b:6c:91:88:10:4d:f2:17:40:f8:08:de: f6:9f:cd:a1:b4:19:35:4c:fa:93:21:ed:fa:b0:e8: c0:a6:b7:74:f5:3b:99:d5:11:25:2a:2c:88:25:0a: bc:9b:d1:9b:83:3e:0d:da:38:4b:8a:57:9b:d6:c3: 6f:20:d9:0d:ce:ad:5e:f8:6a:d1:75:4d:bc:36:c2: 07:35:ac:23:52:b1:cd:df:23:1e:b7:d9:fe:54:1b: c8:69:4a:cc:6d:96:f1:0f:00:e9:ee:eb:61:5f:a1: 60:f0:8b:65:fb:21:72:84:9e:a0:12:c9:92:a8:27: 41:8c:57:b2:a9:20:4b:a2:3b:41:67:6f:d5:97:5d: 9b:0f:57:7b:df:00:36:1e:f1:0d:d6:e5:4c:6b:47: ba:17:96:ec:39:2d:38:45:24:e6:88:a4:30:1a:11: bb:0b:f8:cb:91:3c:cd:32:f8:ca:0b:a3:03:14:1d: 89:ec:f2:18:ae:fc:d8:f9:15:96:dd:bd:52:d9:4d: 49:1e:1b:5d:7d:64:cb:aa:cf:15:db:40:51:5e:8c: ae:3b:11:95:b0:11:88:74:8e:d6:27:cb:09:25:6a: ef:6e:2f:da:f1:ba:55:bb:7c:ef:b2:61:0c:45:54: a1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:05:57:98:BB:AD:AF:E9:C4:00:C9:DA:9D:E2:F7:1B:60:23:50 X509v3 Authority Key Identifier: keyid:37:5F:C2:11:63:59:6A:51:47:2C:0F:F1:84:A6:49:91:DC:83:A6:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_CEWNZalFHLA_xhKZJkdyDpsE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a2d47e-d114-43a1-bdca-59005b2981d3/1/N1_CEWNZalFHLA_xhKZJkdyDpsE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ba:e6:7c:12:a8:f5:76:dd:f8:c5:7a:af:ca:ca:9e:9a:28: 84:d0:27:94:c3:ec:a3:8c:6b:5f:9b:b2:79:a9:e3:0f:f5:23: 86:a1:c5:ff:31:92:7a:c2:7f:97:bf:6d:22:6d:e6:d5:1f:d3: 88:dc:4a:5f:57:9b:a5:30:39:cf:3f:f0:69:d0:48:7e:50:8b: 3a:8c:42:00:be:7a:cf:13:1a:cc:d3:5c:28:f7:09:5c:34:83: 0c:8f:d1:f5:b9:8e:56:4b:4a:a3:93:63:ce:04:88:f7:53:ea: ce:56:ba:2c:24:d0:2d:e8:02:f4:62:01:5c:66:3a:09:78:d6: a7:db:e3:f7:00:c7:03:0a:b8:3c:30:ef:1c:c0:16:ec:79:11: 56:0d:ad:8d:c9:2d:a8:2d:48:dd:be:ed:36:dc:1c:d3:6b:dc: 09:81:2b:8b:29:5f:a1:4d:23:f2:e6:9c:eb:49:8e:23:da:2e: c8:79:58:34:2c:ec:8c:bd:e2:18:e7:fa:a5:d0:cc:26:af:d3: b5:7c:8b:9d:82:20:51:65:33:84:9c:f6:d6:fd:37:f9:98:bd: 74:a2:aa:05:45:4e:f8:bc:83:7a:2b:f1:1d:98:9a:82:7d:73: 31:cb:14:3e:69:06:66:11:f9:9d:66:8b:76:f7:0e:14:54:00: f3:1f:1c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26gyreMWX8LSi+xSpaOEoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWZjMjExNjM1OTZhNTE0NzJjMGZmMTg0YTY0OTkxZGM4 M2E2YzEwHhcNMjUxMjE5MTQwMTA2WhcNMjUxMjIwMTQwMTA2WjAzMTEwLwYDVQQD EygxZGMwMDU1Nzk4YmJhZGFmZTljNDAwYzlkYTlkZTJmNzFiNjAyMzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXj+leRRsew+zbSn508kkuULbJGI EE3yF0D4CN72n82htBk1TPqTIe36sOjAprd09TuZ1RElKiyIJQq8m9Gbgz4N2jhL ileb1sNvINkNzq1e+GrRdU28NsIHNawjUrHN3yMet9n+VBvIaUrMbZbxDwDp7uth X6Fg8Itl+yFyhJ6gEsmSqCdBjFeyqSBLojtBZ2/Vl12bD1d73wA2HvEN1uVMa0e6 F5bsOS04RSTmiKQwGhG7C/jLkTzNMvjKC6MDFB2J7PIYrvzY+RWW3b1S2U1JHhtd fWTLqs8V20BRXoyuOxGVsBGIdI7WJ8sJJWrvbi/a8bpVu3zvsmEMRVSh1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3ABVeYu62v6cQAydqd4vcbYCNQMB8GA1UdIwQY MBaAFDdfwhFjWWpRRywP8YSmSZHcg6bBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFfQ0VXTlphbEZITEFfeGhLWkprZHlEcHNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hMmQ0N2UtZDExNC00M2ExLWJkY2Et NTkwMDViMjk4MWQzLzEvTjFfQ0VXTlphbEZITEFfeGhLWkprZHlEcHNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hMmQ0N2UtZDExNC00M2ExLWJkY2EtNTkwMDViMjk4MWQz LzEvTjFfQ0VXTlphbEZITEFfeGhLWkprZHlEcHNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAArrmfBKo 9Xbd+MV6r8rKnpoohNAnlMPso4xrX5uyeanjD/UjhqHF/zGSesJ/l79tIm3m1R/T iNxKX1ebpTA5zz/wadBIflCLOoxCAL56zxMazNNcKPcJXDSDDI/R9bmOVktKo5Nj zgSI91Pqzla6LCTQLegC9GIBXGY6CXjWp9vj9wDHAwq4PDDvHMAW7HkRVg2tjckt qC1I3b7tNtwc02vcCYEriylfoU0j8uac60mOI9ouyHlYNCzsjL3iGOf6pdDMJq/T tXyLnYIgUWUzhJz21v03+Zi9dKKqBUVO+LyDeivxHZiagn1zMcsUPmkGZhH5nWaL dvcOFFQA8x8c/Q== -----END CERTIFICATE-----Generated at Fri Dec 19 21:07:58 2025 by rpki-client