This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: U8DSdOmPeo/8Bqs7gXZ+7FJppZhsm679pCbRvzHcgYM= Subject key identifier: 49:E6:D4:D8:78:E2:97:5A:38:CA:7F:5D:0E:ED:7A:C6:10:42:A3:EC Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019B378F36388DEBA7FFA97155777FF08FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 044D Signing time: Fri 19 Dec 2025 17:01:30 +0000 Manifest this update: Fri 19 Dec 2025 17:01:30 +0000 Manifest next update: Sat 20 Dec 2025 17:01:30 +0000 Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: Uqz+UGZRi8De3TsbwP647XkA6sQ3llwubA6zvevfnTs=) 2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:8f:36:38:8d:eb:a7:ff:a9:71:55:77:7f:f0:8f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Dec 19 17:01:30 2025 GMT Not After : Dec 20 17:01:30 2025 GMT Subject: CN=49e6d4d878e2975a38ca7f5d0eed7ac61042a3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:80:f1:27:24:68:90:5a:3e:ea:30:d9:2f:9e: 42:7c:d2:39:7c:a3:bb:cd:1d:a2:5d:28:41:b5:a3: 92:80:ca:74:32:1a:44:2c:04:c9:93:cc:af:d2:26: 0a:6d:a1:56:7a:ff:5b:d9:89:8f:ad:23:cd:f5:d9: 1b:58:ae:1f:d4:7a:8e:c0:f5:5d:61:a2:19:64:92: 20:5c:79:b0:e1:87:03:4a:34:98:e7:93:19:91:29: 53:0b:cc:c2:67:f0:8d:21:5a:35:5c:33:28:d7:da: b3:41:c1:93:2e:ed:84:1f:54:0e:41:b2:46:f9:ec: 47:12:39:49:1a:b3:c3:38:cd:f1:e9:f4:c4:b0:dd: 19:50:b3:d6:00:60:0d:72:1c:f5:5c:4b:b4:c6:f3: 63:72:03:a2:f4:64:4b:34:d0:ca:d1:4e:c9:1e:89: 5c:f7:c7:69:50:64:e0:d4:20:bf:a8:3b:5c:4b:d9: 70:15:4f:93:2a:ae:3b:c1:39:8d:ef:fa:e8:43:7e: aa:41:37:0c:86:72:88:fb:e2:a9:50:79:df:62:37: b5:95:19:4c:ef:1b:22:c2:63:db:1a:f4:93:61:80: 6c:ca:8f:f4:7b:d3:6a:6f:97:20:d2:f1:3c:f2:20: 1c:63:3d:45:7d:be:5e:4c:15:3a:bd:03:22:ef:8e: 5a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E6:D4:D8:78:E2:97:5A:38:CA:7F:5D:0E:ED:7A:C6:10:42:A3:EC X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:41:bd:61:c8:14:08:5d:e5:d9:50:61:c6:c2:c1:0d:ed:a8: 7d:8d:a0:47:01:4f:27:80:39:3e:22:f6:f3:08:03:a2:fa:5c: cd:08:41:22:28:4c:32:77:87:4d:07:e1:cc:3f:6a:70:31:87: 84:f2:c9:7f:62:47:8c:d9:6e:92:19:8f:4a:0e:e3:f8:0a:16: 68:47:01:ee:71:52:56:7b:0b:d6:8b:26:bf:af:8e:f0:3e:39: b9:93:25:52:79:40:91:a9:6d:26:6f:5e:88:e1:79:25:bc:22: 88:91:90:b7:4f:58:c0:44:32:53:02:0a:a0:a5:1e:6b:b5:b7: 22:ad:3a:b8:60:9a:13:10:28:e0:64:32:7e:8f:f2:8d:0b:16: 61:3e:0e:11:39:a6:e7:b4:fd:8b:0d:94:bc:bf:3d:12:37:c8: 94:57:2a:d1:97:a8:86:b8:94:8b:6b:ae:ab:30:23:48:6d:b9: 64:29:1d:2e:05:bc:6f:1e:da:9f:b1:93:d1:65:38:22:4e:31: b7:80:10:39:1e:44:ef:23:dd:5d:4a:3d:00:04:bd:fb:83:1d: c6:20:a3:52:01:fa:e6:d3:cc:8a:3e:fb:bd:49:bf:c5:ea:7c: c0:8d:41:b5:2b:b7:9f:27:85:1a:9a:2a:65:96:03:56:ff:0e: 3d:f0:8f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3jzY4jeun/6lxVXd/8I/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjUxMjE5MTcwMTMwWhcNMjUxMjIwMTcwMTMwWjAzMTEwLwYDVQQD Eyg0OWU2ZDRkODc4ZTI5NzVhMzhjYTdmNWQwZWVkN2FjNjEwNDJhM2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IDxJyRokFo+6jDZL55CfNI5fKO7 zR2iXShBtaOSgMp0MhpELATJk8yv0iYKbaFWev9b2YmPrSPN9dkbWK4f1HqOwPVd YaIZZJIgXHmw4YcDSjSY55MZkSlTC8zCZ/CNIVo1XDMo19qzQcGTLu2EH1QOQbJG +exHEjlJGrPDOM3x6fTEsN0ZULPWAGANchz1XEu0xvNjcgOi9GRLNNDK0U7JHolc 98dpUGTg1CC/qDtcS9lwFU+TKq47wTmN7/roQ36qQTcMhnKI++KpUHnfYje1lRlM 7xsiwmPbGvSTYYBsyo/0e9Nqb5cg0vE88iAcYz1Ffb5eTBU6vQMi745aZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnm1Nh44pdaOMp/XQ7tesYQQqPsMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUG9YcgU CF3l2VBhxsLBDe2ofY2gRwFPJ4A5PiL28wgDovpczQhBIihMMneHTQfhzD9qcDGH hPLJf2JHjNlukhmPSg7j+AoWaEcB7nFSVnsL1osmv6+O8D45uZMlUnlAkaltJm9e iOF5JbwiiJGQt09YwEQyUwIKoKUea7W3Iq06uGCaExAo4GQyfo/yjQsWYT4OETmm 57T9iw2UvL89EjfIlFcq0ZeohriUi2uuqzAjSG25ZCkdLgW8bx7an7GT0WU4Ik4x t4AQOR5E7yPdXUo9AAS9+4MdxiCjUgH65tPMij77vUm/xep8wI1BtSu3nyeFGpoq ZZYDVv8OPfCPWg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:05:38 2025 by rpki-client