This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: noo7NI33gPe/m4H3CZ6F3f6vxGUO7n5vtx5tIK/jR4k= Subject key identifier: 69:C0:12:07:D6:9B:92:98:7B:96:AF:C4:7D:6D:33:98:8C:35:C9:59 Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019B35A03E2C0854C9F5BB5F23EF80783D0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 044C Signing time: Fri 19 Dec 2025 08:00:52 +0000 Manifest this update: Fri 19 Dec 2025 08:00:52 +0000 Manifest next update: Sat 20 Dec 2025 08:00:52 +0000 Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: FH4vqXhI65VPUfoQwssLc5Q6Q4d/dDjI4zVZeSQpWnE=) 2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:3e:2c:08:54:c9:f5:bb:5f:23:ef:80:78:3d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Dec 19 08:00:52 2025 GMT Not After : Dec 20 08:00:52 2025 GMT Subject: CN=69c01207d69b92987b96afc47d6d33988c35c959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:32:f8:a0:63:7b:89:08:72:92:ec:fb:fc:27: ec:60:41:9d:db:e5:1f:bf:92:b1:72:e1:6c:b9:01: bc:b8:7c:66:f1:02:78:86:f0:48:e8:a5:07:1a:71: 4e:77:90:c6:aa:b0:4a:8c:25:25:6c:44:12:51:01: 78:9d:df:ed:81:1e:3c:c6:81:c7:30:1b:34:fe:d5: 3d:4e:8c:39:61:f2:37:1e:60:25:8b:83:a9:78:25: 2f:eb:d5:c2:ad:ef:8d:bb:75:2a:71:2e:c7:a3:19: 8f:d7:13:db:4b:9e:32:df:e2:b7:5b:57:c5:ca:f3: 89:06:ee:0d:1b:ae:ea:96:77:af:22:92:12:83:c5: 4f:2b:57:16:a7:de:01:87:91:e4:40:ee:56:3c:c0: 1f:27:59:e1:21:28:34:3a:11:83:47:45:05:41:cf: 20:91:d1:bd:f6:84:a5:d8:41:87:2d:15:e1:cc:2c: 45:3e:f6:a3:60:b3:12:0f:d2:ec:26:bd:38:f1:a6: 58:17:10:b4:5c:21:a9:f7:3d:d9:93:90:e6:2c:4a: 5c:f8:c0:62:09:d7:4d:2b:16:bd:dc:b4:83:d8:09: 30:28:01:80:c7:45:03:5a:91:74:c6:d0:58:7c:06: 0c:50:c2:28:7b:ec:4c:a4:3a:94:73:fb:69:b5:03: be:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C0:12:07:D6:9B:92:98:7B:96:AF:C4:7D:6D:33:98:8C:35:C9:59 X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b7:0c:bc:ed:21:71:0b:85:20:03:ad:6b:a5:47:8b:51:19: 0f:07:56:6f:7e:e2:68:28:a5:e0:94:1e:ad:fa:95:29:74:de: fb:40:bb:7e:39:ed:0b:f8:e1:85:6a:18:8f:fc:55:dd:9f:55: d9:41:52:76:47:77:6b:7e:5c:1e:c8:16:5f:cc:6b:32:71:a4: 57:be:ea:c8:44:5b:3a:c3:08:1e:c6:50:07:d2:4c:95:c1:b8: 53:3c:a6:ed:c4:4d:ee:b6:8e:5e:67:e3:6b:c7:50:1f:08:0d: 8a:4d:5b:80:9e:11:ec:9f:0a:91:e3:79:8a:99:7a:dd:c5:09: 18:d3:53:90:b5:82:1e:36:ef:66:d2:b6:6e:dd:61:ca:64:39: 03:6d:35:55:a1:3a:44:df:d2:1a:d8:4f:a4:18:7a:d5:08:89: 56:3a:31:c3:ab:ac:ad:16:e1:4f:82:f7:73:b6:a4:cf:d9:e2: 4d:bd:66:57:16:ed:b6:ca:6f:67:2c:74:9f:77:f6:58:8d:49: 1d:43:28:44:20:08:6b:f0:a2:a2:50:01:84:d7:73:86:af:34: 05:c6:98:8a:b7:6f:9a:f0:9f:9c:a4:32:f2:bc:d6:c1:61:1d: bf:25:0d:89:0a:fa:e8:bf:86:4e:7c:3a:44:76:16:6c:76:6b: a1:8d:fd:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oD4sCFTJ9btfI++AeD0OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjUxMjE5MDgwMDUyWhcNMjUxMjIwMDgwMDUyWjAzMTEwLwYDVQQD Eyg2OWMwMTIwN2Q2OWI5Mjk4N2I5NmFmYzQ3ZDZkMzM5ODhjMzVjOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTL4oGN7iQhykuz7/CfsYEGd2+Uf v5KxcuFsuQG8uHxm8QJ4hvBI6KUHGnFOd5DGqrBKjCUlbEQSUQF4nd/tgR48xoHH MBs0/tU9Tow5YfI3HmAli4OpeCUv69XCre+Nu3UqcS7HoxmP1xPbS54y3+K3W1fF yvOJBu4NG67qlnevIpISg8VPK1cWp94Bh5HkQO5WPMAfJ1nhISg0OhGDR0UFQc8g kdG99oSl2EGHLRXhzCxFPvajYLMSD9LsJr048aZYFxC0XCGp9z3Zk5DmLEpc+MBi CddNKxa93LSD2AkwKAGAx0UDWpF0xtBYfAYMUMIoe+xMpDqUc/tptQO+WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnAEgfWm5KYe5avxH1tM5iMNclZMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrcMvO0h cQuFIAOta6VHi1EZDwdWb37iaCil4JQerfqVKXTe+0C7fjntC/jhhWoYj/xV3Z9V 2UFSdkd3a35cHsgWX8xrMnGkV77qyERbOsMIHsZQB9JMlcG4Uzym7cRN7raOXmfj a8dQHwgNik1bgJ4R7J8KkeN5ipl63cUJGNNTkLWCHjbvZtK2bt1hymQ5A201VaE6 RN/SGthPpBh61QiJVjoxw6usrRbhT4L3c7akz9niTb1mVxbttspvZyx0n3f2WI1J HUMoRCAIa/CiolABhNdzhq80BcaYirdvmvCfnKQy8rzWwWEdvyUNiQr66L+GTnw6 RHYWbHZroY39MA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:45 2025 by rpki-client