This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: GchiWSWX9MVBb9PAnYagXWkW217S6xATp6VnKWd2/bc= Subject key identifier: DB:56:1E:75:3E:FC:D4:47:08:0F:C1:93:83:F6:DE:02:48:22:13:AC Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019B243F487770D51A96EC0920C9820B5E26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 0443 Signing time: Mon 15 Dec 2025 23:01:25 +0000 Manifest this update: Mon 15 Dec 2025 23:01:25 +0000 Manifest next update: Tue 16 Dec 2025 23:01:25 +0000 Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: KDcZWjvh7iRh13NU1SAWxRC008j5lrNEF8/9wAzmrpE=) 2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3f:48:77:70:d5:1a:96:ec:09:20:c9:82:0b:5e:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Dec 15 23:01:25 2025 GMT Not After : Dec 16 23:01:25 2025 GMT Subject: CN=db561e753efcd447080fc19383f6de02482213ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:34:10:e3:58:d1:e9:a4:d6:02:54:29:bf:c9: a4:51:46:0c:78:4f:8f:58:6f:a0:e7:83:9a:6c:3b: d1:5e:56:df:2a:b8:cc:2f:6b:fd:55:1a:2a:01:57: b6:3a:17:6d:d1:3e:a9:53:f1:54:9b:d1:c3:76:68: f9:d0:4c:8d:b1:17:d5:2a:0f:0c:e3:70:9f:81:b3: 57:01:bc:81:4f:02:fb:5c:3f:08:ec:73:39:9e:69: f3:39:29:5b:de:33:25:cb:06:ad:a9:81:14:3a:6d: 4f:89:eb:1c:57:b9:13:87:2f:99:b1:42:62:b6:fd: d8:0d:2c:ae:74:77:42:d4:d9:83:cc:91:09:df:0b: e2:e9:d2:d4:15:77:27:c7:86:00:3e:0e:34:ae:ad: 0e:46:a0:1b:5d:b7:87:c1:25:7e:d2:b9:10:10:c7: c1:94:3d:61:92:cc:7c:64:f1:14:ef:79:aa:c9:81: ce:ef:2b:6d:1e:25:3a:42:ad:ed:a8:09:5b:a8:46: 9e:16:75:85:db:4e:24:4b:8e:f4:0e:a7:ca:34:83: 94:fa:e9:57:ca:6e:96:9f:66:29:4c:02:a5:28:af: 25:ae:84:67:59:7f:b3:d0:bd:5c:d6:3d:e8:53:ac: 94:89:42:55:93:04:a7:f9:68:48:c6:7d:35:ab:75: 9c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:56:1E:75:3E:FC:D4:47:08:0F:C1:93:83:F6:DE:02:48:22:13:AC X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:72:e5:a9:7e:23:61:e2:56:38:65:3b:0e:a9:cc:4f:13:fc: 5a:1f:85:4e:32:cd:cd:d7:96:8e:46:39:24:d5:5e:58:29:80: 55:e3:cd:5c:3c:96:c2:ed:00:e4:77:39:ba:97:54:18:c3:8a: db:0e:13:29:1e:3d:95:e5:02:8f:a8:49:68:72:f7:38:1b:77: 34:14:a4:2e:b9:43:d0:20:a4:01:8c:88:b8:1d:d4:6c:c3:98: e5:9d:ae:ae:47:d8:0b:82:5d:ff:25:2e:21:f1:fb:52:01:51: 68:26:15:8b:52:bc:bb:8e:c2:83:31:d7:6a:0e:40:72:33:0f: 64:e2:f6:19:47:92:59:4b:18:3a:f0:01:d8:44:17:e2:d1:3f: a6:df:73:c2:e2:7b:f3:ec:15:f2:96:d2:20:d4:9d:be:31:0f: 3c:5e:c2:3d:52:4d:8a:b5:45:f1:00:50:79:c5:40:b4:8a:fb: 7f:5a:63:55:d6:e8:70:92:cf:3a:cb:e5:48:2a:ab:2b:04:28: dc:dc:fd:bc:30:b5:7f:d8:83:47:05:95:20:48:49:b6:2e:aa: fd:7a:64:f2:77:7a:19:1b:a6:13:23:10:96:0b:e0:bc:00:ba: 47:9e:5e:d9:1d:e7:dc:98:63:4a:be:61:92:2c:7c:a1:59:6d: 26:de:5b:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskP0h3cNUaluwJIMmCC14mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjUxMjE1MjMwMTI1WhcNMjUxMjE2MjMwMTI1WjAzMTEwLwYDVQQD EyhkYjU2MWU3NTNlZmNkNDQ3MDgwZmMxOTM4M2Y2ZGUwMjQ4MjIxM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DQQ41jR6aTWAlQpv8mkUUYMeE+P WG+g54OabDvRXlbfKrjML2v9VRoqAVe2Ohdt0T6pU/FUm9HDdmj50EyNsRfVKg8M 43CfgbNXAbyBTwL7XD8I7HM5nmnzOSlb3jMlywatqYEUOm1PiescV7kThy+ZsUJi tv3YDSyudHdC1NmDzJEJ3wvi6dLUFXcnx4YAPg40rq0ORqAbXbeHwSV+0rkQEMfB lD1hksx8ZPEU73mqyYHO7yttHiU6Qq3tqAlbqEaeFnWF204kS470DqfKNIOU+ulX ym6Wn2YpTAKlKK8lroRnWX+z0L1c1j3oU6yUiUJVkwSn+WhIxn01q3WcrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtWHnU+/NRHCA/Bk4P23gJIIhOsMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1HLlqX4j YeJWOGU7DqnMTxP8Wh+FTjLNzdeWjkY5JNVeWCmAVePNXDyWwu0A5Hc5updUGMOK 2w4TKR49leUCj6hJaHL3OBt3NBSkLrlD0CCkAYyIuB3UbMOY5Z2urkfYC4Jd/yUu IfH7UgFRaCYVi1K8u47CgzHXag5AcjMPZOL2GUeSWUsYOvAB2EQX4tE/pt9zwuJ7 8+wV8pbSINSdvjEPPF7CPVJNirVF8QBQecVAtIr7f1pjVdbocJLPOsvlSCqrKwQo 3Nz9vDC1f9iDRwWVIEhJti6q/Xpk8nd6GRumEyMQlgvgvAC6R55e2R3n3JhjSr5h kix8oVltJt5bbA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:07:33 2025 by rpki-client