This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft File: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft (raw, json) Hash identifier: cucWGH+On3GIVB0dL8ATXafQat1RhpbcDK8sFSDfArc= Subject key identifier: C2:33:99:67:35:23:7E:C6:B3:BB:94:DF:92:03:43:91:37:6D:94:5C Authority key identifier: 37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03 Certificate issuer: /CN=375c742259ff900857d13689d8d48db20edf4603 Certificate serial: 019B1E73D2BA4D8EE82127549E25CFD2DAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft Manifest number: 14B6 Signing time: Sun 14 Dec 2025 20:01:05 +0000 Manifest this update: Sun 14 Dec 2025 20:01:05 +0000 Manifest next update: Mon 15 Dec 2025 20:01:05 +0000 Files and hashes: 1: N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl (hash: eMQjorPYxTJ5GVayXgTp+Tz2sqCk6iOVaKjowKGTci8=) 2: g_21VS9VjPQrGz2Td7dDraqxWmA.roa (hash: iyA8oXAsAeuHezc22yRIhc2flepygJS+6M+Uvfpnntg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:d2:ba:4d:8e:e8:21:27:54:9e:25:cf:d2:da:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375c742259ff900857d13689d8d48db20edf4603 Validity Not Before: Dec 14 20:01:05 2025 GMT Not After : Dec 15 20:01:05 2025 GMT Subject: CN=c233996735237ec6b3bb94df92034391376d945c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:74:d4:ac:d6:c8:69:a9:61:c4:82:62:85: 2d:71:79:53:f0:42:5b:95:e1:7a:7a:48:59:20:14: 56:27:23:c4:21:95:0e:7c:e2:84:22:6f:d3:47:80: 08:4b:60:83:dc:48:15:d7:00:a1:d1:25:20:44:0f: f6:64:4c:9f:6c:19:cb:e7:03:84:0a:d7:81:d8:e4: 9e:4f:66:e1:cf:3f:7a:f2:2d:d0:c8:77:e6:14:1b: d0:83:4a:e0:2c:ba:49:0d:ae:64:f0:f1:be:05:b2: 32:e3:01:cd:01:e0:76:31:f0:54:5a:5b:e3:e9:0e: 81:70:38:8f:3e:31:f6:29:66:50:0d:46:33:eb:11: b1:3b:27:1a:84:7c:c1:70:87:4c:a7:b4:49:4f:c8: f7:23:f9:5b:9f:64:a8:95:7d:31:6e:9c:05:e0:a9: 00:85:92:7f:27:0f:b2:44:5b:69:72:a9:ad:26:d4: 13:8b:88:8c:4f:6c:e3:91:99:db:2e:89:0d:66:4f: 28:a8:bd:13:dc:f3:a9:17:e0:5c:ed:f0:02:cb:3b: a4:d4:b7:16:96:4c:b1:94:dc:a5:65:79:72:c6:98: 15:2c:bf:a8:75:15:1c:d0:4e:b5:7a:91:d8:49:06: bd:da:6f:8b:e6:de:c9:9c:26:bf:44:8b:7d:51:6a: 33:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:33:99:67:35:23:7E:C6:B3:BB:94:DF:92:03:43:91:37:6D:94:5C X509v3 Authority Key Identifier: keyid:37:5C:74:22:59:FF:90:08:57:D1:36:89:D8:D4:8D:B2:0E:DF:46:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/8a5ee7-b638-4b70-8a8e-f97745d13b8d/1/N1x0Iln_kAhX0TaJ2NSNsg7fRgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a7:fd:ba:a0:7f:0a:99:d5:46:80:d5:dd:5c:b9:4d:d8:7e: f7:05:13:6a:88:8d:4e:69:a7:a1:10:91:83:3b:46:03:14:96: e0:50:0a:79:e1:5d:62:c1:cf:3a:cf:ce:99:23:78:5e:c2:9b: 23:69:e3:8e:1c:a7:5c:2e:e3:bd:8c:d1:61:1a:17:60:01:ba: a1:0e:4d:80:99:5f:59:2b:1c:4b:4d:17:1d:f9:0e:a4:2f:ee: 84:de:db:13:0e:59:6f:15:e0:7c:66:ff:d1:b0:8f:d8:5a:a6: c8:36:49:00:5b:89:e2:fc:30:53:2b:6d:a5:d2:f4:cd:df:ed: 30:d8:7d:fd:8b:e7:f0:7c:8a:d6:c3:e2:2b:fa:f4:fd:07:11: 2b:cd:6c:1e:e8:1f:fc:cb:d1:53:a1:30:a7:17:43:de:ec:e2: 90:08:cb:9a:33:b7:0a:55:01:92:c0:b8:c0:39:80:aa:33:5e: ae:e1:83:16:6e:26:e2:2d:86:09:82:e2:ca:bb:db:23:61:95: 57:43:45:87:2c:be:6e:50:3b:62:68:d4:a8:a2:4b:56:ed:fb: 2d:1d:0e:18:46:63:1a:98:26:23:75:5a:8c:76:42:e6:2e:53: dc:b1:30:a8:fe:5f:11:82:9c:37:cf:de:49:99:30:25:e3:a1: 12:2e:0c:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec9K6TY7oISdUniXP0tr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWM3NDIyNTlmZjkwMDg1N2QxMzY4OWQ4ZDQ4ZGIyMGVk ZjQ2MDMwHhcNMjUxMjE0MjAwMTA1WhcNMjUxMjE1MjAwMTA1WjAzMTEwLwYDVQQD EyhjMjMzOTk2NzM1MjM3ZWM2YjNiYjk0ZGY5MjAzNDM5MTM3NmQ5NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzV01KzWyGmpYcSCYoUtcXlT8EJb leF6ekhZIBRWJyPEIZUOfOKEIm/TR4AIS2CD3EgV1wCh0SUgRA/2ZEyfbBnL5wOE CteB2OSeT2bhzz968i3QyHfmFBvQg0rgLLpJDa5k8PG+BbIy4wHNAeB2MfBUWlvj 6Q6BcDiPPjH2KWZQDUYz6xGxOycahHzBcIdMp7RJT8j3I/lbn2SolX0xbpwF4KkA hZJ/Jw+yRFtpcqmtJtQTi4iMT2zjkZnbLokNZk8oqL0T3POpF+Bc7fACyzuk1LcW lkyxlNylZXlyxpgVLL+odRUc0E61epHYSQa92m+L5t7JnCa/RIt9UWozHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIzmWc1I37Gs7uU35IDQ5E3bZRcMB8GA1UdIwQY MBaAFDdcdCJZ/5AIV9E2idjUjbIO30YDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjF4MElsbl9rQWhYMFRhSjJOU05zZzdmUmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84YTVlZTctYjYzOC00YjcwLThhOGUt Zjk3NzQ1ZDEzYjhkLzEvTjF4MElsbl9rQWhYMFRhSjJOU05zZzdmUmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy84YTVlZTctYjYzOC00YjcwLThhOGUtZjk3NzQ1ZDEzYjhk LzEvTjF4MElsbl9rQWhYMFRhSjJOU05zZzdmUmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKf9uqB/ CpnVRoDV3Vy5Tdh+9wUTaoiNTmmnoRCRgztGAxSW4FAKeeFdYsHPOs/OmSN4XsKb I2njjhynXC7jvYzRYRoXYAG6oQ5NgJlfWSscS00XHfkOpC/uhN7bEw5ZbxXgfGb/ 0bCP2FqmyDZJAFuJ4vwwUyttpdL0zd/tMNh9/Yvn8HyK1sPiK/r0/QcRK81sHugf /MvRU6EwpxdD3uzikAjLmjO3ClUBksC4wDmAqjNeruGDFm4m4i2GCYLiyrvbI2GV V0NFhyy+blA7YmjUqKJLVu37LR0OGEZjGpgmI3VajHZC5i5T3LEwqP5fEYKcN8/e SZkwJeOhEi4MfQ== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:07 2025 by rpki-client