This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json) Hash identifier: v8UhuFB9HkZj+p502fR2Ap6/f/rXJNciPZPr6nsCgYM= Subject key identifier: EC:ED:B9:9C:46:05:6D:66:FC:6A:5B:B2:99:1F:48:84:CA:CF:9A:C8 Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf Certificate serial: 019B5A1A6E86C56D01643F8552F425DA6890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft Manifest number: 137B Signing time: Fri 26 Dec 2025 10:00:40 +0000 Manifest this update: Fri 26 Dec 2025 10:00:40 +0000 Manifest next update: Sat 27 Dec 2025 10:00:40 +0000 Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: xBB/8SD6Oio2oN48XfoRqyJePpvySUCMDC4VaPaJKtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:6e:86:c5:6d:01:64:3f:85:52:f4:25:da:68:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf Validity Not Before: Dec 26 10:00:40 2025 GMT Not After : Dec 27 10:00:40 2025 GMT Subject: CN=ecedb99c46056d66fc6a5bb2991f4884cacf9ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0b:df:90:fa:58:1e:53:8c:b7:45:72:d2:88: 26:10:2e:dc:62:9f:b5:88:89:4a:5c:7c:c2:fd:a3: 38:70:70:1d:81:6d:e7:87:15:46:db:a6:26:a0:20: 8d:0b:9f:28:97:5e:47:16:3c:e9:ad:a3:27:76:7b: 49:bb:97:3e:08:7d:2c:e8:5e:80:07:02:5a:2e:f8: 08:88:f6:67:35:11:c0:78:8e:06:8d:a4:a2:99:87: a6:bd:fb:3c:35:50:0d:f9:6f:1d:92:ac:6b:f7:8d: fe:b9:28:ad:b2:1a:47:c3:43:1d:7c:66:88:cd:2d: fe:5a:04:ca:78:9a:82:aa:ae:9b:67:1b:a6:7e:ed: 2a:30:81:ef:31:0b:ff:0b:f7:99:e9:af:a7:74:72: aa:cd:8c:68:37:7d:23:46:72:9a:89:4d:e8:26:5e: 69:3f:fd:99:3c:a7:e9:b8:50:28:c3:76:73:8f:f7: a5:e4:35:9e:52:86:82:9d:b7:e5:71:8c:d4:8d:48: 02:b6:06:d0:5a:47:01:c6:48:92:34:29:6f:b4:59: f5:02:0e:7b:61:da:0c:be:7e:f7:3e:c6:c1:c0:33: 3c:c8:7f:1c:a6:7f:bb:a1:87:b2:7a:16:7f:2a:2e: 8d:1e:90:b9:f5:3d:74:33:98:50:0d:67:f3:05:23: f1:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:ED:B9:9C:46:05:6D:66:FC:6A:5B:B2:99:1F:48:84:CA:CF:9A:C8 X509v3 Authority Key Identifier: keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6f:30:95:b2:27:be:e9:eb:a5:e5:4a:2d:5f:9a:07:06:2f: 6a:a3:75:71:3b:f8:2f:09:31:4d:b6:7a:68:75:3e:b7:29:37: 05:37:1d:89:22:82:27:5d:c7:8e:53:0d:25:98:5e:de:d0:4a: fe:82:10:23:78:69:41:41:52:6a:fc:5a:67:44:49:56:f7:34: 9f:56:bc:8a:1c:73:5c:a3:01:9f:e9:41:e5:0a:d3:1c:6f:97: 06:d4:4a:44:00:8c:94:30:12:e5:2d:2d:d4:80:77:22:c7:7e: 2c:20:f9:d0:ef:15:c7:7f:70:29:a1:e3:8a:c9:21:9a:6f:f5: 79:39:ee:1d:8f:8d:b3:fe:ef:4e:b8:af:37:c4:c7:87:ba:f1: 97:24:49:3b:2a:27:0f:8b:03:bd:55:23:1e:74:11:70:64:07: 17:50:1a:b0:38:a6:f6:f5:1e:ca:76:22:2b:22:47:55:45:2a: 47:d4:40:31:95:4b:87:74:68:d2:e2:88:1c:88:26:c6:86:8a: 94:f3:6e:ec:bd:22:6b:1d:51:d4:c0:cd:ca:87:79:a0:65:1b: 73:94:1b:e4:7d:09:89:bb:8d:fd:06:80:b8:28:06:a3:44:73: 2e:a7:ba:3a:26:e8:3b:27:ac:c5:ad:c0:e8:d2:9c:09:1a:9a: 65:89:56:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGm6GxW0BZD+FUvQl2miQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDA4M2FmMGZmZjE3NjhhMDdjNjU1ZjFmZTM4NjAwOWM1 MjJjY2YwHhcNMjUxMjI2MTAwMDQwWhcNMjUxMjI3MTAwMDQwWjAzMTEwLwYDVQQD EyhlY2VkYjk5YzQ2MDU2ZDY2ZmM2YTViYjI5OTFmNDg4NGNhY2Y5YWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QvfkPpYHlOMt0Vy0ogmEC7cYp+1 iIlKXHzC/aM4cHAdgW3nhxVG26YmoCCNC58ol15HFjzpraMndntJu5c+CH0s6F6A BwJaLvgIiPZnNRHAeI4GjaSimYemvfs8NVAN+W8dkqxr943+uSitshpHw0MdfGaI zS3+WgTKeJqCqq6bZxumfu0qMIHvMQv/C/eZ6a+ndHKqzYxoN30jRnKaiU3oJl5p P/2ZPKfpuFAow3Zzj/el5DWeUoaCnbflcYzUjUgCtgbQWkcBxkiSNClvtFn1Ag57 YdoMvn73PsbBwDM8yH8cpn+7oYeyehZ/Ki6NHpC59T10M5hQDWfzBSPx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOztuZxGBW1m/GpbspkfSITKz5rIMB8GA1UdIwQY MBaAFDdAg68P/xdooHxlXx/jhgCcUizPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMt ZTRjYTZiNzNhYzc2LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMtZTRjYTZiNzNhYzc2 LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArW8wlbIn vunrpeVKLV+aBwYvaqN1cTv4LwkxTbZ6aHU+tyk3BTcdiSKCJ13HjlMNJZhe3tBK /oIQI3hpQUFSavxaZ0RJVvc0n1a8ihxzXKMBn+lB5QrTHG+XBtRKRACMlDAS5S0t 1IB3Isd+LCD50O8Vx39wKaHjiskhmm/1eTnuHY+Ns/7vTrivN8THh7rxlyRJOyon D4sDvVUjHnQRcGQHF1AasDim9vUeynYiKyJHVUUqR9RAMZVLh3Ro0uKIHIgmxoaK lPNu7L0iax1R1MDNyod5oGUbc5Qb5H0JibuN/QaAuCgGo0RzLqe6OiboOyesxa3A 6NKcCRqaZYlWRQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:11 2025 by rpki-client