This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft File: N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json) Hash identifier: BZflzIH8Tw3QeqXqNx4whsjaarVc5+jwnMo9y4wBQ5A= Subject key identifier: C0:15:E8:43:B7:73:13:5A:EC:CA:CB:0B:B6:6E:60:61:A1:28:15:D9 Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Certificate serial: 019AABDDA55410FE4E823D1F3CB29289EAEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft Manifest number: 173E Signing time: Sat 22 Nov 2025 14:00:21 +0000 Manifest this update: Sat 22 Nov 2025 14:00:21 +0000 Manifest next update: Sun 23 Nov 2025 14:00:21 +0000 Files and hashes: 1: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: HO/R6uYDpq6xibkRqSHgp9Q56pHfMa2p/+8U1cHt1xM=) 2: OpF39dteeAgdG0uMSaeSye2QMl4.roa (hash: 6AawtRpq3DsNtx6xd7OyKZI4o4kWWfOmTgahYICncm4=) 3: iddMiGg8ovKZ_KW8pvcXVd9RE60.roa (hash: tlHNfQDbOnq01Er7SY3BPzZvcVpBmTMeqa5ifXXCQPU=) 4: jPdoFO28ZYmIy0FwhFbaKyywLn4.roa (hash: 2DMBsYGpILPZ83xfOVSe8IYb5O9R3Gf6YlNKmTmqMeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:dd:a5:54:10:fe:4e:82:3d:1f:3c:b2:92:89:ea:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Validity Not Before: Nov 22 14:00:21 2025 GMT Not After : Nov 23 14:00:21 2025 GMT Subject: CN=c015e843b773135aeccacb0bb66e6061a12815d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:09:28:4c:b5:46:f5:09:82:1a:a3:5b:17:39: d4:9c:21:86:50:6b:a8:b6:04:aa:34:d7:39:7f:6a: 49:40:a9:a6:ba:dd:78:d3:ca:3b:40:62:39:6b:44: 38:f0:13:04:5f:84:62:c8:7e:a4:b8:23:b3:0f:54: 61:ff:65:50:77:b2:94:6d:a1:ae:13:7f:4f:cd:e7: bb:6a:85:d7:f8:be:80:f6:87:36:7a:b2:07:0a:69: b8:0e:e7:90:6e:4f:8c:d1:d5:92:1f:5a:1b:85:92: 8c:e6:6e:4f:69:c0:3b:61:0d:4e:79:4c:01:79:2b: 50:4f:54:f1:48:ae:df:08:6a:e6:74:f4:36:74:bd: d3:c3:e0:9c:77:ea:f8:0d:64:4b:ce:e5:7a:a1:4a: 5b:3c:00:cf:9c:d1:fd:04:9a:5e:69:aa:ed:ff:72: 1d:02:d9:53:90:57:82:50:f1:0e:d7:78:7d:8e:01: bb:0a:85:b4:d7:76:c8:f3:97:0b:19:44:42:57:b2: d3:ad:30:39:e1:34:cd:71:25:be:29:58:95:62:77: c1:6b:eb:84:52:17:b7:55:9c:f6:df:90:86:72:35: d0:37:1f:21:d0:f7:8a:c3:5c:e7:92:ee:24:f5:fa: 81:55:5b:8b:17:89:e1:62:3a:88:be:50:31:f9:6e: ba:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:15:E8:43:B7:73:13:5A:EC:CA:CB:0B:B6:6E:60:61:A1:28:15:D9 X509v3 Authority Key Identifier: keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5d:a0:a3:5e:7d:5f:a9:80:90:b4:b2:38:eb:67:b9:b3:7c: ed:4e:24:9f:e7:aa:d5:bc:28:ef:dd:2c:84:71:5c:9e:24:11: 52:45:86:12:bc:17:57:79:2d:58:58:e8:84:22:8c:0d:01:79: 93:d2:6f:4b:2f:8e:0c:92:85:f3:f0:b3:4b:43:e8:e4:ca:84: 97:3a:f6:27:b6:c6:9f:cb:33:6f:82:f8:cf:c5:a8:f7:5f:64: ce:35:7e:ae:88:a0:0f:70:43:1d:ca:4f:02:43:e4:0a:08:aa: 14:74:a8:ef:bc:94:b9:19:b9:68:81:4f:29:b5:26:74:a8:d3: 8b:40:e5:fd:0f:e6:45:c9:92:b7:f0:77:95:2a:70:a2:50:a8: c3:7d:75:19:46:47:59:a5:de:08:1a:aa:78:df:96:62:19:60: 6a:a5:a1:9c:69:b7:ea:08:64:eb:81:21:6b:6d:81:0a:1f:df: 91:23:fe:08:e9:3d:47:63:e7:3f:a0:f5:a3:d9:7c:23:41:e8: f6:9e:a2:07:19:40:6b:37:e3:cc:c9:57:3f:d1:73:50:eb:a9: d4:38:56:e5:b0:73:a8:39:be:ef:35:9f:5b:78:c0:95:15:6b: a7:e2:50:41:cd:e3:73:bc:87:1a:9d:e6:6c:b8:7e:65:c0:d9: 89:2d:62:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqr3aVUEP5Ogj0fPLKSiervMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy NmJhMGYwHhcNMjUxMTIyMTQwMDIxWhcNMjUxMTIzMTQwMDIxWjAzMTEwLwYDVQQD EyhjMDE1ZTg0M2I3NzMxMzVhZWNjYWNiMGJiNjZlNjA2MWExMjgxNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQkoTLVG9QmCGqNbFznUnCGGUGuo tgSqNNc5f2pJQKmmut1408o7QGI5a0Q48BMEX4RiyH6kuCOzD1Rh/2VQd7KUbaGu E39Pzee7aoXX+L6A9oc2erIHCmm4DueQbk+M0dWSH1obhZKM5m5PacA7YQ1OeUwB eStQT1TxSK7fCGrmdPQ2dL3Tw+Ccd+r4DWRLzuV6oUpbPADPnNH9BJpeaart/3Id AtlTkFeCUPEO13h9jgG7CoW013bI85cLGURCV7LTrTA54TTNcSW+KViVYnfBa+uE Uhe3VZz235CGcjXQNx8h0PeKw1znku4k9fqBVVuLF4nhYjqIvlAx+W66HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAV6EO3cxNa7MrLC7ZuYGGhKBXZMB8GA1UdIwQY MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut YzQ3MTE0ODIzODBlLzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF2go159 X6mAkLSyOOtnubN87U4kn+eq1bwo790shHFcniQRUkWGErwXV3ktWFjohCKMDQF5 k9JvSy+ODJKF8/CzS0Po5MqElzr2J7bGn8szb4L4z8Wo919kzjV+roigD3BDHcpP AkPkCgiqFHSo77yUuRm5aIFPKbUmdKjTi0Dl/Q/mRcmSt/B3lSpwolCow311GUZH WaXeCBqqeN+WYhlgaqWhnGm36ghk64Eha22BCh/fkSP+COk9R2PnP6D1o9l8I0Ho 9p6iBxlAazfjzMlXP9FzUOup1DhW5bBzqDm+7zWfW3jAlRVrp+JQQc3jc7yHGp3m bLh+ZcDZiS1i4w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:52:55 2025 by rpki-client