This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json) Hash identifier: cGoRRNPi8LrOtV14hDzasPcpiM8WT8qIQDX9Lkg0lo8= Subject key identifier: 22:35:3D:FE:FD:EB:DD:D5:D5:44:B2:2A:8F:49:B9:88:A4:2C:D6:B3 Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f Certificate serial: 019B484B54ADB9385F51979F569F60722990 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft Manifest number: 1771 Signing time: Mon 22 Dec 2025 23:00:54 +0000 Manifest this update: Mon 22 Dec 2025 23:00:54 +0000 Manifest next update: Tue 23 Dec 2025 23:00:54 +0000 Files and hashes: 1: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: S0Yo8P9BrCO0oVif4TrNIZRjv0HgbJ79yMzjGol5sVw=) 2: _OMF5Nl70k5FI6dZyBbjhO75Whc.roa (hash: 9Vx2B9Q4z5L6Kqh9xs9MrJDUwmGHBM33p0J4623FkWI=) 3: rWytEJ3FiAYVl_Gh2eAbgXCpgnc.roa (hash: N2Jpj3ow/5rvsnHjtA7tEJKRTrNoSnYmSjGqItrSpc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:54:ad:b9:38:5f:51:97:9f:56:9f:60:72:29:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f Validity Not Before: Dec 22 23:00:54 2025 GMT Not After : Dec 23 23:00:54 2025 GMT Subject: CN=22353dfefdebddd5d544b22a8f49b988a42cd6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:61:23:ce:24:d2:27:bd:3c:03:83:1c:85:c3: 09:7a:4a:c3:d1:32:7d:9b:f5:69:7f:5c:8b:1f:5b: 70:4f:10:26:fa:3e:bf:13:29:1f:cf:fc:c0:1c:15: f4:15:91:be:33:ea:71:26:2a:95:cc:e9:6b:69:77: 8c:2f:a3:bc:fe:a3:ca:43:0c:72:e9:8f:a0:65:0e: 9b:5d:f3:59:da:17:70:8c:10:3a:87:bd:d5:b7:7c: a8:db:f9:12:d6:87:49:65:8e:2b:8b:9f:fb:f6:20: 71:2e:a5:0a:2f:a2:f6:8b:85:bc:64:ec:a3:9b:e2: 6e:4b:e2:f9:96:c3:cd:eb:50:2e:2c:ba:61:6a:42: 4c:b7:96:cf:a2:66:fe:11:32:59:b1:60:2a:81:58: cb:5a:91:c2:af:09:84:93:34:a2:a9:6d:92:4b:8f: c8:7f:c3:4b:df:79:4c:a0:79:39:56:9a:5c:9a:43: f9:e1:08:03:93:27:2e:5e:7e:3a:2f:f6:44:f1:a7: b7:0e:b9:ee:a0:76:bb:4a:05:7e:af:5d:51:b7:de: 00:13:60:80:97:68:09:a0:6d:06:d2:40:a1:ec:77: f7:f1:d7:26:b9:58:75:58:00:2d:79:97:a1:4e:97: db:40:ae:01:3a:f7:7c:87:46:33:4e:6b:a9:c0:9b: 5a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:3D:FE:FD:EB:DD:D5:D5:44:B2:2A:8F:49:B9:88:A4:2C:D6:B3 X509v3 Authority Key Identifier: keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:92:1d:b9:e8:e7:65:6a:21:f2:cd:d8:5c:5d:82:8f:31:13: 0b:b2:c8:64:f7:e1:7f:5a:e6:c0:91:b2:88:f8:d2:50:d3:ea: dd:3d:2c:b3:2e:57:31:49:cf:5f:56:08:d1:42:80:92:c1:bb: e6:25:10:5d:29:62:80:9e:0f:33:1a:cf:0d:20:80:44:76:98: 56:a3:88:e3:ad:03:ec:87:80:17:1f:47:2c:a2:53:76:a3:8d: c7:c7:28:2d:9b:1e:0c:d4:76:ad:40:7c:c0:22:3f:e5:17:b2: 41:10:2a:32:28:55:86:fa:e5:e5:c8:50:90:a3:9f:aa:d4:77: ca:94:8c:2b:18:51:6b:02:9d:0e:ab:21:29:19:26:ea:04:14: 39:af:df:a0:ea:ea:98:b2:b5:e4:97:da:b3:b7:0f:36:6d:02: e2:98:d1:1c:a7:6e:85:8a:11:5f:d2:96:a0:d6:76:34:dd:dc: c6:18:64:05:d1:0d:dc:a4:ff:f7:ea:11:3f:06:4b:38:58:3c: 81:35:ed:ba:16:16:e3:d6:93:a3:cf:f8:a2:78:d0:0f:a4:e5: 26:d0:6e:5e:fd:d0:83:ed:9a:73:67:ac:36:0a:a4:aa:0d:69: aa:32:81:45:72:e8:a1:a4:6b:e3:da:6f:bd:a0:67:11:37:6d: 16:03:e7:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIS1StuThfUZefVp9gcimQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OWNkNjdjMGMxODk1OTIzOTM1ODU1MzIyOWU5MWY1NDNj YzVhNWYwHhcNMjUxMjIyMjMwMDU0WhcNMjUxMjIzMjMwMDU0WjAzMTEwLwYDVQQD EygyMjM1M2RmZWZkZWJkZGQ1ZDU0NGIyMmE4ZjQ5Yjk4OGE0MmNkNmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWEjziTSJ708A4MchcMJekrD0TJ9 m/Vpf1yLH1twTxAm+j6/Eykfz/zAHBX0FZG+M+pxJiqVzOlraXeML6O8/qPKQwxy 6Y+gZQ6bXfNZ2hdwjBA6h73Vt3yo2/kS1odJZY4ri5/79iBxLqUKL6L2i4W8ZOyj m+JuS+L5lsPN61AuLLphakJMt5bPomb+ETJZsWAqgVjLWpHCrwmEkzSiqW2SS4/I f8NL33lMoHk5VppcmkP54QgDkycuXn46L/ZE8ae3DrnuoHa7SgV+r11Rt94AE2CA l2gJoG0G0kCh7Hf38dcmuVh1WAAteZehTpfbQK4BOvd8h0YzTmupwJta2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI1Pf79693V1USyKo9JuYikLNazMB8GA1UdIwQY MBaAFDec1nwMGJWSOTWFUyKekfVDzFpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYt OTliYmJhZmU5YzRiLzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYtOTliYmJhZmU5YzRi LzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZIduejn ZWoh8s3YXF2CjzETC7LIZPfhf1rmwJGyiPjSUNPq3T0ssy5XMUnPX1YI0UKAksG7 5iUQXSligJ4PMxrPDSCARHaYVqOI460D7IeAFx9HLKJTdqONx8coLZseDNR2rUB8 wCI/5ReyQRAqMihVhvrl5chQkKOfqtR3ypSMKxhRawKdDqshKRkm6gQUOa/foOrq mLK15Jfas7cPNm0C4pjRHKduhYoRX9KWoNZ2NN3cxhhkBdEN3KT/9+oRPwZLOFg8 gTXtuhYW49aTo8/4onjQD6TlJtBuXv3Qg+2ac2esNgqkqg1pqjKBRXLooaRr49pv vaBnETdtFgPnJA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:08:17 2025 by rpki-client