This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json) Hash identifier: 8BWLpap+Ub6eEOPNz/1LvU1IfKfAXDLmIYYav7bSBnQ= Subject key identifier: D3:BD:D3:91:80:FF:90:C1:40:C9:7D:D1:62:DE:20:47:6C:9C:D5:77 Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa Certificate serial: 019B360E68EC46B8D659BEA5727E7AE98197 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft Manifest number: 05AA Signing time: Fri 19 Dec 2025 10:01:12 +0000 Manifest this update: Fri 19 Dec 2025 10:01:12 +0000 Manifest next update: Sat 20 Dec 2025 10:01:12 +0000 Files and hashes: 1: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: LQIEaE0nh0bYpDlDSoUdzckizSwnY81qK0GFrBwUrzw=) 2: hr1FzTLzhvjdHRGQawXaK0XuGQ4.roa (hash: wRJW1xVVLpDSguuiY7y5qT4f4RgVOBoZp/PuXmFp+qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:68:ec:46:b8:d6:59:be:a5:72:7e:7a:e9:81:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa Validity Not Before: Dec 19 10:01:12 2025 GMT Not After : Dec 20 10:01:12 2025 GMT Subject: CN=d3bdd39180ff90c140c97dd162de20476c9cd577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:9e:e4:71:27:c3:23:3b:8c:e8:9c:95:23: ac:6f:2c:8d:12:91:7d:33:d7:1d:cc:54:96:95:3e: a6:2c:1d:b1:2a:4f:7f:75:73:ce:b7:2f:12:4a:43: dd:86:1e:df:d5:06:06:c8:7d:0a:e3:51:01:38:3e: 8b:d7:1e:2e:38:b4:f0:97:5b:8f:98:c2:70:80:2d: 7a:58:0b:c5:5d:13:1b:9a:d5:0b:84:1b:fb:48:e5: eb:46:6d:0c:2f:c6:28:2d:20:b8:64:7d:1f:16:aa: 9a:fd:ee:c5:7a:8b:ac:89:ec:b0:f5:19:6c:bb:b3: 68:9c:02:0d:53:b7:a6:83:6c:d4:b0:ff:8a:09:55: 9e:3a:45:90:c9:ef:9b:9f:0d:d1:83:3c:e2:4f:10: d9:56:ef:64:2b:e7:d7:ce:32:43:4d:56:b4:da:74: eb:08:28:56:83:1f:2f:54:0a:f0:88:18:46:a0:b4: e5:95:0f:40:ce:f1:50:f0:93:f3:00:af:65:c8:a1: 6b:cf:59:8a:40:75:09:c0:af:62:1d:d5:c2:c0:09: 14:a2:39:03:56:8b:e0:72:47:2d:45:e0:2c:ef:34: 73:f1:86:eb:da:5d:32:c1:be:2c:cf:b8:9a:d4:9d: 22:c5:d5:53:9f:8d:19:ad:3b:c8:13:d0:24:fb:4a: 44:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:BD:D3:91:80:FF:90:C1:40:C9:7D:D1:62:DE:20:47:6C:9C:D5:77 X509v3 Authority Key Identifier: keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b9:6f:f8:e1:cc:6e:6f:9d:24:26:89:8b:e4:1a:fe:fc:c0: bc:99:91:ff:ff:fb:bc:90:fd:91:7d:47:e1:43:27:d6:89:c5: a1:9d:06:d4:ad:1c:0d:67:56:13:0b:e9:3f:83:1c:6d:d5:4e: b2:4f:bf:6b:0f:8b:aa:12:9f:b8:3f:da:19:7d:64:52:5f:a2: 7b:34:14:b4:5d:c5:3e:1f:ed:04:d2:15:51:63:07:94:b3:be: 02:e4:3b:cd:93:32:b3:bc:fd:0b:31:09:ea:4a:cc:ab:8c:a8: 7d:53:11:04:d4:b9:fe:36:e0:06:70:6d:b7:63:d7:24:57:c1: c5:9a:8c:81:e4:db:4c:f3:76:ce:f6:87:79:a6:f8:cf:27:52: 7c:60:a2:18:5a:76:23:2b:aa:6b:7d:90:03:a0:57:5e:ca:cf: 64:7e:27:d8:29:33:4e:34:87:af:0f:e2:70:60:92:ad:4d:eb: 69:6c:dd:12:04:5c:a4:81:8b:9c:19:ed:6e:b4:4b:8c:95:c8: 97:4b:a0:69:ca:27:a0:06:84:46:69:95:bf:0a:37:fe:e2:a2: cc:f9:d6:b7:e0:ab:41:f7:a7:43:58:75:12:88:e5:02:de:51: 24:1a:90:7c:fe:20:8d:e9:40:3e:0e:7b:d9:34:12:47:2b:db: 04:53:c5:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DmjsRrjWWb6lcn566YGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi ODA2YWEwHhcNMjUxMjE5MTAwMTEyWhcNMjUxMjIwMTAwMTEyWjAzMTEwLwYDVQQD EyhkM2JkZDM5MTgwZmY5MGMxNDBjOTdkZDE2MmRlMjA0NzZjOWNkNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpme5HEnwyM7jOiclSOsbyyNEpF9 M9cdzFSWlT6mLB2xKk9/dXPOty8SSkPdhh7f1QYGyH0K41EBOD6L1x4uOLTwl1uP mMJwgC16WAvFXRMbmtULhBv7SOXrRm0ML8YoLSC4ZH0fFqqa/e7Feousieyw9Rls u7NonAINU7emg2zUsP+KCVWeOkWQye+bnw3RgzziTxDZVu9kK+fXzjJDTVa02nTr CChWgx8vVArwiBhGoLTllQ9AzvFQ8JPzAK9lyKFrz1mKQHUJwK9iHdXCwAkUojkD VovgckctReAs7zRz8Ybr2l0ywb4sz7ia1J0ixdVTn40ZrTvIE9Ak+0pEhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNO905GA/5DBQMl90WLeIEdsnNV3MB8GA1UdIwQY MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt MDM3OTkzMGY4Mjg2LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2 LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY7lv+OHM bm+dJCaJi+Qa/vzAvJmR///7vJD9kX1H4UMn1onFoZ0G1K0cDWdWEwvpP4McbdVO sk+/aw+LqhKfuD/aGX1kUl+iezQUtF3FPh/tBNIVUWMHlLO+AuQ7zZMys7z9CzEJ 6krMq4yofVMRBNS5/jbgBnBtt2PXJFfBxZqMgeTbTPN2zvaHeab4zydSfGCiGFp2 Iyuqa32QA6BXXsrPZH4n2CkzTjSHrw/icGCSrU3raWzdEgRcpIGLnBntbrRLjJXI l0ugaconoAaERmmVvwo3/uKizPnWt+CrQfenQ1h1EojlAt5RJBqQfP4gjelAPg57 2TQSRyvbBFPFhg== -----END CERTIFICATE-----Generated at Fri Dec 19 19:02:18 2025 by rpki-client