This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json) Hash identifier: dttQf6b5qdRQOKjLr3dJWI+y7CRuwKBQfeIg4Hl/4a0= Subject key identifier: 32:EE:58:8C:C4:81:9D:3B:DF:EA:43:2E:8A:60:CE:21:69:DD:68:06 Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Certificate serial: 019B42494182C36A1224BDF1D3DE97EB7A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft Manifest number: 074B Signing time: Sun 21 Dec 2025 19:00:55 +0000 Manifest this update: Sun 21 Dec 2025 19:00:55 +0000 Manifest next update: Mon 22 Dec 2025 19:00:55 +0000 Files and hashes: 1: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: rGNimXCQ0yNvvaQtKUieRHDiSfwf1vQ5iDQIPaf1Lq0=) 2: vhowbyAk5Rh70uoSE00L17bmBWw.roa (hash: BWCvKLZnXJi7kB8pBa3EtqBdHPmAZ8d1B0Q3jz/KOuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:41:82:c3:6a:12:24:bd:f1:d3:de:97:eb:7a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108 Validity Not Before: Dec 21 19:00:55 2025 GMT Not After : Dec 22 19:00:55 2025 GMT Subject: CN=32ee588cc4819d3bdfea432e8a60ce2169dd6806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a4:4e:fe:c2:46:f3:b5:1b:6e:26:d4:ae:8d: 83:b8:ea:c6:9c:a5:1a:f2:23:e1:7e:82:be:03:3b: 23:59:ce:ac:eb:bb:6e:b4:3a:8f:6b:3a:75:e3:aa: 61:3e:70:fd:37:1c:cc:fc:09:af:96:f5:07:67:ab: 82:83:f5:a7:af:60:65:d2:e9:12:53:79:65:b9:7f: 5f:d1:dd:b5:f8:6d:ba:d7:24:17:1f:b9:7f:46:7c: f0:66:13:66:fa:d4:35:eb:6d:4d:7e:97:3a:6c:60: 4d:10:5e:96:c6:ac:ba:75:35:65:e8:17:20:c0:6c: 98:1a:92:b1:20:79:a0:46:e3:42:ab:f3:5e:e8:c6: 04:a9:1e:f3:41:6c:cf:cd:66:85:cd:c5:1b:9e:76: 5f:90:7e:ce:4a:61:80:d2:51:d0:7a:03:80:52:6f: 0b:8f:73:6d:13:59:8a:79:82:3c:ad:f0:44:12:7a: f7:db:92:0c:62:d0:84:85:a6:50:0a:71:62:38:ea: e4:1a:59:57:94:fb:21:54:b7:ee:16:a7:45:8f:a7: df:5b:ae:be:2d:86:80:7c:02:dd:72:4c:0b:4a:f2: 3e:0b:df:ce:2e:e2:2e:42:88:95:af:a8:87:f6:88: 99:88:a5:0a:80:be:91:ce:02:5e:73:9a:56:11:df: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EE:58:8C:C4:81:9D:3B:DF:EA:43:2E:8A:60:CE:21:69:DD:68:06 X509v3 Authority Key Identifier: keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:bc:8e:d4:f7:18:99:7d:32:0d:3d:12:71:bb:88:78:46:2f: bd:5f:bc:17:04:39:f3:98:07:e0:32:b5:1b:a9:b4:54:bf:d0: 86:02:94:f4:1d:a6:2c:6f:b8:2f:00:03:3f:b7:1c:34:b4:9b: db:d1:91:53:a1:73:16:cb:bc:9d:55:3f:99:23:84:0a:5b:4e: 18:5e:fb:75:4e:4a:10:29:ec:70:2c:5a:cf:91:7d:85:65:8b: 77:29:f6:32:cf:7f:85:18:57:7f:f3:18:fa:44:e5:94:c4:fe: e8:2a:0e:0f:04:14:32:f1:67:31:95:ec:2d:c2:3c:89:87:9d: 8b:e0:53:35:59:28:bb:56:9a:ce:ba:01:86:c0:f5:8d:36:4d: f2:7f:e5:33:34:4f:84:5b:01:8b:bb:2f:60:90:f9:f9:eb:51: ff:88:ac:92:5f:7b:15:f8:07:47:cc:07:75:63:30:19:bc:d6: 16:e3:9a:a4:80:bf:53:83:30:37:1b:b1:15:cc:ff:7d:94:9f: be:0c:43:9b:4e:1b:6c:43:a7:c7:2a:1c:c1:97:1d:58:84:d2: 4f:81:b8:23:22:4d:9e:ff:dd:99:0e:e4:1a:2a:a9:95:56:9c: 4e:21:bb:e8:8e:0e:ef:f6:13:fd:50:38:66:9a:6f:09:09:1e: d5:29:f0:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSUGCw2oSJL3x096X63olMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGNjMmZmZDc2OWMxOGU1ZTZmMGRmYzlhMGVhNzRmYjNm OGMxMDgwHhcNMjUxMjIxMTkwMDU1WhcNMjUxMjIyMTkwMDU1WjAzMTEwLwYDVQQD EygzMmVlNTg4Y2M0ODE5ZDNiZGZlYTQzMmU4YTYwY2UyMTY5ZGQ2ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KRO/sJG87UbbibUro2DuOrGnKUa 8iPhfoK+AzsjWc6s67tutDqPazp146phPnD9NxzM/AmvlvUHZ6uCg/Wnr2Bl0ukS U3lluX9f0d21+G261yQXH7l/RnzwZhNm+tQ1621Nfpc6bGBNEF6Wxqy6dTVl6Bcg wGyYGpKxIHmgRuNCq/Ne6MYEqR7zQWzPzWaFzcUbnnZfkH7OSmGA0lHQegOAUm8L j3NtE1mKeYI8rfBEEnr325IMYtCEhaZQCnFiOOrkGllXlPshVLfuFqdFj6ffW66+ LYaAfALdckwLSvI+C9/OLuIuQoiVr6iH9oiZiKUKgL6RzgJec5pWEd/wLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLuWIzEgZ073+pDLopgziFp3WgGMB8GA1UdIwQY MBaAFDdMwv/XacGOXm8N/JoOp0+z+MEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUt MjY4MDZlYzM1YzIwLzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNGM1YTMtMmEzMS00Yjg1LTg0MGUtMjY4MDZlYzM1YzIw LzEvTjB6Q185ZHB3WTVlYnczOG1nNm5UN1A0d1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLyO1PcY mX0yDT0ScbuIeEYvvV+8FwQ585gH4DK1G6m0VL/QhgKU9B2mLG+4LwADP7ccNLSb 29GRU6FzFsu8nVU/mSOECltOGF77dU5KECnscCxaz5F9hWWLdyn2Ms9/hRhXf/MY +kTllMT+6CoODwQUMvFnMZXsLcI8iYedi+BTNVkou1aazroBhsD1jTZN8n/lMzRP hFsBi7svYJD5+etR/4iskl97FfgHR8wHdWMwGbzWFuOapIC/U4MwNxuxFcz/fZSf vgxDm04bbEOnxyocwZcdWITST4G4IyJNnv/dmQ7kGiqplVacTiG76I4O7/YT/VA4 ZppvCQke1Snw8A== -----END CERTIFICATE-----Generated at Mon Dec 22 04:41:09 2025 by rpki-client