This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft File: 1-N164S0qN_IarG-Btq9n1mF8oo4.mft (raw, json) Hash identifier: 0U9kHzAnKrTOaWhU5uDULxqrBTKlyp0E5fL8BJPeZg4= Subject key identifier: 68:A3:49:35:1B:0D:BF:A4:9C:18:2C:9C:1E:34:06:9E:CB:7E:A3:89 Authority key identifier: F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E Certificate issuer: /CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Certificate serial: 019B3EDAD0B6A6F2888A38472C13E5FEC60C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft Manifest number: 0DBF Signing time: Sun 21 Dec 2025 03:01:26 +0000 Manifest this update: Sun 21 Dec 2025 03:01:26 +0000 Manifest next update: Mon 22 Dec 2025 03:01:26 +0000 Files and hashes: 1: 1-N164S0qN_IarG-Btq9n1mF8oo4.crl (hash: 9X507iD47LuSntc4baWiPtRtKtBiVxKPg3TB5OGGETU=) 2: 6fWnvWPQJ-1pS6NSwoRHuUwkBi8.roa (hash: TuEDPLOZHzrwGKuGu5WkL6I1wv3+goqCPl2BGjRQIWw=) 3: C_PGOc03jGMSWjD8mAR0igEEyyQ.roa (hash: C4bHsZyQHmYG17oRmY2GwNsr94o4S9tEWANWUmFjfac=) 4: YS8fn_l74imFCNkcNVvUSOlCEEc.roa (hash: 8POCWM71NgjblaW0PGPjWaKSeiuviZ9/gLwwgo+p/hg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:d0:b6:a6:f2:88:8a:38:47:2c:13:e5:fe:c6:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8dd7ae12d2a37f21aac6f81b6af67d6617ca28e Validity Not Before: Dec 21 03:01:26 2025 GMT Not After : Dec 22 03:01:26 2025 GMT Subject: CN=68a349351b0dbfa49c182c9c1e34069ecb7ea389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:5e:72:64:f4:25:91:0c:cc:4c:99:58:3f: 89:1b:f0:c6:68:c9:22:34:d3:75:bb:90:c1:76:55: 22:26:b5:70:6f:3c:f2:ce:0f:62:5f:7d:b1:70:b8: 27:03:98:40:85:bc:00:60:54:13:3c:55:df:1c:d5: 4c:b7:97:c3:69:af:4f:37:45:77:57:8d:e7:71:21: 83:73:14:4d:e9:8e:7a:50:67:7f:84:4a:9f:f9:0f: 08:63:0f:f7:3b:e7:7f:47:5a:14:86:c8:5d:c2:7c: 36:95:1a:b9:51:3e:81:c2:15:a6:d9:b4:b4:6e:bf: 2d:ee:1d:95:c1:53:1a:e7:4f:5f:65:9e:52:3a:a6: 2e:3e:07:3e:4e:84:3a:e3:d9:4f:98:97:7e:2e:df: 39:54:ac:8c:ab:d3:c9:ee:f2:f1:da:95:fa:4e:8b: f0:45:c3:20:c9:2c:18:bc:6d:75:bc:ef:a3:62:61: c3:3c:c7:a1:79:ab:f6:64:9b:6f:79:8c:51:80:07: 3a:89:52:35:76:86:28:36:f6:73:79:ef:c4:c5:d3: d4:a3:8f:68:0f:df:f6:8b:d3:da:3b:a8:14:8f:ac: e1:9e:82:2e:98:10:23:da:51:e7:82:ee:f0:f1:31: d9:2f:12:e0:0f:ed:36:c3:8b:b2:13:62:1f:70:20: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A3:49:35:1B:0D:BF:A4:9C:18:2C:9C:1E:34:06:9E:CB:7E:A3:89 X509v3 Authority Key Identifier: keyid:F8:DD:7A:E1:2D:2A:37:F2:1A:AC:6F:81:B6:AF:67:D6:61:7C:A2:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-N164S0qN_IarG-Btq9n1mF8oo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2c0d80-3937-4455-b9cf-2b4a3538c5e3/1/1-N164S0qN_IarG-Btq9n1mF8oo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f3:07:dc:97:63:7c:38:a9:40:86:19:fe:79:75:24:df:24:24: b8:6c:23:a8:0c:21:a4:0a:66:ba:c0:0b:db:f9:81:db:7f:6f: 3e:01:d7:4a:88:31:68:17:c0:fe:0a:a3:e5:43:5e:f7:ea:28: 37:39:eb:0f:a5:46:bc:ab:19:f8:40:9e:53:42:0d:57:6f:b6: 77:29:fd:b1:21:81:8f:40:c1:24:c4:cc:41:b8:c6:45:2a:0c: 2c:3c:9f:88:a0:1e:cc:de:6d:ab:c5:b8:71:2d:02:1e:bc:f7: 20:a3:ba:4a:a3:0c:d1:87:9a:54:d6:b7:47:17:a9:7f:0b:30: 7d:b0:05:98:0c:c4:2b:92:b1:4f:bf:10:24:6b:a6:84:c4:38: 5c:2f:35:bd:d1:a8:fd:72:72:d6:43:65:9f:5b:74:be:30:bc: f0:29:15:63:0d:b0:a4:99:3d:f3:74:24:0b:a3:a8:7b:de:84: 84:6f:e9:50:b0:3d:4b:c4:ed:d7:41:00:ea:0b:f5:93:c2:28: 9e:0e:a5:f9:20:cb:78:77:fa:75:09:d1:3a:61:f2:3d:bb:c1: 98:cd:ad:6f:57:b0:ec:8f:b7:a2:d4:b0:b7:1d:79:83:1a:72: 12:55:11:ad:3c:71:2c:a5:d4:af:73:2b:56:48:b7:06:d1:c2: 73:ad:b9:40 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs+2tC2pvKIijhHLBPl/sYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZGQ3YWUxMmQyYTM3ZjIxYWFjNmY4MWI2YWY2N2Q2NjE3 Y2EyOGUwHhcNMjUxMjIxMDMwMTI2WhcNMjUxMjIyMDMwMTI2WjAzMTEwLwYDVQQD Eyg2OGEzNDkzNTFiMGRiZmE0OWMxODJjOWMxZTM0MDY5ZWNiN2VhMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpJecmT0JZEMzEyZWD+JG/DGaMki NNN1u5DBdlUiJrVwbzzyzg9iX32xcLgnA5hAhbwAYFQTPFXfHNVMt5fDaa9PN0V3 V43ncSGDcxRN6Y56UGd/hEqf+Q8IYw/3O+d/R1oUhshdwnw2lRq5UT6BwhWm2bS0 br8t7h2VwVMa509fZZ5SOqYuPgc+ToQ649lPmJd+Lt85VKyMq9PJ7vLx2pX6Tovw RcMgySwYvG11vO+jYmHDPMeheav2ZJtveYxRgAc6iVI1doYoNvZzee/ExdPUo49o D9/2i9PaO6gUj6zhnoIumBAj2lHngu7w8THZLxLgD+02w4uyE2IfcCC5/wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGijSTUbDb+knBgsnB40Bp7LfqOJMB8GA1UdIwQY MBaAFPjdeuEtKjfyGqxvgbavZ9ZhfKKOMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1OMTY0UzBxTl9JYXJHLUJ0cTluMW1GOG9vNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMmMwZDgwLTM5MzctNDQ1NS1iOWNm LTJiNGEzNTM4YzVlMy8xLzEtTjE2NFMwcU5fSWFyRy1CdHE5bjFtRjhvbzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzA2LzJjMGQ4MC0zOTM3LTQ0NTUtYjljZi0yYjRhMzUzOGM1 ZTMvMS8xLU4xNjRTMHFOX0lhckctQnRxOW4xbUY4b280LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8wfc l2N8OKlAhhn+eXUk3yQkuGwjqAwhpApmusAL2/mB239vPgHXSogxaBfA/gqj5UNe 9+ooNznrD6VGvKsZ+ECeU0INV2+2dyn9sSGBj0DBJMTMQbjGRSoMLDyfiKAezN5t q8W4cS0CHrz3IKO6SqMM0YeaVNa3RxepfwswfbAFmAzEK5KxT78QJGumhMQ4XC81 vdGo/XJy1kNln1t0vjC88CkVYw2wpJk983QkC6Ooe96EhG/pULA9S8Tt10EA6gv1 k8Iong6l+SDLeHf6dQnROmHyPbvBmM2tb1ew7I+3otSwtx15gxpyElURrTxxLKXU r3MrVki3BtHCc625QA== -----END CERTIFICATE-----Generated at Sun Dec 21 10:17:23 2025 by rpki-client