This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json) Hash identifier: FSp+PjqjL+egejXGmnhxJ5gkAfKlHNitLVgQxiHZSDc= Subject key identifier: FB:16:EA:11:F5:9A:4E:8B:DA:02:D1:F2:23:BC:4E:88:F8:1F:19:0B Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811 Certificate serial: 019B3A21C7A934F6ED3D9115F8FABD15D4A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft Manifest number: 17DA Signing time: Sat 20 Dec 2025 05:00:50 +0000 Manifest this update: Sat 20 Dec 2025 05:00:50 +0000 Manifest next update: Sun 21 Dec 2025 05:00:50 +0000 Files and hashes: 1: EIwoL4bBkjzOKKCxiEjmWl3JAZ4.roa (hash: wYp626xf3qOxsiGE/nnF8dkz9Rr55Jt6Ig0NRCAEhRY=) 2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=) 3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: aiTRS0ED30eFgA32rLW53FC9fy9v2lFtnad8uJVIwhw=) 4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=) 5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=) 6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=) 7: nGBZ2oFLBzTV4cx47rC7uQ_qFOU.roa (hash: LCvJu/W+zfVHarypo5pA1Xtug5Ld+cxDTIz4mN49xiU=) 8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:c7:a9:34:f6:ed:3d:91:15:f8:fa:bd:15:d4:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375a064f301026bc3cf87666d6a820128212a811 Validity Not Before: Dec 20 05:00:50 2025 GMT Not After : Dec 21 05:00:50 2025 GMT Subject: CN=fb16ea11f59a4e8bda02d1f223bc4e88f81f190b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:f5:ea:7e:48:a6:da:40:d5:cd:c2:89:41:41: 15:a1:34:d0:7b:3b:51:37:01:f6:b4:f3:47:1a:74: af:1c:f9:b9:41:67:23:4c:ad:20:13:23:4b:99:91: cc:98:16:92:95:1c:ce:27:fc:14:8b:41:2d:37:a8: 83:8b:ee:1b:b3:fd:74:bf:59:b1:73:37:4e:0a:30: c6:28:9b:ca:b0:4b:dc:30:4f:9c:03:1f:68:26:26: 8c:36:80:39:66:a7:94:2b:06:a3:44:e0:7b:bf:8a: b0:e0:8c:51:b1:80:35:47:5b:99:69:f8:29:73:ca: db:71:d1:c5:c0:6d:7d:f9:35:6e:f7:5b:c3:e1:5e: 5b:66:2a:c1:27:ef:49:b4:1d:94:ba:31:6d:54:1b: 0a:a4:c9:ab:c8:d9:ba:3b:52:31:45:83:9e:5c:85: 6c:cc:fc:da:0e:67:2e:e9:c0:34:c9:70:54:5a:f7: e3:ae:a7:b9:ee:a9:db:d6:c1:5a:7c:7b:e4:83:54: 05:7b:7f:88:f1:7a:52:63:4a:2d:bb:a5:20:bd:a3: d9:fc:c9:d0:ee:15:c7:b0:4b:d4:41:92:28:d5:c9: 51:44:52:78:81:f4:dd:45:23:fe:dc:8b:4e:d3:4a: 9c:27:f5:25:a1:14:9a:e1:35:a1:2b:ed:8e:72:02: 69:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:16:EA:11:F5:9A:4E:8B:DA:02:D1:F2:23:BC:4E:88:F8:1F:19:0B X509v3 Authority Key Identifier: keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4f:a4:a8:c5:5c:a2:75:61:c5:6c:42:cc:d5:e2:38:75:79: a8:48:dc:13:86:06:ff:4f:6f:2c:b8:07:de:c7:e0:3e:a5:ce: 81:7e:c9:c6:01:b6:68:b7:00:bb:71:f1:16:83:31:a1:a4:d1: 37:82:2e:91:a2:ff:ce:01:65:19:e0:c2:d0:e2:5a:1a:21:79: 35:b5:90:e1:2a:26:16:e1:e5:e3:d9:0a:54:84:f2:11:cf:28: c8:4a:7a:99:1f:58:f7:78:df:61:30:c9:c3:6b:48:b1:ca:ab: d7:ff:d0:36:da:a4:58:84:71:c5:ae:a9:00:10:a0:1c:27:eb: f8:5f:cf:15:6a:6a:57:f3:03:5f:43:7d:83:0e:26:3b:e8:6b: 7f:ad:2d:65:24:a7:11:0b:fb:59:03:a4:51:35:bb:7b:85:6e: b3:00:a7:99:8e:13:55:c7:4c:a6:dd:ce:f2:7a:22:bf:08:8a: fd:f1:b3:dd:14:08:fb:ed:53:d2:ee:dc:5d:26:ff:72:db:f7: 4e:6e:cf:53:7f:b7:0f:7b:58:c2:94:58:4f:ea:f5:1c:06:ba: 61:f1:b5:69:e2:ca:11:07:df:cf:56:f9:12:f8:68:ba:b9:d6: e0:02:b7:54:84:be:b7:4c:9c:e5:19:f3:59:77:dd:b9:ae:45: 39:c4:7c:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IcepNPbtPZEV+Pq9FdSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWEwNjRmMzAxMDI2YmMzY2Y4NzY2NmQ2YTgyMDEyODIx MmE4MTEwHhcNMjUxMjIwMDUwMDUwWhcNMjUxMjIxMDUwMDUwWjAzMTEwLwYDVQQD EyhmYjE2ZWExMWY1OWE0ZThiZGEwMmQxZjIyM2JjNGU4OGY4MWYxOTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfXqfkim2kDVzcKJQUEVoTTQeztR NwH2tPNHGnSvHPm5QWcjTK0gEyNLmZHMmBaSlRzOJ/wUi0EtN6iDi+4bs/10v1mx czdOCjDGKJvKsEvcME+cAx9oJiaMNoA5ZqeUKwajROB7v4qw4IxRsYA1R1uZafgp c8rbcdHFwG19+TVu91vD4V5bZirBJ+9JtB2UujFtVBsKpMmryNm6O1IxRYOeXIVs zPzaDmcu6cA0yXBUWvfjrqe57qnb1sFafHvkg1QFe3+I8XpSY0otu6UgvaPZ/MnQ 7hXHsEvUQZIo1clRRFJ4gfTdRSP+3ItO00qcJ/UloRSa4TWhK+2OcgJp4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsW6hH1mk6L2gLR8iO8Toj4HxkLMB8GA1UdIwQY MBaAFDdaBk8wECa8PPh2ZtaoIBKCEqgRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTkt ZjQ0YTU3Y2VkNzNkLzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9kYzU4ODEtMzYzMi00NWFmLWJmNTktZjQ0YTU3Y2VkNzNk LzEvTjFvR1R6QVFKcnc4LUhabTFxZ2dFb0lTcUJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU+kqMVc onVhxWxCzNXiOHV5qEjcE4YG/09vLLgH3sfgPqXOgX7JxgG2aLcAu3HxFoMxoaTR N4IukaL/zgFlGeDC0OJaGiF5NbWQ4SomFuHl49kKVITyEc8oyEp6mR9Y93jfYTDJ w2tIscqr1//QNtqkWIRxxa6pABCgHCfr+F/PFWpqV/MDX0N9gw4mO+hrf60tZSSn EQv7WQOkUTW7e4VuswCnmY4TVcdMpt3O8noivwiK/fGz3RQI++1T0u7cXSb/ctv3 Tm7PU3+3D3tYwpRYT+r1HAa6YfG1aeLKEQffz1b5EvhournW4AK3VIS+t0yc5Rnz WXfdua5FOcR80Q== -----END CERTIFICATE-----Generated at Sat Dec 20 08:23:32 2025 by rpki-client