This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft File: N0862b8UbAabjYPW1a1UggRetw0.mft (raw, json) Hash identifier: Rf6mhfpHr5AtwL6FnJ9gY53EpYudtjuurQDClJQ0QZA= Subject key identifier: 17:92:F1:DC:60:5D:95:AD:12:64:72:EA:2B:1F:E4:85:43:73:D1:BF Authority key identifier: 37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D Certificate issuer: /CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d Certificate serial: 019B4F29D05A8E842136F12B6C091163D3F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft Manifest number: 1792 Signing time: Wed 24 Dec 2025 07:01:38 +0000 Manifest this update: Wed 24 Dec 2025 07:01:38 +0000 Manifest next update: Thu 25 Dec 2025 07:01:38 +0000 Files and hashes: 1: N0862b8UbAabjYPW1a1UggRetw0.crl (hash: BfCIKhsbmaCNOAmfsMTKiV9zHhHNeVI1tSBYXp6TyNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:d0:5a:8e:84:21:36:f1:2b:6c:09:11:63:d3:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374f3ad9bf146c069b8d83d6d5ad5482045eb70d Validity Not Before: Dec 24 07:01:38 2025 GMT Not After : Dec 25 07:01:38 2025 GMT Subject: CN=1792f1dc605d95ad126472ea2b1fe4854373d1bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:6d:53:de:2e:52:5f:04:39:a3:4b:48:14: 44:7a:13:fd:09:86:10:4f:d7:29:7a:4f:c8:ab:34: c9:a3:dc:95:b6:1d:54:f1:3a:61:78:49:1a:5e:e8: 08:07:66:c3:00:5d:60:49:30:67:ea:df:5e:1f:da: 74:1a:18:af:83:dc:0d:a5:a6:61:26:e3:ad:cd:60: 88:73:3f:1f:85:a2:21:e7:77:76:8a:2c:38:56:e8: 65:78:31:bc:46:91:46:1d:86:6a:f6:45:32:f5:0d: dc:df:4d:f8:21:ef:46:a3:9e:d0:31:16:f3:74:b6: c5:ed:39:2f:12:75:12:61:92:86:a0:73:e9:9a:a7: eb:03:05:af:41:b6:db:fd:ff:bf:26:16:8c:7f:c8: 4c:9f:cd:74:38:33:1b:cb:b4:f4:42:de:69:30:7c: f5:0a:7e:fc:46:4f:4a:3f:de:ac:e2:17:7e:fb:27: 6c:e4:e6:82:7a:90:f3:de:ee:9f:31:e6:f4:77:29: 4c:39:89:9c:ca:ea:64:77:a2:96:0f:c8:dc:26:06: 78:4b:64:73:e0:4a:53:e7:ae:01:a7:ee:5c:69:05: 01:c8:40:6b:57:bb:97:ad:86:68:8c:7f:0d:6c:af: cb:dd:b4:6f:d7:6d:ef:c6:16:5d:02:21:a0:4c:2d: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:92:F1:DC:60:5D:95:AD:12:64:72:EA:2B:1F:E4:85:43:73:D1:BF X509v3 Authority Key Identifier: keyid:37:4F:3A:D9:BF:14:6C:06:9B:8D:83:D6:D5:AD:54:82:04:5E:B7:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0862b8UbAabjYPW1a1UggRetw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73bfb2-0285-4f53-92f0-ff8713a8e316/1/N0862b8UbAabjYPW1a1UggRetw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0e:48:1b:c3:02:19:58:20:47:3a:49:51:f7:e9:70:26:2a: 0c:4a:55:9e:8a:f4:5d:c5:09:d8:f6:78:33:f7:b7:55:14:92: 48:bb:88:c8:9f:d6:e2:34:1a:f5:3e:2c:ae:ac:dd:4b:06:b9: 90:2b:71:2c:42:e0:59:15:99:83:42:ed:26:da:cf:bf:dc:40: 68:1b:23:c8:ed:f3:45:89:b4:f9:fe:b5:47:a9:60:5f:19:aa: fa:1b:72:fb:b1:09:98:87:13:b4:1a:79:66:fe:f9:5b:fc:ba: 1a:c5:b9:93:53:f5:e3:d6:d7:e5:8b:58:5c:be:7c:24:bc:d8: 7d:38:ef:69:44:db:da:62:c0:d5:eb:2e:bc:fe:96:ed:3f:50: 44:fb:44:ac:bb:2c:64:35:e3:c3:18:2e:d2:ad:8f:9f:19:25: 06:aa:c7:5e:a7:13:18:28:53:a4:98:c6:ef:cc:41:39:d8:1b: 54:dd:3e:48:e8:7d:2d:72:94:5c:a7:b9:cd:96:65:b4:3c:03: 39:64:e4:32:91:50:78:39:63:50:d8:2f:e9:b8:49:1e:f4:33: 86:8d:00:8b:79:06:b3:13:b8:b9:d4:83:4d:c4:b1:30:58:b9: ef:a0:e7:57:3d:9c:3a:8b:91:31:42:c9:5c:2f:23:ff:ee:30: 73:9b:00:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKdBajoQhNvErbAkRY9PxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGYzYWQ5YmYxNDZjMDY5YjhkODNkNmQ1YWQ1NDgyMDQ1 ZWI3MGQwHhcNMjUxMjI0MDcwMTM4WhcNMjUxMjI1MDcwMTM4WjAzMTEwLwYDVQQD EygxNzkyZjFkYzYwNWQ5NWFkMTI2NDcyZWEyYjFmZTQ4NTQzNzNkMWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZttU94uUl8EOaNLSBREehP9CYYQ T9cpek/IqzTJo9yVth1U8TpheEkaXugIB2bDAF1gSTBn6t9eH9p0Ghivg9wNpaZh JuOtzWCIcz8fhaIh53d2iiw4VuhleDG8RpFGHYZq9kUy9Q3c3034Ie9Go57QMRbz dLbF7TkvEnUSYZKGoHPpmqfrAwWvQbbb/f+/JhaMf8hMn810ODMby7T0Qt5pMHz1 Cn78Rk9KP96s4hd++yds5OaCepDz3u6fMeb0dylMOYmcyupkd6KWD8jcJgZ4S2Rz 4EpT564Bp+5caQUByEBrV7uXrYZojH8NbK/L3bRv123vxhZdAiGgTC0y2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeS8dxgXZWtEmRy6isf5IVDc9G/MB8GA1UdIwQY MBaAFDdPOtm/FGwGm42D1tWtVIIEXrcNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2JmYjItMDI4NS00ZjUzLTkyZjAt ZmY4NzEzYThlMzE2LzEvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi83M2JmYjItMDI4NS00ZjUzLTkyZjAtZmY4NzEzYThlMzE2 LzEvTjA4NjJiOFViQWFiallQVzFhMVVnZ1JldHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ5IG8MC GVggRzpJUffpcCYqDEpVnor0XcUJ2PZ4M/e3VRSSSLuIyJ/W4jQa9T4srqzdSwa5 kCtxLELgWRWZg0LtJtrPv9xAaBsjyO3zRYm0+f61R6lgXxmq+hty+7EJmIcTtBp5 Zv75W/y6GsW5k1P149bX5YtYXL58JLzYfTjvaUTb2mLA1esuvP6W7T9QRPtErLss ZDXjwxgu0q2PnxklBqrHXqcTGChTpJjG78xBOdgbVN0+SOh9LXKUXKe5zZZltDwD OWTkMpFQeDljUNgv6bhJHvQzho0Ai3kGsxO4udSDTcSxMFi576DnVz2cOouRMULJ XC8j/+4wc5sALA== -----END CERTIFICATE-----Generated at Wed Dec 24 09:16:42 2025 by rpki-client