This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json) Hash identifier: CTUnooX9pRv5upj1J6w6b9UIDZM7Qep72NIDuSJk10s= Subject key identifier: FF:4B:A3:08:84:76:4D:6A:C1:98:7E:84:95:27:1F:38:78:F7:F0:3D Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6 Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6 Certificate serial: 019B4ADEA72238387EF10804A9ED17319172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 11:01:04 +0000 Manifest this update: Tue 23 Dec 2025 11:01:04 +0000 Manifest next update: Wed 24 Dec 2025 11:01:04 +0000 Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: erRLqJEuw2HlsKViHIthTPo5KCXJoqhnICKCbEsptVc=) 2: mUVCmxlyRHOtQgqO0rU0Vfd_JxM.roa (hash: 4mDmX111g5PLlffQE3BOZIPTW2uYVk7yBC9oTl48FX8=) 3: mpaZpMO6isSTObvE2wXG4DntXik.roa (hash: 8jJ5y7EIdegRe7Ybgq0RJ3e4AspmvthPjv+Sjpecx5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:a7:22:38:38:7e:f1:08:04:a9:ed:17:31:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6 Validity Not Before: Dec 23 11:01:04 2025 GMT Not After : Dec 24 11:01:04 2025 GMT Subject: CN=ff4ba30884764d6ac1987e8495271f3878f7f03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5a:a2:f3:b0:e4:1b:c3:66:38:69:11:03:ce: 72:e4:7a:3c:1b:e3:6f:91:1b:d6:47:84:08:5e:0b: 66:78:6f:ba:80:5b:20:54:04:3b:43:5d:3d:cf:97: c2:c4:61:e8:de:b7:35:e3:e0:2c:55:a5:07:33:15: 2c:ba:33:ca:e5:36:68:f7:86:d9:fe:f5:a2:25:95: de:a4:33:e6:cb:ed:63:ac:c8:0b:a1:05:42:eb:09: 6e:4a:c3:01:23:d0:97:02:58:55:b4:b6:18:fa:a1: d0:21:eb:e7:7a:1d:ce:4c:ca:47:97:21:91:05:76: d3:81:a8:70:84:e4:09:39:03:01:03:e0:a6:8b:e6: c5:98:6d:fe:ab:ab:78:bf:49:3a:a5:d0:80:ce:d1: 61:89:74:52:21:15:cb:95:a6:02:a2:3a:27:96:f1: b3:fa:cb:25:f2:55:e0:c8:29:65:08:e3:33:d6:0b: 3c:65:9e:ee:22:0f:00:ce:f1:8a:8c:75:e6:b1:32: f4:be:42:52:66:39:b6:5e:30:b8:1b:99:fc:e0:10: 11:20:75:ea:29:6b:d8:48:63:f9:28:9e:1a:15:77: 88:4d:ee:f8:9c:b9:4a:99:31:68:bc:65:c0:19:cf: 8b:8a:cf:17:51:70:fa:d7:71:c7:97:3a:3b:40:81: 0b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:4B:A3:08:84:76:4D:6A:C1:98:7E:84:95:27:1F:38:78:F7:F0:3D X509v3 Authority Key Identifier: keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:a5:3e:26:d5:61:d8:06:4c:f6:b8:57:a9:6e:e9:e0:cc:9b: 43:9b:f9:94:56:b0:20:f1:84:4f:fa:5d:d6:39:a4:e5:dc:94: fc:b1:ed:10:19:1a:3e:c6:bd:47:b3:ed:ff:ed:0d:74:f7:72: 36:8b:9d:50:23:95:ec:9b:80:32:ad:74:25:ab:fe:2e:de:c5: 89:a1:93:13:38:11:38:2c:37:a3:51:fe:1f:5f:4a:36:23:c2: a4:7e:2b:2c:28:09:0f:46:c0:88:42:4d:4d:05:66:01:5e:85: ac:ad:47:f5:24:0c:b8:ae:f8:35:b5:6f:e9:10:24:ba:39:d4: dc:74:8c:c9:f6:1a:ea:b4:1c:9b:bc:21:dc:d7:da:49:b3:f2: a1:bd:41:3c:ba:e7:8e:82:42:19:45:80:ee:4c:22:83:01:e5: 81:ff:51:e9:66:15:cd:36:d0:d9:60:30:43:49:3d:6a:4e:15: f5:f0:9c:3c:33:63:d7:12:2a:98:74:ff:29:57:15:b6:4e:4e: fd:ec:1e:18:a4:c5:f6:c1:28:bb:8a:b9:2e:e6:66:0a:70:c3: c1:9f:55:36:19:4f:5a:6a:1a:90:40:66:b9:99:a1:cf:50:bf: 8b:8d:52:10:a7:43:1c:af:c6:57:6d:52:63:8a:ab:c4:5f:e6: 23:77:68:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3qciODh+8QgEqe0XMZFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3 Nzc5ZDYwHhcNMjUxMjIzMTEwMTA0WhcNMjUxMjI0MTEwMTA0WjAzMTEwLwYDVQQD EyhmZjRiYTMwODg0NzY0ZDZhYzE5ODdlODQ5NTI3MWYzODc4ZjdmMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01qi87DkG8NmOGkRA85y5Ho8G+Nv kRvWR4QIXgtmeG+6gFsgVAQ7Q109z5fCxGHo3rc14+AsVaUHMxUsujPK5TZo94bZ /vWiJZXepDPmy+1jrMgLoQVC6wluSsMBI9CXAlhVtLYY+qHQIevneh3OTMpHlyGR BXbTgahwhOQJOQMBA+Cmi+bFmG3+q6t4v0k6pdCAztFhiXRSIRXLlaYCojonlvGz +ssl8lXgyCllCOMz1gs8ZZ7uIg8AzvGKjHXmsTL0vkJSZjm2XjC4G5n84BARIHXq KWvYSGP5KJ4aFXeITe74nLlKmTFovGXAGc+Lis8XUXD613HHlzo7QIELfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9LowiEdk1qwZh+hJUnHzh49/A9MB8GA1UdIwQY MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt NTI0YzIxMDljYjA1LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1 LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM6U+JtVh 2AZM9rhXqW7p4MybQ5v5lFawIPGET/pd1jmk5dyU/LHtEBkaPsa9R7Pt/+0NdPdy NoudUCOV7JuAMq10Jav+Lt7FiaGTEzgROCw3o1H+H19KNiPCpH4rLCgJD0bAiEJN TQVmAV6FrK1H9SQMuK74NbVv6RAkujnU3HSMyfYa6rQcm7wh3NfaSbPyob1BPLrn joJCGUWA7kwigwHlgf9R6WYVzTbQ2WAwQ0k9ak4V9fCcPDNj1xIqmHT/KVcVtk5O /eweGKTF9sEou4q5LuZmCnDDwZ9VNhlPWmoakEBmuZmhz1C/i41SEKdDHK/GV21S Y4qrxF/mI3doxQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:20:22 2025 by rpki-client