This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json) Hash identifier: zQUUACjaYetQpM073UfhWGYz7VjN77H4LXGD3mRwzPM= Subject key identifier: D4:04:FA:4C:99:EF:4A:B6:2A:89:B1:D8:19:73:44:86:55:32:65:32 Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Certificate serial: 019B7CA69E8E5681577C8AED65A6558BA45D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft Manifest number: 062F Signing time: Fri 02 Jan 2026 03:00:52 +0000 Manifest this update: Fri 02 Jan 2026 03:00:52 +0000 Manifest next update: Sat 03 Jan 2026 03:00:52 +0000 Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: 3urGFSMLzUQBIIOdJqYHSozUvAAdGL/iLzMQhGDghu0=) 2: ptyQIs6zOdQaePAf0264xdbfsHE.roa (hash: zeWTG0uQV8YLaSyS7vNW/ey9XtXZbEHMRMH0ynFCKsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:a6:9e:8e:56:81:57:7c:8a:ed:65:a6:55:8b:a4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19 Validity Not Before: Jan 2 03:00:52 2026 GMT Not After : Jan 3 03:00:52 2026 GMT Subject: CN=d404fa4c99ef4ab62a89b1d81973448655326532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:64:f4:9d:23:c2:ed:7d:87:6b:89:88:a7:e5: 92:39:4c:aa:39:0e:31:ef:57:b4:e4:56:68:22:ed: 12:d1:45:02:cb:f0:14:b6:a1:7e:3a:d3:f8:4c:fb: c7:7e:52:04:8b:2b:f4:5f:0a:d9:33:d8:6c:3c:94: 1f:3f:74:24:cd:a0:72:1f:11:13:54:71:e1:bf:fa: 42:f0:83:ec:2e:f0:23:e2:d7:99:86:cf:3e:c2:49: 54:d4:ae:8d:16:5f:bf:3a:e7:ec:94:33:9c:fd:5f: 66:5f:1b:7e:b1:d3:c9:43:32:e1:f3:f1:dc:18:fe: 42:51:56:6d:c6:cd:4f:57:14:9f:f6:d3:90:ae:30: e8:02:a9:78:e7:7a:c9:39:9a:5d:72:ad:87:5c:45: 47:92:58:8d:d9:a7:64:df:ef:fd:16:7a:ed:19:bb: 57:00:cf:37:9f:f5:61:44:61:87:0a:be:3c:50:6f: 6d:0a:72:fb:dd:04:de:e9:f6:ff:d4:0e:29:5e:2f: 55:9d:3f:c8:11:d5:2c:3f:48:ab:80:c8:ee:50:ae: 51:bd:b5:b5:ec:0f:d3:c2:c0:6b:e0:2a:99:c8:80: 8e:94:84:bc:1b:d1:b6:11:c5:13:f5:24:5c:ba:fb: f7:e0:a9:94:a9:aa:5e:0e:b9:05:a0:49:20:63:4b: 8f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:04:FA:4C:99:EF:4A:B6:2A:89:B1:D8:19:73:44:86:55:32:65:32 X509v3 Authority Key Identifier: keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:89:23:9b:70:15:96:20:b5:59:7e:44:2d:e7:ab:03:10:e8: f1:63:b3:31:fb:03:36:ca:bd:d1:31:43:f0:a7:5c:a2:84:94: 92:6f:92:17:0b:b6:6d:0b:ac:db:18:92:06:45:40:f4:d6:41: 44:0b:eb:c4:22:d9:f0:ac:30:b2:92:72:60:13:a0:8c:c8:cf: d4:f3:d3:1c:e9:ea:c1:4d:7e:3b:48:fc:3c:bd:ab:13:a1:6b: 9e:3c:65:01:62:e0:23:08:12:22:60:cc:1b:1f:90:18:43:f3: d9:c7:49:63:40:f0:66:d4:6b:21:db:b6:a4:45:96:f9:e9:89: 6d:f4:c2:c4:0a:a6:9b:95:c1:c3:3c:3c:43:30:e5:46:2e:fd: e7:96:a8:f8:8d:5a:a5:3f:af:33:d8:d5:d3:54:43:1c:8f:ea: 07:b4:43:7b:bf:38:41:e7:d6:f5:08:f7:41:a5:aa:20:f2:4a: 94:2c:cb:07:99:92:15:91:96:2b:cb:a1:bd:37:c7:f4:4e:a7: b6:2e:e9:b7:f7:e1:68:24:c5:95:c3:29:94:ec:b1:01:8e:35: 15:41:43:bb:3a:c7:9c:13:a2:bb:fa:8d:d2:f6:1f:36:04:8a: 31:16:55:c0:64:32:6e:5f:e4:50:52:a9:5b:40:35:24:96:0a: da:b3:b1:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8pp6OVoFXfIrtZaZVi6RdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2 ZWNhMTkwHhcNMjYwMTAyMDMwMDUyWhcNMjYwMTAzMDMwMDUyWjAzMTEwLwYDVQQD EyhkNDA0ZmE0Yzk5ZWY0YWI2MmE4OWIxZDgxOTczNDQ4NjU1MzI2NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2T0nSPC7X2Ha4mIp+WSOUyqOQ4x 71e05FZoIu0S0UUCy/AUtqF+OtP4TPvHflIEiyv0XwrZM9hsPJQfP3QkzaByHxET VHHhv/pC8IPsLvAj4teZhs8+wklU1K6NFl+/OufslDOc/V9mXxt+sdPJQzLh8/Hc GP5CUVZtxs1PVxSf9tOQrjDoAql453rJOZpdcq2HXEVHkliN2adk3+/9FnrtGbtX AM83n/VhRGGHCr48UG9tCnL73QTe6fb/1A4pXi9VnT/IEdUsP0irgMjuUK5RvbW1 7A/TwsBr4CqZyICOlIS8G9G2EcUT9SRcuvv34KmUqapeDrkFoEkgY0uPGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQE+kyZ70q2Komx2BlzRIZVMmUyMB8GA1UdIwQY MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4kjm3AV liC1WX5ELeerAxDo8WOzMfsDNsq90TFD8KdcooSUkm+SFwu2bQus2xiSBkVA9NZB RAvrxCLZ8KwwspJyYBOgjMjP1PPTHOnqwU1+O0j8PL2rE6FrnjxlAWLgIwgSImDM Gx+QGEPz2cdJY0DwZtRrIdu2pEWW+emJbfTCxAqmm5XBwzw8QzDlRi7955ao+I1a pT+vM9jV01RDHI/qB7RDe784QefW9Qj3QaWqIPJKlCzLB5mSFZGWK8uhvTfH9E6n ti7pt/fhaCTFlcMplOyxAY41FUFDuzrHnBOiu/qN0vYfNgSKMRZVwGQybl/kUFKp W0A1JJYK2rOxtA== -----END CERTIFICATE-----Generated at Fri Jan 2 08:20:33 2026 by rpki-client