This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft File: N69IEx7Nnco97yst54jxUGBid1U.mft (raw, json) Hash identifier: dq5Qnu0yB1jA2VMC1mPs//+1d9Z6FNZnRljaCjk/DGU= Subject key identifier: BA:E5:F9:ED:A3:BD:C6:C4:BA:A7:26:0F:2B:67:D4:39:F6:EE:A1:22 Authority key identifier: 37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55 Certificate issuer: /CN=37af48131ecd9dca3def2b2de788f15060627755 Certificate serial: 019B3B35049D41C7184A1776A804262E4E81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 10:01:28 +0000 Manifest this update: Sat 20 Dec 2025 10:01:28 +0000 Manifest next update: Sun 21 Dec 2025 10:01:28 +0000 Files and hashes: 1: HxZU0iTvv354MAx-YYeydPcZNIw.roa (hash: ZmBmkbINPjgbF7Kx8488Fp1UyAG+oYkTQNgORCAbrMc=) 2: Lv93kZr3FrSvC5fAGNeod6j_6yM.roa (hash: 37H9uvEBQ9sb3AaWMyi05t5K1mxRb/qz/+D6tmcVRbg=) 3: N69IEx7Nnco97yst54jxUGBid1U.crl (hash: p/iAmGAWAI6iUNxckHMgAp+hjXzvcTdB09KVb6u8x+A=) 4: nCYRFHxESiPTOP0DiwWAA3vf6pc.roa (hash: n1iHEUmqWKjUYGzT2fByz8YLuqOJY83LkJFmv6uksFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:04:9d:41:c7:18:4a:17:76:a8:04:26:2e:4e:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37af48131ecd9dca3def2b2de788f15060627755 Validity Not Before: Dec 20 10:01:28 2025 GMT Not After : Dec 21 10:01:28 2025 GMT Subject: CN=bae5f9eda3bdc6c4baa7260f2b67d439f6eea122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0f:e8:bf:67:62:9c:e0:96:02:41:6c:05:ea: 71:ce:75:5e:ee:96:8d:bb:8d:e9:69:8b:47:4e:9d: 88:a9:d2:e2:36:a1:f4:c8:49:01:e8:f7:14:35:1a: 13:79:36:d6:41:24:aa:75:27:8d:ac:f1:d1:d9:43: e2:b7:31:df:27:02:56:14:55:f4:a1:d7:3c:2a:f3: b7:61:5a:5c:27:b8:9b:e9:ec:79:44:bb:6e:10:07: 62:43:f9:8b:a2:e1:c1:2c:14:13:68:a2:c0:f2:e3: ca:7a:eb:cc:a7:96:8b:d1:06:9a:68:97:97:09:72: d3:ed:52:bb:4c:a0:20:47:e4:9d:3a:a3:0d:02:d1: 88:70:f0:11:99:3f:db:d7:2f:b0:5c:a6:f3:46:c7: b4:b9:35:66:f6:e7:84:fb:8e:fd:d1:fa:f5:64:5c: cb:38:8a:4e:35:54:25:c6:01:ee:78:2a:2f:3c:b4: ac:d0:a2:9d:d8:2a:5a:a4:bc:19:0c:d1:fd:fe:8a: 17:4d:ca:50:84:b0:17:3d:bc:5d:e0:54:a2:bc:09: 52:69:ca:13:ab:93:27:3b:79:23:f0:3b:66:41:1e: 9e:54:73:35:81:b9:75:26:0a:a8:14:81:1a:c8:68: f4:08:29:fd:7b:80:5d:50:af:ce:da:14:d4:02:e7: d2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E5:F9:ED:A3:BD:C6:C4:BA:A7:26:0F:2B:67:D4:39:F6:EE:A1:22 X509v3 Authority Key Identifier: keyid:37:AF:48:13:1E:CD:9D:CA:3D:EF:2B:2D:E7:88:F1:50:60:62:77:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N69IEx7Nnco97yst54jxUGBid1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/35faed-c2d7-4cb9-97f5-df6f20dcb94b/1/N69IEx7Nnco97yst54jxUGBid1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:76:64:ca:b2:e1:f6:cf:79:f3:a4:b4:fa:0e:db:e5:62:e7: db:d6:03:c7:1d:51:6b:0d:9f:d2:9a:17:db:57:8f:9c:30:3e: f1:18:bc:46:2e:71:69:c7:98:fc:3b:a4:2e:3b:38:f2:ad:ad: a6:ee:5a:47:eb:87:64:79:ae:12:8c:b9:70:c4:b9:33:34:03: 51:f4:6e:56:6a:3c:cb:62:54:9b:93:41:4d:c3:28:23:c2:b8: 75:15:e0:d9:c2:da:23:cb:8f:92:25:e5:eb:b4:3e:6d:c1:01: 98:4a:a6:e5:01:29:b9:b8:0a:e2:39:c5:8e:c3:8f:db:c7:50: 5f:75:4e:68:08:6f:3b:99:2a:a1:cf:06:a0:30:c8:be:49:25: 97:d4:32:74:78:fd:13:c3:36:42:a6:7f:13:b2:01:57:32:eb: b7:32:66:71:f4:5e:c6:b9:99:c8:7b:9c:30:cf:a2:8b:60:0e: 03:53:bd:01:1e:ef:5b:57:af:6c:89:db:10:90:b8:f5:db:91: f3:77:41:4e:d5:34:26:6b:91:75:14:e3:08:04:4b:42:2e:b0: a4:73:26:4a:03:82:fa:cb:5f:7e:43:06:0d:32:ff:c7:32:21: 4a:a0:68:62:fe:80:88:d7:99:90:22:58:4a:78:fd:ba:d5:85: 2e:81:c6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NQSdQccYShd2qAQmLk6BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YWY0ODEzMWVjZDlkY2EzZGVmMmIyZGU3ODhmMTUwNjA2 Mjc3NTUwHhcNMjUxMjIwMTAwMTI4WhcNMjUxMjIxMTAwMTI4WjAzMTEwLwYDVQQD EyhiYWU1ZjllZGEzYmRjNmM0YmFhNzI2MGYyYjY3ZDQzOWY2ZWVhMTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2w/ov2dinOCWAkFsBepxznVe7paN u43paYtHTp2IqdLiNqH0yEkB6PcUNRoTeTbWQSSqdSeNrPHR2UPitzHfJwJWFFX0 odc8KvO3YVpcJ7ib6ex5RLtuEAdiQ/mLouHBLBQTaKLA8uPKeuvMp5aL0QaaaJeX CXLT7VK7TKAgR+SdOqMNAtGIcPARmT/b1y+wXKbzRse0uTVm9ueE+4790fr1ZFzL OIpONVQlxgHueCovPLSs0KKd2CpapLwZDNH9/ooXTcpQhLAXPbxd4FSivAlSacoT q5MnO3kj8DtmQR6eVHM1gbl1JgqoFIEayGj0CCn9e4BdUK/O2hTUAufSuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrl+e2jvcbEuqcmDytn1Dn27qEiMB8GA1UdIwQY MBaAFDevSBMezZ3KPe8rLeeI8VBgYndVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUt ZGY2ZjIwZGNiOTRiLzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zNWZhZWQtYzJkNy00Y2I5LTk3ZjUtZGY2ZjIwZGNiOTRi LzEvTjY5SUV4N05uY285N3lzdDU0anhVR0JpZDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATXZkyrLh 9s9586S0+g7b5WLn29YDxx1Raw2f0poX21ePnDA+8Ri8Ri5xaceY/DukLjs48q2t pu5aR+uHZHmuEoy5cMS5MzQDUfRuVmo8y2JUm5NBTcMoI8K4dRXg2cLaI8uPkiXl 67Q+bcEBmEqm5QEpubgK4jnFjsOP28dQX3VOaAhvO5kqoc8GoDDIvkkll9QydHj9 E8M2QqZ/E7IBVzLrtzJmcfRexrmZyHucMM+ii2AOA1O9AR7vW1evbInbEJC49duR 83dBTtU0JmuRdRTjCARLQi6wpHMmSgOC+stffkMGDTL/xzIhSqBoYv6AiNeZkCJY Snj9utWFLoHGyA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:36:42 2025 by rpki-client