This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json) Hash identifier: Vz8DFXb+ZQlFMkoNwsmxBXDhlFhI7oxZJ05t+Pdz1pE= Subject key identifier: CA:AE:38:2B:14:22:5E:86:FD:E0:1E:CC:FB:5B:06:55:68:39:70:15 Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Certificate serial: 019B4EBBCF1E75D75638DBC514BB1084D3B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft Manifest number: 0459 Signing time: Wed 24 Dec 2025 05:01:29 +0000 Manifest this update: Wed 24 Dec 2025 05:01:29 +0000 Manifest next update: Thu 25 Dec 2025 05:01:29 +0000 Files and hashes: 1: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: CuxIIT0J3vMDH98g2mQg5gixyi4UqDIPpj/O3cpDBW4=) 2: z0jy9Y0LCo3ZIOX0i-YN--qk5c8.roa (hash: He5k68GoY5Hz7UQWvgbe7s4gmFizOq2fG71vmfd/Wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:cf:1e:75:d7:56:38:db:c5:14:bb:10:84:d3:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca Validity Not Before: Dec 24 05:01:29 2025 GMT Not After : Dec 25 05:01:29 2025 GMT Subject: CN=caae382b14225e86fde01eccfb5b065568397015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:40:2d:71:ae:30:d7:f6:7d:69:80:2e:94:1d: fb:38:64:e7:b8:74:63:e5:09:14:66:c7:03:f3:d7: 72:00:30:1b:32:24:01:7b:ac:e6:0a:4f:6b:38:82: e3:77:21:61:98:d4:bd:00:7f:dd:dd:78:b3:92:4f: 6f:51:f6:2e:54:2d:52:51:c2:1b:0a:16:47:2b:dc: 46:80:01:7b:ff:6f:45:bc:db:37:76:7f:18:0f:a3: 1e:a0:30:f6:81:87:bb:1d:ed:68:7c:24:98:0c:8c: f3:8a:1d:8e:a1:87:78:79:54:f6:bd:6c:1c:97:1a: a8:cc:8b:ea:7c:d5:36:49:33:3f:b3:eb:51:34:f0: db:6f:0c:c7:a4:43:27:12:c1:14:98:26:bf:ca:6f: db:89:16:1f:0b:57:35:3f:2a:60:84:73:4f:11:93: a2:34:2d:55:de:1f:e8:0c:98:f4:3a:f3:ed:25:2f: b2:30:54:a0:2b:1d:11:f1:53:a5:a3:63:bf:ec:17: 22:06:42:d4:12:c7:55:5d:43:bc:d5:96:be:37:66: 56:ce:35:94:48:0d:fe:a7:5a:53:8d:45:aa:5c:7c: 81:0f:dc:97:b7:b1:87:47:14:5b:23:8e:e6:46:fb: 0a:05:fe:ca:0c:5a:81:27:09:3c:e0:27:cf:05:1a: ac:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AE:38:2B:14:22:5E:86:FD:E0:1E:CC:FB:5B:06:55:68:39:70:15 X509v3 Authority Key Identifier: keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:e6:38:71:1b:c3:4e:fa:60:88:73:df:06:7c:ae:78:81:24: cd:19:9f:00:e7:1c:98:5f:39:26:52:0c:b8:6e:12:9d:2e:52: 85:08:00:5e:9b:9c:fe:e8:c1:99:e2:de:d7:ec:c1:1e:64:98: d3:a9:30:84:82:07:99:10:cf:6c:70:11:56:20:33:e6:2f:c7: c0:92:ff:56:b7:df:69:1c:1b:e7:0b:73:2c:3e:4c:43:de:50: f2:d7:e2:48:83:7b:f7:45:82:2b:a0:35:95:e7:6d:17:f3:b6: cd:8e:8a:39:dd:19:02:ad:95:f2:07:06:3f:01:15:dd:d4:90: 7b:e1:e5:7f:6a:ee:97:81:df:38:f5:98:cc:a8:18:b8:aa:85: 1c:f4:67:37:47:69:eb:b7:a2:9d:14:b8:a8:56:9b:76:50:82: c4:ef:2d:76:8e:30:72:cf:ab:c0:d7:d6:a1:0d:a7:8f:ca:44: 01:7e:b1:f3:18:de:e2:0b:15:c5:8c:2b:69:41:57:8d:b4:21: 36:de:1f:93:65:d7:5e:bd:4c:54:99:2c:b9:1c:96:43:00:a2: 25:e9:11:94:42:42:f6:3e:d1:45:36:e5:fd:96:06:68:18:7f: f4:e8:6a:a7:a1:ae:d5:5c:82:da:0d:93:76:9c:ed:ae:2c:b9: 7a:e1:40:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu88edddWONvFFLsQhNO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm OTRkY2EwHhcNMjUxMjI0MDUwMTI5WhcNMjUxMjI1MDUwMTI5WjAzMTEwLwYDVQQD EyhjYWFlMzgyYjE0MjI1ZTg2ZmRlMDFlY2NmYjViMDY1NTY4Mzk3MDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EAtca4w1/Z9aYAulB37OGTnuHRj 5QkUZscD89dyADAbMiQBe6zmCk9rOILjdyFhmNS9AH/d3Xizkk9vUfYuVC1SUcIb ChZHK9xGgAF7/29FvNs3dn8YD6MeoDD2gYe7He1ofCSYDIzzih2OoYd4eVT2vWwc lxqozIvqfNU2STM/s+tRNPDbbwzHpEMnEsEUmCa/ym/biRYfC1c1PypghHNPEZOi NC1V3h/oDJj0OvPtJS+yMFSgKx0R8VOlo2O/7BciBkLUEsdVXUO81Za+N2ZWzjWU SA3+p1pTjUWqXHyBD9yXt7GHRxRbI47mRvsKBf7KDFqBJwk84CfPBRqs9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMquOCsUIl6G/eAezPtbBlVoOXAVMB8GA1UdIwQY MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbeY4cRvD TvpgiHPfBnyueIEkzRmfAOccmF85JlIMuG4SnS5ShQgAXpuc/ujBmeLe1+zBHmSY 06kwhIIHmRDPbHARViAz5i/HwJL/VrffaRwb5wtzLD5MQ95Q8tfiSIN790WCK6A1 ledtF/O2zY6KOd0ZAq2V8gcGPwEV3dSQe+Hlf2rul4HfOPWYzKgYuKqFHPRnN0dp 67einRS4qFabdlCCxO8tdo4wcs+rwNfWoQ2nj8pEAX6x8xje4gsVxYwraUFXjbQh Nt4fk2XXXr1MVJksuRyWQwCiJekRlEJC9j7RRTbl/ZYGaBh/9Ohqp6Gu1VyC2g2T dpztriy5euFAzw== -----END CERTIFICATE-----Generated at Wed Dec 24 10:09:47 2025 by rpki-client