This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json) Hash identifier: ibRlbJyJviZjdVkzSQN7T4yDDxKTrg97OCIoQtc6v/A= Subject key identifier: BD:77:FF:73:36:A7:45:4C:6A:F6:9B:1C:95:92:67:29:3A:82:78:F6 Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b Certificate serial: 019B3DC7A48981D39E6C57D445E81232F594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft Manifest number: 1103 Signing time: Sat 20 Dec 2025 22:00:52 +0000 Manifest this update: Sat 20 Dec 2025 22:00:52 +0000 Manifest next update: Sun 21 Dec 2025 22:00:52 +0000 Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: QyUPa+7a0VuNAhHIKswo8vHvZa9fEEQfnWlljCx0r6M=) 2: sVzqlUVXrHqVsVw4yhzSu1oYIjM.roa (hash: HaD8do3X9duYtx96VIyzNjLwjQlO2MrTlBSjfqbB5ec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a4:89:81:d3:9e:6c:57:d4:45:e8:12:32:f5:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b Validity Not Before: Dec 20 22:00:52 2025 GMT Not After : Dec 21 22:00:52 2025 GMT Subject: CN=bd77ff7336a7454c6af69b1c959267293a8278f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c1:64:18:39:2f:f3:c7:fe:f3:56:93:89:44: 17:09:f1:41:38:dc:d1:d8:d2:e6:27:fa:b5:4d:48: 92:2f:28:f3:28:44:a8:3d:62:53:30:5b:db:fc:e5: 9e:da:08:84:65:f5:93:69:21:d5:56:c0:17:72:cf: 73:44:d3:65:f7:1a:cf:00:92:a1:38:e7:a3:fb:64: 5c:5e:16:ce:16:19:4a:e8:8c:4b:e7:d7:59:cb:56: 14:96:c2:6c:74:85:0a:c0:ad:43:2d:9a:ca:f1:3d: 59:46:ec:99:ff:b7:88:93:c5:20:66:87:8f:82:b9: d3:f2:f5:d4:0c:e8:bb:3d:c2:07:0b:e8:88:04:82: ed:9d:b4:05:75:36:be:a6:bd:0e:ac:22:0c:88:4c: df:7c:33:8c:6b:59:ec:50:0a:84:76:86:a5:4b:fe: a3:c9:37:d0:12:1a:cb:bd:4b:e2:50:79:fc:fa:a4: 3e:3a:e3:4f:00:cc:8a:9d:6a:e7:b1:bb:ec:17:b9: 5f:6d:d7:c6:e2:2a:43:43:e1:08:b0:d1:11:c9:48: 38:c4:26:ce:60:26:a3:10:a0:0f:af:df:14:80:2d: 37:36:ee:f2:5c:d1:c6:23:99:2c:b4:c2:9c:e8:d5: b2:2f:ef:fc:4a:b6:78:d8:a4:60:31:92:c4:8c:f1: 83:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:77:FF:73:36:A7:45:4C:6A:F6:9B:1C:95:92:67:29:3A:82:78:F6 X509v3 Authority Key Identifier: keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:37:1f:68:e2:e2:76:ed:07:3c:44:85:68:e2:0f:71:ec:11: ed:f2:41:06:6e:ee:31:19:16:74:80:60:5d:ec:67:cf:b5:29: 7a:f6:19:df:2b:7e:7f:b5:6a:f2:b5:5f:c3:47:e4:99:ba:21: 0d:bc:56:bf:ad:3b:70:0c:8c:0f:3c:80:69:24:e2:dd:24:fe: 55:70:cb:b6:09:fe:69:06:2f:74:ca:95:87:82:34:31:76:7a: 83:94:81:d8:37:02:eb:3d:e4:55:3f:6f:39:1f:15:9e:ec:5d: fc:0a:8f:3f:9b:b2:d8:08:8b:f9:4a:8d:90:87:c0:1d:7b:56: fe:6b:b7:fa:b3:38:80:b4:94:93:19:7d:f7:3c:18:b2:fa:73: 78:52:f5:c1:c5:03:d0:9f:bb:74:6e:63:5a:44:a2:47:0d:7d: 80:ad:7b:ee:79:ca:b2:b3:20:23:9f:17:a6:6f:d7:e0:d3:8c: 02:be:c6:d4:3b:f7:71:e6:52:b6:ef:bd:e3:aa:66:ed:75:c6: 9a:98:59:9a:e9:9e:1d:32:21:30:b9:e8:bd:83:d9:61:ba:37: df:12:1e:94:c5:5f:ed:aa:29:ea:75:67:78:a4:6e:45:9f:2b: cf:64:05:23:a1:8b:51:7c:e4:21:56:55:91:a7:88:13:92:9b: a7:ed:e9:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6SJgdOebFfURegSMvWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3OTdlMDM5ZjAyNWEyNWFhNmU5OTIzOTFkOTI0MjYwNjk5 YmE2N2IwHhcNMjUxMjIwMjIwMDUyWhcNMjUxMjIxMjIwMDUyWjAzMTEwLwYDVQQD EyhiZDc3ZmY3MzM2YTc0NTRjNmFmNjliMWM5NTkyNjcyOTNhODI3OGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcFkGDkv88f+81aTiUQXCfFBONzR 2NLmJ/q1TUiSLyjzKESoPWJTMFvb/OWe2giEZfWTaSHVVsAXcs9zRNNl9xrPAJKh OOej+2RcXhbOFhlK6IxL59dZy1YUlsJsdIUKwK1DLZrK8T1ZRuyZ/7eIk8UgZoeP grnT8vXUDOi7PcIHC+iIBILtnbQFdTa+pr0OrCIMiEzffDOMa1nsUAqEdoalS/6j yTfQEhrLvUviUHn8+qQ+OuNPAMyKnWrnsbvsF7lfbdfG4ipDQ+EIsNERyUg4xCbO YCajEKAPr98UgC03Nu7yXNHGI5kstMKc6NWyL+/8SrZ42KRgMZLEjPGDOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL13/3M2p0VMavabHJWSZyk6gnj2MB8GA1UdIwQY MBaAFDeX4DnwJaJapumSOR2SQmBpm6Z7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEt YzFjMDVjZGI3ODQxLzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wYWJiOGEtOTc5OC00YmY4LWJhZTEtYzFjMDVjZGI3ODQx LzEvTjVmZ09mQWxvbHFtNlpJNUhaSkNZR21icG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHTcfaOLi du0HPESFaOIPcewR7fJBBm7uMRkWdIBgXexnz7UpevYZ3yt+f7Vq8rVfw0fkmboh DbxWv607cAyMDzyAaSTi3ST+VXDLtgn+aQYvdMqVh4I0MXZ6g5SB2DcC6z3kVT9v OR8Vnuxd/AqPP5uy2AiL+UqNkIfAHXtW/mu3+rM4gLSUkxl99zwYsvpzeFL1wcUD 0J+7dG5jWkSiRw19gK177nnKsrMgI58Xpm/X4NOMAr7G1Dv3ceZStu+946pm7XXG mphZmumeHTIhMLnovYPZYbo33xIelMVf7aop6nVneKRuRZ8rz2QFI6GLUXzkIVZV kaeIE5Kbp+3pfA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:27:24 2025 by rpki-client