This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json) Hash identifier: cs3bN16v4d4enktVxNzKv98lF2aJuDOqC5WQxeo+ADk= Subject key identifier: A7:35:91:DD:D2:2A:D8:88:CB:AE:95:64:D2:ED:13:AA:1B:72:A0:AC Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36 Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36 Certificate serial: 019B424942988FA855C29C78709F410BFBEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft Manifest number: 171A Signing time: Sun 21 Dec 2025 19:00:56 +0000 Manifest this update: Sun 21 Dec 2025 19:00:56 +0000 Manifest next update: Mon 22 Dec 2025 19:00:56 +0000 Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: gz+0T0EdFRsDfDNaxrUkjMtG+acFjQbwdIlqsvTGIto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:42:98:8f:a8:55:c2:9c:78:70:9f:41:0b:fb:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36 Validity Not Before: Dec 21 19:00:56 2025 GMT Not After : Dec 22 19:00:56 2025 GMT Subject: CN=a73591ddd22ad888cbae9564d2ed13aa1b72a0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:6a:32:e9:c2:fe:f1:ca:71:cf:8b:2c:e5:de: 8e:dd:5e:6a:4b:3b:8d:db:28:5c:48:76:a5:4c:1b: ce:92:0a:86:72:24:57:a9:7e:6c:fe:61:b5:cc:d4: bc:29:f4:94:a3:ca:25:bb:ed:4e:07:af:22:d5:11: 40:ff:59:5b:bb:35:6a:13:93:9d:53:9d:d9:15:39: 93:9d:0f:5a:b5:e8:49:b7:7e:a9:d9:e1:29:02:35: 12:bc:12:b0:aa:8f:2e:eb:22:50:06:96:c2:f9:4c: fe:45:46:58:c6:1d:a6:e7:d3:68:ae:8b:4c:2b:1e: 84:aa:2a:54:49:50:9e:48:38:b6:4e:04:ac:9e:ad: 93:4e:0a:3e:f4:f5:fd:33:10:b9:9a:bc:f9:29:81: 36:a8:9a:61:1f:81:2c:56:f7:9d:7e:1c:aa:3e:db: 94:e0:51:98:98:2c:c1:1f:60:62:bf:e1:49:c2:cb: 6f:35:79:f3:6e:f3:48:68:56:bc:df:ba:f7:d4:a0: 35:a6:ce:ec:c8:dc:06:09:ec:ae:a3:6b:a4:3b:1b: a2:39:5f:65:6d:76:83:44:85:17:1e:73:88:0b:ba: 3c:ef:7e:cf:cd:cb:fb:7d:61:9a:c9:fb:52:3b:cf: 95:7b:11:c8:7e:66:c1:45:c1:f8:b2:43:8d:30:03: 8a:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:35:91:DD:D2:2A:D8:88:CB:AE:95:64:D2:ED:13:AA:1B:72:A0:AC X509v3 Authority Key Identifier: keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:b8:cb:6c:32:3c:97:59:f8:34:b9:ce:31:4c:4e:f6:c4:e2: 34:88:5b:92:38:31:06:e3:43:94:38:90:8f:36:1c:20:a3:5d: 62:4c:2d:ab:a2:f4:34:87:7a:c3:0e:d3:ac:aa:40:5a:9a:6c: 21:19:ea:58:fc:f2:5f:03:74:02:b7:93:e7:0c:e6:eb:d1:3a: 5b:16:db:f3:d8:f0:78:fc:de:de:7e:88:7f:2e:ea:6f:18:0c: b6:b6:63:b4:ff:7c:9c:2b:2e:ac:69:8d:35:14:f6:46:c7:7a: a5:f2:f7:81:0a:b5:74:48:66:0b:eb:af:19:0b:45:06:3c:d6: cd:6d:2b:fd:9c:67:c3:f7:44:b6:67:6e:2d:af:96:93:54:b5: 57:30:54:51:13:5e:49:0b:cb:d2:d5:13:6e:de:6b:5b:26:6d: b0:6b:51:9a:83:ae:d6:bb:4b:da:91:7c:26:0c:fc:e7:05:6b: 0d:61:81:9c:21:b3:85:b9:98:e9:79:a0:4b:7b:7d:d7:f3:f4: e7:b1:c0:a7:05:1c:5f:3a:37:c9:1a:47:27:6a:0b:54:be:24: e7:88:53:2a:60:ef:a1:c5:b9:49:7c:c6:5c:68:32:09:73:32: 90:6c:50:76:61:44:28:27:2b:88:45:b0:82:cb:9b:b1:0a:f4: 18:99:5e:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSUKYj6hVwpx4cJ9BC/vqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NWZkOTk1NGU3ZDVkMzU5ZjkzZjUyMTgyMWQ4NTE2OTUz YzlkMzYwHhcNMjUxMjIxMTkwMDU2WhcNMjUxMjIyMTkwMDU2WjAzMTEwLwYDVQQD EyhhNzM1OTFkZGQyMmFkODg4Y2JhZTk1NjRkMmVkMTNhYTFiNzJhMGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Woy6cL+8cpxz4ss5d6O3V5qSzuN 2yhcSHalTBvOkgqGciRXqX5s/mG1zNS8KfSUo8olu+1OB68i1RFA/1lbuzVqE5Od U53ZFTmTnQ9atehJt36p2eEpAjUSvBKwqo8u6yJQBpbC+Uz+RUZYxh2m59NorotM Kx6EqipUSVCeSDi2TgSsnq2TTgo+9PX9MxC5mrz5KYE2qJphH4EsVvedfhyqPtuU 4FGYmCzBH2Biv+FJwstvNXnzbvNIaFa837r31KA1ps7syNwGCeyuo2ukOxuiOV9l bXaDRIUXHnOIC7o8737Pzcv7fWGayftSO8+VexHIfmbBRcH4skONMAOKGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc1kd3SKtiIy66VZNLtE6obcqCsMB8GA1UdIwQY MBaAFDdf2ZVOfV01n5P1IYIdhRaVPJ02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODct ODUxZDU3N2QxNmFiLzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8wMTMwYTktYTljMy00M2E0LTlkODctODUxZDU3N2QxNmFi LzEvTjFfWmxVNTlYVFdma19VaGdoMkZGcFU4blRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrjLbDI8 l1n4NLnOMUxO9sTiNIhbkjgxBuNDlDiQjzYcIKNdYkwtq6L0NId6ww7TrKpAWpps IRnqWPzyXwN0AreT5wzm69E6Wxbb89jwePze3n6Ify7qbxgMtrZjtP98nCsurGmN NRT2Rsd6pfL3gQq1dEhmC+uvGQtFBjzWzW0r/Zxnw/dEtmduLa+Wk1S1VzBUURNe SQvL0tUTbt5rWyZtsGtRmoOu1rtL2pF8Jgz85wVrDWGBnCGzhbmY6XmgS3t91/P0 57HApwUcXzo3yRpHJ2oLVL4k54hTKmDvocW5SXzGXGgyCXMykGxQdmFEKCcriEWw gsubsQr0GJle/Q== -----END CERTIFICATE-----Generated at Sun Dec 21 22:48:36 2025 by rpki-client