This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json) Hash identifier: rb6wuTQN4UsxlOdrTYF105Mn1+wd5VlovBjosfNbnNw= Subject key identifier: F9:4C:7C:99:FF:20:9D:97:B2:A5:3B:CF:F7:5D:CD:DE:4F:78:C3:6C Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf Certificate serial: 019B29D2D51837EF5BE554DF03F743F0CCFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft Manifest number: 1362 Signing time: Wed 17 Dec 2025 01:00:41 +0000 Manifest this update: Wed 17 Dec 2025 01:00:41 +0000 Manifest next update: Thu 18 Dec 2025 01:00:41 +0000 Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: u9xRztEwKaWZOmSpafDniFUvfmj60QCRTJS2SRUlITM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:d2:d5:18:37:ef:5b:e5:54:df:03:f7:43:f0:cc:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf Validity Not Before: Dec 17 01:00:41 2025 GMT Not After : Dec 18 01:00:41 2025 GMT Subject: CN=f94c7c99ff209d97b2a53bcff75dcdde4f78c36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:a1:97:6f:7c:55:87:04:95:d9:86:d7:f8: 3d:f7:11:67:72:ba:41:e6:94:e9:a3:a5:0c:25:87: ec:44:ce:01:b3:86:c9:60:05:bc:e3:a9:b9:d9:75: bf:f3:5e:6b:b4:58:4a:cc:2c:18:a8:04:3a:75:b0: f7:0d:cc:5e:cb:97:92:5f:4f:af:1d:ac:77:88:f1: ab:b3:bb:80:48:11:78:e4:82:dc:24:c4:81:02:75: 74:f8:b4:46:a2:56:3c:d7:ad:0a:9b:ee:d9:13:04: 71:83:72:63:79:2c:e8:80:d6:8c:ab:17:de:77:db: 50:73:d8:41:d3:b4:ce:c0:e5:ba:2e:9b:69:97:92: 46:67:06:30:4d:28:1f:11:2d:ca:8d:bc:b0:9e:09: d5:a6:03:c5:d7:11:d1:ab:df:60:b8:81:8d:c8:18: 1c:59:9a:77:3a:26:00:77:c7:23:84:ad:90:d9:51: f8:0c:79:c5:bf:2b:d3:fd:36:38:e6:6e:d2:9a:f4: 2c:63:fe:3d:a6:7e:b6:4f:2b:65:02:c1:28:af:82: 97:c3:54:7d:3c:aa:5e:92:4c:31:93:9e:c6:a3:dd: c5:25:89:47:99:6a:63:e6:d7:3c:e9:2f:5c:11:1b: e7:10:21:ac:23:27:0a:6b:11:17:36:8f:e7:03:9c: 2a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4C:7C:99:FF:20:9D:97:B2:A5:3B:CF:F7:5D:CD:DE:4F:78:C3:6C X509v3 Authority Key Identifier: keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:54:6f:4a:dd:80:01:f9:b9:d0:d2:d8:65:28:dc:f8:e5:65: 5b:e3:8a:ec:4d:7f:48:73:3d:48:05:d5:ef:fd:19:ce:9f:5b: 84:14:d0:63:1d:62:b4:9a:2c:5d:9d:28:fe:25:82:59:2e:1f: 1d:4c:3b:c0:d9:6d:9e:41:61:74:6a:88:67:5b:8e:66:32:5f: 39:eb:86:cd:1b:e9:9c:37:ce:6f:0b:88:65:dc:ad:65:f2:f1: c8:b7:26:43:30:da:47:6e:98:7c:84:f0:78:63:f2:5e:99:73: 5d:ba:85:65:33:94:91:c2:fb:4d:fb:27:fd:b4:2c:03:ff:b2: e4:c4:59:0c:d2:65:cc:3d:54:24:00:90:88:28:ea:46:7d:fc: 98:9e:d1:59:48:c1:93:97:93:5b:a5:c2:43:c1:cd:33:ed:71: a8:ae:a0:6b:8e:b3:ce:eb:c2:63:05:b1:fc:17:83:3c:76:b5: a3:6f:b2:f5:15:d5:24:25:5c:5f:55:98:21:ef:84:04:a0:73: 4f:2f:5b:08:1d:84:de:68:ff:44:b4:38:20:2e:44:1d:8f:ec: ad:96:44:72:b3:1a:8a:3e:49:a6:62:db:ff:44:51:de:57:c7: ee:08:50:9a:f8:9b:64:60:62:f5:ab:44:46:48:95:ea:41:9f: 63:09:4a:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsp0tUYN+9b5VTfA/dD8Mz/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDA4M2FmMGZmZjE3NjhhMDdjNjU1ZjFmZTM4NjAwOWM1 MjJjY2YwHhcNMjUxMjE3MDEwMDQxWhcNMjUxMjE4MDEwMDQxWjAzMTEwLwYDVQQD EyhmOTRjN2M5OWZmMjA5ZDk3YjJhNTNiY2ZmNzVkY2RkZTRmNzhjMzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD6hl298VYcEldmG1/g99xFncrpB 5pTpo6UMJYfsRM4Bs4bJYAW846m52XW/815rtFhKzCwYqAQ6dbD3Dcxey5eSX0+v Hax3iPGrs7uASBF45ILcJMSBAnV0+LRGolY8160Km+7ZEwRxg3JjeSzogNaMqxfe d9tQc9hB07TOwOW6Lptpl5JGZwYwTSgfES3KjbywngnVpgPF1xHRq99guIGNyBgc WZp3OiYAd8cjhK2Q2VH4DHnFvyvT/TY45m7SmvQsY/49pn62TytlAsEor4KXw1R9 PKpekkwxk57Go93FJYlHmWpj5tc86S9cERvnECGsIycKaxEXNo/nA5wqFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPlMfJn/IJ2XsqU7z/ddzd5PeMNsMB8GA1UdIwQY MBaAFDdAg68P/xdooHxlXx/jhgCcUizPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMt ZTRjYTZiNzNhYzc2LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMtZTRjYTZiNzNhYzc2 LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu1RvSt2A Afm50NLYZSjc+OVlW+OK7E1/SHM9SAXV7/0Zzp9bhBTQYx1itJosXZ0o/iWCWS4f HUw7wNltnkFhdGqIZ1uOZjJfOeuGzRvpnDfObwuIZdytZfLxyLcmQzDaR26YfITw eGPyXplzXbqFZTOUkcL7Tfsn/bQsA/+y5MRZDNJlzD1UJACQiCjqRn38mJ7RWUjB k5eTW6XCQ8HNM+1xqK6ga46zzuvCYwWx/BeDPHa1o2+y9RXVJCVcX1WYIe+EBKBz Ty9bCB2E3mj/RLQ4IC5EHY/srZZEcrMaij5JpmLb/0RR3lfH7ghQmvibZGBi9atE RkiV6kGfYwlKPA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:16 2025 by rpki-client