This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json) Hash identifier: cp64WzNgk58yhI359pgIiqsLNY7B65XCzxOgoQYr2bk= Subject key identifier: 16:17:9A:87:1C:AF:8C:2F:02:5C:D6:FF:D9:5D:81:87:B8:5B:2A:17 Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Certificate serial: 019B428046BF37C194CAA0D736C7540A701F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 20:01:01 +0000 Manifest this update: Sun 21 Dec 2025 20:01:01 +0000 Manifest next update: Mon 22 Dec 2025 20:01:01 +0000 Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: S5cK4yml8D7C+Vy569qrZ5AyaGPADhwiECw7zslkwQQ=) 2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:46:bf:37:c1:94:ca:a0:d7:36:c7:54:0a:70:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Validity Not Before: Dec 21 20:01:01 2025 GMT Not After : Dec 22 20:01:01 2025 GMT Subject: CN=16179a871caf8c2f025cd6ffd95d8187b85b2a17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:68:8c:23:8f:1f:99:62:37:6d:b8:49:70: a6:bb:62:2b:60:50:21:c1:59:3c:6a:f5:84:fe:83: c4:6e:e7:f6:b8:53:0a:17:1a:a5:6f:78:3f:cc:42: 4c:9d:98:e8:54:21:64:e0:0e:5f:25:80:0c:be:44: 3f:16:cd:eb:80:c1:55:2b:fd:ed:c1:2c:53:57:3e: a7:9f:7d:01:bf:86:1c:89:77:1d:2e:d5:5b:11:d6: 67:54:45:25:59:94:34:d3:69:a5:0f:f0:8e:ec:f6: 5f:af:ee:d7:d3:35:e5:68:bb:95:de:81:f7:f6:b6: 9d:eb:88:44:dc:ab:7b:04:e9:19:ac:d2:7d:1d:c7: 6e:de:87:c4:2c:84:6f:a5:95:0a:a9:5a:fa:1b:5f: 39:58:d7:a4:46:b7:cc:4b:e7:02:97:ce:23:36:47: e0:e3:2a:b5:1a:65:34:4b:97:66:74:ee:1b:9b:08: e0:b3:9e:73:0c:f8:55:84:01:81:88:7e:96:22:f2: 7d:d3:42:09:d5:85:44:a6:7a:02:10:7e:58:ed:c7: e6:d0:dc:41:1f:0c:57:ab:51:fb:6d:2c:c9:92:e8: c6:bd:c5:af:83:65:06:f2:9e:6b:20:c7:e9:75:f5: bf:a4:ce:37:1d:a4:f8:eb:7c:09:7f:e9:45:e6:87: 1f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:17:9A:87:1C:AF:8C:2F:02:5C:D6:FF:D9:5D:81:87:B8:5B:2A:17 X509v3 Authority Key Identifier: keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a3:64:21:c9:b8:93:9e:8a:92:9d:35:65:a0:8c:49:ee:85: 27:cd:e3:ed:ed:ff:3e:4a:0d:99:83:c8:c7:40:21:0b:7b:d9: 5b:56:6a:93:ff:81:b9:26:c1:d9:ac:ed:53:55:90:0a:12:7b: eb:81:4c:32:65:e0:39:65:b2:f1:48:9c:0b:e9:c6:2d:57:f9: 81:4d:ce:e0:cf:30:d3:97:7e:c8:ad:bc:f1:f0:72:ff:22:04: 31:1c:45:6b:f0:91:f7:46:de:a5:2e:64:3f:06:e7:0b:df:4a: 72:bd:1a:85:71:81:33:75:45:a6:72:c1:41:28:34:d6:f7:02: e8:fb:db:7e:06:e6:70:70:6e:92:ca:12:75:02:aa:f8:33:86: e8:13:b8:f8:8f:32:de:0a:74:fe:04:f2:88:ba:4b:b5:51:54: 79:c8:9a:38:72:3a:aa:6a:4e:2f:72:b4:69:39:6a:0d:87:91: f5:59:f0:31:3f:a4:6a:bd:f1:63:a7:97:f6:7c:da:9d:37:58: 1e:95:47:35:6d:80:5d:cc:d6:da:94:a4:3f:24:c8:db:74:72: 0e:3c:d7:72:38:59:4b:4c:94:5a:c9:e5:0b:b0:d9:6a:05:b1: 9d:3d:0e:9e:98:86:5d:bf:65:23:3f:0e:26:44:c1:df:93:b6: 62:a8:fa:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgEa/N8GUyqDXNsdUCnAfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj OGE3MzAwHhcNMjUxMjIxMjAwMTAxWhcNMjUxMjIyMjAwMTAxWjAzMTEwLwYDVQQD EygxNjE3OWE4NzFjYWY4YzJmMDI1Y2Q2ZmZkOTVkODE4N2I4NWIyYTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+9ojCOPH5liN224SXCmu2IrYFAh wVk8avWE/oPEbuf2uFMKFxqlb3g/zEJMnZjoVCFk4A5fJYAMvkQ/Fs3rgMFVK/3t wSxTVz6nn30Bv4YciXcdLtVbEdZnVEUlWZQ002mlD/CO7PZfr+7X0zXlaLuV3oH3 9rad64hE3Kt7BOkZrNJ9Hcdu3ofELIRvpZUKqVr6G185WNekRrfMS+cCl84jNkfg 4yq1GmU0S5dmdO4bmwjgs55zDPhVhAGBiH6WIvJ900IJ1YVEpnoCEH5Y7cfm0NxB HwxXq1H7bSzJkujGvcWvg2UG8p5rIMfpdfW/pM43HaT463wJf+lF5ocfcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBYXmoccr4wvAlzW/9ldgYe4WyoXMB8GA1UdIwQY MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt ZWUyOGE2NWM4YTIyLzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKNkIcm4 k56Kkp01ZaCMSe6FJ83j7e3/PkoNmYPIx0AhC3vZW1Zqk/+BuSbB2aztU1WQChJ7 64FMMmXgOWWy8UicC+nGLVf5gU3O4M8w05d+yK288fBy/yIEMRxFa/CR90bepS5k PwbnC99Kcr0ahXGBM3VFpnLBQSg01vcC6PvbfgbmcHBuksoSdQKq+DOG6BO4+I8y 3gp0/gTyiLpLtVFUeciaOHI6qmpOL3K0aTlqDYeR9VnwMT+kar3xY6eX9nzanTdY HpVHNW2AXczW2pSkPyTI23RyDjzXcjhZS0yUWsnlC7DZagWxnT0OnpiGXb9lIz8O JkTB35O2Yqj6sg== -----END CERTIFICATE-----Generated at Sun Dec 21 23:31:59 2025 by rpki-client