This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json) Hash identifier: n+TK2vQ28edfaUQBTUVjXJAV0/4kOC+ZGGvNj6tzEiI= Subject key identifier: 3E:CA:F0:E6:B9:53:4C:F9:5A:86:CE:78:C5:AB:49:15:0D:E1:80:C1 Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Certificate serial: 019B409216C4447269CA27D99D2297DDD470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 11:01:14 +0000 Manifest this update: Sun 21 Dec 2025 11:01:14 +0000 Manifest next update: Mon 22 Dec 2025 11:01:14 +0000 Files and hashes: 1: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: b69wUyTflg1iLSF8Rqgpp0KCns7/MNRqu7JqoXwrkMQ=) 2: erhlDHo6u2N8SbRRVUL49trJG0Q.roa (hash: 3V4uI/Y1go20Ur/8ybcFLPuVLcruMM7J3PxGXh059Vg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:92:16:c4:44:72:69:ca:27:d9:9d:22:97:dd:d4:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730 Validity Not Before: Dec 21 11:01:14 2025 GMT Not After : Dec 22 11:01:14 2025 GMT Subject: CN=3ecaf0e6b9534cf95a86ce78c5ab49150de180c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0a:c1:bf:05:86:9d:b6:4c:0f:fb:73:2d:96: 4c:3e:8c:77:e1:e5:84:ff:83:fb:f6:23:6b:2f:21: fb:45:76:08:5c:c9:02:a0:ed:d3:4f:e4:db:a4:7f: b0:d2:2b:09:f0:6e:2f:64:b5:57:e1:f7:34:c4:a1: 33:84:f8:91:03:02:60:56:39:7e:1f:ea:13:e1:38: 2c:a6:74:7e:da:cc:fb:cc:29:e3:fc:3f:b8:29:4d: e5:81:4e:7b:fd:df:d6:d6:45:53:68:fa:12:54:b9: 78:53:8b:e9:bb:5d:50:3b:10:26:92:4c:cb:7b:f7: 80:b2:42:b6:1d:b7:80:5f:df:b8:2e:7e:47:1e:f3: b2:8f:03:0d:e0:dd:5e:57:d6:a7:c1:4c:f9:90:bd: c8:74:8b:ed:9e:5e:f2:ca:f8:6c:72:6a:2a:c1:3e: b5:73:0e:5c:d2:09:81:d0:24:8d:be:82:b4:4e:8e: 9b:d9:70:53:9e:ed:a7:39:a1:c7:3a:69:cd:7f:3a: 38:0a:de:ac:22:65:80:47:6f:5a:b6:65:05:ed:84: cd:90:64:71:b3:ff:b2:81:81:19:ef:90:c2:5a:b9: 8a:01:9a:3f:fd:e0:ad:67:62:9a:13:c7:71:8c:e3: a7:8a:9a:a2:8f:24:8f:3e:41:ce:b3:19:f8:11:da: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CA:F0:E6:B9:53:4C:F9:5A:86:CE:78:C5:AB:49:15:0D:E1:80:C1 X509v3 Authority Key Identifier: keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:1a:c9:de:00:2f:ee:a4:60:1b:09:84:60:96:76:a7:52:c5: a5:23:cc:66:19:1c:25:d7:94:e6:b2:dc:94:9d:4c:58:cf:4a: 75:01:e3:af:52:78:a0:75:c0:8a:28:c2:74:2a:38:af:6f:d9: 3a:89:98:4b:ae:ac:c9:2b:28:41:2c:7d:14:b2:29:60:a1:8c: 9d:3c:3a:1c:e0:d7:e5:b5:1e:40:e0:3c:c4:5c:e6:62:8d:1c: a3:ac:75:f0:1e:04:fe:ae:24:08:48:a5:23:5e:68:cb:ca:73: 46:a8:05:b3:d6:c8:22:a8:38:a2:2c:08:d1:2b:d7:18:97:9c: f0:e7:e4:8a:1a:3a:ad:09:f6:33:b0:00:f0:19:9a:68:01:5d: 94:6f:b1:8e:a5:41:18:eb:f6:c7:50:20:e5:55:08:61:80:54: d3:30:b6:27:a1:f5:49:03:6a:39:54:e6:6c:49:77:e8:00:1b: 68:90:e3:8e:8c:aa:7c:32:55:7c:d6:8b:0b:a9:ef:27:7d:2c: 88:68:20:be:45:07:f7:b1:ac:f8:46:d6:de:74:f2:98:5e:71: 40:cf:bb:e8:b2:c4:44:22:08:54:ad:21:66:4b:e8:6a:c8:f2: f0:f7:c8:d3:3a:26:03:6f:69:9b:91:35:1e:31:39:0a:07:82: 21:18:ea:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAkhbERHJpyifZnSKX3dRwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTUyZTljOTY0ZGU2ZmY1NGUwOTljNzExNTVjMWExZGVj OGE3MzAwHhcNMjUxMjIxMTEwMTE0WhcNMjUxMjIyMTEwMTE0WjAzMTEwLwYDVQQD EygzZWNhZjBlNmI5NTM0Y2Y5NWE4NmNlNzhjNWFiNDkxNTBkZTE4MGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgrBvwWGnbZMD/tzLZZMPox34eWE /4P79iNrLyH7RXYIXMkCoO3TT+TbpH+w0isJ8G4vZLVX4fc0xKEzhPiRAwJgVjl+ H+oT4TgspnR+2sz7zCnj/D+4KU3lgU57/d/W1kVTaPoSVLl4U4vpu11QOxAmkkzL e/eAskK2HbeAX9+4Ln5HHvOyjwMN4N1eV9anwUz5kL3IdIvtnl7yyvhscmoqwT61 cw5c0gmB0CSNvoK0To6b2XBTnu2nOaHHOmnNfzo4Ct6sImWAR29atmUF7YTNkGRx s/+ygYEZ75DCWrmKAZo//eCtZ2KaE8dxjOOnipqijySPPkHOsxn4Edp1rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD7K8Oa5U0z5WobOeMWrSRUN4YDBMB8GA1UdIwQY MBaAFDdVLpyWTeb/VOCZxxFVwaHeyKcwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDIt ZWUyOGE2NWM4YTIyLzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kYzQzZmItNDY1Ni00YWY5LWFhZDItZWUyOGE2NWM4YTIy LzEvTjFVdW5KWk41djlVNEpuSEVWWEJvZDdJcHpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhrJ3gAv 7qRgGwmEYJZ2p1LFpSPMZhkcJdeU5rLclJ1MWM9KdQHjr1J4oHXAiijCdCo4r2/Z OomYS66sySsoQSx9FLIpYKGMnTw6HODX5bUeQOA8xFzmYo0co6x18B4E/q4kCEil I15oy8pzRqgFs9bIIqg4oiwI0SvXGJec8Ofkiho6rQn2M7AA8BmaaAFdlG+xjqVB GOv2x1Ag5VUIYYBU0zC2J6H1SQNqOVTmbEl36AAbaJDjjoyqfDJVfNaLC6nvJ30s iGggvkUH97Gs+EbW3nTymF5xQM+76LLERCIIVK0hZkvoasjy8PfI0zomA29pm5E1 HjE5CgeCIRjqpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:54:59 2025 by rpki-client