This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft File: N4ezJLDTL7GjZ4sCxIIobUwmug8.mft (raw, json) Hash identifier: t6UvC8OWW/JMSYcDeULRj84rCGr71U3VKjSYBEOAjCQ= Subject key identifier: 40:C0:28:34:12:D0:90:9F:B1:C3:43:04:84:5C:41:D2:B3:9C:7F:D6 Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Certificate serial: 019B3EA357F63C38D3566933304C422D5454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:00:50 +0000 Manifest this update: Sun 21 Dec 2025 02:00:50 +0000 Manifest next update: Mon 22 Dec 2025 02:00:50 +0000 Files and hashes: 1: N4ezJLDTL7GjZ4sCxIIobUwmug8.crl (hash: cWl7KBhAsIAiKbuF139XhyNWesx90aNmg8f9fvQMHgs=) 2: OpF39dteeAgdG0uMSaeSye2QMl4.roa (hash: 6AawtRpq3DsNtx6xd7OyKZI4o4kWWfOmTgahYICncm4=) 3: iddMiGg8ovKZ_KW8pvcXVd9RE60.roa (hash: tlHNfQDbOnq01Er7SY3BPzZvcVpBmTMeqa5ifXXCQPU=) 4: jPdoFO28ZYmIy0FwhFbaKyywLn4.roa (hash: 2DMBsYGpILPZ83xfOVSe8IYb5O9R3Gf6YlNKmTmqMeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:57:f6:3c:38:d3:56:69:33:30:4c:42:2d:54:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Validity Not Before: Dec 21 02:00:50 2025 GMT Not After : Dec 22 02:00:50 2025 GMT Subject: CN=40c0283412d0909fb1c34304845c41d2b39c7fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ce:19:bb:d0:ea:f5:44:ac:cb:0c:aa:23:0e: fa:b4:6e:61:7f:78:20:4f:8f:bd:97:d0:1c:ec:f6: 97:ee:b1:be:4e:b0:2e:92:62:b5:a3:2c:ad:b7:91: 94:fb:8d:b8:5c:58:97:70:92:d5:e2:ca:e0:1f:ed: 5e:c8:4a:d1:ba:70:55:33:49:16:9d:2b:9f:f9:c8: 43:4d:42:54:56:04:3a:ff:8a:72:ec:47:6b:9b:0f: ac:83:8d:91:34:de:bc:4c:e1:b1:20:10:bc:1f:92: 23:de:f1:42:3b:dc:31:ff:51:4e:a3:77:ae:22:44: 5a:f2:de:67:93:d7:e0:3e:77:76:25:74:d7:a4:c1: 9c:e1:48:01:f5:55:48:d7:0c:f5:fa:68:39:c7:f8: 72:cc:81:83:99:f5:bc:06:81:33:39:fb:55:9e:d6: 6f:b0:f7:15:c2:77:d7:a2:e0:e6:dc:73:43:28:54: 91:e4:be:4f:8c:31:8f:84:93:19:b9:0a:23:65:6c: 42:1d:aa:d5:4a:90:d6:08:8c:52:c9:b0:77:dc:d7: 29:19:55:6c:f6:17:82:89:a5:56:e0:4a:0b:2f:99: ec:b8:9f:76:5c:d2:04:e9:f8:ad:90:9d:7e:99:85: 4b:7b:27:5f:e9:69:e4:6a:b0:99:67:d7:df:03:da: 23:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C0:28:34:12:D0:90:9F:B1:C3:43:04:84:5C:41:D2:B3:9C:7F:D6 X509v3 Authority Key Identifier: keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f1:25:0e:2e:5e:b1:7e:2a:0d:5f:ac:b9:74:1e:2b:57:ce: 31:b4:a9:8f:8e:3f:63:1d:79:ae:d8:c9:7e:b3:69:df:ea:13: 52:63:97:ad:9a:95:f4:59:1b:1f:b4:93:87:9b:dc:3e:67:61: 67:fb:c3:53:7d:03:15:69:e7:97:dc:62:69:d2:34:1a:c1:ff: b3:2a:bf:a2:65:49:08:e6:26:21:27:89:d0:6b:b2:9a:c6:22: 88:d4:d0:20:9b:ab:c6:57:4a:d2:ec:a0:fa:99:16:4c:88:18: 67:af:b4:af:3d:0c:45:ef:d9:43:9f:d1:af:54:20:42:53:45: 28:16:01:0f:d6:e6:12:96:f6:c4:fb:c2:69:c3:fd:bf:66:f6: 47:9f:05:ea:ef:56:08:22:e3:71:8f:7e:2c:69:35:4b:9b:ca: 14:cd:43:11:8a:c5:03:83:9c:78:4a:41:1b:2d:b6:59:26:70: 86:fa:ec:e4:fe:88:21:6d:e5:28:f2:e8:5c:fe:1b:85:5d:6c: 9e:86:45:1c:1e:d9:2a:bc:f9:6e:6c:55:26:b8:2e:57:c4:40: bf:8e:ba:d6:c1:6d:42:66:97:fe:02:a3:e7:55:50:5b:20:ec: a2:65:33:4f:6c:36:6d:df:e0:c8:6b:e7:37:55:92:f6:2b:e0: 21:0b:47:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1f2PDjTVmkzMExCLVRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy NmJhMGYwHhcNMjUxMjIxMDIwMDUwWhcNMjUxMjIyMDIwMDUwWjAzMTEwLwYDVQQD Eyg0MGMwMjgzNDEyZDA5MDlmYjFjMzQzMDQ4NDVjNDFkMmIzOWM3ZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4s4Zu9Dq9USsywyqIw76tG5hf3gg T4+9l9Ac7PaX7rG+TrAukmK1oyytt5GU+424XFiXcJLV4srgH+1eyErRunBVM0kW nSuf+chDTUJUVgQ6/4py7Edrmw+sg42RNN68TOGxIBC8H5Ij3vFCO9wx/1FOo3eu IkRa8t5nk9fgPnd2JXTXpMGc4UgB9VVI1wz1+mg5x/hyzIGDmfW8BoEzOftVntZv sPcVwnfXouDm3HNDKFSR5L5PjDGPhJMZuQojZWxCHarVSpDWCIxSybB33NcpGVVs 9heCiaVW4EoLL5nsuJ92XNIE6fitkJ1+mYVLeydf6WnkarCZZ9ffA9ojMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDAKDQS0JCfscNDBIRcQdKznH/WMB8GA1UdIwQY MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut YzQ3MTE0ODIzODBlLzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPElDi5e sX4qDV+suXQeK1fOMbSpj44/Yx15rtjJfrNp3+oTUmOXrZqV9FkbH7STh5vcPmdh Z/vDU30DFWnnl9xiadI0GsH/syq/omVJCOYmISeJ0GuymsYiiNTQIJurxldK0uyg +pkWTIgYZ6+0rz0MRe/ZQ5/Rr1QgQlNFKBYBD9bmEpb2xPvCacP9v2b2R58F6u9W CCLjcY9+LGk1S5vKFM1DEYrFA4OceEpBGy22WSZwhvrs5P6IIW3lKPLoXP4bhV1s noZFHB7ZKrz5bmxVJrguV8RAv4661sFtQmaX/gKj51VQWyDsomUzT2w2bd/gyGvn N1WS9ivgIQtH5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 07:41:29 2025 by rpki-client