This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json) Hash identifier: I7S+flNQqIP5Y1AEsrG+ZYzjRvkWMefkdDtDZBcgUdA= Subject key identifier: 4A:F5:52:3A:8D:BA:D4:2F:E2:C9:6F:A6:CD:D1:CF:ED:2B:01:6A:14 Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00 Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700 Certificate serial: 019B3344A6781E1F9D76BCC996DD6E0C3913 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft Manifest number: 10F8 Signing time: Thu 18 Dec 2025 21:01:35 +0000 Manifest this update: Thu 18 Dec 2025 21:01:35 +0000 Manifest next update: Fri 19 Dec 2025 21:01:35 +0000 Files and hashes: 1: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: 7fUUty2TkCH2qMeQTa5aXrYUE9aouM7wS8zqeL1DPEY=) 2: Vldb1Pv9SKH1pSEjNm1gf_bg3_M.roa (hash: Ox3xcaNfkxGbMXT71Q5JDbePmqXmxZEbJ+Iew6AAo/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:a6:78:1e:1f:9d:76:bc:c9:96:dd:6e:0c:39:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700 Validity Not Before: Dec 18 21:01:35 2025 GMT Not After : Dec 19 21:01:35 2025 GMT Subject: CN=4af5523a8dbad42fe2c96fa6cdd1cfed2b016a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:62:eb:b0:a6:12:eb:32:8e:a5:c0:3f:25: 16:18:54:e5:94:63:b7:2c:0e:d0:10:d2:c5:5b:ff: a3:34:d8:ac:47:6b:3f:9e:de:bf:57:ef:4a:b8:1d: 69:f0:83:0f:29:62:be:43:8e:b4:9c:a3:0d:8a:b2: 38:96:c0:32:6d:85:1f:c4:55:d8:6a:6e:d1:49:ba: 9e:9f:ec:40:88:2d:5d:0d:dc:68:ec:fd:cd:f5:fd: c9:14:95:3d:28:14:7c:db:5c:c6:e3:28:2f:52:b8: 06:5e:b1:f8:87:9b:5a:f8:26:1a:b9:71:35:1d:22: 73:a6:69:1c:4b:a1:02:a1:26:17:37:6b:fa:01:7e: c9:27:40:67:c1:4a:70:1b:2f:ed:44:25:05:3e:5c: f3:1c:f0:d7:fa:f1:d1:f3:04:14:da:05:2e:4c:0c: 9e:17:58:68:8e:17:d0:52:50:05:bf:db:23:70:12: 5f:82:10:b5:8b:f2:98:c9:62:6a:0c:19:3f:e5:02: 91:c9:00:77:95:26:d5:7b:09:64:17:c3:0d:c8:94: dc:32:a7:1d:52:42:69:fc:33:5c:06:9c:fc:33:86: 97:3f:a2:df:f3:22:83:85:6a:81:bb:61:c7:14:44: 9d:8d:38:bd:57:2e:e7:b1:08:66:13:e5:21:22:1e: c6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:F5:52:3A:8D:BA:D4:2F:E2:C9:6F:A6:CD:D1:CF:ED:2B:01:6A:14 X509v3 Authority Key Identifier: keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:49:bd:52:6e:37:08:21:22:8d:8f:41:9f:58:6b:52:e4:e7: c4:00:04:1a:3e:c9:f3:d3:1c:fb:da:c2:54:62:0a:1c:0f:f0: ac:0e:ae:b3:63:72:3f:42:65:11:03:1f:65:36:3f:98:e6:6a: 08:11:6f:63:ce:02:a7:a7:69:ab:f0:13:f7:84:39:7b:74:97: f0:ab:10:1c:e9:80:b0:e4:88:76:72:2b:5e:63:27:c1:19:f7: 07:20:bc:4e:02:0e:b1:3e:9b:2e:2f:31:d0:8d:f2:e0:e7:e8: 1d:3e:e0:f7:bd:41:4b:6a:ce:51:56:fc:37:a2:04:4a:b5:d2: a9:7a:17:17:eb:94:99:6b:ad:71:69:37:df:9e:81:0c:4b:5f: 08:cd:b8:07:7e:67:68:6e:a1:49:60:e3:14:65:8a:b3:9e:84: b3:9e:d2:b4:9c:ee:05:94:df:27:0e:e2:b9:dd:0d:8b:b4:8e: a9:b2:33:d0:fd:3b:08:73:b3:10:9e:ad:0f:40:75:b4:57:d1: 0c:60:44:a6:19:e8:2a:ad:bb:a4:16:c5:da:f3:ee:83:a8:b2: bd:41:72:ba:6c:c7:dc:8f:a9:0f:eb:ff:a7:f5:01:5d:86:a4: 9d:69:04:1d:d8:0f:df:89:a7:13:06:97:55:9e:17:e1:95:28: c0:c1:1e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRKZ4Hh+ddrzJlt1uDDkTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YjgyMjEwOTk0ODZhM2IxMzNlMDEzOWUzNGI5MzQyNjRj ZGQ3MDAwHhcNMjUxMjE4MjEwMTM1WhcNMjUxMjE5MjEwMTM1WjAzMTEwLwYDVQQD Eyg0YWY1NTIzYThkYmFkNDJmZTJjOTZmYTZjZGQxY2ZlZDJiMDE2YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtddi67CmEusyjqXAPyUWGFTllGO3 LA7QENLFW/+jNNisR2s/nt6/V+9KuB1p8IMPKWK+Q460nKMNirI4lsAybYUfxFXY am7RSbqen+xAiC1dDdxo7P3N9f3JFJU9KBR821zG4ygvUrgGXrH4h5ta+CYauXE1 HSJzpmkcS6ECoSYXN2v6AX7JJ0BnwUpwGy/tRCUFPlzzHPDX+vHR8wQU2gUuTAye F1hojhfQUlAFv9sjcBJfghC1i/KYyWJqDBk/5QKRyQB3lSbVewlkF8MNyJTcMqcd UkJp/DNcBpz8M4aXP6Lf8yKDhWqBu2HHFESdjTi9Vy7nsQhmE+UhIh7G6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEr1UjqNutQv4slvps3Rz+0rAWoUMB8GA1UdIwQY MBaAFDe4IhCZSGo7Ez4BOeNLk0JkzdcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDkt Njg2ZjgzNmNiY2FkLzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDktNjg2ZjgzNmNiY2Fk LzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0m9Um43 CCEijY9Bn1hrUuTnxAAEGj7J89Mc+9rCVGIKHA/wrA6us2NyP0JlEQMfZTY/mOZq CBFvY84Cp6dpq/AT94Q5e3SX8KsQHOmAsOSIdnIrXmMnwRn3ByC8TgIOsT6bLi8x 0I3y4OfoHT7g971BS2rOUVb8N6IESrXSqXoXF+uUmWutcWk3356BDEtfCM24B35n aG6hSWDjFGWKs56Es57StJzuBZTfJw7iud0Ni7SOqbIz0P07CHOzEJ6tD0B1tFfR DGBEphnoKq27pBbF2vPug6iyvUFyumzH3I+pD+v/p/UBXYaknWkEHdgP34mnEwaX VZ4X4ZUowMEe3w== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:52 2025 by rpki-client