This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json) Hash identifier: TdF4aQSR+EagNcREci4hxv+zTbkBDLjA6t5/E1cY7Bs= Subject key identifier: 7D:1C:6E:9E:DB:F3:56:4C:83:D9:60:5C:A9:01:04:9F:08:09:24:7A Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Certificate serial: 019AF12D2957E0E23DD54884DA1DB8809A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft Manifest number: 09E2 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: nehf4V51zGh94WAzkCD0S7iJCiZNh7LZ8BQnDRWRx90=) 2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:29:57:e0:e2:3d:d5:48:84:da:1d:b8:80:9a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=7d1c6e9edbf3564c83d9605ca901049f0809247a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:45:d9:5f:cc:db:41:e2:7c:9e:3c:53:c6:78: da:40:24:90:05:3f:fb:3e:b2:17:9e:28:4e:a8:4e: eb:eb:0a:08:93:36:6e:c5:b9:74:51:a0:b6:de:fb: 5d:51:f4:88:b8:5d:24:2f:e2:96:65:5f:55:99:8f: 9e:4b:de:f8:ec:94:22:c3:0f:fe:e5:1b:0c:18:c2: d0:26:0b:20:0d:62:f3:91:79:b1:ad:1f:11:e6:a4: c5:6b:de:e3:ad:aa:5f:2d:b5:f7:2d:3d:3f:58:22: cd:fc:fa:ce:07:dd:c3:2d:25:25:73:5d:08:4d:27: e5:32:fa:ab:98:04:25:bb:94:d9:5e:4c:c2:8a:d4: 84:fa:52:32:12:f7:74:42:1c:5b:c6:a8:87:b6:88: 03:51:fc:78:48:b1:d2:be:6e:0a:41:ed:84:c1:5a: 28:12:62:da:3d:8f:ea:c9:d0:23:49:e4:e1:5a:e6: 6a:8a:9c:01:69:1f:20:7b:3f:79:04:8e:8b:5b:e3: ad:84:02:5f:12:30:5b:5b:bd:e8:0e:d0:87:04:e3: 85:37:1f:f3:79:74:7b:c2:b3:07:1e:5b:7a:97:3e: 0d:f5:f6:5d:01:15:3e:0f:42:3f:fc:59:ab:e7:c3: 2e:28:35:cf:5b:f8:d2:35:11:e3:2f:68:12:1e:a9: 0f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:6E:9E:DB:F3:56:4C:83:D9:60:5C:A9:01:04:9F:08:09:24:7A X509v3 Authority Key Identifier: keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:8d:bf:a3:56:18:90:c4:2b:10:79:44:a0:6f:bd:7f:a9:8a: 8f:19:5b:7e:74:ba:76:c4:b9:ac:40:86:3e:07:fd:e8:68:88: cd:8b:27:f1:dc:dd:fe:7d:e0:8d:81:38:70:cc:f1:59:6f:81: 5e:00:5d:19:0a:1c:23:8c:a1:90:40:e3:51:69:05:2b:a7:ad: a4:34:8f:8c:0f:43:9d:e9:df:c0:be:74:87:62:a7:b1:ad:5f: ef:a0:c4:d7:92:be:74:b8:12:59:6c:ea:cc:63:5f:96:15:fe: 10:d3:28:22:63:50:9d:d1:1f:63:7d:62:85:92:cb:7f:4d:6d: 72:1d:7a:6e:a0:e1:d1:81:fd:3f:64:90:1c:a1:6c:ce:9f:4d: 98:15:7e:84:3a:50:ea:ff:7b:d7:68:1d:18:9d:2d:50:e3:1e: cf:49:0d:e2:5b:56:70:80:6b:ed:83:5c:cf:65:e8:db:2b:da: a6:bd:63:c1:fb:f7:96:7a:0c:e0:25:95:68:bc:12:d3:49:bb: 2f:22:a0:25:5a:5c:ad:35:52:46:52:ca:e2:2c:30:b3:bc:45: 5f:78:16:1b:e2:21:75:e2:0c:1f:dd:42:c7:6b:40:6e:6f:09: 9b:c2:1c:a8:65:82:e9:ce:bf:81:0d:a8:bf:d3:ce:47:1f:6b: dc:d9:74:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSlX4OI91UiE2h24gJoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz ZmE0YTIwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD Eyg3ZDFjNmU5ZWRiZjM1NjRjODNkOTYwNWNhOTAxMDQ5ZjA4MDkyNDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEXZX8zbQeJ8njxTxnjaQCSQBT/7 PrIXnihOqE7r6woIkzZuxbl0UaC23vtdUfSIuF0kL+KWZV9VmY+eS9747JQiww/+ 5RsMGMLQJgsgDWLzkXmxrR8R5qTFa97jrapfLbX3LT0/WCLN/PrOB93DLSUlc10I TSflMvqrmAQlu5TZXkzCitSE+lIyEvd0QhxbxqiHtogDUfx4SLHSvm4KQe2EwVoo EmLaPY/qydAjSeThWuZqipwBaR8gez95BI6LW+OthAJfEjBbW73oDtCHBOOFNx/z eXR7wrMHHlt6lz4N9fZdARU+D0I//Fmr58MuKDXPW/jSNRHjL2gSHqkPOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0cbp7b81ZMg9lgXKkBBJ8ICSR6MB8GA1UdIwQY MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2 LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuY2/o1YY kMQrEHlEoG+9f6mKjxlbfnS6dsS5rECGPgf96GiIzYsn8dzd/n3gjYE4cMzxWW+B XgBdGQocI4yhkEDjUWkFK6etpDSPjA9DnenfwL50h2Knsa1f76DE15K+dLgSWWzq zGNflhX+ENMoImNQndEfY31ihZLLf01tch16bqDh0YH9P2SQHKFszp9NmBV+hDpQ 6v9712gdGJ0tUOMez0kN4ltWcIBr7YNcz2Xo2yvapr1jwfv3lnoM4CWVaLwS00m7 LyKgJVpcrTVSRlLK4iwws7xFX3gWG+IhdeIMH91Cx2tAbm8Jm8IcqGWC6c6/gQ2o v9PORx9r3Nl04g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:41:06 2025 by rpki-client