This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json) Hash identifier: hDPgDCfNNxn2/+z8SlA4/MVPJVlDudoUyxIumkhMQ2w= Subject key identifier: 87:7E:44:D4:7E:43:6B:FD:89:A1:74:6D:F4:1B:21:93:93:FD:CF:8F Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Certificate serial: 019AF12DF0FCA85BBBEBFB9F2A7F44158985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft Manifest number: 05CD Signing time: Sat 06 Dec 2025 01:01:51 +0000 Manifest this update: Sat 06 Dec 2025 01:01:51 +0000 Manifest next update: Sun 07 Dec 2025 01:01:51 +0000 Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: Mq+ywszVqzSjgRGNsIjvhr/dZrtnNDw4rs1uDyBw++g=) 2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f0:fc:a8:5b:bb:eb:fb:9f:2a:7f:44:15:89:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Validity Not Before: Dec 6 01:01:51 2025 GMT Not After : Dec 7 01:01:51 2025 GMT Subject: CN=877e44d47e436bfd89a1746df41b219393fdcf8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:55:80:05:25:0a:7b:92:15:bc:f4:75:0b: dd:91:f4:c7:d9:99:28:3c:8d:3d:f2:f1:80:6f:14: d7:30:e6:c8:48:f7:f3:9f:0f:d0:88:83:77:05:65: 2a:c0:4c:59:5f:bc:db:d0:44:33:01:66:c5:7f:f3: 6c:a9:81:d1:e9:6c:8d:2a:0d:12:11:fd:76:c5:1f: c7:ea:d0:5b:fd:82:67:5b:72:9a:d6:13:fb:60:7e: cb:b1:4f:1f:31:ff:2e:e9:32:8b:6c:77:0f:53:a0: 64:aa:24:d5:c7:99:59:c6:00:cd:7f:ea:67:52:b9: 01:61:44:8c:ca:15:20:d9:87:05:79:c4:6a:30:89: 81:7c:cb:c4:c2:bd:12:2a:ce:bd:fa:f7:5f:37:99: bc:e1:43:b0:2d:fc:df:f1:cd:6f:51:9d:36:b4:77: 8c:06:33:58:95:00:0c:85:37:2a:ac:3f:6c:31:e7: 72:ea:bc:4a:75:0c:18:9a:d3:b1:8f:c9:27:35:a5: 36:25:96:36:5d:1b:3e:b3:75:82:77:cf:19:49:a0: f2:fb:73:e9:9d:5e:eb:16:8f:13:da:b9:ff:72:07: 6f:40:74:29:3b:9d:cf:88:59:83:4b:e0:3e:d0:2b: 64:9c:1c:54:2f:28:39:bb:e8:9a:ca:69:68:c0:08: f9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:7E:44:D4:7E:43:6B:FD:89:A1:74:6D:F4:1B:21:93:93:FD:CF:8F X509v3 Authority Key Identifier: keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:71:ff:9d:a0:be:f4:0d:e0:ef:82:a9:8b:9c:e6:bd:08:ae: 66:33:7f:00:3a:af:c8:b1:7a:50:5f:db:01:fa:4a:1e:dd:4e: f4:d8:4a:93:42:f1:b9:b3:20:e1:51:82:8a:15:18:16:6a:5e: e0:cd:22:20:6f:1b:22:bb:6f:eb:64:f5:03:59:ef:8c:c9:69: 96:f2:2a:c2:80:a2:c6:c5:2b:22:87:b4:d1:f9:5d:14:57:ee: 9d:8e:62:32:e3:17:07:e6:ba:2e:be:77:82:7b:75:e5:56:4d: 1b:80:14:81:2a:38:54:ff:24:78:71:f1:8d:5b:7d:87:06:eb: b4:7e:b0:fe:49:d3:f4:99:69:f3:1a:45:51:7a:58:c9:58:f9: 57:e6:df:a7:8f:5b:8b:9d:e8:21:fc:e4:3e:26:eb:eb:ce:79: 4f:03:3f:93:8d:39:da:13:3a:b7:b8:cc:d0:ad:bb:f3:eb:62: 24:b1:f3:93:6f:7d:d2:4d:74:39:dd:6f:9e:04:c0:dc:42:62: ee:fa:3d:f3:ad:da:f7:12:e9:4c:40:71:b0:8f:d6:1d:45:79: f5:44:f2:f5:a7:c9:f8:ad:f9:c3:0d:e0:c0:3f:55:43:1f:df: 65:54:5a:a9:ad:11:d5:9a:ee:e9:75:c0:cf:d4:59:f4:29:07: fc:8e:85:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfD8qFu76/ufKn9EFYmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGZmOGIxYmQwNzI0YmExMzBmODZiODQ4ZTMzY2FlYThl OWYxMWQwHhcNMjUxMjA2MDEwMTUxWhcNMjUxMjA3MDEwMTUxWjAzMTEwLwYDVQQD Eyg4NzdlNDRkNDdlNDM2YmZkODlhMTc0NmRmNDFiMjE5MzkzZmRjZjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBVVgAUlCnuSFbz0dQvdkfTH2Zko PI098vGAbxTXMObISPfznw/QiIN3BWUqwExZX7zb0EQzAWbFf/NsqYHR6WyNKg0S Ef12xR/H6tBb/YJnW3Ka1hP7YH7LsU8fMf8u6TKLbHcPU6BkqiTVx5lZxgDNf+pn UrkBYUSMyhUg2YcFecRqMImBfMvEwr0SKs69+vdfN5m84UOwLfzf8c1vUZ02tHeM BjNYlQAMhTcqrD9sMedy6rxKdQwYmtOxj8knNaU2JZY2XRs+s3WCd88ZSaDy+3Pp nV7rFo8T2rn/cgdvQHQpO53PiFmDS+A+0CtknBxULyg5u+iaymlowAj58wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFId+RNR+Q2v9iaF0bfQbIZOT/c+PMB8GA1UdIwQY MBaAFPTf+LG9ByS6Ew+GuEjjPK6o6fEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWIt NzRmNmEyZWFlMTc1LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWItNzRmNmEyZWFlMTc1 LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHH/naC+ 9A3g74Kpi5zmvQiuZjN/ADqvyLF6UF/bAfpKHt1O9NhKk0LxubMg4VGCihUYFmpe 4M0iIG8bIrtv62T1A1nvjMlplvIqwoCixsUrIoe00fldFFfunY5iMuMXB+a6Lr53 gnt15VZNG4AUgSo4VP8keHHxjVt9hwbrtH6w/knT9Jlp8xpFUXpYyVj5V+bfp49b i53oIfzkPibr6855TwM/k4052hM6t7jM0K278+tiJLHzk2990k10Od1vngTA3EJi 7vo9863a9xLpTEBxsI/WHUV59UTy9afJ+K35ww3gwD9VQx/fZVRaqa0R1Zru6XXA z9RZ9CkH/I6FxA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client