This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json) Hash identifier: WtRdcq2RdQUmSyEn9cZtjxEHAdQAq2xjnPMhLUm4dzU= Subject key identifier: CE:D3:A7:84:9B:DC:F6:E9:E7:19:D7:3A:65:6B:87:79:01:1D:C3:62 Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Certificate serial: 019AF12CF621AF306A2B1C1102A6E15B8DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft Manifest number: 13FD Signing time: Sat 06 Dec 2025 01:00:46 +0000 Manifest this update: Sat 06 Dec 2025 01:00:46 +0000 Manifest next update: Sun 07 Dec 2025 01:00:46 +0000 Files and hashes: 1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: DOZ+Aoxbxwr+UWbP6XHAQF7dhiLbw9FJujDIBJzZqvA=) 2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:f6:21:af:30:6a:2b:1c:11:02:a6:e1:5b:8d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Validity Not Before: Dec 6 01:00:46 2025 GMT Not After : Dec 7 01:00:46 2025 GMT Subject: CN=ced3a7849bdcf6e9e719d73a656b8779011dc362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:b6:69:3a:63:06:2f:6f:e4:41:34:f1:26: c9:6b:d7:7c:c9:fd:c9:fa:b9:b2:8b:b3:6e:b1:84: 9e:5b:57:39:dc:45:54:2d:df:51:05:b5:39:6a:95: 6a:a3:9b:f4:7f:87:45:3e:1e:2c:5a:36:03:61:c4: dc:bd:5e:39:fd:68:d4:c0:7b:3e:2e:56:24:b4:59: e7:b2:98:98:7f:c9:01:9d:87:71:f0:54:22:9f:a9: 31:69:f8:70:99:de:30:5e:4e:a4:12:08:a8:26:b0: 02:2e:a0:24:cc:86:80:48:55:95:ae:b3:3f:6b:c8: 23:cf:0a:7f:66:b3:1d:2c:01:6d:2f:8d:31:cc:a8: ca:3a:f8:23:4a:fc:7e:2f:48:d3:78:df:4d:24:ef: de:30:4d:59:22:1d:b3:91:bc:fa:f8:dd:99:20:83: 86:41:1a:8c:fb:96:fd:b0:33:f1:cf:d1:01:f8:0f: 50:34:5a:68:31:22:a4:ca:39:be:9a:ce:17:08:f3: 8d:e3:ad:39:04:92:48:96:c4:1f:d7:72:b2:4d:67: 3c:e4:e9:11:08:3f:57:0a:99:fb:f3:af:cf:8f:78: b3:e7:13:ca:58:3b:4f:6a:b8:6a:4c:22:b2:53:c8: 93:2f:21:db:5e:71:42:9d:df:f9:38:ce:d4:3d:33: 06:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D3:A7:84:9B:DC:F6:E9:E7:19:D7:3A:65:6B:87:79:01:1D:C3:62 X509v3 Authority Key Identifier: keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9d:07:c2:3e:0f:69:48:4b:24:d5:b5:23:4f:98:59:ce:c1: cc:9e:26:6c:a1:ec:3b:cc:10:bb:d5:79:26:87:6f:1e:98:1a: 4e:ea:cf:95:8e:23:c4:1b:e6:a9:8a:cc:42:c3:6d:5b:30:a7: 27:a4:bd:d7:10:f1:b7:c9:60:e8:bd:d7:58:70:26:94:e1:ac: db:7c:a9:32:71:a5:2b:61:1e:de:85:1d:a4:7c:b9:02:53:ee: f0:07:7e:b4:d8:f6:51:ca:bc:8b:07:85:ce:7c:bf:7a:1b:0c: c7:48:53:39:50:ff:d1:92:f4:0e:74:df:f2:8f:4c:7b:10:cb: 7b:1f:d8:af:97:f8:be:ff:fe:9f:55:28:54:6d:85:04:f1:0d: e9:e2:2c:a0:9a:ad:64:a8:5d:a4:44:f0:67:71:c8:3f:1e:b5: 32:57:f4:c5:ed:6f:36:17:a7:9e:2e:62:0e:ad:75:48:99:95: 47:16:6b:c5:a5:34:30:99:47:80:1f:40:51:e6:a3:47:c9:49: 64:d1:1d:be:70:08:72:c3:ec:e2:54:d5:2d:b8:83:1e:9b:b7: 89:03:57:1e:ec:98:dc:be:8b:63:03:69:03:54:52:61:8c:6c: 52:bb:d6:27:91:f9:30:b7:cb:26:3d:6e:b8:bd:b1:6a:a4:45: b0:33:ec:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLPYhrzBqKxwRAqbhW43WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTc4NTlkYzM5ZDQ3MzYxNDJjZjFlMjI5YzhhYzRiZTYy M2I5MDMwHhcNMjUxMjA2MDEwMDQ2WhcNMjUxMjA3MDEwMDQ2WjAzMTEwLwYDVQQD EyhjZWQzYTc4NDliZGNmNmU5ZTcxOWQ3M2E2NTZiODc3OTAxMWRjMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhC2aTpjBi9v5EE08SbJa9d8yf3J +rmyi7NusYSeW1c53EVULd9RBbU5apVqo5v0f4dFPh4sWjYDYcTcvV45/WjUwHs+ LlYktFnnspiYf8kBnYdx8FQin6kxafhwmd4wXk6kEgioJrACLqAkzIaASFWVrrM/ a8gjzwp/ZrMdLAFtL40xzKjKOvgjSvx+L0jTeN9NJO/eME1ZIh2zkbz6+N2ZIIOG QRqM+5b9sDPxz9EB+A9QNFpoMSKkyjm+ms4XCPON4605BJJIlsQf13KyTWc85OkR CD9XCpn786/Pj3iz5xPKWDtParhqTCKyU8iTLyHbXnFCnd/5OM7UPTMGmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7Tp4Sb3Pbp5xnXOmVrh3kBHcNiMB8GA1UdIwQY MBaAFJ+nhZ3DnUc2FCzx4inIrEvmI7kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTIt ZThkNmMyZjA3MWRmLzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTItZThkNmMyZjA3MWRm LzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJ0Hwj4P aUhLJNW1I0+YWc7BzJ4mbKHsO8wQu9V5JodvHpgaTurPlY4jxBvmqYrMQsNtWzCn J6S91xDxt8lg6L3XWHAmlOGs23ypMnGlK2Ee3oUdpHy5AlPu8Ad+tNj2Ucq8iweF zny/ehsMx0hTOVD/0ZL0DnTf8o9MexDLex/Yr5f4vv/+n1UoVG2FBPEN6eIsoJqt ZKhdpETwZ3HIPx61Mlf0xe1vNhenni5iDq11SJmVRxZrxaU0MJlHgB9AUeajR8lJ ZNEdvnAIcsPs4lTVLbiDHpu3iQNXHuyY3L6LYwNpA1RSYYxsUrvWJ5H5MLfLJj1u uL2xaqRFsDPsSg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:30 2025 by rpki-client