This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json) Hash identifier: JOA7J63eNjTVkzAsFLozOrc8ewCJBSrfHQHMxz7eomk= Subject key identifier: 08:BC:04:BA:73:A8:B2:6A:4D:E4:40:24:71:3A:7F:0A:7E:5D:B7:3C Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b Certificate serial: 019AF20967F16B1BA40F319F96A39375BF11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft Manifest number: 100E Signing time: Sat 06 Dec 2025 05:01:33 +0000 Manifest this update: Sat 06 Dec 2025 05:01:33 +0000 Manifest next update: Sun 07 Dec 2025 05:01:33 +0000 Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=) 2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: SUHfhE4dSaN78JzA/Qj3R5tAQs55VRgp3FqUmEGNfe8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:67:f1:6b:1b:a4:0f:31:9f:96:a3:93:75:bf:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b Validity Not Before: Dec 6 05:01:33 2025 GMT Not After : Dec 7 05:01:33 2025 GMT Subject: CN=08bc04ba73a8b26a4de44024713a7f0a7e5db73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:55:b5:e5:02:9d:32:18:f4:d5:aa:7b:30: ba:91:d3:a1:57:67:aa:68:85:13:0e:1b:1d:34:6c: 12:d9:24:d5:f0:0d:2f:b3:4c:1d:e8:02:96:eb:db: 53:40:66:09:b0:0a:bf:23:1a:e8:1f:34:cd:7a:15: c2:0b:b2:8a:d6:b2:f3:f8:cb:71:e9:20:1b:6c:b1: 18:50:d5:8e:60:79:ca:2d:70:ef:42:95:ef:07:3c: cf:5d:a3:18:3d:ba:a2:d6:d3:e1:df:ab:ee:09:57: fc:73:22:37:56:dc:6f:b0:d1:d2:54:ab:45:44:e6: 15:77:37:4c:2c:e8:b2:be:2a:a0:da:04:d9:54:d7: fd:63:5c:70:ef:2d:04:91:0d:da:f7:e6:d6:8b:2b: 57:81:84:29:d0:f5:d1:8b:db:1c:53:ff:79:28:8b: 2e:21:8f:b8:19:09:c6:24:78:65:6a:c7:a5:af:42: 06:e4:c5:2e:23:55:19:83:39:8b:35:8a:70:99:ba: f6:96:84:50:6d:79:60:b1:cb:59:9d:6d:41:3d:fc: ac:d8:07:58:8e:bb:b5:5d:0c:4a:b9:90:3b:26:8b: 4b:aa:af:6c:fb:37:30:2b:0d:30:11:08:5e:77:2d: 0e:2d:51:21:9d:d3:d7:cc:39:fb:5c:af:3e:b5:12: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BC:04:BA:73:A8:B2:6A:4D:E4:40:24:71:3A:7F:0A:7E:5D:B7:3C X509v3 Authority Key Identifier: keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b6:b6:d9:bf:87:3b:b1:db:a3:07:59:81:89:b2:62:57:83: 71:d3:42:92:fa:9a:ef:bf:9a:14:bb:34:71:f4:be:bc:57:e4: 63:c7:26:f5:34:12:98:1f:9e:9c:3f:dc:13:b2:b5:7c:18:75: c5:9a:cb:5a:80:f2:b6:fa:70:5d:4b:ac:0d:cd:12:a2:44:0b: e5:da:68:f4:29:ad:6a:fb:c5:d1:40:01:d0:f5:0f:88:73:53: 32:9c:6f:57:f6:d2:7b:58:5e:67:c5:b8:40:bf:b5:a1:03:73: 05:92:6f:cd:9b:cd:e0:07:61:8c:0b:50:05:68:b0:af:ba:69: df:f4:1e:6b:58:a1:74:ba:7a:92:e6:af:ce:04:85:dc:6d:6a: a0:3f:c7:34:72:99:cb:07:e1:ca:e4:e1:31:17:64:f8:5c:67: b3:d6:1a:ff:e7:58:37:da:f7:b0:11:aa:3d:7f:72:1d:b1:fb: 79:d2:df:18:a5:b5:0f:f5:06:85:e1:d7:a9:5c:50:cd:8e:d5: 16:26:d6:7e:7f:96:c7:a2:4a:a6:ac:f7:61:95:cb:ce:c3:ce: 9c:94:63:5e:2d:1d:a5:b2:54:3c:12:2f:f8:83:f5:0b:3c:fb: 02:92:ec:02:0a:a2:aa:49:32:e0:1d:1a:cf:1b:f6:5e:5a:a4: bc:ca:91:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCWfxaxukDzGflqOTdb8RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOGU3N2U3MzgzMTNlNjU3MDY4NGRkMTUyYzJlMjg0MzMy YjJjNWIwHhcNMjUxMjA2MDUwMTMzWhcNMjUxMjA3MDUwMTMzWjAzMTEwLwYDVQQD EygwOGJjMDRiYTczYThiMjZhNGRlNDQwMjQ3MTNhN2YwYTdlNWRiNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIJVteUCnTIY9NWqezC6kdOhV2eq aIUTDhsdNGwS2STV8A0vs0wd6AKW69tTQGYJsAq/IxroHzTNehXCC7KK1rLz+Mtx 6SAbbLEYUNWOYHnKLXDvQpXvBzzPXaMYPbqi1tPh36vuCVf8cyI3VtxvsNHSVKtF ROYVdzdMLOiyviqg2gTZVNf9Y1xw7y0EkQ3a9+bWiytXgYQp0PXRi9scU/95KIsu IY+4GQnGJHhlaselr0IG5MUuI1UZgzmLNYpwmbr2loRQbXlgsctZnW1BPfys2AdY jru1XQxKuZA7JotLqq9s+zcwKw0wEQhedy0OLVEhndPXzDn7XK8+tRJ9eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi8BLpzqLJqTeRAJHE6fwp+Xbc8MB8GA1UdIwQY MBaAFJ+Od+c4MT5lcGhN0VLC4oQzKyxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYt MzU2YzA5MzgwODg3LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYtMzU2YzA5MzgwODg3 LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApra22b+H O7HbowdZgYmyYleDcdNCkvqa77+aFLs0cfS+vFfkY8cm9TQSmB+enD/cE7K1fBh1 xZrLWoDytvpwXUusDc0SokQL5dpo9CmtavvF0UAB0PUPiHNTMpxvV/bSe1heZ8W4 QL+1oQNzBZJvzZvN4AdhjAtQBWiwr7pp3/Qea1ihdLp6kuavzgSF3G1qoD/HNHKZ ywfhyuThMRdk+Fxns9Ya/+dYN9r3sBGqPX9yHbH7edLfGKW1D/UGheHXqVxQzY7V FibWfn+Wx6JKpqz3YZXLzsPOnJRjXi0dpbJUPBIv+IP1Czz7ApLsAgqiqkky4B0a zxv2XlqkvMqRzA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:49:19 2025 by rpki-client