This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json) Hash identifier: NbX8/E4u6B+eM7ff6YbM4b52Yco8tck8+VZYN1evqsU= Subject key identifier: C2:71:D6:79:70:67:E6:2A:B0:AA:51:55:FF:80:C7:46:E5:49:E5:BD Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a Certificate serial: 019B413708F181F9DCA7BB875A1C8DB6D671 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft Manifest number: 0686 Signing time: Sun 21 Dec 2025 14:01:24 +0000 Manifest this update: Sun 21 Dec 2025 14:01:24 +0000 Manifest next update: Mon 22 Dec 2025 14:01:24 +0000 Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: 3lWZmej7rq4G+vepGGgXeUXNtgSVR4U73hndcsUoJpo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:08:f1:81:f9:dc:a7:bb:87:5a:1c:8d:b6:d6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a Validity Not Before: Dec 21 14:01:24 2025 GMT Not After : Dec 22 14:01:24 2025 GMT Subject: CN=c271d6797067e62ab0aa5155ff80c746e549e5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:b1:d6:8a:f0:0c:95:f0:46:ba:34:02:9e:f1: b6:28:23:39:21:35:aa:dc:8a:30:ac:c0:21:ce:4f: 6c:36:89:a4:0c:db:a7:e3:00:3d:d3:34:b6:6b:85: 67:ea:7c:08:13:33:58:a1:7c:d7:4d:ed:42:98:46: cc:e8:82:1f:ea:5a:3f:6c:94:a9:38:ba:00:ad:08: 20:08:77:f5:8d:4f:5c:ee:dd:31:f8:ab:32:86:e6: d6:a5:17:92:70:5f:64:c2:b4:f3:fe:df:36:1d:db: 48:a9:90:eb:99:27:fe:96:20:a5:33:2a:d7:40:6f: 2f:68:cd:b2:03:de:b4:e5:fa:4a:10:35:6e:83:59: f0:4b:b3:35:e9:25:07:26:f0:f9:00:7f:8f:c6:22: 4f:1b:c7:33:8e:72:0c:93:36:e2:c0:46:bd:9e:c6: 4d:c9:4b:52:5d:9b:d4:f4:f7:f1:aa:2f:3d:06:d6: 24:42:2b:fe:7a:2f:94:3c:99:e5:fd:84:51:74:1a: 2f:0d:3e:0e:86:3a:db:a6:25:b3:84:7f:d9:50:af: 8e:00:ed:e3:9e:85:5a:7c:d0:2f:cf:66:e2:45:54: d7:f5:8b:44:35:66:d6:e4:68:b1:59:ec:50:13:2f: 87:e6:a7:df:8c:5a:a4:d6:f1:1f:3e:df:91:92:a3: 96:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:71:D6:79:70:67:E6:2A:B0:AA:51:55:FF:80:C7:46:E5:49:E5:BD X509v3 Authority Key Identifier: keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:31:0c:19:14:6f:d5:ba:fd:88:32:f7:95:8a:fb:d8:4b:d9: 07:9a:ff:a4:5c:0b:ce:0d:63:fc:4c:21:4d:01:66:91:56:4b: c2:80:b0:e7:9b:5d:88:26:0e:f9:ba:3d:3c:84:ab:32:89:85: b8:04:d3:bb:c8:69:6e:f5:25:78:cf:a3:5c:c1:01:df:ac:cb: 07:ef:4a:a6:fe:0e:31:8b:b5:fa:f7:67:6a:1a:62:38:2c:69: fd:1b:07:5b:6b:c2:dd:0a:f9:e6:5e:a2:8a:b8:ff:48:e6:c2: 85:d0:7e:f5:81:a4:5d:cc:b8:68:bc:60:a5:6f:be:7d:4e:bf: 92:f0:ad:6d:a8:5f:14:dc:fa:3e:93:71:ba:f0:bc:4d:59:67: 59:91:3d:6d:fc:93:45:58:37:39:26:fb:bc:a6:ba:1e:ce:0f: 55:85:8a:3c:83:21:ac:6f:59:e2:cf:7a:72:29:28:49:70:8f: a6:7b:44:d3:9a:34:27:18:b2:95:b8:65:6e:fd:b2:e8:bd:be: 02:e7:24:2d:0e:b9:1b:95:fa:1b:d9:80:f2:88:63:8f:d7:9b: 69:09:73:a8:46:f5:e2:9c:4a:71:64:f1:c3:73:60:f4:ea:cf: 02:2e:2a:ce:8a:d9:62:40:ff:43:f4:17:66:0f:b3:fa:59:48: 80:0c:2d:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNwjxgfncp7uHWhyNttZxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDdiNzhiNWQ1NTVhZmVkNzY3MWM5MTZjMjZlYjdmZmM3 ZTJjOWEwHhcNMjUxMjIxMTQwMTI0WhcNMjUxMjIyMTQwMTI0WjAzMTEwLwYDVQQD EyhjMjcxZDY3OTcwNjdlNjJhYjBhYTUxNTVmZjgwYzc0NmU1NDllNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8bHWivAMlfBGujQCnvG2KCM5ITWq 3IowrMAhzk9sNomkDNun4wA90zS2a4Vn6nwIEzNYoXzXTe1CmEbM6IIf6lo/bJSp OLoArQggCHf1jU9c7t0x+KsyhubWpReScF9kwrTz/t82HdtIqZDrmSf+liClMyrX QG8vaM2yA9605fpKEDVug1nwS7M16SUHJvD5AH+PxiJPG8czjnIMkzbiwEa9nsZN yUtSXZvU9Pfxqi89BtYkQiv+ei+UPJnl/YRRdBovDT4OhjrbpiWzhH/ZUK+OAO3j noVafNAvz2biRVTX9YtENWbW5GixWexQEy+H5qffjFqk1vEfPt+RkqOWYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJx1nlwZ+YqsKpRVf+Ax0blSeW9MB8GA1UdIwQY MBaAFJ/Xt4tdVVr+12cckWwm63/8fiyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjllM2kxMVZXdjdYWnh5UmJDYnJmX3gtTEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jZDJkMWYtNTAxZS00MzgzLTkwMWYt Y2UwMDhiMTUwZmZlLzEvbjllM2kxMVZXdjdYWnh5UmJDYnJmX3gtTEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jZDJkMWYtNTAxZS00MzgzLTkwMWYtY2UwMDhiMTUwZmZl LzEvbjllM2kxMVZXdjdYWnh5UmJDYnJmX3gtTEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARzEMGRRv 1br9iDL3lYr72EvZB5r/pFwLzg1j/EwhTQFmkVZLwoCw55tdiCYO+bo9PISrMomF uATTu8hpbvUleM+jXMEB36zLB+9Kpv4OMYu1+vdnahpiOCxp/RsHW2vC3Qr55l6i irj/SObChdB+9YGkXcy4aLxgpW++fU6/kvCtbahfFNz6PpNxuvC8TVlnWZE9bfyT RVg3OSb7vKa6Hs4PVYWKPIMhrG9Z4s96cikoSXCPpntE05o0Jxiylbhlbv2y6L2+ AuckLQ65G5X6G9mA8ohjj9ebaQlzqEb14pxKcWTxw3Ng9OrPAi4qzorZYkD/Q/QX Zg+z+llIgAwtiA== -----END CERTIFICATE-----Generated at Sun Dec 21 17:29:41 2025 by rpki-client