This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json) Hash identifier: M9lO4HwC+tt7YxpZ+a5l+/dBVV3KOdTfNzzrlaz+nkU= Subject key identifier: FE:75:45:5D:62:0A:0B:3A:4C:71:9F:E2:C7:88:F5:BF:7B:53:BF:12 Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a Certificate serial: 019AF3F7ED12A90B30DE11B477672FF11C6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft Manifest number: 065E Signing time: Sat 06 Dec 2025 14:01:42 +0000 Manifest this update: Sat 06 Dec 2025 14:01:42 +0000 Manifest next update: Sun 07 Dec 2025 14:01:42 +0000 Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: 4xdXi5whgA0fB3vEuw1ZI3UR3aF0CpnKKnqXnqlms7c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ed:12:a9:0b:30:de:11:b4:77:67:2f:f1:1c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a Validity Not Before: Dec 6 14:01:42 2025 GMT Not After : Dec 7 14:01:42 2025 GMT Subject: CN=fe75455d620a0b3a4c719fe2c788f5bf7b53bf12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:df:cb:ce:19:e2:da:9e:d6:65:86:92:44: 47:ba:a0:a1:95:15:a0:6b:83:d5:a2:24:a4:5b:d5: 81:9f:97:93:53:9a:e1:ea:09:81:9d:92:f6:ad:4d: df:88:5f:76:13:e8:4b:0b:b9:66:aa:ad:c3:4f:27: e1:f8:c6:a0:c4:8f:77:5c:79:e5:d0:f0:58:36:57: b8:37:80:f5:86:3c:27:f3:3b:f3:0a:da:f1:92:a3: ce:41:dc:ea:d1:a2:51:20:57:5f:42:01:40:15:69: ef:f9:59:57:93:fe:39:8d:0f:10:47:78:06:8f:2c: f3:e1:4f:2e:88:62:48:c8:9e:01:f0:75:d1:7c:cc: 90:67:33:7a:0e:cb:dd:b6:13:04:f6:c4:34:33:72: c9:c7:f4:c6:56:99:0a:e6:67:61:6b:bf:bc:e6:51: a6:0c:49:44:71:ff:c1:aa:e3:8e:6a:41:24:f8:ea: e4:b1:00:d9:05:49:8b:70:51:f5:6d:72:70:72:17: cd:07:79:b7:0b:ee:67:50:af:66:c7:5d:6e:6e:99: 45:c3:f9:69:29:61:3b:7b:4c:eb:c9:79:5c:9d:10: e7:57:94:db:a4:95:2f:b4:03:de:26:33:a9:05:93: 57:59:24:6e:7f:b7:9b:ae:3d:e9:8c:83:8c:96:e3: 16:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:75:45:5D:62:0A:0B:3A:4C:71:9F:E2:C7:88:F5:BF:7B:53:BF:12 X509v3 Authority Key Identifier: keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:25:fc:89:99:f8:dc:ff:35:37:b2:83:db:78:a0:5a:36: ac:80:05:89:5c:25:b3:af:54:63:3d:bc:9f:6b:8a:58:b0:34: 23:c1:1b:59:bd:d2:ea:90:cf:a7:02:8b:87:f4:d6:a8:bd:84: b1:6a:e7:35:95:33:0d:b2:c5:dd:74:4c:9f:ad:8c:fc:60:41: e4:04:ae:6c:d6:c6:f1:a0:98:24:a2:94:cf:50:5f:8d:35:a4: 6a:66:45:64:06:ab:79:58:17:db:4d:4e:ca:01:db:f3:bb:18: e3:df:17:75:86:80:31:4f:9a:32:f5:74:1b:40:11:48:04:a1: ff:9c:1d:40:31:98:71:df:d1:c6:4f:d9:ef:ea:3f:76:34:63: 05:08:3e:0a:ae:0b:aa:5f:36:a4:40:40:09:13:a0:68:86:25: b5:a9:e5:fa:85:b0:85:9a:fc:d1:da:67:f7:a8:64:49:06:22: 22:80:fd:8a:68:bf:71:ec:3c:b4:b8:0b:4f:5c:b1:96:14:f5: cd:7c:d1:3e:08:9c:07:97:10:31:0c:c2:f2:40:c5:21:59:1a: 38:e4:e3:6f:71:52:5e:71:6a:59:91:25:88:f7:73:47:0d:6e: 46:29:81:72:80:4e:c8:03:f7:91:ca:1c:0f:a8:41:1e:e3:c5: 04:ea:12:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+0SqQsw3hG0d2cv8RxtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDdiNzhiNWQ1NTVhZmVkNzY3MWM5MTZjMjZlYjdmZmM3 ZTJjOWEwHhcNMjUxMjA2MTQwMTQyWhcNMjUxMjA3MTQwMTQyWjAzMTEwLwYDVQQD EyhmZTc1NDU1ZDYyMGEwYjNhNGM3MTlmZTJjNzg4ZjViZjdiNTNiZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mzfy84Z4tqe1mWGkkRHuqChlRWg a4PVoiSkW9WBn5eTU5rh6gmBnZL2rU3fiF92E+hLC7lmqq3DTyfh+MagxI93XHnl 0PBYNle4N4D1hjwn8zvzCtrxkqPOQdzq0aJRIFdfQgFAFWnv+VlXk/45jQ8QR3gG jyzz4U8uiGJIyJ4B8HXRfMyQZzN6DsvdthME9sQ0M3LJx/TGVpkK5mdha7+85lGm DElEcf/BquOOakEk+OrksQDZBUmLcFH1bXJwchfNB3m3C+5nUK9mx11ubplFw/lp KWE7e0zryXlcnRDnV5TbpJUvtAPeJjOpBZNXWSRuf7ebrj3pjIOMluMWxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP51RV1iCgs6THGf4seI9b97U78SMB8GA1UdIwQY MBaAFJ/Xt4tdVVr+12cckWwm63/8fiyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjllM2kxMVZXdjdYWnh5UmJDYnJmX3gtTEpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jZDJkMWYtNTAxZS00MzgzLTkwMWYt Y2UwMDhiMTUwZmZlLzEvbjllM2kxMVZXdjdYWnh5UmJDYnJmX3gtTEpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jZDJkMWYtNTAxZS00MzgzLTkwMWYtY2UwMDhiMTUwZmZl LzEvbjllM2kxMVZXdjdYWnh5UmJDYnJmX3gtTEpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9ol/ImZ +Nz/NTeyg9t4oFo2rIAFiVwls69UYz28n2uKWLA0I8EbWb3S6pDPpwKLh/TWqL2E sWrnNZUzDbLF3XRMn62M/GBB5ASubNbG8aCYJKKUz1BfjTWkamZFZAareVgX201O ygHb87sY498XdYaAMU+aMvV0G0ARSASh/5wdQDGYcd/Rxk/Z7+o/djRjBQg+Cq4L ql82pEBACROgaIYltanl+oWwhZr80dpn96hkSQYiIoD9imi/cew8tLgLT1yxlhT1 zXzRPgicB5cQMQzC8kDFIVkaOOTjb3FSXnFqWZEliPdzRw1uRimBcoBOyAP3kcoc D6hBHuPFBOoS8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 20:28:59 2025 by rpki-client