This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft File: n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json) Hash identifier: nrw/+/qnXF8NjwjIA3eujJ++Dzi+VEVDxlZwmhsktUQ= Subject key identifier: 4F:AE:D0:30:2F:B2:B7:F5:D9:FB:10:79:7B:5F:67:3B:1B:77:00:6E Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D Certificate issuer: /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d Certificate serial: 019B34C5A3B6071F15A21767AEB43D275A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft Manifest number: 04F8 Signing time: Fri 19 Dec 2025 04:02:06 +0000 Manifest this update: Fri 19 Dec 2025 04:02:06 +0000 Manifest next update: Sat 20 Dec 2025 04:02:06 +0000 Files and hashes: 1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: ZPiE0iUNhd7ulo4OutVLRLGyu4P7Y3ebyt3COIHyVGQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:a3:b6:07:1f:15:a2:17:67:ae:b4:3d:27:5a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d Validity Not Before: Dec 19 04:02:06 2025 GMT Not After : Dec 20 04:02:06 2025 GMT Subject: CN=4faed0302fb2b7f5d9fb10797b5f673b1b77006e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b4:3b:36:4d:d6:12:c3:b4:0c:99:7d:e9:45: bb:e1:d7:17:99:92:a9:09:93:5c:bb:1a:31:f7:ad: ce:f3:81:4c:c9:ef:1b:fe:76:34:ee:ed:6b:8f:06: d1:8b:c4:14:93:9f:6f:26:93:ce:49:62:4b:8c:d2: a8:9d:83:7b:87:51:2c:bd:8c:13:b4:88:5c:32:ed: 52:26:a4:d8:f2:40:c0:f0:ad:49:e1:ee:e5:e7:72: f9:ab:92:d1:81:d0:6e:0b:e6:f3:d7:cd:4f:93:c0: 63:8b:eb:3b:f8:2e:a6:bf:36:86:6e:f2:d7:31:55: 71:84:8b:9a:9c:8d:80:73:be:e2:53:67:84:eb:4f: 6d:cc:97:e8:6b:fb:ed:39:8e:1e:f9:ed:2f:71:03: d3:81:f7:68:ec:42:3b:82:c2:c6:d5:87:39:98:a2: 91:02:dd:ca:1f:27:22:c7:3b:59:f6:94:bb:a9:a2: f5:51:27:91:8e:6e:5a:27:7d:90:e8:cf:04:7f:03: c4:dc:f8:73:22:20:b0:64:23:4e:97:59:6a:b0:ff: 1a:f4:c2:d8:05:15:b9:1b:aa:fc:c9:bf:68:8e:a1: 89:47:09:d2:07:23:62:ae:8a:09:6a:b0:b9:0b:1d: 8d:aa:ff:14:22:b5:b3:a0:af:42:63:20:e9:76:a7: 3e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:D0:30:2F:B2:B7:F5:D9:FB:10:79:7B:5F:67:3B:1B:77:00:6E X509v3 Authority Key Identifier: keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ff:84:8b:33:06:d8:3b:20:65:8a:9c:54:b4:12:7e:8a:bd: 71:51:2f:55:e6:bb:fc:ec:6c:b3:e3:d3:41:63:66:1d:b1:de: ca:48:ae:ca:6a:65:8a:82:d8:f0:c2:8e:3f:4a:1e:99:eb:8c: c5:50:04:1a:9b:23:a3:77:e3:73:a8:c4:a6:9a:cb:66:8e:7a: c1:83:f2:45:f8:ab:bd:ac:09:1f:12:34:10:67:1b:f9:ec:46: f0:47:c3:a6:9b:8d:fb:48:fc:dc:73:80:89:43:b9:d5:73:2d: 92:d1:0d:a4:ce:e4:d3:8f:16:08:77:38:d4:a8:c1:89:95:5e: 71:ec:78:63:78:ef:fc:d3:88:60:01:a0:86:35:0e:8d:90:91: a5:ec:cb:b5:57:5b:07:e9:46:71:bf:17:20:82:96:10:3e:47: 00:be:9e:84:70:b4:34:99:4f:4b:46:df:ea:8b:e2:6f:5c:bc: ee:50:25:cc:05:71:d6:bd:2e:d2:f9:b9:d8:73:6c:bb:87:20: 47:ad:10:06:8f:19:5a:c9:24:44:13:35:76:95:f8:d4:9e:63: 7a:09:f4:e5:1e:66:4c:ed:cb:55:09:d0:ef:78:6f:ea:ac:05: f0:14:c7:53:93:c8:47:df:4f:78:fc:b3:13:24:61:12:1e:49: 98:a1:ad:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xaO2Bx8VohdnrrQ9J1pkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjhkYmQzM2Q1ZDNiYzRmYTM2NDllZGY3ZjkxNGVhZTdh Mzg4NWQwHhcNMjUxMjE5MDQwMjA2WhcNMjUxMjIwMDQwMjA2WjAzMTEwLwYDVQQD Eyg0ZmFlZDAzMDJmYjJiN2Y1ZDlmYjEwNzk3YjVmNjczYjFiNzcwMDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7Q7Nk3WEsO0DJl96UW74dcXmZKp CZNcuxox963O84FMye8b/nY07u1rjwbRi8QUk59vJpPOSWJLjNKonYN7h1EsvYwT tIhcMu1SJqTY8kDA8K1J4e7l53L5q5LRgdBuC+bz181Pk8Bji+s7+C6mvzaGbvLX MVVxhIuanI2Ac77iU2eE609tzJfoa/vtOY4e+e0vcQPTgfdo7EI7gsLG1Yc5mKKR At3KHycixztZ9pS7qaL1USeRjm5aJ32Q6M8EfwPE3PhzIiCwZCNOl1lqsP8a9MLY BRW5G6r8yb9ojqGJRwnSByNirooJarC5Cx2Nqv8UIrWzoK9CYyDpdqc+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+u0DAvsrf12fsQeXtfZzsbdwBuMB8GA1UdIwQY MBaAFJ+429M9XTvE+jZJ7ff5FOrno4hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZDBmOGQtYTVlNy00MGIzLWI4YTgt NzM2MmIxOWRlNzNlLzEvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZDBmOGQtYTVlNy00MGIzLWI4YTgtNzM2MmIxOWRlNzNl LzEvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASP+EizMG 2DsgZYqcVLQSfoq9cVEvVea7/Oxss+PTQWNmHbHeykiuymplioLY8MKOP0oemeuM xVAEGpsjo3fjc6jEpprLZo56wYPyRfirvawJHxI0EGcb+exG8EfDppuN+0j83HOA iUO51XMtktENpM7k048WCHc41KjBiZVecex4Y3jv/NOIYAGghjUOjZCRpezLtVdb B+lGcb8XIIKWED5HAL6ehHC0NJlPS0bf6ovib1y87lAlzAVx1r0u0vm52HNsu4cg R60QBo8ZWskkRBM1dpX41J5jegn05R5mTO3LVQnQ73hv6qwF8BTHU5PIR99PePyz EyRhEh5JmKGtlQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:59:45 2025 by rpki-client