This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft File: n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json) Hash identifier: Bz6N6eV3m/6a3xTuSSNRxfx1g2KCs7wMUhbTsCp97Rw= Subject key identifier: 5A:EC:A9:21:1E:B7:D7:0B:27:D6:38:D3:FB:37:20:67:93:66:C6:2C Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D Certificate issuer: /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d Certificate serial: 019AF12E42ADE8B699E38C49E9811D51E29F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft Manifest number: 04D5 Signing time: Sat 06 Dec 2025 01:02:11 +0000 Manifest this update: Sat 06 Dec 2025 01:02:11 +0000 Manifest next update: Sun 07 Dec 2025 01:02:11 +0000 Files and hashes: 1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: frldh9pV4zvJW0f+LFnWxd8dF0TW3jO6mYhIahvyoP4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:42:ad:e8:b6:99:e3:8c:49:e9:81:1d:51:e2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d Validity Not Before: Dec 6 01:02:11 2025 GMT Not After : Dec 7 01:02:11 2025 GMT Subject: CN=5aeca9211eb7d70b27d638d3fb3720679366c62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:75:93:31:fe:0b:55:54:81:29:c9:ae:78: 98:e0:b8:d9:cb:06:09:b7:b9:11:b6:d2:9c:21:81: 20:1d:8d:98:a6:a6:09:e4:a1:17:d0:9e:a9:20:ae: 1e:27:92:76:b8:aa:fb:dc:1d:34:39:88:82:cf:c8: a1:e7:f1:be:86:a1:c0:53:21:c8:3a:26:f0:07:e8: a7:95:63:0e:e4:d2:70:6b:b8:70:bc:85:f8:fc:04: cd:92:f3:5f:64:91:a8:d8:13:b5:7a:d9:6d:1b:73: 92:f9:fc:24:9b:5d:fc:c5:a0:56:7d:06:d8:d0:a4: 8d:53:38:df:5d:09:65:9b:d5:e4:c4:06:b4:dd:6b: cb:bf:5c:c7:7b:df:ac:ca:86:6e:04:af:cf:41:d3: 45:ee:f8:ac:3c:f1:20:cc:bb:21:c4:b9:10:cd:57: 74:7f:85:be:40:7f:f1:bf:b7:15:3f:1d:d4:6a:50: 64:72:87:da:00:01:4a:82:09:ab:0d:60:ac:67:c6: 10:ee:00:33:f5:94:aa:93:cd:63:60:aa:1c:eb:74: 1b:36:1b:2e:6e:d8:99:43:ee:e2:b4:d6:87:b4:93: 84:29:04:fd:dc:d1:86:95:08:8d:62:44:0b:a7:43: 8a:14:23:69:2e:3c:21:4c:ff:09:8d:af:8e:79:ab: d1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EC:A9:21:1E:B7:D7:0B:27:D6:38:D3:FB:37:20:67:93:66:C6:2C X509v3 Authority Key Identifier: keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f6:4d:44:2b:29:3c:f2:f6:0a:9e:dd:37:95:39:3f:24:28: df:92:4b:87:77:3b:aa:e2:2a:1c:61:e9:3f:8e:6e:fe:68:d6: 70:d3:2a:aa:9b:a6:58:db:76:ee:fa:72:8a:3f:1d:b7:b5:33: 9d:ee:2f:40:a4:0f:cf:78:7b:d2:43:a0:fd:df:e6:95:7f:2e: 5b:29:cc:ad:ce:51:32:f9:61:1c:b6:62:a7:a7:f5:e4:9f:9f: 6d:89:b2:c0:45:e8:ec:7f:9a:a4:e9:31:b2:26:54:0b:54:d0: 78:95:2b:4b:e1:cd:a3:40:7a:30:90:1e:11:4b:07:24:70:9f: 83:28:52:7d:af:1b:b5:7e:79:e1:03:f2:a2:5d:da:5f:83:31: 68:d0:e4:15:3e:a4:a5:a3:17:8a:e5:44:0e:0f:0a:da:fc:9a: bc:12:2d:d6:43:3f:2c:88:10:7a:71:00:8e:34:8a:9b:a6:43: 73:87:cd:43:ca:7f:84:25:b0:dc:19:b4:e6:07:7d:f9:fd:4a: d9:b7:5d:42:0b:f5:3e:33:2e:1d:15:c9:da:66:b9:b8:6e:02: d6:07:57:80:8c:3c:b4:72:33:6a:d9:38:c2:cf:7c:f4:19:2b: dd:30:99:e4:4d:f5:24:2c:d7:bb:fe:f4:f9:cb:3c:25:bf:1a: 8e:cb:97:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkKt6LaZ44xJ6YEdUeKfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjhkYmQzM2Q1ZDNiYzRmYTM2NDllZGY3ZjkxNGVhZTdh Mzg4NWQwHhcNMjUxMjA2MDEwMjExWhcNMjUxMjA3MDEwMjExWjAzMTEwLwYDVQQD Eyg1YWVjYTkyMTFlYjdkNzBiMjdkNjM4ZDNmYjM3MjA2NzkzNjZjNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBt1kzH+C1VUgSnJrniY4LjZywYJ t7kRttKcIYEgHY2YpqYJ5KEX0J6pIK4eJ5J2uKr73B00OYiCz8ih5/G+hqHAUyHI OibwB+inlWMO5NJwa7hwvIX4/ATNkvNfZJGo2BO1etltG3OS+fwkm138xaBWfQbY 0KSNUzjfXQllm9XkxAa03WvLv1zHe9+syoZuBK/PQdNF7visPPEgzLshxLkQzVd0 f4W+QH/xv7cVPx3UalBkcofaAAFKggmrDWCsZ8YQ7gAz9ZSqk81jYKoc63QbNhsu btiZQ+7itNaHtJOEKQT93NGGlQiNYkQLp0OKFCNpLjwhTP8Jja+OeavR3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrsqSEet9cLJ9Y40/s3IGeTZsYsMB8GA1UdIwQY MBaAFJ+429M9XTvE+jZJ7ff5FOrno4hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZDBmOGQtYTVlNy00MGIzLWI4YTgt NzM2MmIxOWRlNzNlLzEvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZDBmOGQtYTVlNy00MGIzLWI4YTgtNzM2MmIxOWRlNzNl LzEvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvZNRCsp PPL2Cp7dN5U5PyQo35JLh3c7quIqHGHpP45u/mjWcNMqqpumWNt27vpyij8dt7Uz ne4vQKQPz3h70kOg/d/mlX8uWynMrc5RMvlhHLZip6f15J+fbYmywEXo7H+apOkx siZUC1TQeJUrS+HNo0B6MJAeEUsHJHCfgyhSfa8btX554QPyol3aX4MxaNDkFT6k paMXiuVEDg8K2vyavBIt1kM/LIgQenEAjjSKm6ZDc4fNQ8p/hCWw3Bm05gd9+f1K 2bddQgv1PjMuHRXJ2ma5uG4C1gdXgIw8tHIzatk4ws989Bkr3TCZ5E31JCzXu/70 +cs8Jb8ajsuXZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:31:19 2025 by rpki-client