This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft File: n8UDUANWwjcveVsQ0PfVid9p_Is.mft (raw, json) Hash identifier: cGYnJwepZY2iZ0GI9KLsNs/IbVGL+C7ChuKh5joHcNc= Subject key identifier: 02:76:34:AC:47:6D:95:7D:5A:43:A8:05:A9:E3:9A:E9:A7:1C:E6:5C Authority key identifier: 9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B Certificate issuer: /CN=9fc503500356c2372f795b10d0f7d589df69fc8b Certificate serial: 019AF12E040CD02634B951EFAACC6A0A4F8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:01:55 +0000 Manifest this update: Sat 06 Dec 2025 01:01:55 +0000 Manifest next update: Sun 07 Dec 2025 01:01:55 +0000 Files and hashes: 1: n8UDUANWwjcveVsQ0PfVid9p_Is.crl (hash: 1lhGpYetTGeEcD7X0q+JHa6AQPMSNdbZqfjd/prVVNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:04:0c:d0:26:34:b9:51:ef:aa:cc:6a:0a:4f:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fc503500356c2372f795b10d0f7d589df69fc8b Validity Not Before: Dec 6 01:01:55 2025 GMT Not After : Dec 7 01:01:55 2025 GMT Subject: CN=027634ac476d957d5a43a805a9e39ae9a71ce65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f5:a9:51:fc:46:49:3d:2a:71:7e:f6:e5:e3: 62:5c:79:74:a2:33:85:43:d7:a5:59:e0:ed:6e:70: c8:9f:3b:b5:c7:a7:78:92:05:79:ea:01:4c:b7:ba: 6c:c8:83:2a:47:9c:00:4d:2b:b2:ea:f1:4c:cc:50: ce:16:f6:ca:96:9d:06:0e:d5:7a:23:00:9a:b2:38: 0a:4c:9d:95:64:4d:6c:50:9b:8c:1f:28:c9:c9:c5: 27:7a:97:62:dc:c4:2b:46:71:fa:f3:14:9f:a5:31: 9b:70:7e:73:3d:6e:ec:95:37:7a:aa:c9:69:12:d5: ee:79:19:e3:5a:c8:bf:e8:19:dc:18:9d:b3:1d:03: 2c:76:58:91:e4:a5:65:41:2a:ef:e4:0c:d4:7a:db: 3e:6a:ee:5d:ad:0d:34:c9:28:07:5b:6e:d9:4f:ec: 6f:7d:b2:94:36:e7:aa:96:86:13:fc:b9:c6:c5:a0: 88:89:a9:be:9d:ce:59:7c:e1:b4:bb:81:44:71:29: 98:45:ae:61:a3:cd:78:4f:65:77:de:be:b1:9b:c7: aa:17:7b:c6:d4:03:f5:99:cf:ed:e0:96:79:84:b9: 53:e8:7e:55:7d:f7:56:01:c8:a0:dd:7d:cb:97:ed: 99:5e:ce:c3:d0:8f:74:18:7b:3a:fc:d3:b2:1f:c2: 96:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:76:34:AC:47:6D:95:7D:5A:43:A8:05:A9:E3:9A:E9:A7:1C:E6:5C X509v3 Authority Key Identifier: keyid:9F:C5:03:50:03:56:C2:37:2F:79:5B:10:D0:F7:D5:89:DF:69:FC:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8UDUANWwjcveVsQ0PfVid9p_Is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/791c39-d838-49e3-89ea-8408166bb761/1/n8UDUANWwjcveVsQ0PfVid9p_Is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:2e:fd:de:97:db:2c:e3:9c:b9:3f:e9:d2:1a:e2:f2:80:37: f5:d1:94:a5:1e:9d:e9:fb:46:95:8d:41:03:b0:68:12:7f:ae: 3d:ff:ea:8e:e9:69:cc:1a:20:fc:e1:0d:0c:cd:6a:8c:75:9c: b4:38:06:da:ea:90:b5:78:32:3a:18:03:39:18:1b:bd:b7:fc: 7f:16:9d:96:94:31:dc:28:a3:3f:11:e2:a4:d1:29:f5:28:6b: b5:ca:af:73:48:4b:fa:38:1b:8b:5a:c8:f0:97:d8:1b:a1:75: 52:78:62:76:b7:d0:4c:5e:14:12:8b:aa:cc:af:17:b0:79:c4: c0:4c:e5:a4:63:56:6f:41:d1:3f:cb:dd:01:e1:c0:d5:c9:88: 67:75:37:f3:43:02:1e:09:38:37:83:95:d4:04:fb:52:db:b4: 61:0d:0c:c8:1f:a2:13:da:09:62:a9:87:43:a1:1c:0a:d5:bd: be:eb:84:63:bb:71:fd:b7:de:06:14:8f:a5:12:9c:25:81:c3: 10:d5:d0:26:f9:72:bc:b1:78:9a:4e:84:50:f1:70:45:e2:20: 4c:3e:f3:a4:fd:c8:6b:61:2c:69:78:23:f3:2d:56:f1:03:b6: fb:9c:c0:c3:32:9e:16:7e:9a:42:72:bf:00:5e:9d:85:16:00: 71:40:6f:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLgQM0CY0uVHvqsxqCk+KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYzUwMzUwMDM1NmMyMzcyZjc5NWIxMGQwZjdkNTg5ZGY2 OWZjOGIwHhcNMjUxMjA2MDEwMTU1WhcNMjUxMjA3MDEwMTU1WjAzMTEwLwYDVQQD EygwMjc2MzRhYzQ3NmQ5NTdkNWE0M2E4MDVhOWUzOWFlOWE3MWNlNjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/WpUfxGST0qcX725eNiXHl0ojOF Q9elWeDtbnDInzu1x6d4kgV56gFMt7psyIMqR5wATSuy6vFMzFDOFvbKlp0GDtV6 IwCasjgKTJ2VZE1sUJuMHyjJycUnepdi3MQrRnH68xSfpTGbcH5zPW7slTd6qslp EtXueRnjWsi/6BncGJ2zHQMsdliR5KVlQSrv5AzUets+au5drQ00ySgHW27ZT+xv fbKUNueqloYT/LnGxaCIiam+nc5ZfOG0u4FEcSmYRa5ho814T2V33r6xm8eqF3vG 1AP1mc/t4JZ5hLlT6H5VffdWAcig3X3Ll+2ZXs7D0I90GHs6/NOyH8KW+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJ2NKxHbZV9WkOoBanjmumnHOZcMB8GA1UdIwQY MBaAFJ/FA1ADVsI3L3lbEND31YnfafyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEt ODQwODE2NmJiNzYxLzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC83OTFjMzktZDgzOC00OWUzLTg5ZWEtODQwODE2NmJiNzYx LzEvbjhVRFVBTld3amN2ZVZzUTBQZlZpZDlwX0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUy793pfb LOOcuT/p0hri8oA39dGUpR6d6ftGlY1BA7BoEn+uPf/qjulpzBog/OENDM1qjHWc tDgG2uqQtXgyOhgDORgbvbf8fxadlpQx3CijPxHipNEp9Shrtcqvc0hL+jgbi1rI 8JfYG6F1UnhidrfQTF4UEouqzK8XsHnEwEzlpGNWb0HRP8vdAeHA1cmIZ3U380MC Hgk4N4OV1AT7Utu0YQ0MyB+iE9oJYqmHQ6EcCtW9vuuEY7tx/bfeBhSPpRKcJYHD ENXQJvlyvLF4mk6EUPFwReIgTD7zpP3Ia2EsaXgj8y1W8QO2+5zAwzKeFn6aQnK/ AF6dhRYAcUBv7g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:00 2025 by rpki-client