This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft (raw, json) Hash identifier: qMz1brahmDi7CbuKEQw0JgL0xkYHWXdKonH2yf801i8= Subject key identifier: 4C:92:E6:37:67:69:94:87:6F:A0:B4:9A:0F:AD:6B:B6:84:3C:9C:02 Authority key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A Certificate issuer: /CN=acd6be97bcfe12becbe82b7841047f57972a935a Certificate serial: 019AF12E490E728A6DED1C5356C9E07A0D16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft Manifest number: 0735 Signing time: Sat 06 Dec 2025 01:02:13 +0000 Manifest this update: Sat 06 Dec 2025 01:02:13 +0000 Manifest next update: Sun 07 Dec 2025 01:02:13 +0000 Files and hashes: 1: 6wOJsAVY-euwnRWmrQyAWiR15SI.roa (hash: is8qHNDUGOGtnmeZTaDPuu15VlXH7W1zJ6ndggR7ME0=) 2: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl (hash: 9nYR7tIsTjzTDpXiBOX3J7Vlmcns59h1UzbA7Tu3THk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:49:0e:72:8a:6d:ed:1c:53:56:c9:e0:7a:0d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=acd6be97bcfe12becbe82b7841047f57972a935a Validity Not Before: Dec 6 01:02:13 2025 GMT Not After : Dec 7 01:02:13 2025 GMT Subject: CN=4c92e637676994876fa0b49a0fad6bb6843c9c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:e7:37:8b:5b:5e:e5:9f:ae:db:ee:dc:69: 12:05:40:79:1f:22:a2:d0:dc:a2:b7:d3:3d:d2:86: ed:44:be:b9:08:2d:c5:df:c0:f5:f3:6e:33:eb:cf: dd:49:8f:d9:0f:a8:62:5d:e8:b0:2c:72:7e:9e:7f: 82:e5:51:4f:2f:aa:49:02:5e:4f:cf:42:98:05:6a: 7b:44:51:5b:86:aa:6d:9b:04:3a:b3:20:dd:17:7c: 22:75:a4:ac:84:85:7d:bd:43:18:c7:e5:95:39:15: 1e:73:b9:28:ca:fb:75:c1:a1:1f:a4:4b:7a:ff:7f: d8:84:cb:bc:e1:5b:c8:71:b5:06:20:bb:ad:87:5c: 33:7b:84:1b:c9:38:df:2e:46:a1:33:ea:99:b6:60: 5c:50:3d:03:87:95:8e:8d:ad:4e:a9:a0:9d:1e:cb: 58:71:0e:e8:e8:ab:7e:9e:02:e5:54:70:3b:ed:80: 49:29:43:e8:12:5d:c9:68:89:43:2c:3a:6e:ec:03: 0d:c2:c5:65:35:bf:c5:9f:9f:3a:1d:04:ce:21:ae: 28:d6:6f:d1:05:d3:3d:fb:3f:75:c2:4e:13:53:4c: d6:e7:6e:c2:1e:a9:87:0b:cf:25:fc:9a:60:f1:6e: 36:5b:f9:42:c5:3b:01:ca:e0:85:bb:90:00:21:5b: 97:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:92:E6:37:67:69:94:87:6F:A0:B4:9A:0F:AD:6B:B6:84:3C:9C:02 X509v3 Authority Key Identifier: keyid:AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:6f:78:16:4b:34:cc:8a:5a:29:a7:a6:cd:9f:e3:53:43:d9: 3c:14:4f:6d:bb:a2:65:17:f1:31:6b:0c:77:85:7a:4b:54:0c: 00:0a:65:64:9f:0d:2c:9a:47:ab:94:90:79:f9:ab:b7:ca:6f: bd:05:d5:0f:96:4e:d2:d5:1a:a0:50:9f:fb:70:49:b4:e1:14: ae:27:d5:25:1b:70:69:2e:f9:25:74:11:ff:52:f9:34:f3:17: d6:c1:77:f7:dc:2e:d7:02:5d:93:61:04:80:ac:c5:68:bf:21: 0d:d6:6d:9f:cf:61:91:dc:cd:27:20:8d:72:2b:3e:c8:44:e6: 39:e6:28:f4:fc:7e:eb:ed:e1:ba:09:f4:46:c8:f4:7a:11:9d: 7a:73:df:42:ff:37:bb:eb:02:1f:5c:8c:85:da:53:f0:78:d0: 91:a9:de:14:c2:ff:93:47:e1:ac:4e:cb:27:a9:0d:e2:b5:62: ce:83:32:ee:ae:51:1d:1d:7d:bf:39:05:df:66:ff:d4:0f:70: e1:b6:b6:87:4b:ca:95:6d:5c:f6:16:71:5c:5e:e2:20:df:b8: 3c:73:ec:3e:97:77:9f:be:5a:69:04:db:4b:56:ba:44:a5:65: 73:e1:a1:7e:ca:29:f9:c2:c2:11:a2:57:8b:96:7f:1f:65:f3: e1:37:ed:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLkkOcopt7RxTVsngeg0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZDZiZTk3YmNmZTEyYmVjYmU4MmI3ODQxMDQ3ZjU3OTcy YTkzNWEwHhcNMjUxMjA2MDEwMjEzWhcNMjUxMjA3MDEwMjEzWjAzMTEwLwYDVQQD Eyg0YzkyZTYzNzY3Njk5NDg3NmZhMGI0OWEwZmFkNmJiNjg0M2M5YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJrnN4tbXuWfrtvu3GkSBUB5HyKi 0Nyit9M90obtRL65CC3F38D1824z68/dSY/ZD6hiXeiwLHJ+nn+C5VFPL6pJAl5P z0KYBWp7RFFbhqptmwQ6syDdF3widaSshIV9vUMYx+WVORUec7koyvt1waEfpEt6 /3/YhMu84VvIcbUGILuth1wze4QbyTjfLkahM+qZtmBcUD0Dh5WOja1OqaCdHstY cQ7o6Kt+ngLlVHA77YBJKUPoEl3JaIlDLDpu7AMNwsVlNb/Fn586HQTOIa4o1m/R BdM9+z91wk4TU0zW527CHqmHC88l/Jpg8W42W/lCxTsByuCFu5AAIVuXpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyS5jdnaZSHb6C0mg+ta7aEPJwCMB8GA1UdIwQY MBaAFKzWvpe8/hK+y+greEEEf1eXKpNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQt MmE4NGFjYmUwN2VlLzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC80YjdjMmUtMDg5Zi00NzA4LTkxODQtMmE4NGFjYmUwN2Vl LzEvck5hLWw3ei1FcjdMNkN0NFFRUl9WNWNxazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARm94Fks0 zIpaKaemzZ/jU0PZPBRPbbuiZRfxMWsMd4V6S1QMAAplZJ8NLJpHq5SQefmrt8pv vQXVD5ZO0tUaoFCf+3BJtOEUrifVJRtwaS75JXQR/1L5NPMX1sF399wu1wJdk2EE gKzFaL8hDdZtn89hkdzNJyCNcis+yETmOeYo9Px+6+3hugn0Rsj0ehGdenPfQv83 u+sCH1yMhdpT8HjQkaneFML/k0fhrE7LJ6kN4rVizoMy7q5RHR19vzkF32b/1A9w 4ba2h0vKlW1c9hZxXF7iIN+4PHPsPpd3n75aaQTbS1a6RKVlc+Ghfsop+cLCEaJX i5Z/H2Xz4Tft2w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:33 2025 by rpki-client