This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json) Hash identifier: 66wu3kyEXLnmRnlW/wiG3r/zxLyh6oGr9ncoSVcI9ME= Subject key identifier: 2B:82:16:51:CC:41:17:E9:6E:B8:0D:FD:D9:9E:E5:C5:63:C9:4D:BC Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e Certificate serial: 019AF50B6AB05E4FE3A10189C306DBF06862 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft Manifest number: 0CA7 Signing time: Sat 06 Dec 2025 19:02:37 +0000 Manifest this update: Sat 06 Dec 2025 19:02:37 +0000 Manifest next update: Sun 07 Dec 2025 19:02:37 +0000 Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: IsxJ1gsF3mqeaahOMB6tZV+3JYOsusKNq9zm/1iHrWg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:6a:b0:5e:4f:e3:a1:01:89:c3:06:db:f0:68:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e Validity Not Before: Dec 6 19:02:37 2025 GMT Not After : Dec 7 19:02:37 2025 GMT Subject: CN=2b821651cc4117e96eb80dfdd99ee5c563c94dbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bd:f2:90:6f:3c:47:e4:ed:78:a2:ff:86:02: 49:d4:63:8a:f0:ee:f5:b2:95:8e:9b:ca:61:be:54: 16:d6:85:21:ac:d8:da:16:de:b3:6c:05:ea:8f:85: ff:fd:84:3b:f4:28:d4:b5:20:21:5d:5f:5a:a3:e7: fa:5d:7c:6c:cd:67:e8:3b:3f:82:52:b0:61:3f:ce: 36:14:8e:e1:b8:f8:a3:37:10:2e:57:0f:7a:90:45: b0:fd:f7:ed:96:d4:ef:93:3d:cc:c8:6d:c6:f8:da: 79:65:0b:48:b1:96:50:b7:c8:f1:56:d8:48:6e:e0: a7:cb:50:d7:d4:7a:f6:e2:98:24:c4:85:ca:ea:12: 61:1f:07:a2:c5:11:d1:e6:b1:2c:ed:38:1f:ae:f2: c3:08:dc:f3:5d:7e:a9:d8:d2:fe:4c:85:bf:08:3d: 63:a0:f7:3f:1c:f0:0a:77:f4:3a:1b:ad:c7:4a:78: 49:87:6b:3f:c7:be:bc:39:89:46:08:f8:af:93:d2: 67:e8:48:46:e7:51:eb:37:d6:b2:2f:2c:f2:23:73: 8a:4f:41:b5:fb:0c:ac:ee:fb:ba:13:de:4c:8b:86: e8:ea:9a:cf:a6:f7:2e:4e:96:bb:e6:1d:e4:e2:28: df:fd:14:ec:1b:4b:f8:b3:c5:e8:df:13:e5:57:2c: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:82:16:51:CC:41:17:E9:6E:B8:0D:FD:D9:9E:E5:C5:63:C9:4D:BC X509v3 Authority Key Identifier: keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:78:2e:0e:86:58:d2:95:03:cf:ea:67:ad:4c:b6:23:3f:46: 08:79:13:ca:6a:e6:74:e2:f1:98:5d:99:17:e8:5f:71:26:a2: 11:13:35:69:3f:94:57:7c:1f:27:d6:bc:df:c6:d9:e9:4a:f7: 2c:4e:5f:17:f6:35:5a:07:d0:33:7f:59:47:44:5b:f7:2d:80: 38:ce:de:96:13:f8:52:0e:9f:5f:35:52:9b:0c:a5:ac:98:cc: 70:00:1b:74:3a:49:1d:f7:b3:c0:2d:3d:c2:49:b2:e1:f2:1e: 6f:db:97:d1:4d:35:03:2c:cd:37:03:80:ab:f7:72:1b:bb:10: d6:b5:c5:43:e4:5b:d2:9d:01:87:4e:73:74:5f:12:47:fb:68: 70:27:4a:61:ae:61:65:35:41:5b:72:3a:da:d2:fb:22:74:7c: ce:c3:29:49:3d:a5:02:d3:c3:a7:39:ab:69:2d:ab:7f:c2:e9: 90:25:97:c5:b1:a0:12:be:5d:c1:e1:6d:3f:c7:9c:3d:0a:5a: 4f:47:48:f3:91:61:84:13:a4:c7:4d:a0:94:a4:7a:bc:f1:f6: 01:27:3e:1f:e2:1d:2e:5f:e6:09:3e:5d:d8:45:c3:44:21:bc: 4c:be:f3:00:47:d2:aa:5e:25:95:ef:66:9f:07:f8:0a:41:70: 43:37:94:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2qwXk/joQGJwwbb8GhiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjA3ZjUwOWU5NDdiMjY3Zjg3YmEwYWRlODllYzRkM2Fl NTZhM2UwHhcNMjUxMjA2MTkwMjM3WhcNMjUxMjA3MTkwMjM3WjAzMTEwLwYDVQQD EygyYjgyMTY1MWNjNDExN2U5NmViODBkZmRkOTllZTVjNTYzYzk0ZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz73ykG88R+TteKL/hgJJ1GOK8O71 spWOm8phvlQW1oUhrNjaFt6zbAXqj4X//YQ79CjUtSAhXV9ao+f6XXxszWfoOz+C UrBhP842FI7huPijNxAuVw96kEWw/fftltTvkz3MyG3G+Np5ZQtIsZZQt8jxVthI buCny1DX1Hr24pgkxIXK6hJhHweixRHR5rEs7TgfrvLDCNzzXX6p2NL+TIW/CD1j oPc/HPAKd/Q6G63HSnhJh2s/x768OYlGCPivk9Jn6EhG51HrN9ayLyzyI3OKT0G1 +wys7vu6E95Mi4bo6prPpvcuTpa75h3k4ijf/RTsG0v4s8Xo3xPlVywGqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuCFlHMQRfpbrgN/dme5cVjyU28MB8GA1UdIwQY MBaAFJ/wf1CelHsmf4e6Ct6J7E065Wo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUt ODk5OGFhYTdmMzE1LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUtODk5OGFhYTdmMzE1 LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3guDoZY 0pUDz+pnrUy2Iz9GCHkTymrmdOLxmF2ZF+hfcSaiERM1aT+UV3wfJ9a838bZ6Ur3 LE5fF/Y1WgfQM39ZR0Rb9y2AOM7elhP4Ug6fXzVSmwylrJjMcAAbdDpJHfezwC09 wkmy4fIeb9uX0U01AyzNNwOAq/dyG7sQ1rXFQ+Rb0p0Bh05zdF8SR/tocCdKYa5h ZTVBW3I62tL7InR8zsMpST2lAtPDpzmraS2rf8LpkCWXxbGgEr5dweFtP8ecPQpa T0dI85FhhBOkx02glKR6vPH2ASc+H+IdLl/mCT5d2EXDRCG8TL7zAEfSql4lle9m nwf4CkFwQzeUiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:27:48 2025 by rpki-client