This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft File: n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft (raw, json) Hash identifier: SO4BsmXtUraeQS7edfpE0VYTVwesIVKSWxXrPFtTlgQ= Subject key identifier: 7E:C4:E0:E3:5A:7A:F4:87:66:B8:50:0D:49:DF:7D:51:3B:E3:AC:61 Authority key identifier: 9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4 Certificate issuer: /CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4 Certificate serial: 019AF4659802A4B3E0266B9F76C645432531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft Manifest number: 04FA Signing time: Sat 06 Dec 2025 16:01:29 +0000 Manifest this update: Sat 06 Dec 2025 16:01:29 +0000 Manifest next update: Sun 07 Dec 2025 16:01:29 +0000 Files and hashes: 1: n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl (hash: fir/h4uNj89dzXJpzCmrup5p1PFd7L0zjXJ62LU+vwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:98:02:a4:b3:e0:26:6b:9f:76:c6:45:43:25:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffe26f7d2029cf193313701eac3fc9bdbb894d4 Validity Not Before: Dec 6 16:01:29 2025 GMT Not After : Dec 7 16:01:29 2025 GMT Subject: CN=7ec4e0e35a7af48766b8500d49df7d513be3ac61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f1:4b:3e:c6:8e:19:fb:dd:a8:3e:0d:65:ef: e8:72:f3:b8:a4:6a:88:e9:2f:2e:de:11:59:b8:71: dc:c2:70:d1:4f:22:12:1b:c4:cb:a8:1b:16:09:50: 32:95:16:d4:02:80:1a:02:2a:54:bc:76:ea:98:3f: 38:1f:9b:08:6f:a9:a1:b3:a1:23:1d:d2:42:04:25: 99:17:02:5a:63:cf:59:52:e6:19:21:8e:17:b0:fe: 38:b6:5f:2a:25:5e:25:44:ca:59:53:f5:28:71:1d: 45:33:bb:55:64:20:94:11:f2:da:d1:c8:f5:26:92: b7:e8:0c:af:3f:34:c1:68:4d:0a:c4:75:10:fa:e1: 12:1d:3a:88:44:49:ea:1a:00:3b:82:2a:e7:89:ac: b6:0d:44:97:81:6b:82:67:87:c6:74:f1:d6:7a:b3: fc:51:8b:5d:0a:b6:d8:24:f0:c6:93:ff:a1:69:89: 0b:3b:38:fe:06:80:a0:b5:11:5c:08:3f:5b:86:50: 99:fa:3d:a3:14:55:d9:55:c8:16:3e:7d:d3:c8:f2: 07:4e:f2:3b:4c:f5:78:7a:91:fc:2b:46:f5:4e:5f: 21:6c:e0:30:ce:31:ac:f6:09:27:f6:73:cc:25:93: 4e:cc:53:3a:1d:0e:82:ae:13:cc:7e:a8:10:ca:72: 3e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C4:E0:E3:5A:7A:F4:87:66:B8:50:0D:49:DF:7D:51:3B:E3:AC:61 X509v3 Authority Key Identifier: keyid:9F:FE:26:F7:D2:02:9C:F1:93:31:37:01:EA:C3:FC:9B:DB:B8:94:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_4m99ICnPGTMTcB6sP8m9u4lNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/059c2a-e934-4e52-8789-2acac23e759d/1/n_4m99ICnPGTMTcB6sP8m9u4lNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4d:25:06:87:16:ac:89:dc:2c:eb:a8:3c:11:26:d4:ba:4c: 8e:3c:b5:13:7e:9d:4e:bc:8a:6c:81:c1:70:c4:c2:6f:5a:3c: 14:65:7f:be:dd:d6:04:ed:bb:7d:36:10:18:20:d6:8b:4f:2f: d6:91:84:a3:00:56:af:09:f9:57:68:a4:b2:7b:bd:86:bb:02: 5d:d7:2e:9e:30:04:81:0f:f7:9d:3a:9c:5a:98:4a:70:1b:d6: b9:c9:5a:3c:c6:51:df:ee:56:cf:31:77:f8:68:d0:9b:32:2f: 0a:e7:d2:03:03:93:91:fe:9a:c0:3c:64:2d:1c:2a:2a:13:a2: 59:67:41:d9:2a:a1:f2:09:67:af:7f:28:c0:9a:93:e8:38:71: 89:3c:d9:fb:15:88:68:c4:f1:ab:e6:73:68:6e:76:fe:9b:68: 96:28:2d:e2:91:0e:29:72:01:78:a4:c8:bb:31:4a:43:3d:34: ad:a2:9e:b9:b8:42:9c:97:c5:c1:d4:b2:8f:54:c1:50:88:10: 4f:19:7e:3c:62:54:c1:83:6b:b5:38:11:ee:4b:56:4a:9c:7d: 45:98:10:e6:58:ef:21:84:51:8e:26:ce:7e:25:59:2b:03:88: 49:4d:80:de:35:57:bb:a8:0e:2f:c4:d8:41:49:b0:42:b9:9a: 74:90:42:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZgCpLPgJmufdsZFQyUxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmUyNmY3ZDIwMjljZjE5MzMxMzcwMWVhYzNmYzliZGJi ODk0ZDQwHhcNMjUxMjA2MTYwMTI5WhcNMjUxMjA3MTYwMTI5WjAzMTEwLwYDVQQD Eyg3ZWM0ZTBlMzVhN2FmNDg3NjZiODUwMGQ0OWRmN2Q1MTNiZTNhYzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovFLPsaOGfvdqD4NZe/ocvO4pGqI 6S8u3hFZuHHcwnDRTyISG8TLqBsWCVAylRbUAoAaAipUvHbqmD84H5sIb6mhs6Ej HdJCBCWZFwJaY89ZUuYZIY4XsP44tl8qJV4lRMpZU/UocR1FM7tVZCCUEfLa0cj1 JpK36AyvPzTBaE0KxHUQ+uESHTqIREnqGgA7girniay2DUSXgWuCZ4fGdPHWerP8 UYtdCrbYJPDGk/+haYkLOzj+BoCgtRFcCD9bhlCZ+j2jFFXZVcgWPn3TyPIHTvI7 TPV4epH8K0b1Tl8hbOAwzjGs9gkn9nPMJZNOzFM6HQ6CrhPMfqgQynI+7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7E4ONaevSHZrhQDUnffVE746xhMB8GA1UdIwQY MBaAFJ/+JvfSApzxkzE3AerD/JvbuJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8wNTljMmEtZTkzNC00ZTUyLTg3ODkt MmFjYWMyM2U3NTlkLzEvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8wNTljMmEtZTkzNC00ZTUyLTg3ODktMmFjYWMyM2U3NTlk LzEvbl80bTk5SUNuUEdUTVRjQjZzUDhtOXU0bE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk0lBocW rIncLOuoPBEm1LpMjjy1E36dTryKbIHBcMTCb1o8FGV/vt3WBO27fTYQGCDWi08v 1pGEowBWrwn5V2iksnu9hrsCXdcunjAEgQ/3nTqcWphKcBvWuclaPMZR3+5WzzF3 +GjQmzIvCufSAwOTkf6awDxkLRwqKhOiWWdB2Sqh8glnr38owJqT6DhxiTzZ+xWI aMTxq+ZzaG52/ptoligt4pEOKXIBeKTIuzFKQz00raKeubhCnJfFwdSyj1TBUIgQ Txl+PGJUwYNrtTgR7ktWSpx9RZgQ5ljvIYRRjibOfiVZKwOISU2A3jVXu6gOL8TY QUmwQrmadJBCMw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:35:14 2025 by rpki-client