This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json) Hash identifier: jyvXeaTvqYPOUPENn9rUyMdSplnsViRgUD3ExTwdmKQ= Subject key identifier: 02:43:94:EE:61:F2:B0:8E:FE:05:64:BC:A0:B9:D8:27:CC:5D:E2:19 Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71 Certificate serial: 019AF23F64C78865F9D3CAEC44BFFBDBD8B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft Manifest number: 0A58 Signing time: Sat 06 Dec 2025 06:00:32 +0000 Manifest this update: Sat 06 Dec 2025 06:00:32 +0000 Manifest next update: Sun 07 Dec 2025 06:00:32 +0000 Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=) 2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: jYuEchIPbGaofJYMMcHy9JQcZ5JdRCTcGD0Z8wfUnqI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:64:c7:88:65:f9:d3:ca:ec:44:bf:fb:db:d8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71 Validity Not Before: Dec 6 06:00:32 2025 GMT Not After : Dec 7 06:00:32 2025 GMT Subject: CN=024394ee61f2b08efe0564bca0b9d827cc5de219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:82:f4:4b:f9:9b:8a:5b:25:61:d0:07:a9: b9:18:3b:9a:17:50:45:c1:9b:5f:24:8b:03:a1:a7: 1a:d1:ed:e8:0a:c6:53:32:70:22:53:c5:58:40:ff: ab:1d:23:eb:f8:6b:7a:20:5a:4a:02:ef:13:95:7f: 03:e4:19:27:18:bc:a5:b5:b3:dd:a3:ed:e3:0f:41: a6:a7:c4:17:be:c0:6a:84:df:1b:64:a6:00:de:cd: 74:dd:e2:33:f0:8a:bb:bb:a0:c7:87:04:91:63:80: 09:b7:00:f4:96:b4:5c:1a:63:69:d3:1b:a2:e3:5b: ef:1e:30:cb:fd:33:59:e2:ee:8f:fc:4e:da:37:73: ef:f2:3e:68:e2:db:35:d1:5b:67:e0:f4:dc:56:c7: b5:68:d1:6e:47:fe:7c:52:fc:65:5d:c8:1d:8e:5b: d9:33:a7:83:24:74:08:3d:83:da:a7:2a:de:7c:01: 0f:0d:47:06:8a:7b:45:85:e4:72:50:9c:9b:af:43: 07:a2:2c:77:74:a6:b5:30:4d:bd:2b:e0:dd:88:8e: ca:c3:02:d2:c6:8e:46:62:ce:e7:d5:f0:54:ac:ff: e8:f7:7d:ff:1c:5b:be:fe:63:af:b2:27:5d:c3:5a: 16:62:78:62:e4:51:9b:5f:51:de:98:6e:c0:8d:b4: b7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:94:EE:61:F2:B0:8E:FE:05:64:BC:A0:B9:D8:27:CC:5D:E2:19 X509v3 Authority Key Identifier: keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a3:f3:91:30:2a:67:7a:75:09:88:b7:15:72:e1:c3:58:44: 98:79:ee:25:9a:cf:50:08:e1:61:ba:09:7f:20:87:93:76:d1: 9a:f5:ba:61:97:34:a4:fe:9d:29:02:e7:c0:5f:be:b0:98:0a: 8a:7f:9b:91:54:f6:e9:aa:65:57:d7:0b:9a:1a:68:7b:10:9d: 44:bd:36:b8:b7:cf:71:8d:1a:99:98:d5:f6:11:8d:9c:10:14: 98:ac:2f:5f:67:16:98:bf:1d:a2:99:38:8a:31:8c:d6:43:01: 0e:2b:06:38:4c:70:49:ee:8c:e1:fc:6e:42:3f:e7:22:bf:da: a8:06:97:47:e2:d6:88:29:e7:f8:18:91:30:94:cd:32:38:41: 13:6b:b0:f7:6a:a9:01:97:a5:aa:ce:77:86:1b:79:fe:38:df: 0d:94:6b:ea:48:2f:b3:8a:73:a6:9a:9a:69:47:00:9e:28:a4: e8:67:d2:8a:52:71:8e:81:1a:e6:1e:dd:46:52:d6:31:fe:89: fb:72:33:52:19:21:70:de:b8:c6:b2:8f:69:47:0e:ee:27:3c: 5b:9d:f6:6a:ba:9e:1d:f5:90:db:53:86:3c:7a:fc:26:b5:30: ea:b0:43:f2:ef:b5:94:d8:17:83:14:0f:ad:14:a5:57:37:10: ca:31:21:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2THiGX508rsRL/729iyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5 ZjhhNzEwHhcNMjUxMjA2MDYwMDMyWhcNMjUxMjA3MDYwMDMyWjAzMTEwLwYDVQQD EygwMjQzOTRlZTYxZjJiMDhlZmUwNTY0YmNhMGI5ZDgyN2NjNWRlMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq2C9Ev5m4pbJWHQB6m5GDuaF1BF wZtfJIsDoaca0e3oCsZTMnAiU8VYQP+rHSPr+Gt6IFpKAu8TlX8D5BknGLyltbPd o+3jD0Gmp8QXvsBqhN8bZKYA3s103eIz8Iq7u6DHhwSRY4AJtwD0lrRcGmNp0xui 41vvHjDL/TNZ4u6P/E7aN3Pv8j5o4ts10Vtn4PTcVse1aNFuR/58UvxlXcgdjlvZ M6eDJHQIPYPapyrefAEPDUcGintFheRyUJybr0MHoix3dKa1ME29K+DdiI7KwwLS xo5GYs7n1fBUrP/o933/HFu+/mOvsiddw1oWYnhi5FGbX1HemG7AjbS3AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJDlO5h8rCO/gVkvKC52CfMXeIZMB8GA1UdIwQY MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2 LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKPzkTAq Z3p1CYi3FXLhw1hEmHnuJZrPUAjhYboJfyCHk3bRmvW6YZc0pP6dKQLnwF++sJgK in+bkVT26aplV9cLmhpoexCdRL02uLfPcY0amZjV9hGNnBAUmKwvX2cWmL8dopk4 ijGM1kMBDisGOExwSe6M4fxuQj/nIr/aqAaXR+LWiCnn+BiRMJTNMjhBE2uw92qp AZelqs53hht5/jjfDZRr6kgvs4pzppqaaUcAniik6GfSilJxjoEa5h7dRlLWMf6J +3IzUhkhcN64xrKPaUcO7ic8W532arqeHfWQ21OGPHr8JrUw6rBD8u+1lNgXgxQP rRSlVzcQyjEhng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:59:21 2025 by rpki-client