This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json) Hash identifier: D0cjXZ852RmUqrmcpwQgnTh1eKr94QejKCpel7JvR3w= Subject key identifier: 52:6B:58:E8:7D:A0:02:E7:E5:66:DF:C8:36:F1:D8:5D:F0:FE:2D:74 Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f Certificate serial: 019AF50B03B74CDF235EA1CF0D5B9A38DEA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft Manifest number: 113D Signing time: Sat 06 Dec 2025 19:02:10 +0000 Manifest this update: Sat 06 Dec 2025 19:02:10 +0000 Manifest next update: Sun 07 Dec 2025 19:02:10 +0000 Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: f0Z9R43WYtA72HGJZ6L/gYjmHDy3fGVYs7Xanh3bNOA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:03:b7:4c:df:23:5e:a1:cf:0d:5b:9a:38:de:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f Validity Not Before: Dec 6 19:02:10 2025 GMT Not After : Dec 7 19:02:10 2025 GMT Subject: CN=526b58e87da002e7e566dfc836f1d85df0fe2d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:45:0a:e4:ed:39:7f:b0:b6:57:f8:cd:46: ed:fe:4d:84:b0:32:b1:f8:40:2d:d2:fd:e9:2a:3b: 1d:cb:37:fb:9f:5e:8b:d6:02:f9:c5:88:4d:b5:6b: 31:c9:4c:88:a8:78:c1:71:2c:c6:82:f5:d6:ed:c6: 9d:68:5d:c8:1e:74:94:34:ab:e6:e6:1a:df:b7:e3: 80:5f:ba:06:e9:86:e6:cb:21:68:38:4c:55:da:15: f3:66:26:f6:b5:f0:b6:32:09:43:01:b6:8b:bb:b5: 60:c4:1a:65:4e:a9:ff:60:4b:3d:de:8e:41:0f:1f: ab:77:7e:85:43:c7:8f:03:2b:98:9e:b9:d3:af:b8: 77:4c:3e:38:94:c4:4f:d9:cd:f6:4e:ef:b5:b5:6e: 63:ae:64:6c:5e:ca:8f:c2:71:b2:23:fa:c1:ca:d5: 02:2a:ea:56:2f:d4:dc:4a:88:6c:5d:46:1b:a5:45: 1d:b9:a0:c8:b8:77:d7:06:ca:e5:00:48:df:21:54: 75:b5:27:ca:cf:69:93:10:ad:df:e8:26:e6:7e:83: a8:4b:28:2c:a8:b8:06:5b:7c:73:65:70:9d:05:11: c3:83:3b:32:df:90:36:68:41:34:11:6c:2c:0b:7d: e0:dc:07:9d:7d:4b:f6:8d:b9:42:1f:43:cc:46:44: 92:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6B:58:E8:7D:A0:02:E7:E5:66:DF:C8:36:F1:D8:5D:F0:FE:2D:74 X509v3 Authority Key Identifier: keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:af:48:fa:d2:38:53:36:e6:ed:51:a5:77:76:22:05:e7:3e: 60:07:76:3b:88:f1:ff:b3:3d:0b:89:90:c4:ed:e8:a2:72:a0: 47:59:7a:b6:c0:22:ca:fe:12:e8:e3:3b:eb:47:e7:06:47:0e: 57:e6:d1:ed:80:e1:2d:c9:62:4f:01:6d:e0:59:36:60:3b:be: 28:67:43:df:07:dd:a0:6f:17:0c:63:62:bb:6c:16:a6:c2:3a: bf:9c:e0:1b:87:14:5a:91:69:db:a5:32:b0:0b:dd:e3:ca:d6: 64:2d:59:c3:ea:db:e8:93:b4:8f:57:e4:eb:a6:0e:11:24:62: 69:17:cb:f7:44:d4:be:63:d4:8a:69:c2:ef:d2:c2:1c:bc:6a: e3:80:36:1f:12:5b:99:fa:d3:bf:c1:07:0f:2e:dc:a2:d0:c0: ac:64:c1:0c:9f:88:ea:52:7e:8d:9e:d1:58:03:72:ff:77:a5: 77:77:ef:3e:96:95:43:ee:1a:10:09:48:54:91:2b:c2:df:d5: d2:d7:33:8a:69:89:e1:62:b1:2c:df:9d:9d:4c:07:f3:ee:7d: ed:56:ef:75:d8:87:a6:a8:1d:aa:1c:f7:5a:26:eb:57:47:28: 94:76:23:0e:91:3b:aa:f7:d7:d5:c6:d3:c9:36:94:0b:08:39: 4a:98:c7:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CwO3TN8jXqHPDVuaON6hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNDVlYjVhMjg4YzY4ZWQ2MGRiZDliODdlNGU4MjA2Y2E5 YzkzM2YwHhcNMjUxMjA2MTkwMjEwWhcNMjUxMjA3MTkwMjEwWjAzMTEwLwYDVQQD Eyg1MjZiNThlODdkYTAwMmU3ZTU2NmRmYzgzNmYxZDg1ZGYwZmUyZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaJFCuTtOX+wtlf4zUbt/k2EsDKx +EAt0v3pKjsdyzf7n16L1gL5xYhNtWsxyUyIqHjBcSzGgvXW7cadaF3IHnSUNKvm 5hrft+OAX7oG6YbmyyFoOExV2hXzZib2tfC2MglDAbaLu7VgxBplTqn/YEs93o5B Dx+rd36FQ8ePAyuYnrnTr7h3TD44lMRP2c32Tu+1tW5jrmRsXsqPwnGyI/rBytUC KupWL9TcSohsXUYbpUUduaDIuHfXBsrlAEjfIVR1tSfKz2mTEK3f6CbmfoOoSygs qLgGW3xzZXCdBRHDgzsy35A2aEE0EWwsC33g3AedfUv2jblCH0PMRkSSlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJrWOh9oALn5WbfyDbx2F3w/i10MB8GA1UdIwQY MBaAFJ9F61oojGjtYNvZuH5OggbKnJM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNDIzMzYtZWI3Ny00NTQwLWJlNDEt NTVmZDZkYzFhMWQ4LzEvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lNDIzMzYtZWI3Ny00NTQwLWJlNDEtNTVmZDZkYzFhMWQ4 LzEvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOK9I+tI4 Uzbm7VGld3YiBec+YAd2O4jx/7M9C4mQxO3oonKgR1l6tsAiyv4S6OM760fnBkcO V+bR7YDhLcliTwFt4Fk2YDu+KGdD3wfdoG8XDGNiu2wWpsI6v5zgG4cUWpFp26Uy sAvd48rWZC1Zw+rb6JO0j1fk66YOESRiaRfL90TUvmPUimnC79LCHLxq44A2HxJb mfrTv8EHDy7cotDArGTBDJ+I6lJ+jZ7RWANy/3eld3fvPpaVQ+4aEAlIVJErwt/V 0tczimmJ4WKxLN+dnUwH8+597VbvddiHpqgdqhz3WibrV0colHYjDpE7qvfX1cbT yTaUCwg5SpjHng== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:55 2025 by rpki-client