This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json) Hash identifier: b3wxqtsz+CgQBsIJuo7p8LIpJKHTO/LDsZaixLtJRjw= Subject key identifier: 99:C9:D4:2F:19:14:92:E1:62:25:C9:D5:9C:CE:84:97:B3:84:64:30 Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2 Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2 Certificate serial: 019B3231BF84ABA2321150BC4EDF9B3B49BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft Manifest number: 1546 Signing time: Thu 18 Dec 2025 16:01:19 +0000 Manifest this update: Thu 18 Dec 2025 16:01:19 +0000 Manifest next update: Fri 19 Dec 2025 16:01:19 +0000 Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: kSYWrU0ahOB3Hwfa3XRc97hIrQOZun/SgT9XXcEgspI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 16:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:31:bf:84:ab:a2:32:11:50:bc:4e:df:9b:3b:49:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2 Validity Not Before: Dec 18 16:01:19 2025 GMT Not After : Dec 19 16:01:19 2025 GMT Subject: CN=99c9d42f191492e16225c9d59cce8497b3846430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:64:d7:d3:ab:dd:4e:31:97:4b:cd:1c:bf:46: 31:0c:da:35:a1:f3:e4:4e:91:d6:15:55:95:1e:87: 5d:c7:6d:fb:b5:ec:48:dd:27:40:dd:b5:82:81:07: 9c:96:5c:5d:ba:f6:93:4d:1d:bc:e4:71:2e:9f:a4: 87:ae:c5:7a:5d:3a:ba:92:44:be:67:f4:4b:a8:72: 53:9f:a7:cd:0d:ac:fb:e9:7d:09:ac:f2:fc:b9:a9: 5c:f0:fd:ce:cc:ee:a4:be:fd:1a:67:6c:34:d5:44: 2b:03:04:d4:87:36:5d:51:ab:a0:8e:c2:02:7e:c6: b4:4a:78:44:c7:c1:74:fa:c1:a4:7b:39:ee:22:c0: 33:ea:51:1b:32:61:10:50:39:03:80:70:c6:f6:2b: 36:49:aa:23:78:33:16:79:05:69:f5:c2:a8:f3:88: 8f:89:50:dc:04:e5:fa:ae:f5:ad:52:f3:7b:a2:48: ab:2f:30:1b:e9:1e:81:22:c8:a7:d8:d7:5f:1a:5f: 94:b1:cc:98:a3:19:45:11:00:15:62:d8:6f:aa:fa: c2:b4:8f:5d:d5:6f:cd:63:73:bf:39:49:06:6f:ec: eb:dd:0b:73:b4:12:8b:8f:a9:eb:21:e1:02:27:b8: 2c:2e:ad:ef:b6:6c:cd:03:99:aa:b1:4d:01:b4:45: 5a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C9:D4:2F:19:14:92:E1:62:25:C9:D5:9C:CE:84:97:B3:84:64:30 X509v3 Authority Key Identifier: keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:dc:93:23:81:56:7f:6c:0e:8f:92:74:17:d4:1d:2d:48:f7: 04:82:1c:f6:fd:54:0a:5c:a3:4b:5e:33:b7:db:f8:fe:bf:d5: 6a:20:6b:ec:7f:35:9e:f8:05:1f:47:0d:54:8d:11:a9:92:e2: e0:02:0d:32:98:46:df:a9:01:d4:9d:d7:60:e2:2d:7c:61:cf: 42:7f:18:22:ce:03:bc:7e:69:ee:57:01:6f:3e:0d:2c:a3:69: 50:23:8f:3b:04:1c:01:65:c2:9b:1c:dd:dc:c0:7f:03:1d:4f: 78:33:09:d7:33:a9:78:60:87:bb:df:9f:e6:ad:4a:2c:62:c7: d2:0e:de:d3:21:da:20:c3:75:ba:f9:02:e5:b2:f4:48:cd:80: 6f:18:e3:99:ee:56:74:81:a9:96:58:ec:55:2b:90:cb:6e:e4: b9:78:98:23:59:ff:e1:bf:7b:90:8a:9e:bc:7a:1e:07:64:50: ba:79:50:48:ab:7a:b7:b6:82:f6:21:0c:57:dd:bb:c5:ea:21: 4c:d8:e0:b6:ce:4c:b2:27:fc:26:5a:ca:f9:b4:7c:8f:38:08: 60:29:fb:c6:23:6b:a9:af:8f:e6:71:98:1e:06:e7:ce:61:0d: 86:2c:1a:66:bd:ab:12:c2:a8:10:ca:26:ad:ba:1b:c1:30:93: 0a:17:b0:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyMb+Eq6IyEVC8Tt+bO0m/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNjdlMGM4NWEyZGViNTQ2NmVhYmRjOTA4NDYxNThhOTg3 Nzg0YTIwHhcNMjUxMjE4MTYwMTE5WhcNMjUxMjE5MTYwMTE5WjAzMTEwLwYDVQQD Eyg5OWM5ZDQyZjE5MTQ5MmUxNjIyNWM5ZDU5Y2NlODQ5N2IzODQ2NDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2TX06vdTjGXS80cv0YxDNo1ofPk TpHWFVWVHoddx237texI3SdA3bWCgQecllxduvaTTR285HEun6SHrsV6XTq6kkS+ Z/RLqHJTn6fNDaz76X0JrPL8ualc8P3OzO6kvv0aZ2w01UQrAwTUhzZdUaugjsIC fsa0SnhEx8F0+sGkeznuIsAz6lEbMmEQUDkDgHDG9is2SaojeDMWeQVp9cKo84iP iVDcBOX6rvWtUvN7okirLzAb6R6BIsin2NdfGl+UscyYoxlFEQAVYthvqvrCtI9d 1W/NY3O/OUkGb+zr3QtztBKLj6nrIeECJ7gsLq3vtmzNA5mqsU0BtEVaVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnJ1C8ZFJLhYiXJ1ZzOhJezhGQwMB8GA1UdIwQY MBaAFJ9n4MhaLetUZuq9yQhGFYqYd4SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mYjRjMmItZWJkMi00NmIyLWJjZDAt ODRkYjM5NDAzNzY4LzEvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mYjRjMmItZWJkMi00NmIyLWJjZDAtODRkYjM5NDAzNzY4 LzEvbjJmZ3lGb3Q2MVJtNnIzSkNFWVZpcGgzaEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtyTI4FW f2wOj5J0F9QdLUj3BIIc9v1UClyjS14zt9v4/r/VaiBr7H81nvgFH0cNVI0RqZLi 4AINMphG36kB1J3XYOItfGHPQn8YIs4DvH5p7lcBbz4NLKNpUCOPOwQcAWXCmxzd 3MB/Ax1PeDMJ1zOpeGCHu9+f5q1KLGLH0g7e0yHaIMN1uvkC5bL0SM2Abxjjme5W dIGplljsVSuQy27kuXiYI1n/4b97kIqevHoeB2RQunlQSKt6t7aC9iEMV927xeoh TNjgts5Msif8JlrK+bR8jzgIYCn7xiNrqa+P5nGYHgbnzmENhiwaZr2rEsKoEMom rbobwTCTChewrg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:49:16 2025 by rpki-client