This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json) Hash identifier: H4GT5DEVFwhev0BUhoBei/4cL4iVzC3k9vnXcmPDmMw= Subject key identifier: 81:6F:F8:54:60:9A:23:F5:1D:F7:86:5C:01:28:BA:A4:9E:26:CB:CB Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50 Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150 Certificate serial: 019AF2768AFB4157FB4838B679DAD30AD8A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:46 +0000 Manifest this update: Sat 06 Dec 2025 07:00:46 +0000 Manifest next update: Sun 07 Dec 2025 07:00:46 +0000 Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=) 2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: OkrM65iwzsAm5RV9Mn3Y+25HAujJp2naADX6pB4yn6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:8a:fb:41:57:fb:48:38:b6:79:da:d3:0a:d8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150 Validity Not Before: Dec 6 07:00:46 2025 GMT Not After : Dec 7 07:00:46 2025 GMT Subject: CN=816ff854609a23f51df7865c0128baa49e26cbcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8c:54:f2:b1:72:e4:47:1c:07:dc:d0:44:4e: 7d:4f:3a:9c:be:c7:f4:41:b6:0d:ce:2f:d7:3e:94: da:91:43:9a:a9:71:37:be:2d:63:d2:5f:54:60:71: c9:48:53:8e:c3:f7:ca:ca:c4:bc:af:e5:1b:8a:b5: a5:be:9d:df:76:aa:d4:9a:7a:d9:29:b0:bf:dc:1f: 66:4d:d5:cf:0a:3b:23:3a:49:a5:a3:02:86:96:af: 81:2b:04:d5:fa:56:6e:5f:0e:2a:59:4f:9d:c8:7c: 90:5e:a6:bf:0f:04:c3:6c:11:e2:2a:7a:64:f9:52: 35:15:90:4d:58:0a:21:c4:08:9b:82:40:a9:53:1b: 50:91:8a:d8:a6:0f:1a:3b:aa:b9:52:68:cc:14:03: db:61:ee:41:f2:0d:d7:41:81:17:57:d6:5b:0c:41: 7e:72:72:78:93:6f:c8:0b:b7:30:38:85:93:fb:cb: 96:3f:f1:1c:bd:5c:e8:ae:21:4c:f1:24:0c:1a:ad: 74:41:b2:a1:f8:51:98:80:e5:a6:ad:eb:46:63:bb: e1:2e:ff:5b:17:04:ff:10:b7:49:20:ed:83:2e:f6: 6e:28:3d:58:22:39:0e:56:e0:b5:83:9b:92:23:33: a5:17:08:bb:f6:ab:f4:70:f5:83:a4:d3:95:65:f5: 0d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6F:F8:54:60:9A:23:F5:1D:F7:86:5C:01:28:BA:A4:9E:26:CB:CB X509v3 Authority Key Identifier: keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:fe:81:24:51:96:b4:65:bc:46:c4:52:ae:3e:74:6a:2e:7f: 2b:b2:33:ab:1b:64:03:e7:5a:da:21:b7:d0:11:0a:e8:d4:d0: 7f:79:0b:ee:72:17:4e:12:bf:43:78:27:13:6b:5e:64:90:a9: 5e:19:70:e0:c7:33:2d:99:0d:5e:05:ac:17:0d:0f:54:ea:69: 77:72:d9:2a:e2:c1:3f:82:b1:7b:eb:9f:8a:d5:92:5b:9c:2e: 28:9c:d1:8c:0e:2a:85:b5:cb:f3:b8:f9:8c:a5:e8:80:4e:a7: 0d:de:6e:be:01:80:1c:20:42:0c:d5:d2:3a:eb:3d:d7:4e:18: 4e:3b:00:31:3b:1d:b1:21:9d:30:41:c3:ac:dd:12:8c:b0:46: 2a:54:d4:da:0a:9f:48:73:b6:db:b4:62:8d:d5:e5:2b:f5:28: d5:ae:a6:19:c7:01:66:d5:7e:26:2a:88:0b:99:9e:41:85:9b: 3a:32:89:41:0f:3c:59:de:8a:9a:40:a7:4d:35:02:c7:32:ee: 91:83:60:c4:9f:68:30:28:dd:6d:79:3f:fa:d4:96:6e:f1:95: 98:43:0c:73:ad:8f:c4:c4:c6:79:e9:7d:79:10:84:0d:ee:bf: 5f:ab:d3:c0:56:e6:0a:3b:bc:04:bf:74:8d:bd:90:ca:11:05: cf:88:85:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydor7QVf7SDi2edrTCtilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5 MjIxNTAwHhcNMjUxMjA2MDcwMDQ2WhcNMjUxMjA3MDcwMDQ2WjAzMTEwLwYDVQQD Eyg4MTZmZjg1NDYwOWEyM2Y1MWRmNzg2NWMwMTI4YmFhNDllMjZjYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIxU8rFy5EccB9zQRE59Tzqcvsf0 QbYNzi/XPpTakUOaqXE3vi1j0l9UYHHJSFOOw/fKysS8r+UbirWlvp3fdqrUmnrZ KbC/3B9mTdXPCjsjOkmlowKGlq+BKwTV+lZuXw4qWU+dyHyQXqa/DwTDbBHiKnpk +VI1FZBNWAohxAibgkCpUxtQkYrYpg8aO6q5UmjMFAPbYe5B8g3XQYEXV9ZbDEF+ cnJ4k2/IC7cwOIWT+8uWP/EcvVzoriFM8SQMGq10QbKh+FGYgOWmretGY7vhLv9b FwT/ELdJIO2DLvZuKD1YIjkOVuC1g5uSIzOlFwi79qv0cPWDpNOVZfUNFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFv+FRgmiP1HfeGXAEouqSeJsvLMB8GA1UdIwQY MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4 LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/6BJFGW tGW8RsRSrj50ai5/K7IzqxtkA+da2iG30BEK6NTQf3kL7nIXThK/Q3gnE2teZJCp Xhlw4MczLZkNXgWsFw0PVOppd3LZKuLBP4Kxe+ufitWSW5wuKJzRjA4qhbXL87j5 jKXogE6nDd5uvgGAHCBCDNXSOus9104YTjsAMTsdsSGdMEHDrN0SjLBGKlTU2gqf SHO227RijdXlK/Uo1a6mGccBZtV+JiqIC5meQYWbOjKJQQ88Wd6KmkCnTTUCxzLu kYNgxJ9oMCjdbXk/+tSWbvGVmEMMc62PxMTGeel9eRCEDe6/X6vTwFbmCju8BL90 jb2QyhEFz4iFWg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:00 2025 by rpki-client