This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json) Hash identifier: gswhDfIa8R3sO3Yad8xNurJcw2gk4Bo/CTuqLqszJao= Subject key identifier: 09:CA:9F:1C:B7:8C:BC:E3:46:DB:03:66:44:3E:9A:F7:8C:36:93:30 Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Certificate serial: 019AF3C0CF39D46A747AD003C452C735DA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft Manifest number: 0D69 Signing time: Sat 06 Dec 2025 13:01:30 +0000 Manifest this update: Sat 06 Dec 2025 13:01:30 +0000 Manifest next update: Sun 07 Dec 2025 13:01:30 +0000 Files and hashes: 1: bY74pa2C3Js_pk8zrLxwAIuld50.roa (hash: hw+4FaOxGozuL2NvwyX/np4qCkqg+xjCV1sHwedmazg=) 2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: VOYUfJv2lrtg1bZybym8dyxUdZ5/WweyV+R1R53Dikc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:cf:39:d4:6a:74:7a:d0:03:c4:52:c7:35:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Validity Not Before: Dec 6 13:01:30 2025 GMT Not After : Dec 7 13:01:30 2025 GMT Subject: CN=09ca9f1cb78cbce346db0366443e9af78c369330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:14:67:a9:6f:92:06:a1:56:b2:12:6f:eb: 6b:23:a6:fe:1e:37:dc:65:fe:a0:e6:b9:2c:32:8d: e1:3f:4e:47:5e:2b:08:12:71:6a:3f:bb:04:c5:65: 0e:cb:1d:21:0f:fb:5f:f2:d8:14:11:24:eb:89:db: f4:5a:8d:16:70:8d:b1:f7:cd:50:4f:22:dc:e8:48: ba:0a:58:60:03:4b:77:eb:d2:c0:12:a0:53:71:1d: 40:68:ec:dd:ce:81:db:0d:8c:0e:92:fe:98:77:a3: ab:e9:e1:55:0d:9e:91:1c:ed:66:4e:50:ce:8a:de: 26:19:87:a1:ac:60:df:db:84:52:b5:e7:71:cf:ee: d7:09:cd:ea:70:79:71:16:37:46:84:7e:28:73:74: ed:90:2b:7f:e4:da:92:b1:04:cf:78:70:4a:f2:62: fd:03:57:29:bf:0d:b3:a0:83:92:31:9c:e2:07:2a: 01:c1:00:ac:4f:1b:79:7e:53:3a:6a:44:27:53:a1: fc:ed:a2:d2:ef:21:c4:51:6a:8c:60:50:d7:f7:25: 4f:4a:80:a3:53:59:28:e1:90:25:bf:a1:ce:90:f3: f0:fb:07:1b:6a:c3:8e:4c:9b:a3:cf:6c:4a:8f:87: b8:d2:ab:3e:a7:7f:88:64:f3:99:71:15:72:6d:99: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:9F:1C:B7:8C:BC:E3:46:DB:03:66:44:3E:9A:F7:8C:36:93:30 X509v3 Authority Key Identifier: keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e9:8e:9c:2a:bd:d2:d3:c5:d3:fb:4c:48:4a:6e:f5:ee:eb: 61:cf:dc:cc:4f:f5:af:d5:c5:eb:76:04:ba:e2:ea:f8:e0:89: e5:fb:46:33:9b:35:33:4b:bb:e0:e0:6e:68:e5:ab:a6:45:d3: 0d:6e:16:61:7d:fd:12:be:2d:98:f6:d3:ac:3a:ef:e4:1c:98: 70:1a:c4:aa:ed:a4:95:b1:c4:a3:41:cf:20:83:ee:1c:62:3f: 21:ec:86:80:ac:68:dd:a7:b5:bb:b1:58:04:eb:6f:d1:0b:f9: 80:82:af:9e:9a:26:07:4b:f4:23:e8:da:bc:87:80:70:4e:10: 75:fa:cf:64:dd:31:fd:93:12:f8:bd:ea:c0:78:56:0a:41:34: 57:10:a1:ea:25:f4:bc:cd:42:65:8e:c3:0c:1a:39:d8:e5:dd: 57:eb:cf:cd:8b:91:f4:8d:be:5a:1b:6e:05:61:90:59:2b:94: cf:ec:be:7e:9b:12:c6:39:00:ee:d1:6c:e5:ef:95:62:14:19: 4e:94:ef:71:1d:96:47:15:0a:0d:91:29:ed:91:7d:1e:7e:e4: 44:51:26:19:ed:48:ef:2a:a4:6a:ff:24:35:1e:e2:df:b4:0d: 83:9b:a6:72:02:7e:96:97:f2:04:51:94:c4:f1:7b:56:a2:e7: cf:ad:88:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwM851Gp0etADxFLHNdpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3 ZGEyY2EwHhcNMjUxMjA2MTMwMTMwWhcNMjUxMjA3MTMwMTMwWjAzMTEwLwYDVQQD EygwOWNhOWYxY2I3OGNiY2UzNDZkYjAzNjY0NDNlOWFmNzhjMzY5MzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroYUZ6lvkgahVrISb+trI6b+Hjfc Zf6g5rksMo3hP05HXisIEnFqP7sExWUOyx0hD/tf8tgUESTridv0Wo0WcI2x981Q TyLc6Ei6ClhgA0t369LAEqBTcR1AaOzdzoHbDYwOkv6Yd6Or6eFVDZ6RHO1mTlDO it4mGYehrGDf24RStedxz+7XCc3qcHlxFjdGhH4oc3TtkCt/5NqSsQTPeHBK8mL9 A1cpvw2zoIOSMZziByoBwQCsTxt5flM6akQnU6H87aLS7yHEUWqMYFDX9yVPSoCj U1ko4ZAlv6HOkPPw+wcbasOOTJujz2xKj4e40qs+p3+IZPOZcRVybZnu+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnKnxy3jLzjRtsDZkQ+mveMNpMwMB8GA1UdIwQY MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3 LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+mOnCq9 0tPF0/tMSEpu9e7rYc/czE/1r9XF63YEuuLq+OCJ5ftGM5s1M0u74OBuaOWrpkXT DW4WYX39Er4tmPbTrDrv5ByYcBrEqu2klbHEo0HPIIPuHGI/IeyGgKxo3ae1u7FY BOtv0Qv5gIKvnpomB0v0I+javIeAcE4QdfrPZN0x/ZMS+L3qwHhWCkE0VxCh6iX0 vM1CZY7DDBo52OXdV+vPzYuR9I2+WhtuBWGQWSuUz+y+fpsSxjkA7tFs5e+VYhQZ TpTvcR2WRxUKDZEp7ZF9Hn7kRFEmGe1I7yqkav8kNR7i37QNg5umcgJ+lpfyBFGU xPF7VqLnz62I9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 21:44:48 2025 by rpki-client