This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json) Hash identifier: EFbrVqCnZaYUqntXzo7bjgDx9RAl7VQbLV164eC8ozE= Subject key identifier: BC:CF:D5:1C:E8:FF:E3:FA:DE:7A:F4:96:DA:E7:CA:27:9D:F9:D4:CE Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26 Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826 Certificate serial: 019AF12D1E22291ED3FB32664531D4ADF455 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft Manifest number: 0289 Signing time: Sat 06 Dec 2025 01:00:56 +0000 Manifest this update: Sat 06 Dec 2025 01:00:56 +0000 Manifest next update: Sun 07 Dec 2025 01:00:56 +0000 Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: Z0BBZl3loQd56NGghuHfnaDjYahcV/V5A5TBmxK/o50=) 2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:1e:22:29:1e:d3:fb:32:66:45:31:d4:ad:f4:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826 Validity Not Before: Dec 6 01:00:56 2025 GMT Not After : Dec 7 01:00:56 2025 GMT Subject: CN=bccfd51ce8ffe3fade7af496dae7ca279df9d4ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:94:73:8b:02:bd:45:50:bd:bd:ce:f2:35:25: 8c:b2:f7:42:7f:7d:da:2d:46:88:65:cf:8a:fd:1a: 5a:98:9e:3c:12:47:57:ec:16:a9:56:35:90:a5:1f: 21:69:12:c7:ed:56:b5:13:9f:43:8a:b5:d9:40:98: 99:fb:2b:10:02:2b:a2:c7:26:85:f3:6d:8a:ba:1f: ca:fc:4b:c3:ed:8d:94:99:79:7e:71:3e:cd:aa:c3: 2d:a3:da:43:c1:74:6c:a9:46:c8:e4:9a:31:fa:5f: 63:cf:eb:be:42:3e:0b:45:fc:25:79:ce:1a:b9:f9: 31:84:56:be:6d:74:01:98:2e:06:76:84:15:85:d8: 4f:6d:c8:81:0e:b6:b2:f4:74:20:28:4c:53:c8:d2: 21:3b:b8:f2:93:5f:16:f4:bf:21:58:dd:a3:0a:75: ac:31:3d:dd:2e:06:be:8a:bf:3c:fd:5a:c7:4e:55: 06:75:49:3b:66:08:5c:d3:a7:36:85:f3:01:bf:cb: 80:66:d0:ff:c8:54:1a:5e:3a:20:dd:fe:dc:6b:ed: 5d:16:46:02:52:37:b8:dd:df:aa:a6:94:3d:73:b6: 92:61:cb:95:ff:0c:87:c9:25:cc:4e:96:25:7a:3b: 2a:b1:8d:1b:60:ea:73:95:3c:e3:b4:7c:cf:44:18: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:CF:D5:1C:E8:FF:E3:FA:DE:7A:F4:96:DA:E7:CA:27:9D:F9:D4:CE X509v3 Authority Key Identifier: keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:77:1a:95:f1:81:d4:fc:6f:da:0a:ff:e0:a6:96:aa:93:6a: 73:ed:3f:8e:32:52:27:a6:d9:8b:37:ac:60:82:af:5e:bc:b5: 01:a6:51:74:18:fb:19:2d:f5:92:be:fb:d9:15:6d:73:f1:9a: d2:37:c5:2c:42:1d:bf:37:4e:55:eb:a9:fe:d9:b1:44:a2:d4: 50:4a:6e:75:18:a4:cd:5a:6e:ba:71:c3:e3:d8:c5:b8:cd:8e: 5c:45:06:5a:df:fa:77:52:f9:3f:cc:13:a1:9c:d4:50:66:b4: eb:28:24:cc:59:5c:21:97:79:01:5c:12:3a:59:7f:47:ef:30: 00:96:8d:68:ee:66:9f:77:9d:ba:21:b7:0e:5d:fa:e8:fc:2b: 8e:6e:e2:be:28:a4:b1:bd:6a:55:87:72:90:d9:93:cb:b9:61: 07:37:bc:6b:7b:40:75:5a:97:3a:09:93:12:46:80:20:0f:2f: d7:38:e2:33:a4:07:93:b0:dc:32:80:4e:3e:ab:6f:62:ba:d3: a7:1e:8e:9e:cb:c2:e1:f3:c5:93:85:76:29:ab:53:aa:01:83: 28:47:27:67:5a:24:79:56:87:05:63:f0:1c:01:a0:f2:00:33: a9:9a:58:9a:f9:57:29:ca:95:9e:f2:2b:e2:94:f6:80:5f:ad: e6:b1:79:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLR4iKR7T+zJmRTHUrfRVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi NmM4MjYwHhcNMjUxMjA2MDEwMDU2WhcNMjUxMjA3MDEwMDU2WjAzMTEwLwYDVQQD EyhiY2NmZDUxY2U4ZmZlM2ZhZGU3YWY0OTZkYWU3Y2EyNzlkZjlkNGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25RziwK9RVC9vc7yNSWMsvdCf33a LUaIZc+K/RpamJ48EkdX7BapVjWQpR8haRLH7Va1E59DirXZQJiZ+ysQAiuixyaF 822Kuh/K/EvD7Y2UmXl+cT7NqsMto9pDwXRsqUbI5Jox+l9jz+u+Qj4LRfwlec4a ufkxhFa+bXQBmC4GdoQVhdhPbciBDray9HQgKExTyNIhO7jyk18W9L8hWN2jCnWs MT3dLga+ir88/VrHTlUGdUk7Zghc06c2hfMBv8uAZtD/yFQaXjog3f7ca+1dFkYC Uje43d+qppQ9c7aSYcuV/wyHySXMTpYlejsqsY0bYOpzlTzjtHzPRBjITQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzP1Rzo/+P63nr0ltrnyied+dTOMB8GA1UdIwQY MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXcalfGB 1Pxv2gr/4KaWqpNqc+0/jjJSJ6bZizesYIKvXry1AaZRdBj7GS31kr772RVtc/Ga 0jfFLEIdvzdOVeup/tmxRKLUUEpudRikzVpuunHD49jFuM2OXEUGWt/6d1L5P8wT oZzUUGa06ygkzFlcIZd5AVwSOll/R+8wAJaNaO5mn3eduiG3Dl366Pwrjm7iviik sb1qVYdykNmTy7lhBze8a3tAdVqXOgmTEkaAIA8v1zjiM6QHk7DcMoBOPqtvYrrT px6OnsvC4fPFk4V2KatTqgGDKEcnZ1okeVaHBWPwHAGg8gAzqZpYmvlXKcqVnvIr 4pT2gF+t5rF5wg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:46 2025 by rpki-client