This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json) Hash identifier: qKBfDxVfvPRlOYAbbkQ5aoG/TNC9OlX7Oiy8QFqFRrw= Subject key identifier: 1D:05:99:8D:D5:EA:9B:64:53:56:75:3D:C9:7C:0E:3D:43:6A:C3:C0 Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c Certificate serial: 019AF12D68CFFF6300AEC51C1FC5E31D46E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft Manifest number: 0B9F Signing time: Sat 06 Dec 2025 01:01:16 +0000 Manifest this update: Sat 06 Dec 2025 01:01:16 +0000 Manifest next update: Sun 07 Dec 2025 01:01:16 +0000 Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=) 2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: BQJ3klDw+fEQ/Kg9rdreD1R/AGJhQllotGnJLXZZcJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:68:cf:ff:63:00:ae:c5:1c:1f:c5:e3:1d:46:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c Validity Not Before: Dec 6 01:01:16 2025 GMT Not After : Dec 7 01:01:16 2025 GMT Subject: CN=1d05998dd5ea9b645356753dc97c0e3d436ac3c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5c:c5:b2:ab:d8:c5:ab:f4:73:2c:0f:e0:a5: 1f:21:88:b9:f5:70:87:28:a4:73:50:cf:f4:74:eb: a2:89:bc:76:ba:ad:c1:07:a1:49:80:29:5a:ac:27: 0f:d2:7d:6b:1d:8f:a9:b7:86:60:2b:c0:7d:c8:dd: 96:1f:7a:85:f5:4a:21:49:6e:c3:1d:c6:54:9e:9f: 4d:8b:32:b7:62:87:c1:13:4d:ec:04:60:ca:50:7a: 90:48:d6:7e:22:15:e9:0e:0b:5e:34:f4:d4:0f:04: 66:0a:12:1f:f8:99:f7:1c:77:ec:c5:61:20:02:ca: 4d:ed:fc:6d:9a:3e:37:c8:98:87:c1:5d:ff:bd:3f: 02:13:41:0d:ed:10:3f:11:4b:b6:b8:48:2c:2f:8f: b5:d0:3c:0e:30:aa:22:7f:f6:04:22:c7:d8:0b:cd: d2:b7:e5:62:29:a0:9f:ce:74:6e:2a:f4:8c:ea:98: 9f:1d:0a:50:34:8b:33:27:04:12:87:e1:7c:a6:20: 99:dc:67:7e:20:f9:88:a0:ad:f7:6f:21:a5:f0:cb: d4:60:85:09:e7:34:ea:62:06:f2:18:b0:17:b9:05: 63:f7:94:6b:1e:3e:e5:a9:95:b4:0b:05:b2:96:c0: 2c:f5:28:04:37:cf:cb:a1:68:13:80:19:0d:9b:40: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:05:99:8D:D5:EA:9B:64:53:56:75:3D:C9:7C:0E:3D:43:6A:C3:C0 X509v3 Authority Key Identifier: keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:29:93:c7:19:c5:ed:19:37:37:59:1a:a0:d5:9e:d1:4c:0d: ea:39:52:31:a3:d0:2a:76:bf:30:9d:a8:a6:33:52:de:e1:1b: 63:6a:78:c3:17:cf:46:e0:45:23:62:f4:f2:3c:ac:b5:48:aa: fc:02:b6:b9:58:89:16:a0:b4:9e:da:00:57:eb:ec:fa:f6:2f: 18:d7:94:1e:7e:1a:77:f2:6c:12:3c:52:77:e5:2e:49:5a:98: 4c:71:a6:f8:5b:f5:f1:f6:65:7b:3e:6e:37:00:8d:66:a2:ae: bb:f6:cd:63:10:6d:b9:48:b8:c4:c1:73:b0:94:f1:c1:fb:9c: 95:ab:3b:65:c5:58:db:a2:45:3f:92:50:23:d3:b8:c4:eb:ed: a7:09:10:04:17:fb:0d:0f:51:92:59:0f:3e:1d:87:99:db:0a: 13:1f:f1:a3:64:36:02:7b:f4:79:b2:da:8c:9e:06:34:0a:e6: cd:7b:b3:bd:22:2e:e4:1e:bd:ae:69:53:93:68:05:8a:cc:06: e5:ad:07:ec:07:57:64:35:f5:a0:91:b3:c3:c6:50:ca:3f:ae: 67:f7:46:a4:26:3f:ed:73:e8:cd:59:93:fa:a5:01:a9:83:be: 93:37:2e:31:48:f7:78:38:ed:45:eb:92:65:9f:34:e4:3a:ba: 16:4b:b8:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWjP/2MArsUcH8XjHUbkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODkxZmYzNDc3ZWQ3ZmRhYWNmYWUyZTNmMGRmYTY0ZmQ5 MmFjMGMwHhcNMjUxMjA2MDEwMTE2WhcNMjUxMjA3MDEwMTE2WjAzMTEwLwYDVQQD EygxZDA1OTk4ZGQ1ZWE5YjY0NTM1Njc1M2RjOTdjMGUzZDQzNmFjM2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11zFsqvYxav0cywP4KUfIYi59XCH KKRzUM/0dOuiibx2uq3BB6FJgClarCcP0n1rHY+pt4ZgK8B9yN2WH3qF9UohSW7D HcZUnp9NizK3YofBE03sBGDKUHqQSNZ+IhXpDgteNPTUDwRmChIf+Jn3HHfsxWEg AspN7fxtmj43yJiHwV3/vT8CE0EN7RA/EUu2uEgsL4+10DwOMKoif/YEIsfYC83S t+ViKaCfznRuKvSM6pifHQpQNIszJwQSh+F8piCZ3Gd+IPmIoK33byGl8MvUYIUJ 5zTqYgbyGLAXuQVj95RrHj7lqZW0CwWylsAs9SgEN8/LoWgTgBkNm0CfQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0FmY3V6ptkU1Z1Pcl8Dj1DasPAMB8GA1UdIwQY MBaAFJ+JH/NHftf9qs+uLj8N+mT9kqwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDkt NzBhNGE4ZDdjNDNmLzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDktNzBhNGE4ZDdjNDNm LzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSmTxxnF 7Rk3N1kaoNWe0UwN6jlSMaPQKna/MJ2opjNS3uEbY2p4wxfPRuBFI2L08jystUiq /AK2uViJFqC0ntoAV+vs+vYvGNeUHn4ad/JsEjxSd+UuSVqYTHGm+Fv18fZlez5u NwCNZqKuu/bNYxBtuUi4xMFzsJTxwfuclas7ZcVY26JFP5JQI9O4xOvtpwkQBBf7 DQ9RklkPPh2HmdsKEx/xo2Q2Anv0ebLajJ4GNArmzXuzvSIu5B69rmlTk2gFiswG 5a0H7AdXZDX1oJGzw8ZQyj+uZ/dGpCY/7XPozVmT+qUBqYO+kzcuMUj3eDjtReuS ZZ805Dq6Fku4mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:53 2025 by rpki-client