This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json) Hash identifier: tmHD/tZ5EsG8qWnjMaRKek9auN4cpZ7IkJUzNF7RLIc= Subject key identifier: F1:7F:55:E5:EB:9C:1A:CF:66:E7:A2:C8:86:FF:AD:70:21:E4:FF:42 Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Certificate serial: 019B37218405BC9ACB0E7F5AAD427063B227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft Manifest number: 05E1 Signing time: Fri 19 Dec 2025 15:01:41 +0000 Manifest this update: Fri 19 Dec 2025 15:01:41 +0000 Manifest next update: Sat 20 Dec 2025 15:01:41 +0000 Files and hashes: 1: Jnu4ULGWiYYyf0zY1jAWEkVWHD0.roa (hash: qyHwPaggVI5vageO/6J79WpR7CRcu7iGJcwNnzLQCvo=) 2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: rEpVVd2Q3z7REoIoAkkZrq840TL6l9ThYXtCJwJ/0Go=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:84:05:bc:9a:cb:0e:7f:5a:ad:42:70:63:b2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Validity Not Before: Dec 19 15:01:41 2025 GMT Not After : Dec 20 15:01:41 2025 GMT Subject: CN=f17f55e5eb9c1acf66e7a2c886ffad7021e4ff42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ab:16:eb:4e:81:73:6e:e7:da:da:9e:24:e3: 43:82:d9:a9:1d:32:57:1a:7e:f3:47:98:6d:bb:2f: 51:60:e3:9a:7a:93:b1:42:7f:75:98:dd:bd:9a:f0: a0:38:1b:78:57:4b:06:94:1b:39:1c:67:c2:f4:c7: 25:03:76:61:c7:ba:ae:70:b2:67:49:4d:28:6a:ac: 1f:c0:14:fb:c2:73:d0:0a:80:88:af:60:a8:e2:09: ed:24:96:63:82:54:22:17:f7:a6:1f:d7:51:9a:01: db:56:aa:85:28:6c:c6:50:b8:c5:5e:9b:99:c9:8a: 69:a5:5e:4c:a4:d0:58:96:9e:ff:05:8b:f3:59:df: 9f:0f:ed:15:c4:80:4d:35:b2:4e:b7:aa:b0:51:a5: 7a:f4:aa:28:e6:1c:98:50:a1:a7:e8:d4:44:4a:78: b7:8f:fa:55:c2:f3:e1:0f:99:25:ac:c3:38:40:34: 07:c1:35:ea:bc:42:ce:97:dc:66:52:b6:5c:37:12: 10:90:f7:4e:61:6c:77:96:ae:cf:43:fd:4e:96:9a: a9:54:39:ac:28:bb:af:e8:f8:f0:9c:e5:d4:f6:90: 98:3f:5c:6e:2a:6a:9e:2e:4e:f2:bb:4e:3f:2f:b9: c6:19:c4:b4:ab:3e:d8:82:3d:dd:cc:33:27:43:40: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:55:E5:EB:9C:1A:CF:66:E7:A2:C8:86:FF:AD:70:21:E4:FF:42 X509v3 Authority Key Identifier: keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:19:61:13:76:7e:e7:be:25:30:50:fb:0f:c6:18:81:3d:50: b4:20:fc:67:12:d7:3f:f0:df:46:a3:dd:9f:fb:fb:a2:2f:f5: b5:ac:3b:94:ab:cf:68:76:59:ed:28:19:c7:63:ca:fc:1b:54: 51:c4:dd:ed:3d:08:3a:36:2b:12:52:00:af:15:40:b3:13:bc: c6:ea:29:cc:75:52:9d:b3:6c:68:5a:02:8b:cd:34:d9:36:f5: 47:5e:a8:78:b8:e9:67:f0:6f:9a:71:4f:d8:63:ac:f4:0a:42: 3d:6f:df:59:51:35:64:99:59:3a:b9:84:92:1a:fa:61:53:98: ff:52:86:c7:48:db:c4:22:f9:a3:e9:99:85:da:c4:18:5b:3b: e2:ce:dd:a5:83:05:57:a0:57:c2:bc:d8:e9:89:48:cb:94:75: 2b:c1:49:3b:55:3d:be:81:d1:ee:79:27:2a:68:98:e7:03:b1: 7c:f6:0e:7b:6f:85:3a:de:10:55:72:78:a1:8f:8c:49:b4:11: d7:97:dd:57:bc:7c:54:dd:77:bf:bc:e0:89:63:46:3f:fe:34: 49:29:a1:20:3d:f1:ef:47:8c:51:b6:cc:df:1f:42:d5:07:60: 3b:ba:ef:e8:c9:5b:63:6a:eb:30:d8:d9:79:92:fa:1b:c3:38: f4:00:9b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IYQFvJrLDn9arUJwY7InMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0 MGRiZDUwHhcNMjUxMjE5MTUwMTQxWhcNMjUxMjIwMTUwMTQxWjAzMTEwLwYDVQQD EyhmMTdmNTVlNWViOWMxYWNmNjZlN2EyYzg4NmZmYWQ3MDIxZTRmZjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9asW606Bc27n2tqeJONDgtmpHTJX Gn7zR5htuy9RYOOaepOxQn91mN29mvCgOBt4V0sGlBs5HGfC9MclA3Zhx7qucLJn SU0oaqwfwBT7wnPQCoCIr2Co4gntJJZjglQiF/emH9dRmgHbVqqFKGzGULjFXpuZ yYpppV5MpNBYlp7/BYvzWd+fD+0VxIBNNbJOt6qwUaV69Koo5hyYUKGn6NRESni3 j/pVwvPhD5klrMM4QDQHwTXqvELOl9xmUrZcNxIQkPdOYWx3lq7PQ/1OlpqpVDms KLuv6PjwnOXU9pCYP1xuKmqeLk7yu04/L7nGGcS0qz7Ygj3dzDMnQ0BVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPF/VeXrnBrPZueiyIb/rXAh5P9CMB8GA1UdIwQY MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt ZjM4Yzc0OWI2ZTM5LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5 LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADRlhE3Z+ 574lMFD7D8YYgT1QtCD8ZxLXP/DfRqPdn/v7oi/1taw7lKvPaHZZ7SgZx2PK/BtU UcTd7T0IOjYrElIArxVAsxO8xuopzHVSnbNsaFoCi8002Tb1R16oeLjpZ/BvmnFP 2GOs9ApCPW/fWVE1ZJlZOrmEkhr6YVOY/1KGx0jbxCL5o+mZhdrEGFs74s7dpYMF V6BXwrzY6YlIy5R1K8FJO1U9voHR7nknKmiY5wOxfPYOe2+FOt4QVXJ4oY+MSbQR 15fdV7x8VN13v7zgiWNGP/40SSmhID3x70eMUbbM3x9C1QdgO7rv6MlbY2rrMNjZ eZL6G8M49ACb1Q== -----END CERTIFICATE-----Generated at Fri Dec 19 17:22:01 2025 by rpki-client