This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json) Hash identifier: tY/tknYYO/QwAgg+eDJ84+wgnuzS5PvajijcOX+2/2Q= Subject key identifier: A5:CF:C5:9E:51:14:EC:80:13:0B:35:D3:AE:F5:B8:A3:4B:8E:A6:AE Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Certificate serial: 019B631F1F127C8621C629A3CB047CCBB059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft Manifest number: 0A1D Signing time: Sun 28 Dec 2025 04:02:22 +0000 Manifest this update: Sun 28 Dec 2025 04:02:22 +0000 Manifest next update: Mon 29 Dec 2025 04:02:22 +0000 Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: SED558HFNZjNk+JamJOMx+U89J1ehDcCvKWb4VDkboI=) 2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:63:1f:1f:12:7c:86:21:c6:29:a3:cb:04:7c:cb:b0:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Validity Not Before: Dec 28 04:02:22 2025 GMT Not After : Dec 29 04:02:22 2025 GMT Subject: CN=a5cfc59e5114ec80130b35d3aef5b8a34b8ea6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:17:3c:59:50:18:94:ab:9f:19:b9:6d:c3: e7:01:3a:54:d1:bd:36:36:5b:60:2c:f9:08:b6:4e: 49:3d:a9:73:d7:ff:be:58:a0:c3:70:50:36:0a:1a: fc:c8:4e:61:03:15:cb:1a:a0:bd:5f:64:56:b1:8e: f3:29:56:11:16:7b:9e:0a:70:37:12:ed:ba:1e:9e: 40:a9:d9:d3:f6:d6:6c:55:81:09:be:59:05:66:17: fe:cd:5a:4f:78:b4:17:ca:e0:b7:7c:d3:17:a9:c4: 51:b1:cb:88:fa:46:59:11:8a:14:b2:d6:2c:3c:1a: 5e:56:26:9f:aa:22:ed:e7:05:41:84:6f:0d:00:1c: cd:7f:3d:8c:ec:c5:f8:bf:95:6b:8e:19:be:91:85: 50:1d:2f:56:b9:4e:c8:4b:5e:4d:cb:2f:1c:85:c3: c9:c6:52:aa:7a:81:e8:f2:eb:ad:32:80:fe:99:fc: 6e:06:93:0a:2f:36:80:64:ab:43:a8:58:99:f0:f4: 3b:43:f2:11:53:42:dd:ba:15:51:c0:47:c5:c4:51: 0c:7c:18:fb:01:5b:3c:04:a5:14:29:a0:1f:0b:69: 6b:33:53:1a:71:bd:56:b1:22:db:e0:99:6a:25:da: 4c:50:2c:38:4d:a5:c0:c4:ba:6c:a3:d1:b9:9f:41: 5b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CF:C5:9E:51:14:EC:80:13:0B:35:D3:AE:F5:B8:A3:4B:8E:A6:AE X509v3 Authority Key Identifier: keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:86:1e:b1:b9:ad:ba:fa:a4:40:09:52:f7:6b:85:1b:6a:6a: ea:60:07:93:ed:3b:2c:ee:ea:fe:81:87:6f:1d:c9:91:74:04: 08:6e:8c:58:b2:61:99:f6:e5:33:14:a4:e0:4d:76:d4:8e:54: b4:7d:c6:04:cb:9a:70:14:2a:31:cd:59:20:9e:ee:fc:4d:5c: f4:3b:85:91:ee:e6:0e:11:1c:83:08:be:dc:7b:34:23:ea:5c: 26:e7:be:d3:c7:3a:92:47:57:82:43:6f:2f:13:ab:0d:d3:85: f7:bc:b3:98:bb:c1:e3:52:b6:30:cc:c4:f9:2b:78:3a:31:d1: 21:6e:71:a4:67:c2:5e:5b:66:00:53:cb:6a:55:76:8b:b9:9b: 67:fe:2c:9b:7d:8f:76:b8:6d:fe:64:cf:90:7d:b0:64:12:57: 90:d2:04:3a:4b:de:c6:25:0e:54:3c:b2:d6:ba:17:a1:81:0c: 9b:cf:77:d3:b0:02:6a:11:a9:f8:74:0b:cb:76:b9:99:fc:d0: 22:ef:7f:bc:db:af:34:67:6e:6a:69:33:c2:90:54:ee:90:68: 17:21:84:8e:39:fd:4e:0f:0e:a5:b4:56:6e:2a:98:8f:e2:ea: 64:4a:dd:0c:2d:92:f3:ef:b8:c4:5b:d8:29:fb:29:9f:33:ca: f5:63:f7:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtjHx8SfIYhximjywR8y7BZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz ZmE0YTIwHhcNMjUxMjI4MDQwMjIyWhcNMjUxMjI5MDQwMjIyWjAzMTEwLwYDVQQD EyhhNWNmYzU5ZTUxMTRlYzgwMTMwYjM1ZDNhZWY1YjhhMzRiOGVhNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgMXPFlQGJSrnxm5bcPnATpU0b02 NltgLPkItk5JPalz1/++WKDDcFA2Chr8yE5hAxXLGqC9X2RWsY7zKVYRFnueCnA3 Eu26Hp5AqdnT9tZsVYEJvlkFZhf+zVpPeLQXyuC3fNMXqcRRscuI+kZZEYoUstYs PBpeViafqiLt5wVBhG8NABzNfz2M7MX4v5Vrjhm+kYVQHS9WuU7IS15Nyy8chcPJ xlKqeoHo8uutMoD+mfxuBpMKLzaAZKtDqFiZ8PQ7Q/IRU0LduhVRwEfFxFEMfBj7 AVs8BKUUKaAfC2lrM1Macb1WsSLb4JlqJdpMUCw4TaXAxLpso9G5n0Fb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXPxZ5RFOyAEws10671uKNLjqauMB8GA1UdIwQY MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2 LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp4Yesbmt uvqkQAlS92uFG2pq6mAHk+07LO7q/oGHbx3JkXQECG6MWLJhmfblMxSk4E121I5U tH3GBMuacBQqMc1ZIJ7u/E1c9DuFke7mDhEcgwi+3Hs0I+pcJue+08c6kkdXgkNv LxOrDdOF97yzmLvB41K2MMzE+St4OjHRIW5xpGfCXltmAFPLalV2i7mbZ/4sm32P drht/mTPkH2wZBJXkNIEOkvexiUOVDyy1roXoYEMm89307ACahGp+HQLy3a5mfzQ Iu9/vNuvNGduamkzwpBU7pBoFyGEjjn9Tg8OpbRWbiqYj+LqZErdDC2S8++4xFvY KfspnzPK9WP3oA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:27 2025 by rpki-client