This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json) Hash identifier: hnMpq4tIatZ5J2eOA+2wYym+f1Fs8mQT4G6Ka5sN75M= Subject key identifier: 6E:0F:7A:7E:3D:58:3B:B3:32:41:33:C1:DC:96:EA:01:7F:8D:B7:F3 Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30 Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630 Certificate serial: 019B70A3F5567C4AFC1000769B4DFC848D14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft Manifest number: 130D Signing time: Tue 30 Dec 2025 19:02:31 +0000 Manifest this update: Tue 30 Dec 2025 19:02:31 +0000 Manifest next update: Wed 31 Dec 2025 19:02:31 +0000 Files and hashes: 1: boDA4PQiCnDxp3aC4mFfCKLLJrE.roa (hash: qzJMKZb9GADDw4cKKxLUhJ/VrvT205N7vn0KRws/PGE=) 2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: CkgPKdFoUwCrdouy+nYDuqCUwy6f4Z1R5K21Dw7SnaE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a3:f5:56:7c:4a:fc:10:00:76:9b:4d:fc:84:8d:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630 Validity Not Before: Dec 30 19:02:31 2025 GMT Not After : Dec 31 19:02:31 2025 GMT Subject: CN=6e0f7a7e3d583bb3324133c1dc96ea017f8db7f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d7:b6:5c:95:00:30:16:1c:e5:16:52:a9:6f: 1b:fd:27:16:b4:63:9b:be:db:f2:5d:33:f7:23:2e: c9:93:9d:f9:9d:5a:2f:fb:30:8d:98:9c:ed:4b:49: d1:c7:43:81:10:dc:a7:03:e7:7b:04:6b:b0:11:4e: 68:17:7d:73:50:1a:8c:ff:36:52:c2:f7:95:65:47: 70:60:30:d6:76:a8:fb:92:0d:f7:c1:1d:6b:66:aa: 0a:49:14:7b:ec:11:de:92:1d:e7:6b:09:39:70:cc: 02:46:d1:9c:73:d6:d7:bb:bf:3f:16:8f:09:74:f4: ae:9d:a3:82:67:b4:c7:64:c2:16:1a:cf:97:f0:b0: b0:87:f5:a6:69:ac:24:71:1b:ef:29:0f:f0:49:2d: 13:5c:8e:81:d1:1f:d7:f4:df:50:81:49:a0:d1:92: 25:53:d0:ef:d3:5f:bf:13:58:e3:fe:3a:78:03:f1: a1:10:5f:7f:9e:cf:91:d2:d2:a4:28:69:90:64:61: e4:77:e3:65:df:ff:b6:9a:37:f3:68:a8:77:43:60: 7a:d8:26:a9:d4:39:09:06:f5:b1:d9:d3:0e:27:b7: 22:4e:69:dc:51:22:94:48:8e:c2:43:b3:21:0e:44: b2:95:86:86:c9:58:ed:91:f2:a4:6e:68:78:61:4b: 9f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:0F:7A:7E:3D:58:3B:B3:32:41:33:C1:DC:96:EA:01:7F:8D:B7:F3 X509v3 Authority Key Identifier: keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:68:eb:b5:33:9a:45:38:ab:d4:b5:00:05:76:32:e0:0b:92: 55:ad:4f:46:52:ec:49:ef:39:e6:61:46:e3:7a:f6:d1:bb:24: c5:13:42:e5:b4:74:72:20:1e:90:98:68:0f:59:44:1a:ad:bc: 93:87:42:10:bd:dc:f8:2f:c5:02:e0:e5:16:45:c2:f8:f0:a6: 3e:85:b7:d3:4a:af:35:a1:00:88:61:a8:f8:a8:08:65:af:56: 81:fe:b6:f4:47:72:51:37:e4:0b:b0:a0:f8:57:fe:9b:eb:0e: 5c:46:e9:df:71:f5:2e:e8:8f:46:a8:6c:d8:56:8e:cd:3c:ec: 7a:70:3a:a5:12:60:5d:92:d8:5c:e2:78:32:d1:b1:35:86:3b: 46:e2:b3:04:48:dc:5a:a7:48:b8:70:6d:97:ac:c6:78:17:38: 8b:19:ee:57:04:3d:93:48:8d:bf:6d:e2:1d:9a:15:a9:20:de: 43:d2:75:ab:c6:19:c0:a9:ea:20:ff:db:eb:d2:8e:18:e0:aa: f6:88:35:6d:45:dd:fa:b6:25:10:ac:cf:93:73:9f:ea:9c:34: b0:23:97:b5:8f:9b:8b:78:bc:af:d4:5d:fb:68:9f:86:81:2e: 82:f8:f3:60:dd:13:4e:56:70:52:a1:8c:f0:24:5f:01:f2:c8: 3f:02:bb:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwo/VWfEr8EAB2m038hI0UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYmRkYzYzMTNlZmM0YjY3MmE3ZTJiMzJhZTNjNDQ4NGZl NWY2MzAwHhcNMjUxMjMwMTkwMjMxWhcNMjUxMjMxMTkwMjMxWjAzMTEwLwYDVQQD Eyg2ZTBmN2E3ZTNkNTgzYmIzMzI0MTMzYzFkYzk2ZWEwMTdmOGRiN2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29e2XJUAMBYc5RZSqW8b/ScWtGOb vtvyXTP3Iy7Jk535nVov+zCNmJztS0nRx0OBENynA+d7BGuwEU5oF31zUBqM/zZS wveVZUdwYDDWdqj7kg33wR1rZqoKSRR77BHekh3nawk5cMwCRtGcc9bXu78/Fo8J dPSunaOCZ7THZMIWGs+X8LCwh/WmaawkcRvvKQ/wSS0TXI6B0R/X9N9QgUmg0ZIl U9Dv01+/E1jj/jp4A/GhEF9/ns+R0tKkKGmQZGHkd+Nl3/+2mjfzaKh3Q2B62Cap 1DkJBvWx2dMOJ7ciTmncUSKUSI7CQ7MhDkSylYaGyVjtkfKkbmh4YUufywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4Pen49WDuzMkEzwdyW6gF/jbfzMB8GA1UdIwQY MBaAFJ+93GMT78S2cqfisyrjxEhP5fYwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZTA2OWEtMzQyMS00MGFiLTllMGMt NDVjYzJkZDZlNDkxLzEvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZTA2OWEtMzQyMS00MGFiLTllMGMtNDVjYzJkZDZlNDkx LzEvbjczY1l4UHZ4TFp5cC1Lekt1UEVTRV9sOWpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADmjrtTOa RTir1LUABXYy4AuSVa1PRlLsSe855mFG43r20bskxRNC5bR0ciAekJhoD1lEGq28 k4dCEL3c+C/FAuDlFkXC+PCmPoW300qvNaEAiGGo+KgIZa9Wgf629EdyUTfkC7Cg +Ff+m+sOXEbp33H1LuiPRqhs2FaOzTzsenA6pRJgXZLYXOJ4MtGxNYY7RuKzBEjc WqdIuHBtl6zGeBc4ixnuVwQ9k0iNv23iHZoVqSDeQ9J1q8YZwKnqIP/b69KOGOCq 9og1bUXd+rYlEKzPk3Of6pw0sCOXtY+bi3i8r9Rd+2ifhoEugvjzYN0TTlZwUqGM 8CRfAfLIPwK7Yg== -----END CERTIFICATE-----Generated at Wed Dec 31 00:02:39 2025 by rpki-client