This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json) Hash identifier: SlUJ6pjqAyLEJXwIuIwReEFXzcdR3dzOpno0kzKEM8Q= Subject key identifier: E7:15:E1:4C:22:8D:D3:23:7C:74:F1:1E:7A:40:BA:18:8B:1B:C5:4C Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Certificate serial: 019B424AEDA124F85C92AAF5C450DD01B6E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft Manifest number: 1427 Signing time: Sun 21 Dec 2025 19:02:45 +0000 Manifest this update: Sun 21 Dec 2025 19:02:45 +0000 Manifest next update: Mon 22 Dec 2025 19:02:45 +0000 Files and hashes: 1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: d+uTo9qe7tH0uP9JW8AuJ5ptt3fM8LbNI6RXw5WGIv4=) 2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:ed:a1:24:f8:5c:92:aa:f5:c4:50:dd:01:b6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Validity Not Before: Dec 21 19:02:45 2025 GMT Not After : Dec 22 19:02:45 2025 GMT Subject: CN=e715e14c228dd3237c74f11e7a40ba188b1bc54c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9d:6d:03:a6:a2:63:54:71:3c:9b:d6:5f:25: cc:de:0e:46:c6:d8:0a:b6:11:d0:2d:7a:a0:7c:dc: 14:0d:e5:8a:d2:16:f9:6a:8b:23:96:21:21:d0:99: 9f:49:8b:b5:b0:1b:2d:52:cd:8f:b9:40:71:31:c2: ba:9b:83:a2:22:15:93:c6:8a:00:36:f8:84:aa:d2: ce:1e:c1:09:4e:ee:67:af:a6:6b:58:06:c9:5e:12: 2c:54:8b:de:bd:1d:59:56:6a:13:16:5f:a5:1d:e7: 6a:40:f1:cd:c1:8b:31:1a:d7:27:48:8c:e0:76:6e: 46:83:cb:49:28:24:38:99:3d:3a:56:22:53:f8:41: d4:23:39:70:03:87:10:a0:8b:3d:21:22:1c:80:2e: 44:9a:a7:df:49:09:51:8f:8c:3b:3e:2e:d3:39:3e: eb:21:09:32:8f:a2:93:60:7d:47:29:5e:8d:a2:1a: 40:81:98:a6:ec:78:2d:ab:da:8d:8d:4e:21:88:9e: 92:d6:f9:22:ef:21:1f:44:e7:41:29:6c:82:d8:0e: 7c:0c:e0:51:7f:17:92:88:a2:db:62:f8:df:c6:52: 09:c5:f2:bc:fc:90:23:24:a2:70:13:f6:bb:e8:cd: df:19:5c:b5:3f:86:31:d9:de:09:29:9f:78:ef:91: 0b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:15:E1:4C:22:8D:D3:23:7C:74:F1:1E:7A:40:BA:18:8B:1B:C5:4C X509v3 Authority Key Identifier: keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:00:13:2c:82:ba:40:85:c6:84:a4:a9:3f:17:73:14:50:3b: 53:8f:94:00:d4:bf:6d:0d:44:6d:21:73:14:36:f7:d1:f1:95: 75:e1:13:87:c7:b7:33:a8:bb:ee:36:11:14:f2:fc:94:4c:5e: a3:e4:52:a0:a8:5c:35:a2:b5:27:97:8e:16:38:43:4c:cc:70: cb:f4:63:47:5c:b1:b4:8c:52:28:26:4f:a8:0d:37:16:fe:47: 60:32:af:ce:d5:26:12:2e:08:d0:70:27:48:51:5b:80:de:98: 5c:ba:00:99:79:f9:c9:d2:60:9d:b8:b2:fb:27:bf:18:b0:cc: 43:f9:a4:47:85:d9:50:80:de:cb:ea:1d:5b:7e:c0:02:b7:b5: 3e:4e:a9:3b:65:7a:ad:01:95:70:10:a6:6d:22:29:68:ed:cc: ac:82:c8:11:42:2a:5b:fb:85:bc:88:04:cd:6b:d5:a4:d0:48: 97:d4:25:11:ab:5c:a4:e6:10:37:5a:88:50:c8:b3:a4:e1:aa: 27:70:95:b2:fb:ad:ed:be:69:57:61:6e:c0:30:31:23:aa:1d: b3:55:4e:06:39:bf:f8:1e:c7:5f:e9:7d:0b:dd:b5:c3:1d:08: 6a:a9:a7:89:6d:b2:0e:39:29:4a:2f:0b:61:8a:ee:b7:1c:35: 0a:b3:25:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSu2hJPhckqr1xFDdAbblMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTc4NTlkYzM5ZDQ3MzYxNDJjZjFlMjI5YzhhYzRiZTYy M2I5MDMwHhcNMjUxMjIxMTkwMjQ1WhcNMjUxMjIyMTkwMjQ1WjAzMTEwLwYDVQQD EyhlNzE1ZTE0YzIyOGRkMzIzN2M3NGYxMWU3YTQwYmExODhiMWJjNTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ1tA6aiY1RxPJvWXyXM3g5GxtgK thHQLXqgfNwUDeWK0hb5aosjliEh0JmfSYu1sBstUs2PuUBxMcK6m4OiIhWTxooA NviEqtLOHsEJTu5nr6ZrWAbJXhIsVIvevR1ZVmoTFl+lHedqQPHNwYsxGtcnSIzg dm5Gg8tJKCQ4mT06ViJT+EHUIzlwA4cQoIs9ISIcgC5EmqffSQlRj4w7Pi7TOT7r IQkyj6KTYH1HKV6NohpAgZim7Hgtq9qNjU4hiJ6S1vki7yEfROdBKWyC2A58DOBR fxeSiKLbYvjfxlIJxfK8/JAjJKJwE/a76M3fGVy1P4Yx2d4JKZ9475EL9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcV4UwijdMjfHTxHnpAuhiLG8VMMB8GA1UdIwQY MBaAFJ+nhZ3DnUc2FCzx4inIrEvmI7kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTIt ZThkNmMyZjA3MWRmLzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTItZThkNmMyZjA3MWRm LzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQATLIK6 QIXGhKSpPxdzFFA7U4+UANS/bQ1EbSFzFDb30fGVdeETh8e3M6i77jYRFPL8lExe o+RSoKhcNaK1J5eOFjhDTMxwy/RjR1yxtIxSKCZPqA03Fv5HYDKvztUmEi4I0HAn SFFbgN6YXLoAmXn5ydJgnbiy+ye/GLDMQ/mkR4XZUIDey+odW37AAre1Pk6pO2V6 rQGVcBCmbSIpaO3MrILIEUIqW/uFvIgEzWvVpNBIl9QlEatcpOYQN1qIUMizpOGq J3CVsvut7b5pV2FuwDAxI6ods1VOBjm/+B7HX+l9C921wx0IaqmniW2yDjkpSi8L YYrutxw1CrMlbA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:44:02 2025 by rpki-client