This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json)
Hash identifier: 9oD04c9RQ/iPfqjNbmP3EAtLbshHtL52CTz/tbnJqcA=
Subject key identifier: BE:C8:FF:55:2E:CC:A0:20:71:DD:E1:ED:1A:A6:59:5F:E2:68:5F:F2
Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Certificate serial: 019B3D5A28F34A343184BAAC0D36762B6888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
Manifest number: 1035
Signing time: Sat 20 Dec 2025 20:01:17 +0000
Manifest this update: Sat 20 Dec 2025 20:01:17 +0000
Manifest next update: Sun 21 Dec 2025 20:01:17 +0000
Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=)
2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: ddwoKJtSRZ8m2t1wdyCMBDhEUbiktPgJCEiNrKPiYn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 15:46:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3d:5a:28:f3:4a:34:31:84:ba:ac:0d:36:76:2b:68:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b
Validity
Not Before: Dec 20 20:01:17 2025 GMT
Not After : Dec 21 20:01:17 2025 GMT
Subject: CN=bec8ff552ecca02071dde1ed1aa6595fe2685ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:d0:36:97:95:7d:3f:c1:90:91:77:26:84:
e1:44:c3:46:f5:17:38:a8:bb:c9:d3:3f:d6:90:60:
c6:47:59:f7:ca:55:1d:ba:57:21:0d:91:f5:4e:5e:
ad:9f:13:21:0b:b3:e7:36:b1:b4:c1:c5:28:27:3a:
01:37:b1:a4:76:d9:73:71:a5:d1:5d:97:39:65:26:
bd:29:68:6c:4f:04:c0:90:5f:85:3b:56:42:00:a7:
21:90:06:6b:59:f2:41:ce:ca:59:91:3d:7b:9c:f9:
0d:a6:a5:7d:66:d2:96:27:af:fd:4a:ce:80:56:04:
12:44:a2:78:68:f2:d4:e2:76:1f:6e:88:3c:53:99:
5b:c6:92:f9:70:40:b0:16:88:31:4e:36:cb:db:f3:
e8:69:8a:d8:70:4f:69:32:bb:13:55:d8:f1:90:bd:
1f:bf:10:f9:88:70:51:d4:fc:c9:e5:e4:e5:77:0c:
60:67:1a:99:1c:4c:1e:c1:3a:ec:ae:e2:59:12:16:
63:68:f6:f4:59:2e:a3:91:d5:95:45:09:e2:98:5c:
b8:47:f6:16:50:4e:51:65:8c:34:66:71:ba:b9:0c:
7c:cd:9b:6a:b4:e8:a2:24:0e:a6:6c:44:e5:0e:25:
0e:8b:d4:76:8b:17:cd:8f:cc:b8:1b:18:10:9b:a0:
8f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C8:FF:55:2E:CC:A0:20:71:DD:E1:ED:1A:A6:59:5F:E2:68:5F:F2
X509v3 Authority Key Identifier:
keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:15:cc:c2:98:88:ef:4a:d5:28:0a:84:34:af:57:55:68:30:
75:f7:d2:92:f4:98:8a:13:89:d1:4d:5c:ff:f2:a3:e7:19:2c:
d4:2e:58:8d:f2:a9:d6:eb:d0:98:4b:91:e5:53:1b:56:c4:3c:
0b:56:d1:4d:d6:b3:47:69:01:7f:a7:ac:ce:35:b7:ea:20:f0:
f7:07:5b:af:3c:2d:32:fd:6d:8f:61:77:6e:69:8c:fa:72:04:
66:32:00:87:9e:af:89:1e:25:2f:e0:6f:a8:0b:9c:39:3a:76:
7e:ed:2d:ff:f3:c0:d7:ca:5e:0b:78:47:d7:ae:6b:5d:13:35:
35:81:e2:65:d2:a5:1a:5f:31:a6:bc:c1:0f:47:a3:9a:63:9b:
d7:e8:dc:14:92:35:7b:66:16:4d:ea:a3:77:7c:a4:e4:f6:4f:
32:a1:eb:82:4a:57:f5:3e:ca:e3:f1:0c:ee:f5:3d:f2:ac:a9:
86:cf:7b:6a:3a:45:a1:6e:87:f9:7d:4e:e7:c4:4a:4a:6c:e4:
92:8b:d1:13:23:82:4c:e6:14:f1:c0:f3:5e:bb:4f:89:d6:4a:
a4:ee:74:c7:57:44:ef:1e:01:6a:e5:45:92:48:50:44:dc:bb:
de:86:ff:4a:ff:71:51:73:47:41:b4:7a:37:e9:84:a8:ff:a6:
4c:79:d2:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs9WijzSjQxhLqsDTZ2K2iIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOGU3N2U3MzgzMTNlNjU3MDY4NGRkMTUyYzJlMjg0MzMy
YjJjNWIwHhcNMjUxMjIwMjAwMTE3WhcNMjUxMjIxMjAwMTE3WjAzMTEwLwYDVQQD
EyhiZWM4ZmY1NTJlY2NhMDIwNzFkZGUxZWQxYWE2NTk1ZmUyNjg1ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeDQNpeVfT/BkJF3JoThRMNG9Rc4
qLvJ0z/WkGDGR1n3ylUdulchDZH1Tl6tnxMhC7PnNrG0wcUoJzoBN7GkdtlzcaXR
XZc5ZSa9KWhsTwTAkF+FO1ZCAKchkAZrWfJBzspZkT17nPkNpqV9ZtKWJ6/9Ss6A
VgQSRKJ4aPLU4nYfbog8U5lbxpL5cECwFogxTjbL2/PoaYrYcE9pMrsTVdjxkL0f
vxD5iHBR1PzJ5eTldwxgZxqZHEwewTrsruJZEhZjaPb0WS6jkdWVRQnimFy4R/YW
UE5RZYw0ZnG6uQx8zZtqtOiiJA6mbETlDiUOi9R2ixfNj8y4GxgQm6CP8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL7I/1UuzKAgcd3h7RqmWV/iaF/yMB8GA1UdIwQY
MBaAFJ+Od+c4MT5lcGhN0VLC4oQzKyxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYt
MzU2YzA5MzgwODg3LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYtMzU2YzA5MzgwODg3
LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhXMwpiI
70rVKAqENK9XVWgwdffSkvSYihOJ0U1c//Kj5xks1C5YjfKp1uvQmEuR5VMbVsQ8
C1bRTdazR2kBf6eszjW36iDw9wdbrzwtMv1tj2F3bmmM+nIEZjIAh56viR4lL+Bv
qAucOTp2fu0t//PA18peC3hH165rXRM1NYHiZdKlGl8xprzBD0ejmmOb1+jcFJI1
e2YWTeqjd3yk5PZPMqHrgkpX9T7K4/EM7vU98qyphs97ajpFoW6H+X1O58RKSmzk
kovREyOCTOYU8cDzXrtPidZKpO50x1dE7x4BauVFkkhQRNy73ob/Sv9xUXNHQbR6
N+mEqP+mTHnSMQ==
-----END CERTIFICATE-----
Generated at Sat Dec 20 21:53:56 2025 by rpki-client