This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json) Hash identifier: KnVssu7qMI3CybyXaLfINthuwvemPyGRqObQTv6v1jg= Subject key identifier: 01:B7:07:86:7A:BC:99:7B:55:E0:EB:7D:76:65:90:CD:B6:77:97:10 Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Certificate serial: 019B4C965F9D0418B8ABCFCB2AD2A7EED1A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft Manifest number: 0BFD Signing time: Tue 23 Dec 2025 19:01:21 +0000 Manifest this update: Tue 23 Dec 2025 19:01:21 +0000 Manifest next update: Wed 24 Dec 2025 19:01:21 +0000 Files and hashes: 1: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (hash: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=) 2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: HoqdEvgn6dsduh7icYvoRZxdh/vnGuN7zM3oYaFtWks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:96:5f:9d:04:18:b8:ab:cf:cb:2a:d2:a7:ee:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Validity Not Before: Dec 23 19:01:21 2025 GMT Not After : Dec 24 19:01:21 2025 GMT Subject: CN=01b707867abc997b55e0eb7d766590cdb6779710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cf:b8:a9:4b:68:24:96:d0:12:d9:58:ce:2f: d0:4c:66:9b:d0:66:8b:7c:7d:66:95:b6:6e:21:7e: 59:c5:1c:73:cc:b0:d3:8b:ec:9b:54:f2:9e:65:c5: c8:ee:f3:f9:04:39:e5:1d:99:3d:e8:b7:cd:0d:8e: a5:e7:c9:60:03:6e:22:a1:ae:c4:e3:0b:f3:92:da: 2c:df:08:32:f8:00:da:08:bd:3f:3a:ab:1c:47:18: 96:3c:83:b7:85:20:4d:9c:03:d9:ef:7a:f9:3d:45: 36:d9:dd:04:af:4a:be:a2:3c:9a:71:b0:9f:0b:9a: 57:04:54:c4:fa:97:0b:34:59:c8:c0:c7:65:27:31: 28:a3:41:06:48:21:67:03:e3:83:76:2f:0c:c8:80: 10:ad:87:bb:91:1a:ef:ac:ec:32:76:e5:cb:54:66: a2:5b:d2:ca:4b:33:67:f7:ba:48:c6:70:da:27:6f: 6c:2e:11:f5:4c:fb:8f:88:3e:7a:54:b3:18:fd:cd: f0:6c:ff:c3:a5:8b:ee:44:de:2f:8c:1a:30:45:c2: 15:f1:19:7b:36:65:1c:03:42:31:f1:21:48:40:77: fb:6b:a7:95:11:df:9b:c9:c8:db:27:78:51:80:18: 55:ba:75:4d:44:fc:ae:25:5d:b7:ae:82:6f:af:e7: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B7:07:86:7A:BC:99:7B:55:E0:EB:7D:76:65:90:CD:B6:77:97:10 X509v3 Authority Key Identifier: keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bf:6b:de:a2:4b:dd:12:73:06:a6:23:b3:4e:86:39:07:8c: ba:67:16:8d:11:10:34:f3:cc:76:11:53:81:f7:18:93:6e:48: d1:14:3f:a2:ce:10:fd:cf:dd:10:42:09:e1:7a:0f:35:5a:51: bf:7e:cb:cb:bf:b7:74:8e:ce:15:16:fe:0b:6d:1d:3e:75:c0: 91:0e:07:0f:93:c5:9e:93:b0:c4:3e:43:31:a7:06:f1:2b:6a: ac:6b:06:63:83:36:b7:ee:8e:9f:af:45:65:a3:3f:6a:eb:b7: 05:9c:1e:0e:d7:9c:2b:19:d3:ac:cf:06:4e:a8:28:fe:88:29: c5:b4:9c:9f:8b:38:f1:2f:fc:e8:3a:02:3e:05:ff:de:8e:39: 9e:ca:38:25:7d:fa:46:5e:a1:c5:ea:8f:24:0a:5e:22:3a:46: 0b:45:d2:12:36:3c:85:ed:94:03:30:a6:ba:0d:3e:0f:79:c9: 16:0b:8c:50:bc:c3:1d:4d:71:62:1e:e6:dd:98:23:f8:26:41: 12:12:fd:2f:62:46:f1:bb:59:fd:79:cd:ff:0c:7b:ab:89:1e: 59:0b:07:6f:df:88:33:c1:85:c5:9d:79:e7:f2:db:e2:1d:e2: ba:09:76:ff:29:ec:97:0e:68:b7:14:7e:ec:03:9a:a1:f6:f0: 58:40:a3:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMll+dBBi4q8/LKtKn7tGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOGEzYzlhOWVkZjY0NDczNWE5NGViMDlmMDFjYWIzOTg1 NWQyNzgwHhcNMjUxMjIzMTkwMTIxWhcNMjUxMjI0MTkwMTIxWjAzMTEwLwYDVQQD EygwMWI3MDc4NjdhYmM5OTdiNTVlMGViN2Q3NjY1OTBjZGI2Nzc5NzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc+4qUtoJJbQEtlYzi/QTGab0GaL fH1mlbZuIX5ZxRxzzLDTi+ybVPKeZcXI7vP5BDnlHZk96LfNDY6l58lgA24ioa7E 4wvzktos3wgy+ADaCL0/OqscRxiWPIO3hSBNnAPZ73r5PUU22d0Er0q+ojyacbCf C5pXBFTE+pcLNFnIwMdlJzEoo0EGSCFnA+ODdi8MyIAQrYe7kRrvrOwyduXLVGai W9LKSzNn97pIxnDaJ29sLhH1TPuPiD56VLMY/c3wbP/DpYvuRN4vjBowRcIV8Rl7 NmUcA0Ix8SFIQHf7a6eVEd+bycjbJ3hRgBhVunVNRPyuJV23roJvr+fudQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG3B4Z6vJl7VeDrfXZlkM22d5cQMB8GA1UdIwQY MBaAFJ+KPJqe32RHNalOsJ8ByrOYVdJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjIt NjM2ZDZmYzAwNDhmLzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjItNjM2ZDZmYzAwNDhm LzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf79r3qJL 3RJzBqYjs06GOQeMumcWjREQNPPMdhFTgfcYk25I0RQ/os4Q/c/dEEIJ4XoPNVpR v37Ly7+3dI7OFRb+C20dPnXAkQ4HD5PFnpOwxD5DMacG8StqrGsGY4M2t+6On69F ZaM/auu3BZweDtecKxnTrM8GTqgo/ogpxbScn4s48S/86DoCPgX/3o45nso4JX36 Rl6hxeqPJApeIjpGC0XSEjY8he2UAzCmug0+D3nJFguMULzDHU1xYh7m3Zgj+CZB EhL9L2JG8btZ/XnN/wx7q4keWQsHb9+IM8GFxZ155/Lb4h3iugl2/ynslw5otxR+ 7AOaofbwWECjDg== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:46 2025 by rpki-client