This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json) Hash identifier: 1LGIbsJhInkQ0I0rIlw9h1zdRJHXDKSGAMDStNfoGP8= Subject key identifier: 93:03:3D:46:56:7B:BA:4D:24:2F:15:CD:C7:8F:A8:25:E6:8D:8E:11 Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Certificate serial: 019B52613D06A5F72897600B9D9217912F37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft Manifest number: 0C00 Signing time: Wed 24 Dec 2025 22:01:02 +0000 Manifest this update: Wed 24 Dec 2025 22:01:02 +0000 Manifest next update: Thu 25 Dec 2025 22:01:02 +0000 Files and hashes: 1: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (hash: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=) 2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: MRJtMNbZ4RptYyfoUxvasAd1e8wmNt37XGae863BfJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:3d:06:a5:f7:28:97:60:0b:9d:92:17:91:2f:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Validity Not Before: Dec 24 22:01:02 2025 GMT Not After : Dec 25 22:01:02 2025 GMT Subject: CN=93033d46567bba4d242f15cdc78fa825e68d8e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:41:c2:c7:f9:69:b1:56:86:f1:6a:82:0c:66: 87:83:46:07:aa:2a:78:41:2d:4e:94:27:9f:07:bf: 32:8e:ef:bb:2b:20:6d:b5:e7:32:86:c8:a8:e3:00: 66:bd:6d:3a:66:e7:a8:65:6b:a1:d5:cd:16:6a:e5: ff:4c:56:dc:b1:1c:b5:72:e1:55:c1:ad:6c:a4:56: e3:f5:27:3d:f8:a5:d5:2e:bc:dd:40:df:02:bc:7e: 7f:3a:96:5b:0b:83:0c:04:80:8b:27:1e:b9:d0:9d: a9:ed:1f:f9:be:ba:9b:ae:f8:aa:b3:d8:89:3f:9b: c3:72:2d:fe:f5:5c:ca:8d:45:00:ba:b6:2c:f5:75: 76:65:2b:f4:b8:82:26:43:2f:d0:60:28:26:5e:ee: ec:10:78:a9:af:bf:a8:99:95:37:8f:5e:37:a9:9b: a6:38:c0:dc:0e:00:d0:15:47:8c:5c:f3:0a:88:04: f9:7b:28:e6:0f:cc:f9:d2:b1:c3:6b:b2:7b:86:b0: ac:27:49:22:1c:5a:c4:8e:f8:ba:b1:d3:77:01:51: 44:04:0a:b7:d0:e2:41:e3:11:a1:f5:c8:32:38:8a: e5:c7:54:69:6a:48:0c:f4:87:55:68:f7:f9:f2:2b: cc:96:b9:c8:be:b6:d1:3c:21:69:39:11:df:50:9d: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:03:3D:46:56:7B:BA:4D:24:2F:15:CD:C7:8F:A8:25:E6:8D:8E:11 X509v3 Authority Key Identifier: keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:92:32:46:8d:ab:34:33:68:79:19:d4:a1:e8:c1:1d:03:24: 79:55:bc:3f:88:a3:a6:58:ca:a0:27:b0:ff:68:a5:45:03:c1: 3f:eb:dc:2d:8a:68:54:e6:f1:80:92:98:df:ce:19:42:24:f4: 8e:4e:f8:c8:b9:e8:96:5a:d7:7e:f8:19:33:f7:eb:75:c8:2f: 5d:d0:ff:0d:dc:d2:5b:c8:b2:e6:ef:4f:b6:79:37:e4:b8:d4: f1:aa:95:9b:3e:83:a3:a5:85:a1:62:e1:95:1f:7c:40:43:69: 86:d9:9a:0b:97:b4:c9:68:9a:03:17:1d:9c:30:6e:80:b0:f4: f3:b6:ca:b8:cc:fa:04:38:f7:d9:8e:f9:02:e3:33:57:fc:5e: 42:22:a0:0e:82:a2:ee:52:30:fe:75:aa:38:cb:44:60:d6:49: 6a:a5:80:e5:03:a0:05:53:82:80:c9:c8:e0:87:8f:9f:cb:dd: 6a:21:e5:dd:54:4d:36:bc:1f:e0:fe:1c:4a:78:4e:40:20:d5: 2e:e4:01:d3:f2:ad:b4:df:07:33:d2:b9:0e:29:4b:00:05:a8: 12:03:13:80:16:5a:5e:6c:db:4c:e2:44:82:d2:12:2f:53:9c: 1e:b7:84:fb:61:cf:36:67:7a:f4:7e:6c:e0:c2:b6:54:bd:cd: f7:fb:8b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYT0Gpfcol2ALnZIXkS83MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOGEzYzlhOWVkZjY0NDczNWE5NGViMDlmMDFjYWIzOTg1 NWQyNzgwHhcNMjUxMjI0MjIwMTAyWhcNMjUxMjI1MjIwMTAyWjAzMTEwLwYDVQQD Eyg5MzAzM2Q0NjU2N2JiYTRkMjQyZjE1Y2RjNzhmYTgyNWU2OGQ4ZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukHCx/lpsVaG8WqCDGaHg0YHqip4 QS1OlCefB78yju+7KyBttecyhsio4wBmvW06ZueoZWuh1c0WauX/TFbcsRy1cuFV wa1spFbj9Sc9+KXVLrzdQN8CvH5/OpZbC4MMBICLJx650J2p7R/5vrqbrviqs9iJ P5vDci3+9VzKjUUAurYs9XV2ZSv0uIImQy/QYCgmXu7sEHipr7+omZU3j143qZum OMDcDgDQFUeMXPMKiAT5eyjmD8z50rHDa7J7hrCsJ0kiHFrEjvi6sdN3AVFEBAq3 0OJB4xGh9cgyOIrlx1RpakgM9IdVaPf58ivMlrnIvrbRPCFpORHfUJ0lqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMDPUZWe7pNJC8VzcePqCXmjY4RMB8GA1UdIwQY MBaAFJ+KPJqe32RHNalOsJ8ByrOYVdJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjIt NjM2ZDZmYzAwNDhmLzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjItNjM2ZDZmYzAwNDhm LzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvZIyRo2r NDNoeRnUoejBHQMkeVW8P4ijpljKoCew/2ilRQPBP+vcLYpoVObxgJKY384ZQiT0 jk74yLnollrXfvgZM/frdcgvXdD/DdzSW8iy5u9Ptnk35LjU8aqVmz6Do6WFoWLh lR98QENphtmaC5e0yWiaAxcdnDBugLD087bKuMz6BDj32Y75AuMzV/xeQiKgDoKi 7lIw/nWqOMtEYNZJaqWA5QOgBVOCgMnI4IePn8vdaiHl3VRNNrwf4P4cSnhOQCDV LuQB0/KttN8HM9K5DilLAAWoEgMTgBZaXmzbTOJEgtISL1OcHreE+2HPNmd69H5s 4MK2VL3N9/uLhw== -----END CERTIFICATE-----Generated at Thu Dec 25 01:00:07 2025 by rpki-client