This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json) Hash identifier: oMCeHe/GPKi0jQvapDN1OR3BFi5k5ekeuCo009vfduo= Subject key identifier: 57:76:87:43:24:60:1D:61:D5:88:41:D4:48:80:2F:06:6E:6B:47:67 Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Certificate serial: 019B3CEB9D9E944E5D74AE1FE761FCE7912E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft Manifest number: 073F Signing time: Sat 20 Dec 2025 18:00:32 +0000 Manifest this update: Sat 20 Dec 2025 18:00:32 +0000 Manifest next update: Sun 21 Dec 2025 18:00:32 +0000 Files and hashes: 1: 0Kp_vvvf6gB9qqLzUTydjsFEHvg.roa (hash: oleso0bnDn/Cva++ppJhacS1E2sFVBntDJn2BA8AVW0=) 2: G4jepCncoOzlCnpnZ7cxE_Dx-eo.roa (hash: LGsZV/1AkhKvUqqsgs+A2xdwU0JvTeOBXFcZUHaT2bc=) 3: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: YsuD/v7AhgTl3buQ1Agvly+6dCJpEeqPOblNspWhzMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:9d:9e:94:4e:5d:74:ae:1f:e7:61:fc:e7:91:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Validity Not Before: Dec 20 18:00:32 2025 GMT Not After : Dec 21 18:00:32 2025 GMT Subject: CN=5776874324601d61d58841d448802f066e6b4767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f6:17:62:44:64:83:42:b2:47:01:b3:56:7b: f7:47:0f:4b:12:fd:fc:e2:8b:48:39:67:c4:a1:59: 3a:63:06:bf:a3:b8:f9:96:0f:66:68:68:99:22:d0: f8:ec:09:2f:c4:f5:d4:66:7b:4e:9f:39:fb:43:42: ca:fe:1f:aa:0c:90:3e:ff:84:ea:c3:3e:4b:0c:ee: 8e:2c:f0:4b:6f:df:f8:cf:99:db:fb:32:a6:9e:37: 6e:1c:fd:56:e2:3e:b3:16:f5:0e:38:12:a4:85:06: 63:b7:73:ee:24:47:dc:d6:bd:44:57:80:89:42:42: d4:90:90:c4:18:3f:66:ba:24:5f:06:be:40:fc:25: c3:bc:c1:63:7e:67:a2:fc:59:ed:9e:5e:41:59:09: af:8e:c1:75:83:1a:be:90:ac:ce:1e:f9:86:3f:62: 39:95:4c:bc:54:15:b8:20:bf:a5:84:ee:36:0d:5a: b9:b6:98:71:29:03:d0:7b:e6:fc:69:ec:a0:d7:b4: 49:66:ad:d8:db:3a:6b:6a:a8:5c:d8:e1:a9:a3:c8: e7:ee:f4:68:69:bd:30:80:e5:4f:bf:17:a0:7c:60: 7b:ca:78:cf:cc:8d:10:9e:be:35:a8:eb:e1:2c:d7: 80:7f:87:c0:b8:4b:d4:e9:95:0e:7a:36:92:e5:c1: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:76:87:43:24:60:1D:61:D5:88:41:D4:48:80:2F:06:6E:6B:47:67 X509v3 Authority Key Identifier: keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:a1:5b:93:34:e8:0f:a1:dd:2b:27:69:49:91:6f:4b:50:bf: b4:7d:d9:15:8d:8a:c9:07:2f:e7:c2:1c:ee:a6:ef:c5:9a:da: 88:5d:36:7e:b6:a9:2c:7d:3c:e8:7e:86:8c:da:36:8c:e7:16: da:23:2d:cd:08:cf:a6:a9:f1:1e:64:d8:e6:e8:07:ff:e6:56: 10:f4:76:4a:ba:c6:63:1a:31:4e:48:f5:16:64:0a:06:f5:f3: 37:c7:fb:6c:f6:36:c8:eb:02:01:2a:c4:48:c0:86:fa:0d:b6: 2d:96:e3:8d:fd:06:7d:b0:93:9d:95:c8:e1:84:1d:29:39:2d: f9:61:ca:c1:f8:cf:cd:1a:7b:44:c0:a8:d6:d1:c0:88:8b:48: 0f:9e:d4:9f:79:de:36:49:69:6b:dd:b8:a4:09:3d:5b:34:4b: bc:8f:ea:c5:3b:0a:5d:b4:c3:03:28:a6:cd:6d:94:39:45:34: 1c:94:51:ad:49:eb:b3:e8:75:56:c6:86:0c:0f:0b:d2:55:61: 7a:7f:91:b0:58:72:d2:ee:cd:4a:a6:ba:64:bb:16:38:e0:f6: 11:61:f9:f1:9b:e0:d3:55:cf:c1:6d:c6:09:bf:6a:09:7f:51: e3:de:03:7f:f0:e1:84:7e:f5:c4:f0:61:63:5c:de:54:b3:31: 4a:16:9a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8652elE5ddK4f52H855EuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGY2ZjNlM2NiOTczYmFjOGE0M2Y2YzBiODA2YjNkMTFj OWFkYzMwHhcNMjUxMjIwMTgwMDMyWhcNMjUxMjIxMTgwMDMyWjAzMTEwLwYDVQQD Eyg1Nzc2ODc0MzI0NjAxZDYxZDU4ODQxZDQ0ODgwMmYwNjZlNmI0NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfYXYkRkg0KyRwGzVnv3Rw9LEv38 4otIOWfEoVk6Ywa/o7j5lg9maGiZItD47AkvxPXUZntOnzn7Q0LK/h+qDJA+/4Tq wz5LDO6OLPBLb9/4z5nb+zKmnjduHP1W4j6zFvUOOBKkhQZjt3PuJEfc1r1EV4CJ QkLUkJDEGD9muiRfBr5A/CXDvMFjfmei/Fntnl5BWQmvjsF1gxq+kKzOHvmGP2I5 lUy8VBW4IL+lhO42DVq5tphxKQPQe+b8aeyg17RJZq3Y2zpraqhc2OGpo8jn7vRo ab0wgOVPvxegfGB7ynjPzI0Qnr41qOvhLNeAf4fAuEvU6ZUOejaS5cEcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFd2h0MkYB1h1YhB1EiALwZua0dnMB8GA1UdIwQY MBaAFDdPbz48uXO6yKQ/bAuAaz0Rya3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMt YzAxNzdkZmRhODQ3LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMtYzAxNzdkZmRhODQ3 LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKFbkzTo D6HdKydpSZFvS1C/tH3ZFY2KyQcv58Ic7qbvxZraiF02frapLH086H6GjNo2jOcW 2iMtzQjPpqnxHmTY5ugH/+ZWEPR2SrrGYxoxTkj1FmQKBvXzN8f7bPY2yOsCASrE SMCG+g22LZbjjf0GfbCTnZXI4YQdKTkt+WHKwfjPzRp7RMCo1tHAiItID57Un3ne Nklpa924pAk9WzRLvI/qxTsKXbTDAyimzW2UOUU0HJRRrUnrs+h1VsaGDA8L0lVh en+RsFhy0u7NSqa6ZLsWOOD2EWH58Zvg01XPwW3GCb9qCX9R494Df/DhhH71xPBh Y1zeVLMxShaalg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:44:10 2025 by rpki-client