This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json) Hash identifier: W9S0DzLP1RCtBJ9ssg5yOp2zT7j+DifrGMCdODKjZ+c= Subject key identifier: 2B:F6:F0:BE:78:2B:1F:EE:C5:5A:C7:BF:DC:37:97:0D:7F:48:E3:B5 Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Certificate serial: 019B5229DDA5F32FE2751344026CEEA8D6C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft Manifest number: 074A Signing time: Wed 24 Dec 2025 21:00:33 +0000 Manifest this update: Wed 24 Dec 2025 21:00:33 +0000 Manifest next update: Thu 25 Dec 2025 21:00:33 +0000 Files and hashes: 1: 0Kp_vvvf6gB9qqLzUTydjsFEHvg.roa (hash: oleso0bnDn/Cva++ppJhacS1E2sFVBntDJn2BA8AVW0=) 2: G4jepCncoOzlCnpnZ7cxE_Dx-eo.roa (hash: LGsZV/1AkhKvUqqsgs+A2xdwU0JvTeOBXFcZUHaT2bc=) 3: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: OYC1hUlSAABYXswofBXYuTfbyfgl8hdiH2biLlR5p5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:29:dd:a5:f3:2f:e2:75:13:44:02:6c:ee:a8:d6:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Validity Not Before: Dec 24 21:00:33 2025 GMT Not After : Dec 25 21:00:33 2025 GMT Subject: CN=2bf6f0be782b1feec55ac7bfdc37970d7f48e3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:20:74:da:6d:7f:e6:04:bb:dc:e1:d5:9d: c1:96:3e:0e:0d:a1:f1:74:e3:79:3f:c4:23:1c:07: 3b:79:7c:fa:fc:c5:63:90:0c:37:1a:3f:ea:04:06: 59:e1:fd:b8:37:b8:39:ac:f8:a6:05:88:b7:5d:cf: cb:49:77:7f:30:56:92:4a:bd:d8:c2:3b:89:6d:4a: de:9a:42:66:cf:76:93:a7:39:cf:3a:79:ae:f2:d4: c8:4a:a3:9a:d9:10:b6:d7:b2:ad:9d:ba:c4:0f:86: f5:60:31:a2:d8:46:d0:6e:e3:35:ec:20:90:b5:3c: a4:8a:e2:80:23:2f:5b:81:8e:55:88:2e:b7:ed:bf: 65:b0:50:6c:f1:94:05:4f:d2:f6:b4:a2:bf:ff:78: bb:08:cd:b4:df:33:d4:a7:d7:c8:33:53:27:8c:43: 14:d0:27:b8:14:c6:b4:77:d7:c9:24:bd:d3:43:96: 0e:4a:3c:16:af:e4:30:a8:34:ea:34:d3:c4:bb:cf: c0:64:4a:81:c5:ae:73:56:87:24:3d:de:43:04:d3: c2:e6:2d:42:31:5d:b4:93:c0:29:ef:bd:23:64:ec: 7d:50:6e:f0:3a:a0:fd:5b:e6:c6:f2:08:f4:9d:95: 0a:25:f6:8c:c3:7b:f9:44:f8:10:f7:8e:06:3b:5e: b9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F6:F0:BE:78:2B:1F:EE:C5:5A:C7:BF:DC:37:97:0D:7F:48:E3:B5 X509v3 Authority Key Identifier: keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:c2:87:ca:84:ef:50:7c:60:92:a6:fa:34:46:6f:63:2f:d5: fe:18:26:20:4d:c7:68:62:70:fc:fe:c6:b1:7d:a3:27:1b:ab: 58:d1:fb:eb:76:7a:a5:ca:ea:0d:0e:e4:98:63:75:fc:e4:74: 18:22:88:2e:d8:9d:a2:12:2e:72:6e:f4:8e:9b:ea:03:52:de: d2:4c:f6:f1:2c:22:7d:e9:6e:f4:4a:b1:7d:da:ec:31:b6:de: f4:bf:54:f0:79:5d:84:3d:1e:39:16:e6:5d:73:8b:54:66:71: 94:88:be:73:3c:10:72:7f:89:e2:25:ea:a8:31:8b:ab:c0:f3: c1:bb:6c:66:35:78:76:ca:b2:91:17:28:40:81:37:5f:e0:8e: 40:76:c1:36:1d:65:47:b0:f3:14:38:0d:1e:fd:5e:08:58:14: 79:3b:65:ad:fb:67:80:09:19:4c:bb:61:c9:eb:8e:45:c8:3f: 2e:ca:5b:f1:76:87:c8:a9:08:94:64:10:05:32:cc:ca:16:d5: 29:57:3f:8b:a0:6a:85:6d:5b:a0:87:40:15:1b:a0:eb:57:93: 93:37:49:99:90:c0:69:4c:fe:eb:c0:a6:86:ca:36:b0:b8:8e: 67:27:08:92:8a:10:9b:ef:03:9b:02:4c:1b:e8:36:46:77:89: dc:3b:6d:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKd2l8y/idRNEAmzuqNbIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGY2ZjNlM2NiOTczYmFjOGE0M2Y2YzBiODA2YjNkMTFj OWFkYzMwHhcNMjUxMjI0MjEwMDMzWhcNMjUxMjI1MjEwMDMzWjAzMTEwLwYDVQQD EygyYmY2ZjBiZTc4MmIxZmVlYzU1YWM3YmZkYzM3OTcwZDdmNDhlM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVYgdNptf+YEu9zh1Z3Blj4ODaHx dON5P8QjHAc7eXz6/MVjkAw3Gj/qBAZZ4f24N7g5rPimBYi3Xc/LSXd/MFaSSr3Y wjuJbUremkJmz3aTpznPOnmu8tTISqOa2RC217KtnbrED4b1YDGi2EbQbuM17CCQ tTykiuKAIy9bgY5ViC637b9lsFBs8ZQFT9L2tKK//3i7CM203zPUp9fIM1MnjEMU 0Ce4FMa0d9fJJL3TQ5YOSjwWr+QwqDTqNNPEu8/AZEqBxa5zVockPd5DBNPC5i1C MV20k8Ap770jZOx9UG7wOqD9W+bG8gj0nZUKJfaMw3v5RPgQ944GO165/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCv28L54Kx/uxVrHv9w3lw1/SOO1MB8GA1UdIwQY MBaAFDdPbz48uXO6yKQ/bAuAaz0Rya3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMt YzAxNzdkZmRhODQ3LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMtYzAxNzdkZmRhODQ3 LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfMKHyoTv UHxgkqb6NEZvYy/V/hgmIE3HaGJw/P7GsX2jJxurWNH763Z6pcrqDQ7kmGN1/OR0 GCKILtidohIucm70jpvqA1Le0kz28Swifelu9EqxfdrsMbbe9L9U8HldhD0eORbm XXOLVGZxlIi+czwQcn+J4iXqqDGLq8DzwbtsZjV4dsqykRcoQIE3X+COQHbBNh1l R7DzFDgNHv1eCFgUeTtlrftngAkZTLthyeuORcg/Lspb8XaHyKkIlGQQBTLMyhbV KVc/i6BqhW1boIdAFRug61eTkzdJmZDAaUz+68Cmhso2sLiOZycIkooQm+8DmwJM G+g2RneJ3Dttdw== -----END CERTIFICATE-----Generated at Thu Dec 25 00:55:37 2025 by rpki-client