This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json) Hash identifier: Byd886Z+8Crvh/Ab5Ze8zf9wNxoXaJPSzUmsD1JL1rE= Subject key identifier: 9F:30:8B:CC:73:28:77:DB:F1:AA:FD:50:B5:3A:F2:2E:BB:F7:B8:D3 Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96 Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796 Certificate serial: 019B5F78095E5D14E86D21ACD9C480A66511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft Manifest number: 179A Signing time: Sat 27 Dec 2025 11:01:00 +0000 Manifest this update: Sat 27 Dec 2025 11:01:00 +0000 Manifest next update: Sun 28 Dec 2025 11:01:00 +0000 Files and hashes: 1: 2zu7oCjT-KVZRR2HzaLDOvNTLj0.roa (hash: D7mApAX4YmoA8emuHbADon4rwd+qyVDHh/ZdGBtTqIs=) 2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: ly0FzHCbzyMOwjj9C4trfm9euqQHOMzVCk/75C1+hg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:78:09:5e:5d:14:e8:6d:21:ac:d9:c4:80:a6:65:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796 Validity Not Before: Dec 27 11:01:00 2025 GMT Not After : Dec 28 11:01:00 2025 GMT Subject: CN=9f308bcc732877dbf1aafd50b53af22ebbf7b8d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b8:48:9b:b1:6b:c5:48:da:4f:f2:87:b7:d5: 90:87:88:a6:5c:f2:a7:f9:7c:ba:c8:fa:45:b8:21: 24:4f:8d:1d:cf:b5:69:6b:a5:d0:0f:ac:72:37:c9: 8f:94:3a:c1:cf:19:d7:0e:57:fb:30:5c:4f:10:8b: ac:e3:3b:28:fd:1c:0c:d5:2f:23:b9:e2:53:d5:c4: 66:54:ee:a2:93:52:62:fb:ab:4a:09:65:c0:04:34: 28:48:4b:d2:80:3a:8b:ae:c7:1a:28:ca:3e:ab:b4: 66:d4:0b:18:80:12:12:24:21:34:91:85:48:80:37: df:d7:c8:0e:7f:c1:41:bc:f6:65:9d:4d:47:5e:74: 37:7c:e1:cf:2f:91:de:34:fa:ee:58:64:a6:a0:f2: 1f:17:8f:35:3e:51:f7:33:ec:77:8f:a6:ed:ac:02: 22:08:86:41:7f:5e:0a:fe:d5:00:3a:0d:24:b0:ed: 10:12:c1:de:4f:e2:da:f3:89:12:95:77:1e:6b:59: f6:f3:3d:99:b5:e6:c9:7d:eb:19:33:f8:85:3f:9f: f4:2b:4b:b4:98:77:b7:bf:ae:06:47:58:a4:aa:6c: e4:e9:5a:c0:6d:56:ce:15:a8:c2:0a:2b:47:46:8b: b8:de:db:d8:06:88:50:dd:a4:4a:04:77:b3:db:99: ab:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:30:8B:CC:73:28:77:DB:F1:AA:FD:50:B5:3A:F2:2E:BB:F7:B8:D3 X509v3 Authority Key Identifier: keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:11:4e:b7:86:5e:3b:60:4d:5c:9b:8a:b1:17:ef:2e:a9:7c: 9c:42:4f:2a:4f:b1:4c:d1:eb:13:40:0d:f0:86:c6:3c:07:86: 2f:2a:68:76:b5:1d:b8:e7:86:a8:33:fa:65:c0:f1:0e:f6:24: 14:3c:c8:60:d8:0b:d6:04:1b:62:c7:6b:76:76:10:75:eb:ac: 13:4f:1f:ee:be:22:33:e0:7e:b0:21:d8:10:d4:d3:5c:a5:7e: bf:83:8b:ae:fd:3f:5a:0d:35:e3:4c:75:97:52:cf:63:aa:3a: 6d:d9:98:17:3c:99:40:c2:f1:21:cb:25:6f:89:de:22:10:fb: 71:76:08:f7:07:a7:51:eb:32:e9:b6:50:2f:2d:6a:cf:1a:f4: 6c:02:65:35:c6:d1:4e:14:04:16:26:17:78:1e:4e:7f:6f:d5: df:b3:9e:87:61:c7:6e:13:50:e1:9e:2d:36:a8:c8:44:cc:e7: 3e:dd:23:ba:e9:5e:9c:e8:f1:18:4e:0a:dc:8a:46:37:b3:4a: 53:98:3b:b4:49:f7:5a:ee:b6:60:b6:27:a8:25:29:57:bc:a1: 2e:58:9f:02:fa:ac:2b:86:a7:74:30:b2:ba:3d:21:1e:61:ca: ec:3f:5c:ab:13:b7:ce:15:ce:ab:c0:cb:06:c6:78:6b:ac:2e: 49:0a:2a:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfeAleXRTobSGs2cSApmURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjc5ZDI5ODExMGI2ZmIzMTkzMDFlYmMyMmJmMTgwZTcw NTQ3OTYwHhcNMjUxMjI3MTEwMTAwWhcNMjUxMjI4MTEwMTAwWjAzMTEwLwYDVQQD Eyg5ZjMwOGJjYzczMjg3N2RiZjFhYWZkNTBiNTNhZjIyZWJiZjdiOGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrhIm7FrxUjaT/KHt9WQh4imXPKn +Xy6yPpFuCEkT40dz7Vpa6XQD6xyN8mPlDrBzxnXDlf7MFxPEIus4zso/RwM1S8j ueJT1cRmVO6ik1Ji+6tKCWXABDQoSEvSgDqLrscaKMo+q7Rm1AsYgBISJCE0kYVI gDff18gOf8FBvPZlnU1HXnQ3fOHPL5HeNPruWGSmoPIfF481PlH3M+x3j6btrAIi CIZBf14K/tUAOg0ksO0QEsHeT+La84kSlXcea1n28z2ZtebJfesZM/iFP5/0K0u0 mHe3v64GR1ikqmzk6VrAbVbOFajCCitHRou43tvYBohQ3aRKBHez25mruwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8wi8xzKHfb8ar9ULU68i6797jTMB8GA1UdIwQY MBaAFJ+3nSmBELb7MZMB68Ir8YDnBUeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjIt NGFhYmVjMGQzMGEzLzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lODVhNDEtYjNmZi00ZmNkLTgwYjItNGFhYmVjMGQzMGEz LzEvbjdlZEtZRVF0dnN4a3dIcndpdnhnT2NGUjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxFOt4Ze O2BNXJuKsRfvLql8nEJPKk+xTNHrE0AN8IbGPAeGLypodrUduOeGqDP6ZcDxDvYk FDzIYNgL1gQbYsdrdnYQdeusE08f7r4iM+B+sCHYENTTXKV+v4OLrv0/Wg0140x1 l1LPY6o6bdmYFzyZQMLxIcslb4neIhD7cXYI9wenUesy6bZQLy1qzxr0bAJlNcbR ThQEFiYXeB5Of2/V37Oeh2HHbhNQ4Z4tNqjIRMznPt0juulenOjxGE4K3IpGN7NK U5g7tEn3Wu62YLYnqCUpV7yhLlifAvqsK4andDCyuj0hHmHK7D9cqxO3zhXOq8DL BsZ4a6wuSQoqLg== -----END CERTIFICATE-----Generated at Sat Dec 27 17:43:03 2025 by rpki-client