This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json) Hash identifier: p0aF2yJStSfD3yAiI4VJB6+Mpcdz7be8ORxDqDWAmx0= Subject key identifier: D9:99:30:C5:7D:35:4C:05:68:A4:01:F3:3B:23:94:B7:53:D1:78:1F Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71 Certificate serial: 019B228736CA7D3DAEFF53E526803158E168 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft Manifest number: 0A71 Signing time: Mon 15 Dec 2025 15:00:45 +0000 Manifest this update: Mon 15 Dec 2025 15:00:45 +0000 Manifest next update: Tue 16 Dec 2025 15:00:45 +0000 Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=) 2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: J/oNCZwDQ2FrAZomfSxpz176HcoXSNWztrH2enAsdxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:36:ca:7d:3d:ae:ff:53:e5:26:80:31:58:e1:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71 Validity Not Before: Dec 15 15:00:45 2025 GMT Not After : Dec 16 15:00:45 2025 GMT Subject: CN=d99930c57d354c0568a401f33b2394b753d1781f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:1a:33:d6:d7:32:c1:0f:48:81:d4:17:e6: 6e:13:e5:06:3b:90:6b:48:2d:b9:2e:db:3c:6d:88: 58:f3:53:4d:2f:77:c1:5b:07:ed:96:b2:49:d4:02: e2:d3:99:b0:77:2a:69:94:cd:3f:65:1b:04:7e:7e: 1c:7a:1b:97:8d:31:52:64:62:da:86:f6:f1:93:68: 29:06:43:e0:66:bd:de:ef:a8:02:fa:ec:bd:a8:2a: 2c:30:0b:62:8a:8b:77:f7:1c:4b:ff:85:52:3d:26: ae:9b:7a:1f:d7:0d:5d:b5:78:9a:3e:27:d4:d5:d3: 66:29:5a:52:bf:e8:2a:30:d8:94:6d:19:78:22:28: a0:03:91:22:70:1e:ff:43:24:0a:74:f6:5f:07:4a: 88:a7:6c:27:2e:14:fc:dd:aa:26:f6:12:e3:b0:88: d8:dd:4a:d0:da:9a:95:68:90:06:72:f6:51:16:12: d7:7f:ac:c4:f6:22:ab:f2:2d:99:94:e7:02:b3:21: 7a:72:ec:6c:bc:7c:fc:0b:c7:c4:20:62:ce:49:53: 5d:51:df:24:db:6c:a8:b5:c5:69:12:6f:1b:03:a3: b0:97:e2:2e:3e:e1:9d:9a:43:ca:98:7e:0b:f7:4d: 2e:23:68:78:a9:d6:c9:9a:fe:00:12:2f:bf:b2:aa: e4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:99:30:C5:7D:35:4C:05:68:A4:01:F3:3B:23:94:B7:53:D1:78:1F X509v3 Authority Key Identifier: keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ca:9f:6c:da:37:51:96:a7:9b:5a:43:19:be:98:88:e5:89: c6:df:86:4a:1f:eb:a7:4c:cb:67:37:bc:19:87:07:f4:16:c5: 02:3d:aa:83:4f:16:ce:24:2f:e3:f3:7d:41:f0:b7:cf:0c:32: d7:e7:4d:61:1e:22:2f:68:32:47:2b:01:68:fe:98:5d:9f:46: 4a:5e:f1:76:27:5a:b6:ab:de:ce:ce:f9:9f:49:bc:05:50:92: b8:76:52:05:45:c8:3a:b0:72:b0:f9:6d:a4:69:61:74:03:02: 28:10:3e:3b:5a:31:1d:f2:54:45:f3:cd:ef:71:4e:71:ce:b4: 5f:72:c0:e0:f0:18:12:32:1c:88:e2:5a:aa:7d:f6:be:91:ce: d9:a4:ff:be:24:44:62:21:c9:82:18:fd:54:27:17:09:96:d5: df:7d:0f:15:0f:8c:58:a9:cd:28:6f:7f:7f:85:d5:6c:a2:32: bb:68:26:2f:68:ef:33:9c:c4:2d:c4:90:84:bb:ec:30:32:85: fc:18:6b:f3:fb:13:da:04:0c:a1:29:41:8b:c7:b5:81:ef:40: 3c:03:67:7e:13:5a:7a:6a:b2:e7:1a:ee:9a:8a:8d:5a:d7:65: a8:b7:9d:2e:27:03:71:0f:ec:fe:8e:b0:89:e9:fa:90:a0:2e: 1f:c5:81:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsihzbKfT2u/1PlJoAxWOFoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5 ZjhhNzEwHhcNMjUxMjE1MTUwMDQ1WhcNMjUxMjE2MTUwMDQ1WjAzMTEwLwYDVQQD EyhkOTk5MzBjNTdkMzU0YzA1NjhhNDAxZjMzYjIzOTRiNzUzZDE3ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwucaM9bXMsEPSIHUF+ZuE+UGO5Br SC25Lts8bYhY81NNL3fBWwftlrJJ1ALi05mwdypplM0/ZRsEfn4cehuXjTFSZGLa hvbxk2gpBkPgZr3e76gC+uy9qCosMAtiiot39xxL/4VSPSaum3of1w1dtXiaPifU 1dNmKVpSv+gqMNiUbRl4IiigA5EicB7/QyQKdPZfB0qIp2wnLhT83aom9hLjsIjY 3UrQ2pqVaJAGcvZRFhLXf6zE9iKr8i2ZlOcCsyF6cuxsvHz8C8fEIGLOSVNdUd8k 22yotcVpEm8bA6Owl+IuPuGdmkPKmH4L900uI2h4qdbJmv4AEi+/sqrk4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmZMMV9NUwFaKQB8zsjlLdT0XgfMB8GA1UdIwQY MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2 LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8qfbNo3 UZanm1pDGb6YiOWJxt+GSh/rp0zLZze8GYcH9BbFAj2qg08WziQv4/N9QfC3zwwy 1+dNYR4iL2gyRysBaP6YXZ9GSl7xdidatqvezs75n0m8BVCSuHZSBUXIOrBysPlt pGlhdAMCKBA+O1oxHfJURfPN73FOcc60X3LA4PAYEjIciOJaqn32vpHO2aT/viRE YiHJghj9VCcXCZbV330PFQ+MWKnNKG9/f4XVbKIyu2gmL2jvM5zELcSQhLvsMDKF /Bhr8/sT2gQMoSlBi8e1ge9APANnfhNaemqy5xrumoqNWtdlqLedLicDcQ/s/o6w ien6kKAuH8WBMw== -----END CERTIFICATE-----Generated at Mon Dec 15 19:52:46 2025 by rpki-client