This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json) Hash identifier: U1HR+4Nw0RUYszLKXuAkBQBB9LsvpEgOeevINB05sxI= Subject key identifier: B8:F6:98:40:C4:6E:A9:8F:C9:48:9A:77:38:09:A5:5F:FD:5C:6A:3E Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f Certificate serial: 019B6CC613CD2E67A68F4AC39994407D7F7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft Manifest number: 117B Signing time: Tue 30 Dec 2025 01:01:18 +0000 Manifest this update: Tue 30 Dec 2025 01:01:18 +0000 Manifest next update: Wed 31 Dec 2025 01:01:18 +0000 Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: lWwbJujpDJ1GJYd1tu/HhRfq0lPiq8mbex+2N4CzI/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:13:cd:2e:67:a6:8f:4a:c3:99:94:40:7d:7f:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f Validity Not Before: Dec 30 01:01:18 2025 GMT Not After : Dec 31 01:01:18 2025 GMT Subject: CN=b8f69840c46ea98fc9489a773809a55ffd5c6a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7e:f1:8f:e4:db:64:c0:3d:43:4d:0c:57:da: 0a:44:62:e4:23:2e:52:2f:d2:c5:c7:11:30:32:7d: ea:8e:42:6e:da:bb:df:c3:df:1e:7c:86:b5:e5:81: be:ab:5d:2a:ee:95:91:3f:2e:93:d8:d6:8c:03:24: 48:f5:e5:47:80:02:4b:68:8f:4d:17:4f:7a:58:98: 89:61:79:a1:76:8c:ce:f9:eb:32:a9:11:22:0a:bb: 98:4c:e4:d2:d5:ad:1e:39:05:5b:40:61:43:6d:8f: 5f:3a:66:a0:4b:10:70:37:7d:3e:4d:e5:1f:70:e9: 77:06:e9:5b:9a:2c:5c:93:c1:8e:9a:28:46:1d:8c: bb:1d:15:47:4f:e8:62:2a:47:ff:a8:74:63:ba:76: c8:75:be:1b:6b:bf:11:48:e9:dc:e2:13:8d:9e:e2: da:4a:88:00:28:1a:41:d1:25:ab:7f:8c:53:d2:83: d1:6c:03:99:98:76:f3:17:aa:0f:67:b6:50:49:8d: f5:44:a2:eb:1d:2b:6e:c2:af:e0:0f:1a:a8:20:1f: c6:6c:04:14:46:4a:eb:8b:df:1f:02:36:4a:74:f3: 2d:29:3d:81:b8:b6:b0:b6:c6:fd:34:ef:33:81:24: cf:8e:47:a8:ce:b2:7f:6c:95:9c:fa:de:5a:d8:02: d5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F6:98:40:C4:6E:A9:8F:C9:48:9A:77:38:09:A5:5F:FD:5C:6A:3E X509v3 Authority Key Identifier: keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:18:86:0e:91:d3:b5:d4:30:21:47:77:84:58:33:c0:1b:be: 03:fb:61:d7:52:ca:d1:af:33:46:ad:d0:18:d3:3f:b5:b7:1c: b2:f7:e8:1a:7a:0e:d2:1e:71:39:66:1f:b0:02:f5:c7:35:e3: 5c:8e:f3:3d:5f:60:c2:93:f6:d2:65:57:89:a0:7f:16:0b:4a: 50:5a:0a:c7:f7:01:45:a1:18:18:51:89:ef:2e:0b:4b:ba:c1: e7:91:f6:a1:c5:d7:e0:8e:c8:86:bc:bb:f4:80:68:e7:b2:b2: ea:ba:cd:e2:44:05:7d:f2:46:a9:1c:02:47:3d:24:15:66:ca: ea:c7:21:08:80:43:78:91:93:13:86:82:ae:3a:64:1b:8f:67: b6:bd:37:f5:cd:0b:19:75:cc:a1:46:ed:d8:cd:b2:75:ef:9c: 0c:65:bb:ab:50:97:35:fa:6f:fa:0f:d5:15:b1:62:03:be:b5: 2c:c1:f3:98:83:a7:73:9a:59:0b:50:b6:1e:c9:e3:8c:b5:c5: 8f:fa:0b:7f:bd:b0:1a:d6:4b:7b:35:cc:0d:84:0b:90:7b:78: 32:f8:63:34:e7:3e:cb:9b:21:cd:eb:28:a0:1b:19:2e:f0:ff: 5d:15:ac:75:84:a5:dd:cd:55:4b:42:aa:35:38:98:d6:21:a1: af:7e:08:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxhPNLmemj0rDmZRAfX9/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNDVlYjVhMjg4YzY4ZWQ2MGRiZDliODdlNGU4MjA2Y2E5 YzkzM2YwHhcNMjUxMjMwMDEwMTE4WhcNMjUxMjMxMDEwMTE4WjAzMTEwLwYDVQQD EyhiOGY2OTg0MGM0NmVhOThmYzk0ODlhNzczODA5YTU1ZmZkNWM2YTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu37xj+TbZMA9Q00MV9oKRGLkIy5S L9LFxxEwMn3qjkJu2rvfw98efIa15YG+q10q7pWRPy6T2NaMAyRI9eVHgAJLaI9N F096WJiJYXmhdozO+esyqREiCruYTOTS1a0eOQVbQGFDbY9fOmagSxBwN30+TeUf cOl3Bulbmixck8GOmihGHYy7HRVHT+hiKkf/qHRjunbIdb4ba78RSOnc4hONnuLa SogAKBpB0SWrf4xT0oPRbAOZmHbzF6oPZ7ZQSY31RKLrHStuwq/gDxqoIB/GbAQU Rkrri98fAjZKdPMtKT2BuLawtsb9NO8zgSTPjkeozrJ/bJWc+t5a2ALVLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj2mEDEbqmPyUiadzgJpV/9XGo+MB8GA1UdIwQY MBaAFJ9F61oojGjtYNvZuH5OggbKnJM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lNDIzMzYtZWI3Ny00NTQwLWJlNDEt NTVmZDZkYzFhMWQ4LzEvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lNDIzMzYtZWI3Ny00NTQwLWJlNDEtNTVmZDZkYzFhMWQ4 LzEvbjBYcldpaU1hTzFnMjltNGZrNkNCc3Fja3o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxiGDpHT tdQwIUd3hFgzwBu+A/th11LK0a8zRq3QGNM/tbccsvfoGnoO0h5xOWYfsAL1xzXj XI7zPV9gwpP20mVXiaB/FgtKUFoKx/cBRaEYGFGJ7y4LS7rB55H2ocXX4I7Ihry7 9IBo57Ky6rrN4kQFffJGqRwCRz0kFWbK6schCIBDeJGTE4aCrjpkG49ntr039c0L GXXMoUbt2M2yde+cDGW7q1CXNfpv+g/VFbFiA761LMHzmIOnc5pZC1C2HsnjjLXF j/oLf72wGtZLezXMDYQLkHt4MvhjNOc+y5shzesooBsZLvD/XRWsdYSl3c1VS0Kq NTiY1iGhr34IMg== -----END CERTIFICATE-----Generated at Tue Dec 30 10:53:53 2025 by rpki-client