This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json) Hash identifier: KnldglBXw9lzyjmo1mBCxr3Uw7N40oudgts1Wg6n+G8= Subject key identifier: D9:F3:C9:DC:67:0C:C3:DF:15:0E:38:5A:24:DB:8E:B8:6E:8A:D3:C3 Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d Certificate serial: 019B3CEC78235AB0EC82D652704887A1A85D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft Manifest number: 1631 Signing time: Sat 20 Dec 2025 18:01:28 +0000 Manifest this update: Sat 20 Dec 2025 18:01:28 +0000 Manifest next update: Sun 21 Dec 2025 18:01:28 +0000 Files and hashes: 1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: dg81LcurCekOcrvh43HmVJIBIiG0A38Oh65CH7Fzvd0=) 2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:78:23:5a:b0:ec:82:d6:52:70:48:87:a1:a8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d Validity Not Before: Dec 20 18:01:28 2025 GMT Not After : Dec 21 18:01:28 2025 GMT Subject: CN=d9f3c9dc670cc3df150e385a24db8eb86e8ad3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0a:88:04:80:da:d1:31:59:fe:9d:91:9f:fc: a5:08:51:32:4b:bf:8d:a2:0a:2e:e1:87:c7:df:1f: a7:2c:61:8e:79:1e:3f:1a:d2:61:f6:bd:12:a3:b5: 28:b2:8d:a3:ed:79:fd:72:1a:33:f4:ee:1f:1a:7a: 0a:0d:eb:fd:68:95:b2:34:88:50:50:b8:07:2a:75: 76:53:db:6f:b6:8f:b9:3a:d0:88:08:22:9e:d7:8f: f2:4e:3f:1e:41:32:22:75:1b:e5:88:23:17:54:00: f3:d1:ec:99:3a:29:77:c0:ac:59:dd:35:8e:fa:77: 36:a3:7a:be:c5:d9:ae:d2:3f:31:2b:d0:a0:a3:94: 68:d5:b9:d7:20:ef:89:ad:ce:06:ec:5c:2e:1b:84: 80:5a:40:7e:fd:84:1c:5c:ed:b3:d6:83:8e:b0:68: a6:64:68:75:43:f0:8a:6d:c3:04:ca:4b:42:dd:35: 43:17:35:10:aa:e3:0b:4d:b9:14:ed:3b:1d:49:05: a0:84:06:f6:b8:4c:6e:7b:2c:a7:8f:6a:2a:98:38: ff:53:40:dd:2b:d5:47:68:10:88:58:b1:02:fd:9b: f4:14:7f:bf:eb:07:75:21:d4:e5:93:69:4d:e5:0b: 1a:42:9e:be:71:19:bf:52:72:b1:eb:32:32:20:fb: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F3:C9:DC:67:0C:C3:DF:15:0E:38:5A:24:DB:8E:B8:6E:8A:D3:C3 X509v3 Authority Key Identifier: keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:fb:2b:08:55:4c:8b:af:51:11:ec:f1:8c:a0:4f:78:12:f7: f1:2c:47:39:b2:ec:ba:24:35:9e:59:0a:6c:d5:ef:52:1d:c9: dc:d5:39:a8:2e:a1:fa:6a:0d:8e:ed:30:9e:e1:c0:54:a7:0b: 36:c3:6a:f1:af:f6:e0:a0:56:6c:00:e8:62:91:16:aa:d0:d7: cc:38:42:d0:4e:b9:ec:92:f0:8e:e2:de:e2:cc:84:9f:94:db: c8:4a:4d:b2:f4:ca:25:1a:b1:5d:b4:69:60:00:29:de:b6:64: 97:77:53:50:d3:39:35:70:b0:3a:8f:e1:da:4a:03:77:4e:d2: e2:f2:c1:70:d3:a0:64:f3:fb:f2:76:3a:57:47:90:51:6a:ad: cd:e5:0a:d0:d2:0c:9b:9c:3b:a7:69:09:d8:a7:0f:4e:7d:06: d2:0a:17:09:88:28:6a:f3:07:eb:42:6d:1d:7a:5d:9e:8b:b0: 75:bf:95:5f:33:09:ff:33:dc:44:e7:5a:e2:ab:58:92:49:ee: 10:84:67:26:1a:d1:cb:1e:eb:5f:7a:67:c2:94:14:1e:cf:3e: 34:94:37:99:ea:94:2d:e6:72:78:a2:d5:bb:5b:07:a5:49:88: e7:b1:67:7c:3e:b8:b9:98:74:05:74:c1:84:7b:92:53:a2:c9: fc:fb:7f:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87HgjWrDsgtZScEiHoahdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYzZlODc3MDlhZTlkMDQ0Nzk0MGYyM2Q3NTRkZjhiYTgx NzViMGQwHhcNMjUxMjIwMTgwMTI4WhcNMjUxMjIxMTgwMTI4WjAzMTEwLwYDVQQD EyhkOWYzYzlkYzY3MGNjM2RmMTUwZTM4NWEyNGRiOGViODZlOGFkM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwqIBIDa0TFZ/p2Rn/ylCFEyS7+N ogou4YfH3x+nLGGOeR4/GtJh9r0So7Uoso2j7Xn9choz9O4fGnoKDev9aJWyNIhQ ULgHKnV2U9tvto+5OtCICCKe14/yTj8eQTIidRvliCMXVADz0eyZOil3wKxZ3TWO +nc2o3q+xdmu0j8xK9Cgo5Ro1bnXIO+Jrc4G7FwuG4SAWkB+/YQcXO2z1oOOsGim ZGh1Q/CKbcMEyktC3TVDFzUQquMLTbkU7TsdSQWghAb2uExueyynj2oqmDj/U0Dd K9VHaBCIWLEC/Zv0FH+/6wd1IdTlk2lN5QsaQp6+cRm/UnKx6zIyIPsFMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnzydxnDMPfFQ44WiTbjrhuitPDMB8GA1UdIwQY MBaAFJ/G6HcJrp0ER5QPI9dU34uoF1sNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQt ODhhNzRkMDM5ZjdmLzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQtODhhNzRkMDM5Zjdm LzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApvsrCFVM i69REezxjKBPeBL38SxHObLsuiQ1nlkKbNXvUh3J3NU5qC6h+moNju0wnuHAVKcL NsNq8a/24KBWbADoYpEWqtDXzDhC0E657JLwjuLe4syEn5TbyEpNsvTKJRqxXbRp YAAp3rZkl3dTUNM5NXCwOo/h2koDd07S4vLBcNOgZPP78nY6V0eQUWqtzeUK0NIM m5w7p2kJ2KcPTn0G0goXCYgoavMH60JtHXpdnouwdb+VXzMJ/zPcROda4qtYkknu EIRnJhrRyx7rX3pnwpQUHs8+NJQ3meqULeZyeKLVu1sHpUmI57FnfD64uZh0BXTB hHuSU6LJ/Pt/EA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:11 2025 by rpki-client