This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft File: n4kf80d-1_2qz64uPw36ZP2SrAw.mft (raw, json) Hash identifier: WuTVfUW9xOKCq6/aVO3o20xjoc+tzr9LxQUK1Sq0J7g= Subject key identifier: 61:4A:5F:AC:EA:01:98:3F:9C:B5:4E:AF:CF:DE:3D:D0:B4:8C:79:AC Authority key identifier: 9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C Certificate issuer: /CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c Certificate serial: 019B4437F33E1D115A7F146333649AEBE3A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft Manifest number: 0BCA Signing time: Mon 22 Dec 2025 04:01:15 +0000 Manifest this update: Mon 22 Dec 2025 04:01:15 +0000 Manifest next update: Tue 23 Dec 2025 04:01:15 +0000 Files and hashes: 1: D3yjJU5h_FTDERrGNrsGZ8LgMxc.roa (hash: zDBANuUPdW/jRqqSGkjw8mcyfQtAQBZkgjZavcu4Hqg=) 2: n4kf80d-1_2qz64uPw36ZP2SrAw.crl (hash: FmsAORIK3Jq70VikkLe087INCtFauVTeuh9qgI2TOSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:f3:3e:1d:11:5a:7f:14:63:33:64:9a:eb:e3:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f891ff3477ed7fdaacfae2e3f0dfa64fd92ac0c Validity Not Before: Dec 22 04:01:15 2025 GMT Not After : Dec 23 04:01:15 2025 GMT Subject: CN=614a5facea01983f9cb54eafcfde3dd0b48c79ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:fe:1d:7b:f6:f7:0b:58:07:12:a5:ad:61:04: 51:30:c7:4d:11:a6:35:2a:60:9f:36:d7:63:72:d8: 50:ac:44:41:27:d0:4b:7a:d8:b5:db:db:b3:3a:ea: 08:8f:c4:dd:17:38:81:73:28:41:50:cd:a9:e5:05: 2a:63:18:13:e0:e8:42:16:4c:07:91:e4:c2:4a:64: a0:de:16:a0:86:a4:9e:e5:28:ac:2b:17:0a:26:ec: 7d:46:49:1b:c3:16:0e:b3:a3:c4:f9:8e:3c:44:b6: 76:66:a2:1a:61:a3:3b:ca:f8:53:dd:08:b4:c9:8a: 4c:cb:a0:46:15:b0:e8:f3:fc:c8:8c:31:ac:6c:44: 65:f7:37:e0:51:dd:2c:b4:8f:33:00:33:8a:05:04: ee:e5:ce:08:49:2f:9b:78:24:f2:26:18:84:ea:7a: 9c:ff:f0:2c:cd:08:5b:7c:e0:55:f7:70:ee:91:29: ad:fd:38:b1:47:1e:69:63:bd:9f:57:fe:5b:3c:9f: 7a:d5:10:51:17:8e:17:a2:ea:68:4d:47:4a:22:09: ec:f7:d7:72:43:72:04:8c:27:94:d8:79:15:09:70: 62:51:d7:0e:3e:bb:70:ce:cb:16:4c:83:d4:2c:66: ec:0f:32:ac:b8:59:d1:fd:ea:e6:4b:69:08:9e:4a: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4A:5F:AC:EA:01:98:3F:9C:B5:4E:AF:CF:DE:3D:D0:B4:8C:79:AC X509v3 Authority Key Identifier: keyid:9F:89:1F:F3:47:7E:D7:FD:AA:CF:AE:2E:3F:0D:FA:64:FD:92:AC:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4kf80d-1_2qz64uPw36ZP2SrAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c77833-31ae-4412-b049-70a4a8d7c43f/1/n4kf80d-1_2qz64uPw36ZP2SrAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:38:9e:52:35:00:e0:24:b1:ea:3c:90:fc:0d:ad:b9:11:4a: 95:49:1e:a0:17:4d:50:f5:86:5d:0b:1f:3b:b4:34:5d:ca:e3: 72:f1:c8:64:7a:2e:6c:98:72:0d:00:20:4b:06:2a:1f:10:6d: c9:56:b9:57:b7:bd:2a:71:ab:91:1b:fa:85:f5:a4:da:60:e9: c4:6c:52:38:6c:8b:08:4c:80:b1:9b:31:01:08:d0:bc:c8:80: fa:d8:10:af:7b:0b:ba:43:8d:7f:1c:1f:fa:ca:25:9f:f1:c5: 61:43:6e:70:ae:7b:98:22:7d:7a:ee:28:0b:96:9d:20:7a:96: 37:1b:25:61:2f:21:99:00:7c:ed:c8:6f:78:2e:0d:03:8e:cd: e1:41:c1:1a:b1:bb:d5:07:f6:1c:af:a7:ca:ae:ab:57:07:e2: ca:39:db:42:86:c8:5b:bf:57:36:68:f5:0c:8c:dd:b9:dd:b9: a8:5c:b5:9e:e7:d9:46:d8:0b:fe:1e:0f:8f:b9:ce:e8:89:3e: a3:85:b5:5f:a2:1e:d6:97:bc:b5:4c:22:3b:0e:8b:2d:fe:fd: 99:4e:16:03:70:19:8e:87:ac:0f:55:46:da:75:28:6d:c7:8e: e5:b4:76:e8:6c:47:d3:94:db:f6:87:f6:aa:41:ea:df:34:a4: 37:9f:a9:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN/M+HRFafxRjM2Sa6+OhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODkxZmYzNDc3ZWQ3ZmRhYWNmYWUyZTNmMGRmYTY0ZmQ5 MmFjMGMwHhcNMjUxMjIyMDQwMTE1WhcNMjUxMjIzMDQwMTE1WjAzMTEwLwYDVQQD Eyg2MTRhNWZhY2VhMDE5ODNmOWNiNTRlYWZjZmRlM2RkMGI0OGM3OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8P4de/b3C1gHEqWtYQRRMMdNEaY1 KmCfNtdjcthQrERBJ9BLeti129uzOuoIj8TdFziBcyhBUM2p5QUqYxgT4OhCFkwH keTCSmSg3haghqSe5SisKxcKJux9RkkbwxYOs6PE+Y48RLZ2ZqIaYaM7yvhT3Qi0 yYpMy6BGFbDo8/zIjDGsbERl9zfgUd0stI8zADOKBQTu5c4ISS+beCTyJhiE6nqc //AszQhbfOBV93DukSmt/TixRx5pY72fV/5bPJ961RBRF44XoupoTUdKIgns99dy Q3IEjCeU2HkVCXBiUdcOPrtwzssWTIPULGbsDzKsuFnR/ermS2kInkof4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFKX6zqAZg/nLVOr8/ePdC0jHmsMB8GA1UdIwQY MBaAFJ+JH/NHftf9qs+uLj8N+mT9kqwMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDkt NzBhNGE4ZDdjNDNmLzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jNzc4MzMtMzFhZS00NDEyLWIwNDktNzBhNGE4ZDdjNDNm LzEvbjRrZjgwZC0xXzJxejY0dVB3MzZaUDJTckF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTieUjUA 4CSx6jyQ/A2tuRFKlUkeoBdNUPWGXQsfO7Q0XcrjcvHIZHoubJhyDQAgSwYqHxBt yVa5V7e9KnGrkRv6hfWk2mDpxGxSOGyLCEyAsZsxAQjQvMiA+tgQr3sLukONfxwf +soln/HFYUNucK57mCJ9eu4oC5adIHqWNxslYS8hmQB87chveC4NA47N4UHBGrG7 1Qf2HK+nyq6rVwfiyjnbQobIW79XNmj1DIzdud25qFy1nufZRtgL/h4Pj7nO6Ik+ o4W1X6Ie1pe8tUwiOw6LLf79mU4WA3AZjoesD1VG2nUobceO5bR26GxH05Tb9of2 qkHq3zSkN5+pSQ== -----END CERTIFICATE-----Generated at Mon Dec 22 12:16:47 2025 by rpki-client