This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft File: n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json) Hash identifier: dCdgIqU4WONqlEgmK6+oR7fegta8XpnuyRxeCr7K9cQ= Subject key identifier: DA:09:E2:49:18:4B:76:82:99:E8:D2:E2:D7:0B:76:59:5A:C8:A8:48 Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D Certificate issuer: /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d Certificate serial: 019B36B3FCEE4B4544C821762A00A4854E6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft Manifest number: 04F9 Signing time: Fri 19 Dec 2025 13:02:03 +0000 Manifest this update: Fri 19 Dec 2025 13:02:03 +0000 Manifest next update: Sat 20 Dec 2025 13:02:03 +0000 Files and hashes: 1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: Ba+mo41W2hSdI+TitxkQRXGhaDCeahdMs4UgtbheKKM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:fc:ee:4b:45:44:c8:21:76:2a:00:a4:85:4e:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d Validity Not Before: Dec 19 13:02:03 2025 GMT Not After : Dec 20 13:02:03 2025 GMT Subject: CN=da09e249184b768299e8d2e2d70b76595ac8a848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e3:d1:42:5a:f0:4a:35:84:30:39:69:14:36: ea:50:23:7d:a1:59:d8:3d:41:81:13:c2:fd:c7:db: c1:91:55:96:13:1a:b6:c3:29:87:2e:bd:39:5c:31: 49:98:6e:f4:74:47:4a:a1:95:3a:ee:05:58:1a:14: e7:95:ab:f6:01:33:80:10:74:d4:de:e6:54:75:e3: 6f:37:dd:f5:58:89:fb:47:50:35:85:9f:ac:5e:4f: 1d:27:bd:54:e7:54:04:9e:46:04:2c:d3:8a:fd:a0: 36:79:99:eb:ef:40:34:bc:e2:a2:af:b8:07:06:af: da:6a:01:d7:a1:9b:bf:83:c6:37:fd:66:38:b6:f0: a1:a2:d1:f8:e4:00:cf:82:97:2e:46:d6:76:10:ea: 78:c5:60:92:ab:ca:1d:7b:49:26:ff:7f:5d:0a:1d: d4:d9:21:a2:99:1c:a2:87:25:1a:59:14:6d:71:98: 1a:05:81:7b:4b:7f:85:14:5f:33:05:39:3f:f9:94: 25:aa:32:07:c8:4d:6f:5c:22:ae:2d:c6:8e:3c:e9: 83:7b:a0:e7:11:fe:4b:20:99:78:c7:f1:bf:51:a4: 73:b7:d3:b1:98:b5:19:12:64:43:3c:2a:37:78:d0: 98:15:c3:52:f8:7a:0a:e1:8a:0b:a4:e0:29:fd:9b: 72:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:09:E2:49:18:4B:76:82:99:E8:D2:E2:D7:0B:76:59:5A:C8:A8:48 X509v3 Authority Key Identifier: keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:7b:e1:3c:97:90:42:49:95:26:b1:ee:8e:08:24:57:cb:cc: a8:f2:ae:91:fd:8e:bb:4b:59:1a:40:01:e4:17:96:51:70:cb: 49:38:03:30:d2:d9:2f:94:f6:6b:ca:28:6a:fc:e2:fa:a8:38: 7c:9a:f8:fd:dd:2a:0f:bf:af:57:c2:ed:6b:38:9b:a7:52:e5: b0:89:0d:4c:96:96:92:bc:59:53:d2:9b:a7:a2:b5:d9:cd:ec: 6e:e2:23:2b:d4:16:83:db:4f:ed:58:50:72:a8:50:74:ce:26: 22:0c:1f:00:aa:da:f9:a4:ce:28:11:14:f2:4c:fe:b5:c9:92: 14:2c:7c:53:21:47:6a:08:ec:62:88:0f:f6:1d:98:a9:cc:ee: f0:06:a4:e5:65:4a:8b:aa:bc:f8:4b:24:62:ba:67:74:f7:50: ba:76:e3:db:08:7f:a7:e2:99:df:5b:e2:3b:31:57:6a:5b:11: c8:6e:01:d1:43:7d:b4:bc:9b:95:fa:cf:fd:3f:ad:7b:db:39: cf:a4:97:96:94:22:82:75:fb:2c:65:06:a5:9a:36:b1:69:11: 61:66:7f:cb:4f:2f:1f:50:af:42:8f:cd:7d:80:67:28:99:1a: fc:52:ca:4a:28:38:9c:be:32:c9:97:6d:73:d8:db:8d:26:1d: 7c:56:a1:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2s/zuS0VEyCF2KgCkhU5vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjhkYmQzM2Q1ZDNiYzRmYTM2NDllZGY3ZjkxNGVhZTdh Mzg4NWQwHhcNMjUxMjE5MTMwMjAzWhcNMjUxMjIwMTMwMjAzWjAzMTEwLwYDVQQD EyhkYTA5ZTI0OTE4NGI3NjgyOTllOGQyZTJkNzBiNzY1OTVhYzhhODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+PRQlrwSjWEMDlpFDbqUCN9oVnY PUGBE8L9x9vBkVWWExq2wymHLr05XDFJmG70dEdKoZU67gVYGhTnlav2ATOAEHTU 3uZUdeNvN931WIn7R1A1hZ+sXk8dJ71U51QEnkYELNOK/aA2eZnr70A0vOKir7gH Bq/aagHXoZu/g8Y3/WY4tvChotH45ADPgpcuRtZ2EOp4xWCSq8ode0km/39dCh3U 2SGimRyihyUaWRRtcZgaBYF7S3+FFF8zBTk/+ZQlqjIHyE1vXCKuLcaOPOmDe6Dn Ef5LIJl4x/G/UaRzt9OxmLUZEmRDPCo3eNCYFcNS+HoK4YoLpOAp/ZtytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoJ4kkYS3aCmejS4tcLdllayKhIMB8GA1UdIwQY MBaAFJ+429M9XTvE+jZJ7ff5FOrno4hdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hZDBmOGQtYTVlNy00MGIzLWI4YTgt NzM2MmIxOWRlNzNlLzEvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hZDBmOGQtYTVlNy00MGIzLWI4YTgtNzM2MmIxOWRlNzNl LzEvbjdqYjB6MWRPOFQ2TmtudDlfa1U2dWVqaUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXvhPJeQ QkmVJrHujggkV8vMqPKukf2Ou0tZGkAB5BeWUXDLSTgDMNLZL5T2a8ooavzi+qg4 fJr4/d0qD7+vV8Ltazibp1LlsIkNTJaWkrxZU9Kbp6K12c3sbuIjK9QWg9tP7VhQ cqhQdM4mIgwfAKra+aTOKBEU8kz+tcmSFCx8UyFHagjsYogP9h2Yqczu8Aak5WVK i6q8+EskYrpndPdQunbj2wh/p+KZ31viOzFXalsRyG4B0UN9tLyblfrP/T+te9s5 z6SXlpQignX7LGUGpZo2sWkRYWZ/y08vH1CvQo/NfYBnKJka/FLKSig4nL4yyZdt c9jbjSYdfFahBg== -----END CERTIFICATE-----Generated at Fri Dec 19 22:07:28 2025 by rpki-client