This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json) Hash identifier: 7r8fpp3pCKoWt0s8xW/e3FMKhmRH1gqhO9mKJt/ZyvE= Subject key identifier: 08:71:62:F6:1C:56:78:EE:38:4D:47:21:FE:35:0D:27:D0:26:0C:55 Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26 Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826 Certificate serial: 019B36B43827950122B464920ECD4888867D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft Manifest number: 02AD Signing time: Fri 19 Dec 2025 13:02:19 +0000 Manifest this update: Fri 19 Dec 2025 13:02:19 +0000 Manifest next update: Sat 20 Dec 2025 13:02:19 +0000 Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: sT1Xx2dswSV21NBl24/CKXlmM+DrV7CufyqR+uv+3z4=) 2: shgH4_EQdby9FFBN3Y5GUQj4Toc.roa (hash: +F1kGaAyVQdETpR4Si2c2G3OanhyfIaqHi8fbDMWM9U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b4:38:27:95:01:22:b4:64:92:0e:cd:48:88:86:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826 Validity Not Before: Dec 19 13:02:19 2025 GMT Not After : Dec 20 13:02:19 2025 GMT Subject: CN=087162f61c5678ee384d4721fe350d27d0260c55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:49:4b:61:82:b5:df:40:a2:16:c5:bb:2c:94: 88:d9:54:83:99:c4:02:b3:b0:1d:1e:3c:e4:da:22: 85:b8:95:dc:76:77:44:7f:95:81:bf:47:43:af:62: 4e:f0:2d:17:fd:eb:d6:f1:a4:38:1a:42:d0:50:3c: 79:fc:b4:b1:98:9c:5b:66:1e:ed:7e:74:13:9a:ad: e7:7d:45:1b:58:47:f0:82:1a:00:ca:29:e1:cb:1a: e8:10:b7:89:e2:01:0b:00:cc:c2:75:ac:3d:a5:94: e0:24:d9:51:d3:e3:20:e2:7b:1e:5d:9b:af:f7:1a: cd:a9:38:55:32:17:74:9c:e7:d1:d1:b1:50:9b:01: 20:fa:e2:86:20:92:a7:21:8f:09:b5:a1:12:0b:67: 54:c7:7f:25:38:3d:03:b0:15:fe:a8:54:4b:5f:48: 3f:51:6d:51:b0:6c:5d:ae:bd:28:e5:98:a5:40:61: 15:30:52:ad:06:b2:f8:41:88:39:84:a8:d4:46:98: 3f:f8:50:ee:4a:2b:0c:81:a1:35:44:d0:dc:6b:fb: 78:3f:3c:56:d2:f0:66:ea:e5:f8:b7:9e:e6:26:11: 76:d7:a4:9f:0d:a3:ef:8b:46:07:3a:dc:9f:92:52: 71:9a:1c:18:8c:89:02:5c:41:0e:fd:57:09:4c:dc: ee:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:71:62:F6:1C:56:78:EE:38:4D:47:21:FE:35:0D:27:D0:26:0C:55 X509v3 Authority Key Identifier: keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:3f:85:96:4b:e4:ae:d5:96:51:5e:1f:a4:32:dd:65:3f:48: 88:ad:aa:2a:6b:39:fc:93:f3:95:a1:35:43:9f:cd:35:5b:82: 02:e3:9b:32:96:0c:af:dd:ea:87:b8:80:f3:aa:ec:27:f8:ec: 32:a9:54:4b:63:19:05:5f:89:18:15:10:27:57:95:96:51:80: 53:4e:14:60:7f:c6:e3:6a:d0:5c:08:73:10:6f:ac:6c:d2:4d: 37:1d:56:00:5c:b6:58:bf:95:bc:34:87:8d:35:36:15:58:57: fd:f2:76:41:f7:ed:99:83:3a:00:a1:ce:6a:f7:c3:c3:62:ad: 60:18:ef:dc:8f:87:1a:55:c3:9d:e8:0e:7c:09:4e:07:00:9a: 64:40:2b:fe:4d:e9:20:d7:d6:15:47:53:8c:25:68:4e:ea:3d: a7:eb:11:b7:de:a7:e9:c3:2d:2d:89:1b:73:d7:73:1a:8f:0c: 1f:9d:92:81:09:28:fb:35:af:6c:ce:18:66:c6:2c:11:7a:2d: 09:fc:b3:e3:73:dc:54:39:df:8e:75:08:7a:c6:d5:38:b6:87: 2c:5e:e0:3f:f8:5b:a6:30:fa:51:bf:f4:0b:f1:f3:cc:69:7c: ad:73:a5:0a:8b:59:8e:dc:99:26:e4:53:51:51:be:43:b3:8b: 8f:de:e3:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2tDgnlQEitGSSDs1IiIZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYjQxZDI1MmYxMjBhY2IxNDBkMGZjODQzMzQxNTIxMTRi NmM4MjYwHhcNMjUxMjE5MTMwMjE5WhcNMjUxMjIwMTMwMjE5WjAzMTEwLwYDVQQD EygwODcxNjJmNjFjNTY3OGVlMzg0ZDQ3MjFmZTM1MGQyN2QwMjYwYzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtElLYYK130CiFsW7LJSI2VSDmcQC s7AdHjzk2iKFuJXcdndEf5WBv0dDr2JO8C0X/evW8aQ4GkLQUDx5/LSxmJxbZh7t fnQTmq3nfUUbWEfwghoAyinhyxroELeJ4gELAMzCdaw9pZTgJNlR0+Mg4nseXZuv 9xrNqThVMhd0nOfR0bFQmwEg+uKGIJKnIY8JtaESC2dUx38lOD0DsBX+qFRLX0g/ UW1RsGxdrr0o5ZilQGEVMFKtBrL4QYg5hKjURpg/+FDuSisMgaE1RNDca/t4PzxW 0vBm6uX4t57mJhF216SfDaPvi0YHOtyfklJxmhwYjIkCXEEO/VcJTNzuVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhxYvYcVnjuOE1HIf41DSfQJgxVMB8GA1UdIwQY MBaAFJ+0HSUvEgrLFA0PyEM0FSEUtsgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUt NjNlMWMxMDRhOGRiLzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9hMTgxMWItNjE3Zi00NjlmLWFjZGUtNjNlMWMxMDRhOGRi LzEvbjdRZEpTOFNDc3NVRFFfSVF6UVZJUlMyeUNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbz+Flkvk rtWWUV4fpDLdZT9IiK2qKms5/JPzlaE1Q5/NNVuCAuObMpYMr93qh7iA86rsJ/js MqlUS2MZBV+JGBUQJ1eVllGAU04UYH/G42rQXAhzEG+sbNJNNx1WAFy2WL+VvDSH jTU2FVhX/fJ2QfftmYM6AKHOavfDw2KtYBjv3I+HGlXDnegOfAlOBwCaZEAr/k3p INfWFUdTjCVoTuo9p+sRt96n6cMtLYkbc9dzGo8MH52SgQko+zWvbM4YZsYsEXot Cfyz43PcVDnfjnUIesbVOLaHLF7gP/hbpjD6Ub/0C/HzzGl8rXOlCotZjtyZJuRT UVG+Q7OLj97jEw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:27:33 2025 by rpki-client