This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft File: RN9Py46lHhjSkIBcj1Dw30NA29U.mft (raw, json) Hash identifier: /ezEtdJwA73d3ajA6LLPZ/MA6ZKx3cfox/QJtfG/tL8= Subject key identifier: 85:A3:67:09:E5:6A:58:80:79:6E:F3:CD:82:D0:B2:9E:DA:31:56:12 Authority key identifier: 44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 Certificate issuer: /CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Certificate serial: 019B25BFD5054EDA8B58882BDF3FED5A2BDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft Manifest number: 05D8 Signing time: Tue 16 Dec 2025 06:01:27 +0000 Manifest this update: Tue 16 Dec 2025 06:01:27 +0000 Manifest next update: Wed 17 Dec 2025 06:01:27 +0000 Files and hashes: 1: Jnu4ULGWiYYyf0zY1jAWEkVWHD0.roa (hash: qyHwPaggVI5vageO/6J79WpR7CRcu7iGJcwNnzLQCvo=) 2: RN9Py46lHhjSkIBcj1Dw30NA29U.crl (hash: +9gN1LehAGR4R/FMYGfgfuC5GQ9YbcOlmG+Xk8ocj88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:d5:05:4e:da:8b:58:88:2b:df:3f:ed:5a:2b:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44df4fcb8ea51e18d290805c8f50f0df4340dbd5 Validity Not Before: Dec 16 06:01:27 2025 GMT Not After : Dec 17 06:01:27 2025 GMT Subject: CN=85a36709e56a5880796ef3cd82d0b29eda315612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:af:1a:83:90:1d:bb:cd:42:cd:f1:f9:51:a9: f7:a5:c2:30:80:fb:7f:38:8a:70:97:85:13:59:14: 83:32:09:55:ab:f3:81:f0:38:fa:de:bd:4d:ec:35: 41:a7:65:80:ed:64:d0:24:d3:09:ee:47:9e:b3:20: 46:46:8b:75:0d:63:38:bd:62:ce:1c:db:04:aa:1f: 27:14:04:c2:91:09:eb:e2:01:e3:7c:5e:23:18:56: d8:8f:37:88:a4:94:67:9a:33:54:ef:80:66:02:6b: 4a:ea:86:4a:af:f2:2b:45:f9:5c:65:25:4e:15:18: a1:f4:9e:37:cf:cb:03:4c:e5:38:5c:20:38:6a:dc: 65:61:d6:f1:c3:d1:f8:b3:e3:a0:85:cc:36:e7:1e: 73:76:9a:1e:ee:82:03:fe:11:a2:cb:72:09:40:3c: 84:9f:13:7d:fe:79:48:74:99:c8:0c:ec:49:02:59: c4:8f:6c:1c:20:fa:cb:3f:55:dd:e2:b0:cc:28:ef: 4b:46:f0:51:71:b7:b5:0c:e5:9c:33:ac:b3:c4:c4: 7d:00:29:3e:3f:7d:5c:11:43:1d:07:a0:f0:23:5d: 6e:fc:10:cc:ea:b4:e5:98:fd:6e:af:de:fc:16:71: cd:64:5e:74:27:8d:96:45:71:1b:0d:c3:41:43:ff: c0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A3:67:09:E5:6A:58:80:79:6E:F3:CD:82:D0:B2:9E:DA:31:56:12 X509v3 Authority Key Identifier: keyid:44:DF:4F:CB:8E:A5:1E:18:D2:90:80:5C:8F:50:F0:DF:43:40:DB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN9Py46lHhjSkIBcj1Dw30NA29U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7cc183-eba5-4747-8b10-f38c749b6e39/1/RN9Py46lHhjSkIBcj1Dw30NA29U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e6:b2:1d:50:a7:54:78:4b:3b:f1:37:0a:97:c8:f4:c0:ca: 95:f8:c5:cc:4c:2b:24:ed:18:36:92:f5:cc:6e:4b:d3:54:12: 3a:93:44:4d:aa:cd:28:c4:a5:12:9c:42:af:cd:a9:c4:2d:c4: 12:41:be:36:2c:e9:20:a5:73:40:b6:7c:e0:d0:1a:ac:a3:cc: 82:19:b4:b7:1d:2c:e0:17:54:2a:7f:71:1a:22:80:5f:97:45: 79:89:65:22:16:1b:9e:e1:e9:60:49:e3:f5:43:c5:36:47:fc: 9f:6b:74:19:9a:91:66:f1:16:5d:a2:30:51:cd:90:e5:32:b2: bb:4d:76:97:09:b7:13:a0:0b:d1:76:bc:2c:7b:e0:d5:44:a3: 43:ff:ef:40:24:68:f5:2d:dc:16:8c:46:53:a0:f3:0e:1f:36: 1f:c7:24:dc:f2:85:70:77:87:ca:b6:7a:23:4e:35:d2:52:78: 9e:e5:07:e2:f4:64:0d:52:ba:ee:44:ff:56:13:3f:2a:cd:65: 7c:d0:9c:ba:ab:3f:94:77:67:59:f4:fc:a7:23:12:73:45:82: a2:15:55:70:65:e6:d9:c6:3b:9f:18:03:23:26:ab:fb:c0:4b: 68:d0:5f:4e:96:fc:89:73:c9:9e:ee:44:74:25:a9:4f:7f:34: 76:de:68:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv9UFTtqLWIgr3z/tWivdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZGY0ZmNiOGVhNTFlMThkMjkwODA1YzhmNTBmMGRmNDM0 MGRiZDUwHhcNMjUxMjE2MDYwMTI3WhcNMjUxMjE3MDYwMTI3WjAzMTEwLwYDVQQD Eyg4NWEzNjcwOWU1NmE1ODgwNzk2ZWYzY2Q4MmQwYjI5ZWRhMzE1NjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK8ag5Adu81CzfH5Uan3pcIwgPt/ OIpwl4UTWRSDMglVq/OB8Dj63r1N7DVBp2WA7WTQJNMJ7keesyBGRot1DWM4vWLO HNsEqh8nFATCkQnr4gHjfF4jGFbYjzeIpJRnmjNU74BmAmtK6oZKr/IrRflcZSVO FRih9J43z8sDTOU4XCA4atxlYdbxw9H4s+Oghcw25x5zdpoe7oID/hGiy3IJQDyE nxN9/nlIdJnIDOxJAlnEj2wcIPrLP1Xd4rDMKO9LRvBRcbe1DOWcM6yzxMR9ACk+ P31cEUMdB6DwI11u/BDM6rTlmP1ur978FnHNZF50J42WRXEbDcNBQ//AiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIWjZwnlaliAeW7zzYLQsp7aMVYSMB8GA1UdIwQY MBaAFETfT8uOpR4Y0pCAXI9Q8N9DQNvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAt ZjM4Yzc0OWI2ZTM5LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS83Y2MxODMtZWJhNS00NzQ3LThiMTAtZjM4Yzc0OWI2ZTM5 LzEvUk45UHk0NmxIaGpTa0lCY2oxRHczME5BMjlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjOayHVCn VHhLO/E3CpfI9MDKlfjFzEwrJO0YNpL1zG5L01QSOpNETarNKMSlEpxCr82pxC3E EkG+NizpIKVzQLZ84NAarKPMghm0tx0s4BdUKn9xGiKAX5dFeYllIhYbnuHpYEnj 9UPFNkf8n2t0GZqRZvEWXaIwUc2Q5TKyu012lwm3E6AL0Xa8LHvg1USjQ//vQCRo 9S3cFoxGU6DzDh82H8ck3PKFcHeHyrZ6I0410lJ4nuUH4vRkDVK67kT/VhM/Ks1l fNCcuqs/lHdnWfT8pyMSc0WCohVVcGXm2cY7nxgDIyar+8BLaNBfTpb8iXPJnu5E dCWpT380dt5o6g== -----END CERTIFICATE-----Generated at Tue Dec 16 16:23:13 2025 by rpki-client