This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft File: aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json) Hash identifier: ptA77Ydawdj3g4LaKVRNQVkwRm+tXKrEp3CUiPqvKo8= Subject key identifier: DC:16:F1:7C:1F:A8:32:F7:1D:C0:AA:2F:4A:FA:62:D5:10:32:8C:B4 Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Certificate serial: 019B255251919CF46260ECD70857A8A7EDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft Manifest number: 09FD Signing time: Tue 16 Dec 2025 04:01:50 +0000 Manifest this update: Tue 16 Dec 2025 04:01:50 +0000 Manifest next update: Wed 17 Dec 2025 04:01:50 +0000 Files and hashes: 1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: sNgqYg9d65KpUowQDEqSiu4CQCkBaKgpA2VF9NM0d7E=) 2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:51:91:9c:f4:62:60:ec:d7:08:57:a8:a7:ed:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2 Validity Not Before: Dec 16 04:01:50 2025 GMT Not After : Dec 17 04:01:50 2025 GMT Subject: CN=dc16f17c1fa832f71dc0aa2f4afa62d510328cb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a3:f2:98:b3:a0:88:5e:3b:71:99:5d:18:76: 05:6d:44:fa:20:be:15:aa:cf:ae:29:52:98:48:df: cd:2b:aa:e9:a2:f3:8c:66:99:e6:9f:78:e7:a9:94: 80:9b:07:b4:10:38:f2:e0:3b:81:ca:bd:fb:9a:21: d2:a9:4b:08:1c:c6:3c:7e:9f:83:db:9d:77:19:52: de:fe:ab:f4:79:c8:ab:4d:e8:f7:93:3c:26:68:5f: dd:b4:79:65:c5:13:c7:0a:8b:52:38:42:f6:fb:89: a7:81:38:b1:f6:38:d6:5b:82:d7:3d:ed:a1:43:f4: d7:ec:9f:16:3b:52:2f:30:34:6e:8b:bb:75:90:88: 96:64:3b:e2:26:4d:83:eb:4d:6f:26:54:82:b2:4b: 8d:56:e6:7a:c3:aa:22:37:b1:21:b4:5c:f2:98:40: 14:fb:ba:73:d6:a9:78:19:e6:7a:0b:bc:1f:de:99: db:00:12:4b:a2:ce:b0:dd:3c:62:30:c1:4e:17:40: 5b:2c:9b:da:c1:b4:1e:07:9d:79:c2:5b:0b:ac:dc: cb:68:1c:9b:ba:ae:7b:bf:fd:0c:7e:66:e1:52:38: 1b:6d:ea:55:79:fe:e1:72:94:e7:69:a5:fa:f7:43: a2:92:aa:70:1b:e7:ac:1d:36:cd:dd:99:b6:d7:5e: ba:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:16:F1:7C:1F:A8:32:F7:1D:C0:AA:2F:4A:FA:62:D5:10:32:8C:B4 X509v3 Authority Key Identifier: keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c7:b5:b6:6b:e0:d0:bf:c3:06:8b:2a:b3:51:12:e7:39:4b: 24:ed:af:77:f7:e9:41:17:66:37:15:62:da:d7:c4:76:80:33: f8:53:3c:84:9a:89:88:52:04:62:37:7a:42:c6:c8:ad:d3:ff: c8:bf:5e:e6:23:05:5c:af:82:fb:45:85:eb:46:9d:7c:91:f0: 26:f9:94:da:fd:40:5a:c3:13:18:8b:e4:79:84:29:4b:6d:4b: 5b:7e:2d:69:39:ab:c4:41:a2:7a:8f:85:b8:0a:8d:e2:67:0e: 9e:8b:6e:08:97:89:5d:c6:9f:4a:ef:87:fb:65:52:94:a7:b5: 6e:be:a4:c5:41:81:5c:52:28:35:79:c9:c5:04:e2:61:f9:15: 0b:2b:69:ff:db:b2:91:76:32:e2:de:7f:4d:30:03:ca:98:9a: fb:96:49:93:1f:7f:79:7b:e1:98:05:e8:8e:cf:37:2f:db:47: 74:e3:a3:c8:b7:8d:c5:0a:67:0e:86:88:80:a3:13:16:41:e0: 0b:a8:14:4f:a9:76:93:56:d1:c0:d0:49:84:43:0d:c1:85:c5: 85:50:45:e1:8d:13:33:7b:39:00:fa:98:89:a7:e2:c1:f4:d1: 8b:05:a2:a4:f3:68:39:b1:55:f8:96:df:4d:3d:79:36:d5:1f: 39:2f:65:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUlGRnPRiYOzXCFeop+2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGRiZWY3ZjFjZGQ4YWQxMjcxNjBmMjBlYTBhM2Y2Yjcz ZmE0YTIwHhcNMjUxMjE2MDQwMTUwWhcNMjUxMjE3MDQwMTUwWjAzMTEwLwYDVQQD EyhkYzE2ZjE3YzFmYTgzMmY3MWRjMGFhMmY0YWZhNjJkNTEwMzI4Y2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqPymLOgiF47cZldGHYFbUT6IL4V qs+uKVKYSN/NK6rpovOMZpnmn3jnqZSAmwe0EDjy4DuByr37miHSqUsIHMY8fp+D 2513GVLe/qv0ecirTej3kzwmaF/dtHllxRPHCotSOEL2+4mngTix9jjWW4LXPe2h Q/TX7J8WO1IvMDRui7t1kIiWZDviJk2D601vJlSCskuNVuZ6w6oiN7EhtFzymEAU +7pz1ql4GeZ6C7wf3pnbABJLos6w3TxiMMFOF0BbLJvawbQeB515wlsLrNzLaByb uq57v/0MfmbhUjgbbepVef7hcpTnaaX690OikqpwG+esHTbN3Zm21166iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwW8XwfqDL3HcCqL0r6YtUQMoy0MB8GA1UdIwQY MBaAFGjdvvfxzditEnFg8g6go/a3P6SiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQt NjNmMzAxODg5NDg2LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9mMDMzZjEtMmY1ZC00NmQxLTkxOTQtNjNmMzAxODg5NDg2 LzEvYU4yLTlfSE4ySzBTY1dEeURxQ2o5cmNfcEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8e1tmvg 0L/DBosqs1ES5zlLJO2vd/fpQRdmNxVi2tfEdoAz+FM8hJqJiFIEYjd6QsbIrdP/ yL9e5iMFXK+C+0WF60adfJHwJvmU2v1AWsMTGIvkeYQpS21LW34taTmrxEGieo+F uAqN4mcOnotuCJeJXcafSu+H+2VSlKe1br6kxUGBXFIoNXnJxQTiYfkVCytp/9uy kXYy4t5/TTADypia+5ZJkx9/eXvhmAXojs83L9tHdOOjyLeNxQpnDoaIgKMTFkHg C6gUT6l2k1bRwNBJhEMNwYXFhVBF4Y0TM3s5APqYiafiwfTRiwWipPNoObFV+Jbf TT15NtUfOS9lNQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:51:07 2025 by rpki-client