This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json) Hash identifier: oBDLhgwNtomZNLY0cUpTMUTvcsqSpGBt0EAfcLexUTY= Subject key identifier: 7B:35:CC:64:20:3D:A8:A8:C8:30:85:33:34:DD:D7:4C:F5:CB:01:32 Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Certificate serial: 019AABA7E627ECE4A6D3CDBE5FDEEBAC4FFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft Manifest number: 13D9 Signing time: Sat 22 Nov 2025 13:01:38 +0000 Manifest this update: Sat 22 Nov 2025 13:01:38 +0000 Manifest next update: Sun 23 Nov 2025 13:01:38 +0000 Files and hashes: 1: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: AVm7UUh1WiqotB1KTcryQyzmObiF2qG+F3l0VGcywno=) 2: ntwiuM95uFBi26vUIqSDj4sApAM.roa (hash: O4PdrlvcDhug5zKVlwkRZGJ/JkjzqqLTd2w+uWOsXH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a7:e6:27:ec:e4:a6:d3:cd:be:5f:de:eb:ac:4f:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903 Validity Not Before: Nov 22 13:01:38 2025 GMT Not After : Nov 23 13:01:38 2025 GMT Subject: CN=7b35cc64203da8a8c830853334ddd74cf5cb0132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:66:94:c5:ab:03:f8:c7:40:be:d3:74:0a: da:57:6a:24:9d:8e:e8:43:26:2d:69:99:e5:88:52: 53:b7:21:08:34:82:e8:43:e6:9e:39:a3:63:c5:b8: 9f:2b:1e:4b:7b:d4:f6:eb:0c:de:2b:13:4b:52:2d: 81:12:e0:73:08:84:c3:e4:67:a5:43:06:4b:81:23: cc:21:89:19:76:90:50:0f:e2:08:94:df:53:ba:3a: 6d:41:9b:19:66:81:fd:60:87:4c:77:db:18:59:89: 0f:bd:2c:db:46:ab:44:6c:ce:40:da:16:35:8c:94: 01:40:9c:63:da:c5:ac:b8:a7:18:42:4b:8a:42:07: 92:fa:94:71:58:ce:00:40:ab:0a:c6:b4:b5:89:a0: 4a:90:01:de:44:82:a7:15:89:fa:8b:c0:55:7b:7c: a3:fd:9e:d8:1a:8b:51:96:3d:17:0d:61:ac:ec:97: 08:74:3f:b5:f4:f0:a5:ff:e5:6b:4d:5f:d8:74:27: 79:74:69:82:42:31:1c:f5:cc:ad:06:e3:b1:20:8a: 34:21:34:04:77:d7:97:6e:e4:e6:ad:4e:ac:d6:43: 36:d7:e3:a7:e2:17:a1:2d:55:ea:1e:a1:18:e3:ff: 8d:14:37:f4:99:e0:10:ca:1b:5e:4a:35:23:1d:6a: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:35:CC:64:20:3D:A8:A8:C8:30:85:33:34:DD:D7:4C:F5:CB:01:32 X509v3 Authority Key Identifier: keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fd:2a:d3:4a:39:75:d3:0c:6f:a4:e8:e4:5b:27:0b:34:21: 81:4f:a7:58:0f:e6:82:1c:51:25:a1:67:41:19:51:f5:5c:d0: 38:d2:d3:10:05:4e:b3:41:18:bd:7e:07:7a:06:8f:b1:62:18: 0f:61:89:cf:f8:fe:89:98:e6:70:6a:10:96:73:3f:0a:38:e5: 80:c1:8c:64:36:8f:e8:cb:b1:a7:45:63:dc:43:c3:53:27:1c: 4a:26:68:17:61:05:65:21:a8:c9:32:3b:bd:98:3e:05:01:d6: 1a:36:5e:58:4a:88:42:a8:12:62:81:df:ae:6b:87:ad:c0:38: 64:6f:1d:aa:4f:ac:91:aa:ac:87:b5:d2:5a:d3:c1:99:90:8d: 6d:59:67:d9:d8:99:08:3c:aa:43:d7:a7:7c:5e:f8:43:8a:55: 63:b2:25:37:8a:64:61:7d:1a:bc:bf:cb:db:e5:65:00:e8:3e: 36:be:0f:40:10:54:a1:e6:24:3d:eb:32:27:e9:96:b3:3f:33: 6c:c8:86:ba:11:16:a7:78:48:96:fc:0f:7c:49:80:5f:30:f7: 0a:b8:44:1f:61:f1:62:1d:4b:ee:7e:7b:ce:7e:fb:86:20:c7: a3:be:3d:3c:12:df:eb:68:68:ff:e5:61:6e:7e:5c:17:2f:bc: 86:22:94:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrp+Yn7OSm082+X97rrE/7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYTc4NTlkYzM5ZDQ3MzYxNDJjZjFlMjI5YzhhYzRiZTYy M2I5MDMwHhcNMjUxMTIyMTMwMTM4WhcNMjUxMTIzMTMwMTM4WjAzMTEwLwYDVQQD Eyg3YjM1Y2M2NDIwM2RhOGE4YzgzMDg1MzMzNGRkZDc0Y2Y1Y2IwMTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnZmlMWrA/jHQL7TdAraV2oknY7o QyYtaZnliFJTtyEINILoQ+aeOaNjxbifKx5Le9T26wzeKxNLUi2BEuBzCITD5Gel QwZLgSPMIYkZdpBQD+IIlN9TujptQZsZZoH9YIdMd9sYWYkPvSzbRqtEbM5A2hY1 jJQBQJxj2sWsuKcYQkuKQgeS+pRxWM4AQKsKxrS1iaBKkAHeRIKnFYn6i8BVe3yj /Z7YGotRlj0XDWGs7JcIdD+19PCl/+VrTV/YdCd5dGmCQjEc9cytBuOxIIo0ITQE d9eXbuTmrU6s1kM21+On4hehLVXqHqEY4/+NFDf0meAQyhteSjUjHWrgbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHs1zGQgPaioyDCFMzTd10z1ywEyMB8GA1UdIwQY MBaAFJ+nhZ3DnUc2FCzx4inIrEvmI7kDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTIt ZThkNmMyZjA3MWRmLzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wNjkwMDgtMmU0Zi00MzIzLWI2YTItZThkNmMyZjA3MWRm LzEvbjZlRm5jT2RSellVTFBIaUtjaXNTLVlqdVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf0q00o5 ddMMb6To5FsnCzQhgU+nWA/mghxRJaFnQRlR9VzQONLTEAVOs0EYvX4HegaPsWIY D2GJz/j+iZjmcGoQlnM/CjjlgMGMZDaP6Muxp0Vj3EPDUyccSiZoF2EFZSGoyTI7 vZg+BQHWGjZeWEqIQqgSYoHfrmuHrcA4ZG8dqk+skaqsh7XSWtPBmZCNbVln2diZ CDyqQ9enfF74Q4pVY7IlN4pkYX0avL/L2+VlAOg+Nr4PQBBUoeYkPesyJ+mWsz8z bMiGuhEWp3hIlvwPfEmAXzD3CrhEH2HxYh1L7n57zn77hiDHo749PBLf62ho/+Vh bn5cFy+8hiKU4g== -----END CERTIFICATE-----Generated at Sat Nov 22 21:50:00 2025 by rpki-client