This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft File: n4535zgxPmVwaE3RUsLihDMrLFs.mft (raw, json) Hash identifier: dPxilsdmPpSOCpL6kqllEJlw3NyeR8tvf+dAfVXysok= Subject key identifier: F7:A0:2C:3A:0E:F7:7E:8E:F8:40:65:F3:48:7A:84:4D:F4:49:3A:1D Authority key identifier: 9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B Certificate issuer: /CN=9f8e77e738313e6570684dd152c2e284332b2c5b Certificate serial: 019B0F00A4711EBDFE24888C97F583B9B422 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft Manifest number: 101D Signing time: Thu 11 Dec 2025 20:00:58 +0000 Manifest this update: Thu 11 Dec 2025 20:00:58 +0000 Manifest next update: Fri 12 Dec 2025 20:00:58 +0000 Files and hashes: 1: C5MhC96HxaJKMKNS_jY_WLtyOQI.roa (hash: ESPNEcm8ABrBz0nfnXDJUwVTxpctLOm0CbjyoAr2waU=) 2: n4535zgxPmVwaE3RUsLihDMrLFs.crl (hash: MKuY062tQjYq3+gYgnJfL1MicDmhVyZzy3Ri8FiH1Dc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:a4:71:1e:bd:fe:24:88:8c:97:f5:83:b9:b4:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8e77e738313e6570684dd152c2e284332b2c5b Validity Not Before: Dec 11 20:00:58 2025 GMT Not After : Dec 12 20:00:58 2025 GMT Subject: CN=f7a02c3a0ef77e8ef84065f3487a844df4493a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:e7:17:04:7e:fa:2e:71:aa:11:e7:2f:f8: df:9c:f8:ba:8b:6b:6a:ae:70:81:84:26:87:de:6a: 7f:50:24:29:be:19:f2:86:b0:77:a4:0a:3c:9d:a9: b5:a1:b1:ef:93:c5:40:b7:b8:a2:80:41:ba:8e:e7: b0:2e:d0:31:14:ed:0d:ae:94:ae:60:98:c5:e5:b4: f3:fc:5d:5b:a4:4e:7f:8f:48:34:38:1f:34:c9:7f: 5e:dd:97:47:cc:0b:27:fe:dc:38:9d:ec:61:04:f0: 69:17:96:17:14:9d:fa:7f:74:d0:bb:7d:3c:f6:1c: af:12:da:d0:ad:46:18:59:a4:85:0a:d0:79:4e:46: 7b:cf:f2:91:f1:9b:f8:26:0d:3d:bb:75:8f:b4:b0: 46:c6:d8:66:61:2d:ae:ec:87:e7:01:9e:f8:4a:3b: af:0e:03:a3:7d:65:8d:fe:fa:21:10:2a:e6:f4:6e: 47:12:7b:55:fe:bf:cf:92:00:ca:55:62:15:e9:1b: 4e:01:5e:d4:3b:b5:dc:74:91:12:08:5c:25:cb:3e: e5:20:42:b2:ed:72:59:7d:5d:0e:b4:20:98:0e:8c: c9:7a:5a:8a:fd:65:e9:cf:7b:cf:be:df:9e:0c:55: f9:0c:10:87:c6:9c:e5:d7:34:6c:a9:cc:63:d4:8e: d8:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A0:2C:3A:0E:F7:7E:8E:F8:40:65:F3:48:7A:84:4D:F4:49:3A:1D X509v3 Authority Key Identifier: keyid:9F:8E:77:E7:38:31:3E:65:70:68:4D:D1:52:C2:E2:84:33:2B:2C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4535zgxPmVwaE3RUsLihDMrLFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/205c19-b73a-48fe-a086-356c09380887/1/n4535zgxPmVwaE3RUsLihDMrLFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:f2:0f:f9:6d:a8:1e:c8:6d:71:7e:05:e6:37:c3:41:3a:40: c4:0c:9f:21:2b:1c:ba:db:3e:43:fd:78:0a:b9:d9:47:4a:be: 5c:6e:38:3a:59:2f:18:ff:31:d1:a5:f1:6a:e7:48:9c:de:c3: 1e:9f:7c:16:13:d6:37:0d:1e:56:2e:1a:a7:20:ee:05:48:7b: fd:12:54:6f:af:71:df:f0:70:f8:60:29:37:5f:a3:2a:db:d7: fd:18:49:b8:ce:81:a7:45:7e:0b:28:ab:6b:d5:09:4e:f3:5e: 92:33:af:11:28:3f:ed:c5:a2:aa:bf:b8:d1:01:2e:bc:61:3a: c4:08:29:d2:3f:c1:74:b6:78:98:52:19:d5:12:d8:c1:16:b0: a5:39:2b:9b:4c:af:37:4f:0b:45:a1:a7:98:76:17:4e:50:52: 87:6d:52:60:08:d7:e5:f2:48:a4:04:5d:1d:43:10:a6:18:aa: 4e:73:84:92:78:d7:19:98:a6:c0:2f:d3:83:94:0f:5f:f9:da: ef:28:b2:01:2a:36:73:3b:d8:96:45:7e:cf:b2:42:bb:6b:bc: ce:a4:b4:09:e1:39:1f:4b:cb:8f:9b:c8:0e:af:a8:a3:93:18: fb:cc:af:76:0c:10:33:77:df:83:b2:22:c8:1e:5a:0d:bd:99: 96:a8:9d:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAKRxHr3+JIiMl/WDubQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOGU3N2U3MzgzMTNlNjU3MDY4NGRkMTUyYzJlMjg0MzMy YjJjNWIwHhcNMjUxMjExMjAwMDU4WhcNMjUxMjEyMjAwMDU4WjAzMTEwLwYDVQQD EyhmN2EwMmMzYTBlZjc3ZThlZjg0MDY1ZjM0ODdhODQ0ZGY0NDkzYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt7nFwR++i5xqhHnL/jfnPi6i2tq rnCBhCaH3mp/UCQpvhnyhrB3pAo8nam1obHvk8VAt7iigEG6juewLtAxFO0NrpSu YJjF5bTz/F1bpE5/j0g0OB80yX9e3ZdHzAsn/tw4nexhBPBpF5YXFJ36f3TQu308 9hyvEtrQrUYYWaSFCtB5TkZ7z/KR8Zv4Jg09u3WPtLBGxthmYS2u7IfnAZ74Sjuv DgOjfWWN/vohECrm9G5HEntV/r/PkgDKVWIV6RtOAV7UO7XcdJESCFwlyz7lIEKy 7XJZfV0OtCCYDozJelqK/WXpz3vPvt+eDFX5DBCHxpzl1zRsqcxj1I7YYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPegLDoO936O+EBl80h6hE30STodMB8GA1UdIwQY MBaAFJ+Od+c4MT5lcGhN0VLC4oQzKyxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYt MzU2YzA5MzgwODg3LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yMDVjMTktYjczYS00OGZlLWEwODYtMzU2YzA5MzgwODg3 LzEvbjQ1MzV6Z3hQbVZ3YUUzUlVzTGloRE1yTEZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofIP+W2o HshtcX4F5jfDQTpAxAyfISscuts+Q/14CrnZR0q+XG44OlkvGP8x0aXxaudInN7D Hp98FhPWNw0eVi4apyDuBUh7/RJUb69x3/Bw+GApN1+jKtvX/RhJuM6Bp0V+Cyir a9UJTvNekjOvESg/7cWiqr+40QEuvGE6xAgp0j/BdLZ4mFIZ1RLYwRawpTkrm0yv N08LRaGnmHYXTlBSh21SYAjX5fJIpARdHUMQphiqTnOEknjXGZimwC/Tg5QPX/na 7yiyASo2czvYlkV+z7JCu2u8zqS0CeE5H0vLj5vIDq+oo5MY+8yvdgwQM3ffg7Ii yB5aDb2ZlqidoQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:16:08 2025 by rpki-client