This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json) Hash identifier: QegLCJV0eeLmYaQGb6r6XtmzbwBb9dMldfB+/wc/Wkg= Subject key identifier: 8A:AC:23:5E:93:23:85:9D:93:CE:AD:84:12:CF:B0:62:93:86:8D:A2 Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Certificate serial: 019B318CDC71CA6D7E4F93A9593CE9816A53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft Manifest number: 0BEF Signing time: Thu 18 Dec 2025 13:01:13 +0000 Manifest this update: Thu 18 Dec 2025 13:01:13 +0000 Manifest next update: Fri 19 Dec 2025 13:01:13 +0000 Files and hashes: 1: 9nrkqBfEEEVb2ilynt5HJRxEGWw.roa (hash: 9p3+VvNvFq4rrBtC/Z9UeyBNK7rF8lIsM8oxPtubKQs=) 2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: H28/chYMHJx/PZkZxj7JcCQU0pJbD9usmvzPk3eMDm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8c:dc:71:ca:6d:7e:4f:93:a9:59:3c:e9:81:6a:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278 Validity Not Before: Dec 18 13:01:13 2025 GMT Not After : Dec 19 13:01:13 2025 GMT Subject: CN=8aac235e9323859d93cead8412cfb06293868da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:c0:c7:a2:0b:3e:6c:28:73:6b:d8:8e:03: 40:b6:a0:68:05:5f:d4:7f:24:d3:f0:3a:9a:27:3a: 7d:09:97:cd:69:7e:25:d9:04:ec:67:85:e6:bc:1e: 27:2f:7d:9e:80:94:1c:77:62:7c:6b:8c:e6:ce:b1: 93:d4:7a:35:91:eb:f6:f3:62:0b:52:99:f1:fd:99: d3:0e:d1:a0:84:fd:e2:1e:47:16:33:e5:21:63:b3: 3a:4c:a4:c7:33:a3:38:6a:9c:c6:81:78:33:1f:28: df:d1:ef:98:42:13:43:91:4b:84:1d:33:36:ee:3c: 01:1b:46:51:6a:2d:95:c5:c3:a7:3e:fc:f8:49:99: 5a:33:d8:36:09:7f:e5:0d:59:19:6c:ee:c4:b0:67: 6e:37:c2:7c:34:8e:6b:8f:48:0d:e5:e3:39:5c:12: 93:d5:f7:b1:75:ce:e1:2e:b2:72:a1:27:c2:aa:eb: 24:af:2b:a0:d2:4f:59:c4:e8:f1:70:fb:09:19:33: b7:cc:b2:80:e6:e0:28:f8:c9:a0:1d:7f:91:03:9a: 80:b1:a7:6a:cf:e7:03:cf:99:f6:cc:9e:5f:42:da: 51:6d:c0:af:a8:08:56:a6:4b:57:bd:e1:ba:ca:8b: 3c:bf:45:d2:c4:85:f9:2d:56:4d:cf:1a:2f:65:05: dc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AC:23:5E:93:23:85:9D:93:CE:AD:84:12:CF:B0:62:93:86:8D:A2 X509v3 Authority Key Identifier: keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:d2:ad:82:63:0e:ed:45:78:eb:b4:29:6b:1f:eb:e3:22:14: 75:36:27:d1:e7:f6:e5:74:5b:bf:72:b8:7c:92:69:5a:8f:e6: 8b:1f:ae:39:7f:f4:67:67:74:27:9b:57:cf:50:a7:87:b8:3b: 77:3f:03:4a:e1:06:53:69:d8:1d:e3:7a:33:b6:2c:14:b8:ec: 59:ea:30:c6:21:c0:de:1f:d9:ec:f0:49:08:66:f4:67:00:79: e4:63:b1:46:15:a0:ad:82:63:65:10:dd:f5:00:22:f9:10:08: e0:74:dc:2b:a9:96:6c:db:97:62:03:37:ea:5c:16:7d:bd:a6: 72:b5:69:a1:df:12:86:40:0b:9d:07:95:9d:26:bd:87:57:d3: 1f:61:73:99:65:e9:2a:75:d0:3e:0f:65:dc:68:fd:27:d2:37: 29:c1:e4:71:23:5d:48:5c:d7:c7:49:ba:35:66:30:97:25:94: e1:47:d2:9a:2a:f8:47:6a:3b:23:ab:9f:11:9c:07:78:78:4e: 02:db:86:d6:51:17:11:50:6c:55:82:77:99:1f:74:02:a5:f0: fb:5f:08:b8:03:8c:d0:05:4b:1b:24:12:d8:c2:ad:cd:a7:c0: 26:9f:47:2d:77:89:64:1a:4b:bb:3c:d8:3c:c9:69:aa:cf:bc: 28:44:e1:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjNxxym1+T5OpWTzpgWpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOGEzYzlhOWVkZjY0NDczNWE5NGViMDlmMDFjYWIzOTg1 NWQyNzgwHhcNMjUxMjE4MTMwMTEzWhcNMjUxMjE5MTMwMTEzWjAzMTEwLwYDVQQD Eyg4YWFjMjM1ZTkzMjM4NTlkOTNjZWFkODQxMmNmYjA2MjkzODY4ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskDAx6ILPmwoc2vYjgNAtqBoBV/U fyTT8DqaJzp9CZfNaX4l2QTsZ4XmvB4nL32egJQcd2J8a4zmzrGT1Ho1kev282IL Upnx/ZnTDtGghP3iHkcWM+UhY7M6TKTHM6M4apzGgXgzHyjf0e+YQhNDkUuEHTM2 7jwBG0ZRai2VxcOnPvz4SZlaM9g2CX/lDVkZbO7EsGduN8J8NI5rj0gN5eM5XBKT 1fexdc7hLrJyoSfCquskryug0k9ZxOjxcPsJGTO3zLKA5uAo+MmgHX+RA5qAsadq z+cDz5n2zJ5fQtpRbcCvqAhWpktXveG6yos8v0XSxIX5LVZNzxovZQXc5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqsI16TI4Wdk86thBLPsGKTho2iMB8GA1UdIwQY MBaAFJ+KPJqe32RHNalOsJ8ByrOYVdJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjIt NjM2ZDZmYzAwNDhmLzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjItNjM2ZDZmYzAwNDhm LzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy9KtgmMO 7UV467Qpax/r4yIUdTYn0ef25XRbv3K4fJJpWo/mix+uOX/0Z2d0J5tXz1Cnh7g7 dz8DSuEGU2nYHeN6M7YsFLjsWeowxiHA3h/Z7PBJCGb0ZwB55GOxRhWgrYJjZRDd 9QAi+RAI4HTcK6mWbNuXYgM36lwWfb2mcrVpod8ShkALnQeVnSa9h1fTH2FzmWXp KnXQPg9l3Gj9J9I3KcHkcSNdSFzXx0m6NWYwlyWU4UfSmir4R2o7I6ufEZwHeHhO AtuG1lEXEVBsVYJ3mR90AqXw+18IuAOM0AVLGyQS2MKtzafAJp9HLXeJZBpLuzzY PMlpqs+8KETh9A== -----END CERTIFICATE-----Generated at Thu Dec 18 22:38:46 2025 by rpki-client