This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json) Hash identifier: GL4HsgY0Re847CgTKIxfafRjAQbq6Y80LUI1ftijuDM= Subject key identifier: B1:FF:36:E7:0D:28:8B:DE:72:43:29:A3:A8:5F:B6:16:C4:FC:9A:B8 Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Certificate serial: 019B1E057CD14A689D2A6C367BCE2D39846A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft Manifest number: 072F Signing time: Sun 14 Dec 2025 18:00:34 +0000 Manifest this update: Sun 14 Dec 2025 18:00:34 +0000 Manifest next update: Mon 15 Dec 2025 18:00:34 +0000 Files and hashes: 1: 0Kp_vvvf6gB9qqLzUTydjsFEHvg.roa (hash: oleso0bnDn/Cva++ppJhacS1E2sFVBntDJn2BA8AVW0=) 2: G4jepCncoOzlCnpnZ7cxE_Dx-eo.roa (hash: LGsZV/1AkhKvUqqsgs+A2xdwU0JvTeOBXFcZUHaT2bc=) 3: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: jxIlGT6Fi99mVNVYx8GJXkotUQtNSqK7uAXMOnkBwy0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:05:7c:d1:4a:68:9d:2a:6c:36:7b:ce:2d:39:84:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3 Validity Not Before: Dec 14 18:00:34 2025 GMT Not After : Dec 15 18:00:34 2025 GMT Subject: CN=b1ff36e70d288bde724329a3a85fb616c4fc9ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cf:b6:10:99:dc:86:b8:9a:5c:53:e8:e1:25: 07:6c:4c:8c:24:11:29:9c:23:3f:e8:e5:ad:fe:d3: 67:28:c3:2e:74:18:76:58:b6:fd:5d:76:93:85:83: f4:ee:be:b8:32:cc:10:27:a8:da:48:e0:79:f8:0f: 10:a7:d5:23:6d:31:fc:38:e0:0e:03:33:a5:4e:62: 95:f1:76:26:b6:19:dc:14:e1:13:fe:e7:6c:44:7b: 00:0d:41:6b:88:1b:6d:57:ae:25:97:f9:5b:a9:da: 73:b3:3e:b5:8a:9e:72:6a:80:e9:b5:00:48:fc:96: ca:93:d2:f7:bc:df:9c:56:91:37:ad:c1:d9:93:7f: d9:43:6b:08:3b:54:de:85:1f:b9:b1:15:d5:0a:78: 96:3a:07:9d:e9:ee:df:4c:4f:ae:4f:4c:fb:df:d5: bb:d1:89:1b:36:ce:62:04:71:f2:e4:41:6a:5a:f2: 6d:c9:04:39:81:89:57:49:54:30:02:80:55:d5:a0: fe:ff:b4:68:5b:e2:d8:c6:08:29:5f:05:ed:6a:18: f6:42:c4:7f:db:89:e1:46:0d:7a:ea:5b:e7:18:41: 2d:74:3c:9e:ea:9c:d1:9a:72:77:af:51:50:59:76: de:86:5d:e5:80:eb:2d:a2:16:6e:4d:60:96:9b:db: b1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FF:36:E7:0D:28:8B:DE:72:43:29:A3:A8:5F:B6:16:C4:FC:9A:B8 X509v3 Authority Key Identifier: keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:47:fb:88:80:09:1b:f8:2a:3d:ac:27:d9:e9:3a:e2:8a:0c: b1:48:5a:c5:a2:ce:d8:ac:ba:28:32:53:3a:6c:3d:40:b1:5c: 20:f8:fc:96:c6:86:7d:bd:c5:d1:38:7a:96:72:e3:c0:19:e5: d5:ff:76:db:0a:d5:a9:aa:91:37:92:00:9a:b4:50:2b:99:52: 62:0b:24:ad:3a:94:c8:64:2b:fc:37:ee:c5:e4:d2:94:7e:86: 03:b0:7f:24:cb:56:bc:58:f7:02:ee:57:71:82:f7:81:fb:95: c4:55:3b:54:dc:98:ce:88:14:4e:43:51:d0:b6:60:66:fc:f2: c4:34:0b:35:8a:38:40:aa:8b:82:40:82:fe:54:91:da:11:ce: 6a:f8:90:4f:96:4d:0e:75:a2:06:1d:a1:af:5c:28:a1:28:dd: 38:89:79:a2:50:95:70:d6:67:bc:69:f1:13:70:a3:ff:67:06: fc:22:2f:bd:84:23:ad:5b:85:a3:52:81:fd:71:68:48:f1:3c: 1e:e7:17:34:f1:36:a5:9c:9b:71:5d:dc:f5:5c:7f:96:fd:78: b7:ac:56:55:09:62:5e:34:bd:c9:2a:2f:2f:34:fd:e3:60:bc: 07:d2:e8:e8:21:69:b1:1f:60:d5:63:db:82:13:7b:54:25:ef: a0:7b:71:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBXzRSmidKmw2e84tOYRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NGY2ZjNlM2NiOTczYmFjOGE0M2Y2YzBiODA2YjNkMTFj OWFkYzMwHhcNMjUxMjE0MTgwMDM0WhcNMjUxMjE1MTgwMDM0WjAzMTEwLwYDVQQD EyhiMWZmMzZlNzBkMjg4YmRlNzI0MzI5YTNhODVmYjYxNmM0ZmM5YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc+2EJnchriaXFPo4SUHbEyMJBEp nCM/6OWt/tNnKMMudBh2WLb9XXaThYP07r64MswQJ6jaSOB5+A8Qp9UjbTH8OOAO AzOlTmKV8XYmthncFOET/udsRHsADUFriBttV64ll/lbqdpzsz61ip5yaoDptQBI /JbKk9L3vN+cVpE3rcHZk3/ZQ2sIO1TehR+5sRXVCniWOged6e7fTE+uT0z739W7 0YkbNs5iBHHy5EFqWvJtyQQ5gYlXSVQwAoBV1aD+/7RoW+LYxggpXwXtahj2QsR/ 24nhRg166lvnGEEtdDye6pzRmnJ3r1FQWXbehl3lgOstohZuTWCWm9uxVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLH/NucNKIveckMpo6hfthbE/Jq4MB8GA1UdIwQY MBaAFDdPbz48uXO6yKQ/bAuAaz0Rya3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMt YzAxNzdkZmRhODQ3LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi84ZDExNjctMGM0ZC00ODhmLTlhODMtYzAxNzdkZmRhODQ3 LzEvTjA5dlBqeTVjN3JJcEQ5c0M0QnJQUkhKcmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakf7iIAJ G/gqPawn2ek64ooMsUhaxaLO2Ky6KDJTOmw9QLFcIPj8lsaGfb3F0Th6lnLjwBnl 1f922wrVqaqRN5IAmrRQK5lSYgskrTqUyGQr/DfuxeTSlH6GA7B/JMtWvFj3Au5X cYL3gfuVxFU7VNyYzogUTkNR0LZgZvzyxDQLNYo4QKqLgkCC/lSR2hHOaviQT5ZN DnWiBh2hr1wooSjdOIl5olCVcNZnvGnxE3Cj/2cG/CIvvYQjrVuFo1KB/XFoSPE8 HucXNPE2pZybcV3c9Vx/lv14t6xWVQliXjS9ySovLzT942C8B9Lo6CFpsR9g1WPb ghN7VCXvoHtxew== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:27 2025 by rpki-client