This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json) Hash identifier: ciV/NmT8zCP0I1xmfM3cCFuwZcv+TMcU64g7AtGhU/Q= Subject key identifier: 0D:60:F7:FE:B2:21:A7:E9:93:40:66:C9:9A:37:49:D0:0D:36:7F:6B Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e Certificate serial: 019B424AEB94EC7B2A86D13D7E8B42519707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft Manifest number: 0CCF Signing time: Sun 21 Dec 2025 19:02:44 +0000 Manifest this update: Sun 21 Dec 2025 19:02:44 +0000 Manifest next update: Mon 22 Dec 2025 19:02:44 +0000 Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: En6/kgux/KU2bEexxJc5RbFoe3oaPIH8Vborg65yrK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:eb:94:ec:7b:2a:86:d1:3d:7e:8b:42:51:97:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e Validity Not Before: Dec 21 19:02:44 2025 GMT Not After : Dec 22 19:02:44 2025 GMT Subject: CN=0d60f7feb221a7e9934066c99a3749d00d367f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:92:f6:51:84:55:f8:77:2e:06:ea:a0:5f:0a: f2:a5:db:cc:2f:3e:44:27:e8:ff:43:50:2b:e2:bf: 26:42:8f:82:ad:76:37:18:87:23:44:d6:31:9d:8e: 87:06:1f:c6:84:d9:e8:68:ff:23:8a:4b:31:3d:59: 52:c3:43:d7:72:6b:bd:45:47:c5:3f:31:cf:d7:b6: d7:56:e0:35:2e:f4:d2:e4:6c:d4:2e:35:a8:da:bb: 5d:56:ce:52:4e:be:44:09:1a:c0:c7:c9:ec:13:1c: 51:79:ce:83:a5:ae:5c:79:e5:27:08:e5:48:20:77: a7:7a:f2:7d:1c:e4:5f:aa:18:e4:02:ba:0e:9a:89: a9:5e:a3:2b:93:9a:1f:ee:73:6d:db:06:13:9c:c2: 17:6f:f2:72:5e:09:e8:78:4c:26:8f:cd:7f:4c:f2: 57:3d:9c:ef:2c:70:87:6f:3b:ac:b9:80:ab:6a:c5: f5:f0:7c:74:9b:36:68:9f:39:43:96:4a:03:db:ab: 04:45:0e:93:63:71:b3:da:ec:fd:ad:05:32:5c:41: fc:f5:1c:34:78:0a:47:80:2d:2e:d0:1d:9f:d4:5c: c3:b9:23:51:c9:4c:ec:6c:35:38:7d:6b:85:3a:9e: 04:68:dd:c8:33:a0:fb:51:9a:1d:9d:08:c9:48:a1: 1b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:60:F7:FE:B2:21:A7:E9:93:40:66:C9:9A:37:49:D0:0D:36:7F:6B X509v3 Authority Key Identifier: keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c2:9b:73:c6:9a:91:8e:3f:57:6e:cc:1e:e4:87:04:a1:0a: 55:ce:6e:18:2c:7b:47:e5:02:e0:77:04:b4:14:0d:49:43:a3: 75:db:f5:4f:9a:72:ed:3d:c8:62:ba:51:e1:16:8a:95:a7:c9: b3:f3:e5:b7:f5:77:ce:51:2d:7b:8b:39:66:ab:70:ad:08:01: bd:4b:8c:d2:ea:62:f9:6c:04:5a:9a:15:b7:b1:38:f8:63:5d: 21:2d:f1:8a:dc:ba:0e:00:48:44:8f:66:6b:e5:22:9d:1a:b0: 35:2c:23:91:00:31:16:f6:4b:4c:93:03:2a:cf:06:85:9e:dd: ad:83:9d:49:46:4c:7f:4c:2c:ab:21:4e:03:39:2e:5a:16:00: 2b:6b:56:eb:9d:b2:7a:16:42:90:5c:a6:4a:fd:70:d8:7d:3b: c5:96:67:2f:ca:d6:59:7d:eb:0f:28:3a:ff:39:c0:20:55:61: c5:47:7a:4b:9e:44:2c:a8:53:85:76:2c:ad:b1:be:96:de:ff: fb:6d:63:6c:f4:2e:d2:cb:71:6a:b1:a7:16:bf:bb:e2:13:fc: a8:c9:bf:8d:6c:6d:f2:f0:12:4d:8f:6f:5c:4a:03:87:37:85: 0b:75:21:09:23:eb:42:62:d1:cb:c8:a7:f9:a9:c4:70:16:74: 28:d7:01:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSuuU7HsqhtE9fotCUZcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjA3ZjUwOWU5NDdiMjY3Zjg3YmEwYWRlODllYzRkM2Fl NTZhM2UwHhcNMjUxMjIxMTkwMjQ0WhcNMjUxMjIyMTkwMjQ0WjAzMTEwLwYDVQQD EygwZDYwZjdmZWIyMjFhN2U5OTM0MDY2Yzk5YTM3NDlkMDBkMzY3ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpL2UYRV+HcuBuqgXwrypdvMLz5E J+j/Q1Ar4r8mQo+CrXY3GIcjRNYxnY6HBh/GhNnoaP8jiksxPVlSw0PXcmu9RUfF PzHP17bXVuA1LvTS5GzULjWo2rtdVs5STr5ECRrAx8nsExxRec6Dpa5ceeUnCOVI IHenevJ9HORfqhjkAroOmompXqMrk5of7nNt2wYTnMIXb/JyXgnoeEwmj81/TPJX PZzvLHCHbzusuYCrasX18Hx0mzZonzlDlkoD26sERQ6TY3Gz2uz9rQUyXEH89Rw0 eApHgC0u0B2f1FzDuSNRyUzsbDU4fWuFOp4EaN3IM6D7UZodnQjJSKEbiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1g9/6yIafpk0BmyZo3SdANNn9rMB8GA1UdIwQY MBaAFJ/wf1CelHsmf4e6Ct6J7E065Wo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUt ODk5OGFhYTdmMzE1LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUtODk5OGFhYTdmMzE1 LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfcKbc8aa kY4/V27MHuSHBKEKVc5uGCx7R+UC4HcEtBQNSUOjddv1T5py7T3IYrpR4RaKlafJ s/Plt/V3zlEte4s5ZqtwrQgBvUuM0upi+WwEWpoVt7E4+GNdIS3xity6DgBIRI9m a+UinRqwNSwjkQAxFvZLTJMDKs8GhZ7drYOdSUZMf0wsqyFOAzkuWhYAK2tW652y ehZCkFymSv1w2H07xZZnL8rWWX3rDyg6/znAIFVhxUd6S55ELKhThXYsrbG+lt7/ +21jbPQu0stxarGnFr+74hP8qMm/jWxt8vASTY9vXEoDhzeFC3UhCSPrQmLRy8in +anEcBZ0KNcB3Q== -----END CERTIFICATE-----Generated at Mon Dec 22 02:19:58 2025 by rpki-client