This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft File: n4IkN_Se1TiGaJAir93aWfefinE.mft (raw, json) Hash identifier: 7obtcBe+sW1KH101aafGxB9ubmPU7lflBG7DOfFzMsM= Subject key identifier: 7E:F1:19:FE:1D:E2:0E:63:68:47:CA:95:8D:7A:44:5B:11:5C:FE:EA Authority key identifier: 9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 Certificate issuer: /CN=9f822437f49ed53886689022afddda59f79f8a71 Certificate serial: 019B1CBBD4209AFA3CE205B65C1BC672669F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft Manifest number: 0A6E Signing time: Sun 14 Dec 2025 12:00:30 +0000 Manifest this update: Sun 14 Dec 2025 12:00:30 +0000 Manifest next update: Mon 15 Dec 2025 12:00:30 +0000 Files and hashes: 1: IdEYIsWCps3Gl-CPOJNmXVY_KDA.roa (hash: V5/YEnbALkGDiezb6/4H3zOCBx4UZLrATG4CYdBNlRA=) 2: n4IkN_Se1TiGaJAir93aWfefinE.crl (hash: OcUwi32KqrfJnM7vtlImoNsJ2emJrs8rmldPEHuBflM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bb:d4:20:9a:fa:3c:e2:05:b6:5c:1b:c6:72:66:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f822437f49ed53886689022afddda59f79f8a71 Validity Not Before: Dec 14 12:00:30 2025 GMT Not After : Dec 15 12:00:30 2025 GMT Subject: CN=7ef119fe1de20e636847ca958d7a445b115cfeea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ba:38:58:ec:89:01:b6:29:f1:95:66:03:e5: 8d:27:b7:28:44:c9:64:c6:e9:1a:f4:61:15:1a:a4: 3d:55:fa:61:c1:6f:6b:3c:0a:b1:aa:22:10:ff:27: 54:74:02:66:e9:3b:94:b1:77:38:43:8e:be:2a:a2: a2:93:09:73:c7:a6:81:08:80:d1:97:ff:35:35:6a: c6:a2:71:f3:f8:19:ef:f2:7f:19:76:e5:96:b0:2a: d0:89:59:a3:2f:8d:64:60:f9:98:f5:c9:4a:38:be: 32:bd:8e:5e:7d:1a:ae:e7:2e:5e:a3:45:1a:c2:ec: fb:ef:84:9b:ef:9e:2f:94:ed:b1:3e:12:e3:7f:f4: 0e:f1:ca:9c:e3:fb:df:9b:fe:e5:95:38:f4:c2:a7: b4:25:92:f7:d7:39:9a:ef:34:7a:20:f1:f7:2f:02: 09:42:14:b5:a8:64:5f:80:75:bd:bc:79:b7:a2:1e: bc:1e:29:c5:55:15:74:24:92:79:a5:14:6b:a9:05: d9:b7:f2:1a:f2:3a:45:03:c0:81:4c:f2:40:96:eb: e7:8f:e1:59:9e:1c:f2:01:93:ec:b6:2a:dc:61:6e: e5:32:d6:6c:df:a7:be:e5:ec:93:a9:e1:4b:56:ed: e7:0a:53:25:11:5f:44:a8:c7:06:da:af:18:cb:23: 73:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F1:19:FE:1D:E2:0E:63:68:47:CA:95:8D:7A:44:5B:11:5C:FE:EA X509v3 Authority Key Identifier: keyid:9F:82:24:37:F4:9E:D5:38:86:68:90:22:AF:DD:DA:59:F7:9F:8A:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4IkN_Se1TiGaJAir93aWfefinE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cbd332-a8db-4606-ac9b-14ec41d4c0a6/1/n4IkN_Se1TiGaJAir93aWfefinE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:c7:cb:d4:39:13:ee:f2:c5:d5:d5:eb:bb:e5:e4:9d:a6:2e: b4:14:94:c9:65:f3:b9:a9:8b:74:2c:ab:3d:24:68:f8:01:4f: 20:5f:f5:f8:ea:9c:c4:b5:98:99:69:0c:01:0f:a4:53:73:38: 4d:10:64:f6:cd:41:88:88:23:c4:4e:b9:f1:f1:50:61:60:3b: 94:b1:16:61:4c:c1:82:ce:33:76:15:7e:6c:f6:46:3c:cd:d2: a9:31:5e:e8:a3:05:99:cb:0e:f3:e8:81:22:69:92:11:e8:ab: 91:85:98:80:9d:34:78:3b:38:58:91:b7:14:70:8c:29:70:17: 9e:8c:cf:17:c8:1c:7e:65:a8:74:1c:c3:18:6c:3b:82:24:10: 45:25:97:21:6e:4e:8b:77:61:1e:27:f7:ab:14:b9:15:5c:52: 41:94:2a:40:fe:77:34:3a:6a:33:8b:41:a8:54:f1:99:3d:f4: 25:7e:94:d5:71:63:48:ce:a9:df:dc:4e:a0:9d:30:40:d9:7a: 67:6d:6d:10:20:50:df:71:cc:99:6c:91:9b:e7:e1:36:63:62: 4a:a1:a4:73:a6:c6:46:96:68:38:0c:b7:2e:4c:cc:22:9e:a3: 68:1f:2a:ea:ce:4f:33:9f:93:41:e6:f1:b2:97:0e:32:b3:45: bf:27:18:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscu9Qgmvo84gW2XBvGcmafMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODIyNDM3ZjQ5ZWQ1Mzg4NjY4OTAyMmFmZGRkYTU5Zjc5 ZjhhNzEwHhcNMjUxMjE0MTIwMDMwWhcNMjUxMjE1MTIwMDMwWjAzMTEwLwYDVQQD Eyg3ZWYxMTlmZTFkZTIwZTYzNjg0N2NhOTU4ZDdhNDQ1YjExNWNmZWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47o4WOyJAbYp8ZVmA+WNJ7coRMlk xuka9GEVGqQ9VfphwW9rPAqxqiIQ/ydUdAJm6TuUsXc4Q46+KqKikwlzx6aBCIDR l/81NWrGonHz+Bnv8n8ZduWWsCrQiVmjL41kYPmY9clKOL4yvY5efRqu5y5eo0Ua wuz774Sb754vlO2xPhLjf/QO8cqc4/vfm/7llTj0wqe0JZL31zma7zR6IPH3LwIJ QhS1qGRfgHW9vHm3oh68HinFVRV0JJJ5pRRrqQXZt/Ia8jpFA8CBTPJAluvnj+FZ nhzyAZPstircYW7lMtZs36e+5eyTqeFLVu3nClMlEV9EqMcG2q8YyyNzTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7xGf4d4g5jaEfKlY16RFsRXP7qMB8GA1UdIwQY MBaAFJ+CJDf0ntU4hmiQIq/d2ln3n4pxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWIt MTRlYzQxZDRjMGE2LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9jYmQzMzItYThkYi00NjA2LWFjOWItMTRlYzQxZDRjMGE2 LzEvbjRJa05fU2UxVGlHYUpBaXI5M2FXZmVmaW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1cfL1DkT 7vLF1dXru+XknaYutBSUyWXzuamLdCyrPSRo+AFPIF/1+OqcxLWYmWkMAQ+kU3M4 TRBk9s1BiIgjxE658fFQYWA7lLEWYUzBgs4zdhV+bPZGPM3SqTFe6KMFmcsO8+iB ImmSEeirkYWYgJ00eDs4WJG3FHCMKXAXnozPF8gcfmWodBzDGGw7giQQRSWXIW5O i3dhHif3qxS5FVxSQZQqQP53NDpqM4tBqFTxmT30JX6U1XFjSM6p39xOoJ0wQNl6 Z21tECBQ33HMmWyRm+fhNmNiSqGkc6bGRpZoOAy3LkzMIp6jaB8q6s5PM5+TQebx spcOMrNFvycYUQ== -----END CERTIFICATE-----Generated at Sun Dec 14 18:53:15 2025 by rpki-client