This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft File: n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft (raw, json) Hash identifier: xGzM6DzwECK79GQ3RRjriDYdmNmksUFl+oRPqninadM= Subject key identifier: 87:3A:C0:CA:C7:5F:21:4B:5C:BA:F4:82:07:20:C5:A0:60:4A:1F:67 Authority key identifier: 9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50 Certificate issuer: /CN=9f87521f15e0457288a9f196a8c8865c36922150 Certificate serial: 019B5ABFEFE168BD0D0CDD51EC30C259EAC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 13:01:26 +0000 Manifest this update: Fri 26 Dec 2025 13:01:26 +0000 Manifest next update: Sat 27 Dec 2025 13:01:26 +0000 Files and hashes: 1: ItUfI_e5TZV8Ja35X57TtR81NmA.roa (hash: IR3NcH60QSQHq12hzjVbCSbj+J8hOMovAsbbfhH0qaA=) 2: n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl (hash: PzxEwvLH9G4XIY7N9N3/Kl7drkuPBlNE07TtcmXymoc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:ef:e1:68:bd:0d:0c:dd:51:ec:30:c2:59:ea:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f87521f15e0457288a9f196a8c8865c36922150 Validity Not Before: Dec 26 13:01:26 2025 GMT Not After : Dec 27 13:01:26 2025 GMT Subject: CN=873ac0cac75f214b5cbaf4820720c5a0604a1f67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:46:c6:69:ba:27:10:07:5c:de:20:81:83: 76:cd:03:55:67:c9:f7:13:de:43:45:ec:25:0d:62: 68:92:05:cc:41:88:22:05:9a:fe:04:22:87:c2:e5: ed:2b:8a:e6:bc:4c:ae:bf:02:29:61:fa:a0:70:04: 59:e8:6f:f0:73:96:d8:4c:f3:a0:d0:a2:4a:26:bf: 4d:5f:30:21:77:3e:08:90:c7:53:e6:0b:c7:a7:08: 1b:36:85:2a:80:3d:b8:2e:8f:d6:11:24:4b:75:75: c3:8f:b6:8f:b3:65:13:d4:69:71:f2:bc:73:88:02: 15:38:c2:88:7f:7a:eb:77:1b:01:8d:10:e4:6f:e7: 9c:ef:b0:05:32:48:36:f0:12:e3:37:b1:c7:21:70: d3:e9:5c:5b:05:dc:ce:c9:f8:a9:be:71:63:93:e7: 05:2d:f9:50:9a:fc:bf:a5:11:b7:4f:f4:e4:f5:a3: 2b:28:64:77:c2:93:ca:87:a1:ba:ae:64:a7:98:5b: c0:d2:2e:ce:b1:52:e8:64:ee:30:12:44:10:aa:c0: 6b:5e:ef:30:d3:bb:31:d6:4c:31:21:87:5c:97:6e: 2e:fe:f3:a1:69:28:c9:ee:9b:05:31:e2:48:83:98: ee:b6:d1:ae:ba:c2:77:10:4a:62:68:37:76:28:cc: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3A:C0:CA:C7:5F:21:4B:5C:BA:F4:82:07:20:C5:A0:60:4A:1F:67 X509v3 Authority Key Identifier: keyid:9F:87:52:1F:15:E0:45:72:88:A9:F1:96:A8:C8:86:5C:36:92:21:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4dSHxXgRXKIqfGWqMiGXDaSIVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/680589-8472-43eb-b034-21769de4a1a8/1/n4dSHxXgRXKIqfGWqMiGXDaSIVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2b:3e:5b:5b:18:ea:76:dc:a4:f0:02:9e:9d:95:8f:82:97: 97:82:46:ec:10:91:f4:b1:7a:5d:13:02:a7:6a:14:b0:6f:9a: e7:c8:45:72:10:a4:34:df:3c:15:84:0a:14:2c:63:43:6f:2f: 33:78:19:9c:07:09:21:dc:bf:8e:e5:38:3a:20:a7:29:7e:1d: e2:4f:fd:90:27:6d:be:9d:f3:70:c1:5a:55:55:ea:c8:66:67: 7d:f2:7c:de:ca:10:21:0b:ae:c6:6a:9b:9f:42:04:7d:4b:73: db:49:64:b7:59:d6:db:25:7e:0f:af:32:a8:8b:d8:7b:fe:57: f7:77:80:e3:6c:69:9b:d6:fd:99:dd:af:48:96:4a:01:fa:41: a1:ab:f6:30:6c:61:c3:25:f2:75:3f:75:8a:8d:df:a7:7d:b5: 4d:60:a8:58:3c:0e:94:fc:16:b5:e5:28:d0:02:17:80:b5:d7: c0:ad:48:c2:ba:e0:89:a3:11:9b:b6:3f:53:b4:d5:d0:21:61: 91:a5:07:bf:ed:57:0e:d0:de:3d:62:c7:83:75:a1:a1:9f:0a: 31:34:4b:bd:c2:0b:93:c8:69:3e:12:d6:7c:3a:fc:a9:a7:06: 72:f2:09:ec:4c:2f:59:44:1d:71:29:82:e3:93:50:7f:b4:af: 9e:1b:9e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+/haL0NDN1R7DDCWerIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmODc1MjFmMTVlMDQ1NzI4OGE5ZjE5NmE4Yzg4NjVjMzY5 MjIxNTAwHhcNMjUxMjI2MTMwMTI2WhcNMjUxMjI3MTMwMTI2WjAzMTEwLwYDVQQD Eyg4NzNhYzBjYWM3NWYyMTRiNWNiYWY0ODIwNzIwYzVhMDYwNGExZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMFGxmm6JxAHXN4ggYN2zQNVZ8n3 E95DRewlDWJokgXMQYgiBZr+BCKHwuXtK4rmvEyuvwIpYfqgcARZ6G/wc5bYTPOg 0KJKJr9NXzAhdz4IkMdT5gvHpwgbNoUqgD24Lo/WESRLdXXDj7aPs2UT1Glx8rxz iAIVOMKIf3rrdxsBjRDkb+ec77AFMkg28BLjN7HHIXDT6VxbBdzOyfipvnFjk+cF LflQmvy/pRG3T/Tk9aMrKGR3wpPKh6G6rmSnmFvA0i7OsVLoZO4wEkQQqsBrXu8w 07sx1kwxIYdcl24u/vOhaSjJ7psFMeJIg5juttGuusJ3EEpiaDd2KMxKzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIc6wMrHXyFLXLr0ggcgxaBgSh9nMB8GA1UdIwQY MBaAFJ+HUh8V4EVyiKnxlqjIhlw2kiFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQt MjE3NjlkZTRhMWE4LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ODA1ODktODQ3Mi00M2ViLWIwMzQtMjE3NjlkZTRhMWE4 LzEvbjRkU0h4WGdSWEtJcWZHV3FNaUdYRGFTSVZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCs+W1sY 6nbcpPACnp2Vj4KXl4JG7BCR9LF6XRMCp2oUsG+a58hFchCkNN88FYQKFCxjQ28v M3gZnAcJIdy/juU4OiCnKX4d4k/9kCdtvp3zcMFaVVXqyGZnffJ83soQIQuuxmqb n0IEfUtz20lkt1nW2yV+D68yqIvYe/5X93eA42xpm9b9md2vSJZKAfpBoav2MGxh wyXydT91io3fp321TWCoWDwOlPwWteUo0AIXgLXXwK1IwrrgiaMRm7Y/U7TV0CFh kaUHv+1XDtDePWLHg3WhoZ8KMTRLvcILk8hpPhLWfDr8qacGcvIJ7EwvWUQdcSmC 45NQf7SvnhueIQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:34 2025 by rpki-client