This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json) Hash identifier: 1HjMWt1joye1WtRJ5QYs71JWyCfPeLyYiHkfmlADygw= Subject key identifier: 2D:FC:0E:F0:1F:23:DB:4F:56:0D:EA:7D:01:5F:23:7A:FE:C2:6F:B3 Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Certificate serial: 019B4BF236AF59DED1803C01971AFF238302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft Manifest number: 070F Signing time: Tue 23 Dec 2025 16:02:03 +0000 Manifest this update: Tue 23 Dec 2025 16:02:03 +0000 Manifest next update: Wed 24 Dec 2025 16:02:03 +0000 Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: i/p+Gd+hcOgG9gp+nu94R8KN1sBhMp0fyxe43Ta05R4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:36:af:59:de:d1:80:3c:01:97:1a:ff:23:83:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Validity Not Before: Dec 23 16:02:03 2025 GMT Not After : Dec 24 16:02:03 2025 GMT Subject: CN=2dfc0ef01f23db4f560dea7d015f237afec26fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:1e:38:2f:06:19:e0:44:c8:6a:f9:6d:c7: 2e:dd:c4:4b:e8:f1:da:38:8b:88:5c:4e:7d:54:cb: 92:32:27:c1:bc:81:23:ac:66:4f:6d:38:56:d1:0e: a9:b7:2e:ea:0e:d8:2d:ab:9c:a5:42:48:f2:ad:46: dc:0f:00:41:cc:75:02:c0:f8:31:f7:36:47:b6:de: 85:8a:99:27:d1:2f:25:f1:f1:43:5b:40:02:bb:4f: 5c:ff:45:e9:bc:c7:da:8d:6f:d0:2a:a5:15:4d:c2: 21:54:46:ab:7c:a1:6f:02:45:5b:a8:6c:9f:1c:3d: 16:c4:e9:80:a8:37:c4:d8:a8:64:4d:6f:70:bb:1e: f0:f6:96:95:a9:73:ff:0e:35:99:bf:7b:b0:cb:94: c6:31:a0:42:78:9e:c1:8f:74:1b:44:f6:6c:67:e8: 0a:24:55:63:bc:e6:0e:6d:73:e8:9b:70:81:c6:7c: 0a:a3:2d:79:5f:99:b5:88:fb:a9:22:eb:ce:00:b4: 3b:48:6d:cf:ee:de:fc:87:ad:d1:09:fb:41:ef:be: d8:39:2a:07:8d:f5:66:66:0a:b6:ed:55:db:e3:9e: cb:9b:79:54:b5:d9:f3:9e:c1:7a:d7:b9:f4:d7:23: 3a:60:a9:c0:66:7d:50:f1:5b:92:35:8b:df:a0:13: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:FC:0E:F0:1F:23:DB:4F:56:0D:EA:7D:01:5F:23:7A:FE:C2:6F:B3 X509v3 Authority Key Identifier: keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fa:64:e1:de:79:75:21:b7:75:5a:d8:81:2b:24:21:7d:f1: 7d:63:5e:b9:c6:a2:55:f4:6e:28:47:12:47:84:48:29:9b:b5: 63:ca:c4:ec:d6:5d:71:71:e0:78:12:87:f1:54:71:a5:1d:39: f6:e0:14:9f:61:a2:8d:e9:01:52:77:aa:e8:37:e4:9f:4b:cd: 12:fb:49:03:11:79:5b:06:f9:93:1f:cf:53:aa:a2:a0:2a:cd: 90:c9:10:5f:b2:c4:4e:a7:fe:2e:7c:1e:38:95:d3:d2:65:f4: e5:ae:19:79:09:3d:93:e0:cb:0a:88:fa:69:b7:ac:2b:bd:ff: 3e:c0:5f:8f:4d:ee:a5:da:3c:e1:73:b3:5e:37:1a:1d:91:4f: b7:2d:e7:4f:a7:3d:6a:ae:6f:d2:02:55:fa:c8:19:d3:ec:3b: 78:69:47:d1:b3:36:a4:9c:29:f2:5f:bc:47:5b:0e:b6:3d:a9: 41:df:54:bc:df:30:23:f4:94:0a:99:69:b8:19:c0:86:14:4c: 52:95:79:e9:bd:ac:2c:8e:07:6a:7c:22:25:3d:97:5a:02:b1: 38:dd:39:90:3f:63:d7:2f:7d:ac:30:f8:b5:82:8d:f8:1c:ba: 70:4e:7f:c1:42:86:d4:ca:0d:ea:8f:52:f6:3a:d7:54:f5:2d: b0:42:ac:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8javWd7RgDwBlxr/I4MCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3 M2Y0YzkwHhcNMjUxMjIzMTYwMjAzWhcNMjUxMjI0MTYwMjAzWjAzMTEwLwYDVQQD EygyZGZjMGVmMDFmMjNkYjRmNTYwZGVhN2QwMTVmMjM3YWZlYzI2ZmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1QeOC8GGeBEyGr5bccu3cRL6PHa OIuIXE59VMuSMifBvIEjrGZPbThW0Q6pty7qDtgtq5ylQkjyrUbcDwBBzHUCwPgx 9zZHtt6Fipkn0S8l8fFDW0ACu09c/0XpvMfajW/QKqUVTcIhVEarfKFvAkVbqGyf HD0WxOmAqDfE2KhkTW9wux7w9paVqXP/DjWZv3uwy5TGMaBCeJ7Bj3QbRPZsZ+gK JFVjvOYObXPom3CBxnwKoy15X5m1iPupIuvOALQ7SG3P7t78h63RCftB777YOSoH jfVmZgq27VXb457Lm3lUtdnznsF617n01yM6YKnAZn1Q8VuSNYvfoBN27wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC38DvAfI9tPVg3qfQFfI3r+wm+zMB8GA1UdIwQY MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/pk4d55 dSG3dVrYgSskIX3xfWNeucaiVfRuKEcSR4RIKZu1Y8rE7NZdcXHgeBKH8VRxpR05 9uAUn2GijekBUneq6Dfkn0vNEvtJAxF5Wwb5kx/PU6qioCrNkMkQX7LETqf+Lnwe OJXT0mX05a4ZeQk9k+DLCoj6abesK73/PsBfj03updo84XOzXjcaHZFPty3nT6c9 aq5v0gJV+sgZ0+w7eGlH0bM2pJwp8l+8R1sOtj2pQd9UvN8wI/SUCplpuBnAhhRM UpV56b2sLI4HanwiJT2XWgKxON05kD9j1y99rDD4tYKN+By6cE5/wUKG1MoN6o9S 9jrXVPUtsEKsVQ== -----END CERTIFICATE-----Generated at Tue Dec 23 20:38:10 2025 by rpki-client