This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json) Hash identifier: bhE3PjOVH+WS1jmxtQz8007C3uWd6ptCiqoSTpt1LQ8= Subject key identifier: 78:D3:76:23:71:3F:6B:F6:F7:49:75:CA:A3:B9:FF:46:02:68:86:88 Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Certificate serial: 019B481535FF1DDA24BCA23639EC83197501 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft Manifest number: 070D Signing time: Mon 22 Dec 2025 22:01:48 +0000 Manifest this update: Mon 22 Dec 2025 22:01:48 +0000 Manifest next update: Tue 23 Dec 2025 22:01:48 +0000 Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: u89Z49yZhn9eIs0cSrckKLPl/eyfmpppvsrvuwde0Co=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:35:ff:1d:da:24:bc:a2:36:39:ec:83:19:75:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Validity Not Before: Dec 22 22:01:48 2025 GMT Not After : Dec 23 22:01:48 2025 GMT Subject: CN=78d37623713f6bf6f74975caa3b9ff4602688688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:81:ac:25:36:8f:63:58:a3:59:42:0d:2f: d3:0c:1e:d8:03:19:97:ce:f9:7a:fe:c2:dc:6c:09: d7:4c:7c:d0:09:4f:0c:36:26:5e:55:25:79:d4:ac: 84:87:e6:48:75:79:64:dc:b9:9c:34:f4:97:59:41: de:c2:b7:f3:76:fe:75:a2:8d:e7:91:d3:24:38:be: ea:7a:ef:3a:56:e5:b2:df:2e:04:5b:f3:85:e0:e5: ba:27:42:10:2e:3a:cb:79:d2:f2:5a:63:bc:c4:b5: 05:36:42:ce:55:d7:de:02:94:43:bd:13:3e:fe:03: 0f:11:7a:a9:9f:f1:4b:10:25:83:eb:4f:ba:f9:c4: 2e:38:e9:33:9f:d5:cd:69:05:ba:ae:71:c3:f6:c1: 98:d6:e1:59:c4:4d:e5:1c:e9:ed:0d:0b:43:8b:bb: 09:31:7e:97:d3:8c:17:c5:6b:f8:f8:17:bb:59:c7: fc:55:43:fa:7a:d7:07:ca:96:ca:e3:fc:8a:69:9e: af:7e:ef:e8:34:1a:69:51:89:a1:cb:09:65:97:76: 1c:d2:9d:be:19:f3:6b:c0:2f:a1:68:0a:11:9d:b5: 84:d8:0b:34:65:69:9a:f7:e4:f0:66:8f:3a:b0:5c: f1:e3:56:92:bc:ed:63:4c:6b:b1:ed:0d:3f:f3:47: 50:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:76:23:71:3F:6B:F6:F7:49:75:CA:A3:B9:FF:46:02:68:86:88 X509v3 Authority Key Identifier: keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:94:01:f2:31:84:f2:03:75:6c:66:58:4e:09:de:66:8a:85: 11:d2:0d:66:4a:1a:06:34:f2:b1:59:41:3e:65:08:2d:15:24: 1c:e3:79:a0:c5:53:33:90:97:a1:8e:b8:6d:06:0e:25:89:7b: 57:75:06:2e:1b:25:3a:87:9e:b2:f8:8e:28:29:1f:bc:82:48: 6c:4a:64:5a:7e:3d:5e:83:89:a0:26:d6:a5:3e:5b:32:eb:c0: e6:8e:81:fd:97:94:ea:30:12:a1:c1:da:be:10:b2:14:5f:07: f6:24:0d:26:13:08:09:03:11:ad:2a:27:2d:67:2b:a9:97:08: ef:3a:79:3f:b2:5e:ec:2f:a5:e3:e5:96:a7:de:97:f6:ab:25: 1a:4d:3b:5d:9c:50:b5:b6:84:d9:8f:2c:c0:2c:23:a6:4e:c7: 64:d5:2d:c4:3b:8a:a3:57:71:10:01:18:4e:00:2b:55:f8:b8: 44:85:4e:e1:3b:0c:e3:ad:f7:93:69:1b:8f:8c:26:7b:d8:5a: ed:c7:48:3c:45:ff:de:58:cc:93:ea:2c:53:40:93:fb:f8:1a: c0:42:61:df:94:2e:6b:fa:66:01:81:ca:78:92:3e:43:01:48: 50:c8:6f:e6:7d:05:3a:1e:6e:51:ce:f9:8e:65:d5:b4:43:18: da:71:a0:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFTX/HdokvKI2OeyDGXUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3 M2Y0YzkwHhcNMjUxMjIyMjIwMTQ4WhcNMjUxMjIzMjIwMTQ4WjAzMTEwLwYDVQQD Eyg3OGQzNzYyMzcxM2Y2YmY2Zjc0OTc1Y2FhM2I5ZmY0NjAyNjg4Njg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk2BrCU2j2NYo1lCDS/TDB7YAxmX zvl6/sLcbAnXTHzQCU8MNiZeVSV51KyEh+ZIdXlk3LmcNPSXWUHewrfzdv51oo3n kdMkOL7qeu86VuWy3y4EW/OF4OW6J0IQLjrLedLyWmO8xLUFNkLOVdfeApRDvRM+ /gMPEXqpn/FLECWD60+6+cQuOOkzn9XNaQW6rnHD9sGY1uFZxE3lHOntDQtDi7sJ MX6X04wXxWv4+Be7Wcf8VUP6etcHypbK4/yKaZ6vfu/oNBppUYmhywlll3Yc0p2+ GfNrwC+haAoRnbWE2As0ZWma9+TwZo86sFzx41aSvO1jTGux7Q0/80dQQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjTdiNxP2v290l1yqO5/0YCaIaIMB8GA1UdIwQY MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5QB8jGE 8gN1bGZYTgneZoqFEdINZkoaBjTysVlBPmUILRUkHON5oMVTM5CXoY64bQYOJYl7 V3UGLhslOoeesviOKCkfvIJIbEpkWn49XoOJoCbWpT5bMuvA5o6B/ZeU6jASocHa vhCyFF8H9iQNJhMICQMRrSonLWcrqZcI7zp5P7Je7C+l4+WWp96X9qslGk07XZxQ tbaE2Y8swCwjpk7HZNUtxDuKo1dxEAEYTgArVfi4RIVO4TsM4633k2kbj4wme9ha 7cdIPEX/3ljMk+osU0CT+/gawEJh35Qua/pmAYHKeJI+QwFIUMhv5n0FOh5uUc75 jmXVtEMY2nGgKw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:13:44 2025 by rpki-client