This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json) Hash identifier: cwzmLl+cHGJVvH+2EIaRLGJwkBWq+jlOJVdUvCsOyXw= Subject key identifier: 43:76:48:24:93:6E:37:AF:D9:9C:3F:C3:35:4D:7C:14:4B:A4:DF:A7 Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d Certificate serial: 019B5BD208715BC4D41010C5184D5EE94FAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft Manifest number: 1641 Signing time: Fri 26 Dec 2025 18:00:49 +0000 Manifest this update: Fri 26 Dec 2025 18:00:49 +0000 Manifest next update: Sat 27 Dec 2025 18:00:49 +0000 Files and hashes: 1: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: 7PlxnXHcvs3ufKNt9mXXn1ax2B7bZSTXee6t9ECh71Y=) 2: z7xTQbxrh0uWjK7zpjPYq_zoSQo.roa (hash: gzKeSIds853lGCFoWu+NS/HRph4q2guB/dUt5Y5WdPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:08:71:5b:c4:d4:10:10:c5:18:4d:5e:e9:4f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d Validity Not Before: Dec 26 18:00:49 2025 GMT Not After : Dec 27 18:00:49 2025 GMT Subject: CN=43764824936e37afd99c3fc3354d7c144ba4dfa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1d:bf:1b:4b:fa:ea:c3:a3:9c:7e:40:03:14: c6:8d:c0:c4:00:be:29:76:cd:f0:a7:87:a2:c3:29: bc:21:d6:3d:ed:38:f4:a3:0c:6f:61:b0:81:55:76: af:f8:39:5d:dc:1a:de:cc:dc:12:44:b1:6b:fc:69: e6:78:44:42:56:86:5e:c2:15:78:33:f2:00:82:b5: c5:f5:8b:9c:a1:30:96:12:d7:68:54:07:4f:4f:f1: 4e:e1:71:97:66:e1:1e:9f:c5:0b:3b:a4:28:f0:df: d8:26:82:ad:12:ac:4f:af:57:66:f9:83:c5:ea:6c: 9d:7b:b3:a6:a9:4e:13:48:20:c7:d5:5f:66:71:5a: 16:45:83:c8:fc:19:d0:93:3f:6c:8d:e3:25:85:d7: 83:3d:83:81:e6:e9:76:dd:71:3d:2e:71:3f:51:55: ad:88:08:58:4d:f7:bf:0f:e9:7b:07:e4:fa:84:cb: 79:da:63:e1:5b:21:af:3d:ab:24:4e:bd:85:9b:a4: 31:7c:44:6b:2c:de:59:a1:f7:f7:27:4e:2a:0e:b7: 4c:8e:11:1f:0e:b1:3b:7e:23:9e:27:f1:f1:cd:d5: 8e:8a:92:67:bc:40:8f:d3:9f:6a:33:15:cb:b8:dd: cd:53:ea:f5:05:32:45:e9:26:3e:7d:e0:b9:6d:69: 17:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:76:48:24:93:6E:37:AF:D9:9C:3F:C3:35:4D:7C:14:4B:A4:DF:A7 X509v3 Authority Key Identifier: keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7b:94:9e:0f:9b:22:c0:74:cb:2a:6e:02:9d:d5:4d:f2:37: 00:61:f0:cb:39:2b:35:c7:b2:a7:14:6d:8d:7d:96:b9:8e:1d: 35:65:cb:b7:ba:96:98:be:1e:43:bd:89:c9:b8:0d:63:7e:1f: 74:05:8d:7b:e4:4c:8e:10:68:8e:bd:6d:de:7a:d7:db:81:9a: 38:71:36:b6:c8:a0:8b:cb:9e:e1:3c:9a:98:a7:71:a2:65:92: f7:3c:40:c2:c5:20:49:72:d5:c7:9c:b8:17:dc:92:2c:51:f2: bd:80:0d:ae:e3:d4:c8:d9:ca:7f:73:49:b6:ce:7c:c6:83:99: 29:7e:fa:30:26:55:98:e2:49:95:f8:bb:ac:5c:d9:ea:13:06: 56:74:4d:1b:97:d0:b5:72:1b:55:4e:c1:2c:0f:27:62:b7:af: 9c:ef:a6:1e:74:30:c5:aa:ff:e6:0b:ea:fc:99:65:65:7a:fa: a4:dc:ac:bc:1b:bd:fd:20:e5:02:54:f3:69:1b:e8:eb:01:da: 15:5d:6f:5d:13:8c:9f:a8:e4:d7:a8:7e:74:0c:ff:68:d0:ad: 46:c2:b6:13:c5:04:5a:b3:27:e3:db:e1:4d:17:19:ac:7d:08: 6f:8b:f4:2f:29:bf:31:6c:4d:5a:62:42:4d:af:07:d1:16:97: 98:0e:8f:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0ghxW8TUEBDFGE1e6U+tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYzZlODc3MDlhZTlkMDQ0Nzk0MGYyM2Q3NTRkZjhiYTgx NzViMGQwHhcNMjUxMjI2MTgwMDQ5WhcNMjUxMjI3MTgwMDQ5WjAzMTEwLwYDVQQD Eyg0Mzc2NDgyNDkzNmUzN2FmZDk5YzNmYzMzNTRkN2MxNDRiYTRkZmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh2/G0v66sOjnH5AAxTGjcDEAL4p ds3wp4eiwym8IdY97Tj0owxvYbCBVXav+Dld3BrezNwSRLFr/GnmeERCVoZewhV4 M/IAgrXF9YucoTCWEtdoVAdPT/FO4XGXZuEen8ULO6Qo8N/YJoKtEqxPr1dm+YPF 6myde7OmqU4TSCDH1V9mcVoWRYPI/BnQkz9sjeMlhdeDPYOB5ul23XE9LnE/UVWt iAhYTfe/D+l7B+T6hMt52mPhWyGvPaskTr2Fm6QxfERrLN5Zoff3J04qDrdMjhEf DrE7fiOeJ/HxzdWOipJnvECP059qMxXLuN3NU+r1BTJF6SY+feC5bWkXJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEN2SCSTbjev2Zw/wzVNfBRLpN+nMB8GA1UdIwQY MBaAFJ/G6HcJrp0ER5QPI9dU34uoF1sNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQt ODhhNzRkMDM5ZjdmLzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lNDI4MDAtYzhjNy00NTk5LWIxZmQtODhhNzRkMDM5Zjdm LzEvbjhib2R3bXVuUVJIbEE4ajExVGZpNmdYV3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3uUng+b IsB0yypuAp3VTfI3AGHwyzkrNceypxRtjX2WuY4dNWXLt7qWmL4eQ72JybgNY34f dAWNe+RMjhBojr1t3nrX24GaOHE2tsigi8ue4TyamKdxomWS9zxAwsUgSXLVx5y4 F9ySLFHyvYANruPUyNnKf3NJts58xoOZKX76MCZVmOJJlfi7rFzZ6hMGVnRNG5fQ tXIbVU7BLA8nYrevnO+mHnQwxar/5gvq/JllZXr6pNysvBu9/SDlAlTzaRvo6wHa FV1vXROMn6jk16h+dAz/aNCtRsK2E8UEWrMn49vhTRcZrH0Ib4v0Lym/MWxNWmJC Ta8H0RaXmA6Pwg== -----END CERTIFICATE-----Generated at Fri Dec 26 19:29:42 2025 by rpki-client