This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json) Hash identifier: UypD80pXIirFHHwryNWX+rWea0GZvXlcAiTYog1FX10= Subject key identifier: D1:54:38:77:4C:2E:BF:57:87:13:FE:18:17:FB:C0:78:F0:B8:A8:F2 Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Certificate serial: 019B3CB51613244F078AC3B45C9DB5E40A10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft Manifest number: 0710 Signing time: Sat 20 Dec 2025 17:00:59 +0000 Manifest this update: Sat 20 Dec 2025 17:00:59 +0000 Manifest next update: Sun 21 Dec 2025 17:00:59 +0000 Files and hashes: 1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=) 2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: QhpZcfQ4nKK47AGK9k1JVkzLAKCLunxPNnswTnk4kN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:16:13:24:4f:07:8a:c3:b4:5c:9d:b5:e4:0a:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Validity Not Before: Dec 20 17:00:59 2025 GMT Not After : Dec 21 17:00:59 2025 GMT Subject: CN=d15438774c2ebf578713fe1817fbc078f0b8a8f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:ed:6c:20:ef:21:e8:2f:2b:34:97:61:03: 1b:d4:31:05:0f:9c:df:ef:45:15:62:a9:2b:72:2f: c6:2c:4c:10:67:94:73:fa:12:71:2c:54:64:78:47: 80:47:0a:6b:c4:b7:97:be:ab:f8:3a:cb:4e:13:44: 2a:5b:d1:47:9d:46:35:0b:f2:6e:89:d4:b3:72:9c: 45:dd:9d:12:a3:65:0a:c8:a8:92:06:fa:37:3b:9d: 4e:0c:41:8c:2b:8a:20:46:0e:ff:d7:43:47:1f:04: b5:72:7a:23:a0:8d:87:84:3b:f9:12:bd:f3:e0:4f: 65:b3:42:0c:3e:0d:5f:4e:93:22:77:5b:d2:da:54: 2c:5e:63:e9:df:c5:66:89:55:13:38:4b:ab:3d:9b: cf:07:75:27:8f:29:dd:62:58:91:1f:32:3b:50:d5: 3f:e2:01:74:59:af:49:14:42:ae:0f:19:e1:87:d4: 32:15:eb:6f:16:5f:4b:f2:57:8d:85:95:0d:14:26: 63:07:67:b6:c6:f6:a0:f1:c0:26:2a:6d:14:33:46: f7:db:ed:d6:25:e7:4c:cf:b4:78:f4:bc:fc:df:ef: 25:93:77:29:9f:86:73:4d:aa:db:d8:43:e6:39:18: 6f:a8:97:b4:31:0f:ca:5f:b3:96:80:7c:63:8a:d7: 17:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:54:38:77:4C:2E:BF:57:87:13:FE:18:17:FB:C0:78:F0:B8:A8:F2 X509v3 Authority Key Identifier: keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dd:4c:41:91:e1:51:66:d3:e1:6b:03:47:9f:39:8c:c2:07: fa:fe:6a:d2:58:17:07:5a:6f:28:68:71:6e:46:b2:83:96:df: 91:42:96:56:b1:98:46:45:07:c6:45:f2:52:3e:ba:5f:06:9d: 3a:8a:0a:66:e0:fd:38:b6:25:96:48:b3:89:27:bd:74:8a:28: 2d:b2:c1:91:df:6a:a5:d8:87:cc:3e:cb:27:27:d5:ba:b3:42: c0:ba:5a:63:09:16:fa:1a:d3:09:03:10:a4:49:6e:4a:04:01: 87:40:8b:a9:25:06:1c:be:2e:4e:96:d9:09:89:5c:3d:99:b5: 72:d5:77:d6:e4:24:01:ef:2a:af:56:00:81:1a:ef:70:7c:3f: e1:51:e1:5a:f7:16:6c:ed:e6:c0:fc:a9:fd:01:25:d9:98:6e: f2:71:aa:93:4c:08:8d:02:f0:3f:00:b1:03:8b:56:1c:92:4d: 38:18:f8:48:f1:b7:d9:c0:70:bd:28:18:87:14:c2:c7:b4:0b: 08:1a:00:91:e9:05:ef:c1:df:0a:3f:0f:66:0d:aa:1d:cc:40: 2b:59:22:3f:3b:a2:df:e9:2d:22:82:69:99:54:5d:b9:da:e2: 6b:bf:6a:d5:21:88:b0:10:d6:d3:2a:33:80:40:80:06:20:43: c4:f5:73:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tRYTJE8HisO0XJ215AoQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3 YzNlM2QwHhcNMjUxMjIwMTcwMDU5WhcNMjUxMjIxMTcwMDU5WjAzMTEwLwYDVQQD EyhkMTU0Mzg3NzRjMmViZjU3ODcxM2ZlMTgxN2ZiYzA3OGYwYjhhOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui7tbCDvIegvKzSXYQMb1DEFD5zf 70UVYqkrci/GLEwQZ5Rz+hJxLFRkeEeARwprxLeXvqv4OstOE0QqW9FHnUY1C/Ju idSzcpxF3Z0So2UKyKiSBvo3O51ODEGMK4ogRg7/10NHHwS1cnojoI2HhDv5Er3z 4E9ls0IMPg1fTpMid1vS2lQsXmPp38VmiVUTOEurPZvPB3UnjyndYliRHzI7UNU/ 4gF0Wa9JFEKuDxnhh9QyFetvFl9L8leNhZUNFCZjB2e2xvag8cAmKm0UM0b32+3W JedMz7R49Lz83+8lk3cpn4ZzTarb2EPmORhvqJe0MQ/KX7OWgHxjitcXhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFUOHdMLr9XhxP+GBf7wHjwuKjyMB8GA1UdIwQY MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANd1MQZHh UWbT4WsDR585jMIH+v5q0lgXB1pvKGhxbkayg5bfkUKWVrGYRkUHxkXyUj66Xwad OooKZuD9OLYllkiziSe9dIooLbLBkd9qpdiHzD7LJyfVurNCwLpaYwkW+hrTCQMQ pEluSgQBh0CLqSUGHL4uTpbZCYlcPZm1ctV31uQkAe8qr1YAgRrvcHw/4VHhWvcW bO3mwPyp/QEl2Zhu8nGqk0wIjQLwPwCxA4tWHJJNOBj4SPG32cBwvSgYhxTCx7QL CBoAkekF78HfCj8PZg2qHcxAK1kiPzui3+ktIoJpmVRdudria79q1SGIsBDW0yoz gECABiBDxPVzvQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:00:21 2025 by rpki-client