This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json) Hash identifier: OU/nA9eezrOi/ufu52gbkSLCjVDUS4ayRKe9X2nP5Iw= Subject key identifier: CB:68:8C:3E:39:9D:83:2E:67:BD:36:D7:01:98:4F:7E:0B:02:71:E3 Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Certificate serial: 019B2F305695EC49DBF8B3718748691CEDF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft Manifest number: 0709 Signing time: Thu 18 Dec 2025 02:00:55 +0000 Manifest this update: Thu 18 Dec 2025 02:00:55 +0000 Manifest next update: Fri 19 Dec 2025 02:00:55 +0000 Files and hashes: 1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=) 2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: TpnuWUcSwBedP/QDY/lwJZpqL5n0y4cozFPf3xwk9S0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:56:95:ec:49:db:f8:b3:71:87:48:69:1c:ed:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Validity Not Before: Dec 18 02:00:55 2025 GMT Not After : Dec 19 02:00:55 2025 GMT Subject: CN=cb688c3e399d832e67bd36d701984f7e0b0271e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f9:e1:a2:a0:a5:5d:7f:7d:d7:d9:b7:7c:be: 07:b2:68:f2:7a:97:cd:4c:28:5e:f6:ff:28:5c:24: dd:18:9f:1c:b9:d0:f8:42:6c:fc:b1:40:94:20:9f: 80:88:dd:98:b2:f4:e1:d5:d0:7d:8d:ad:0e:88:30: f1:77:f4:d6:0c:33:fb:ad:d1:20:4c:6b:d0:a7:6b: 00:43:5e:2e:9b:ca:7e:e6:da:76:38:93:ad:63:1b: 07:a2:72:6c:96:b8:7a:8d:29:57:a2:d3:79:07:84: fe:4f:36:d8:57:29:ce:9b:7f:74:26:c6:31:19:7e: 61:c6:2b:1f:62:a9:99:56:e3:73:e3:4a:f1:c5:99: c9:ff:26:c9:61:5c:44:58:9b:83:66:36:fb:83:8f: b0:6e:c3:37:25:7e:9e:b2:b0:14:81:6b:85:b0:b8: eb:10:b6:b0:73:bd:56:05:0c:65:49:1b:42:c6:6f: 92:ee:ff:c7:3e:b9:be:8d:ff:45:46:cd:24:55:cb: f0:85:1b:8c:a7:4a:82:b1:62:90:02:6e:8e:0e:84: 87:a4:3f:43:ad:6f:76:ec:14:10:fb:cc:6e:c4:00: 9c:d2:a5:bb:c8:2c:16:6d:e4:41:ee:df:ba:aa:87: 43:e3:c2:77:5a:6d:3f:91:78:e6:68:9f:ec:51:c6: 15:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:68:8C:3E:39:9D:83:2E:67:BD:36:D7:01:98:4F:7E:0B:02:71:E3 X509v3 Authority Key Identifier: keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:70:6d:75:f1:1d:14:f9:63:92:7a:23:0a:61:b1:85:68:b5: f4:28:b2:3a:3c:8b:79:d4:4b:4e:52:d9:61:d6:b1:9c:8c:be: 49:ab:b3:25:16:9a:15:0e:3c:cc:4e:70:5d:d4:a0:bc:b3:31: cf:f0:e7:b9:cf:33:9c:a9:bd:51:73:aa:9c:9b:a9:33:df:87: ac:42:29:a3:fd:81:3d:d1:10:7b:c3:ca:50:7d:01:f5:d4:34: d2:b0:32:c0:76:1e:db:4a:4a:65:d5:87:85:06:66:e5:d4:b7: ce:21:f0:c5:f0:d5:44:91:2b:4b:b2:11:4f:5c:14:7c:2f:65: ea:e7:37:c0:84:5d:33:b7:df:b0:dd:73:cb:de:76:6a:07:74: 75:4b:85:f3:43:2a:d8:a8:f4:47:3a:d8:ab:db:fb:4e:29:c8: c4:ec:78:f0:b3:ed:3e:32:f9:1a:59:5b:22:84:72:5b:86:a5: be:9e:25:b1:9a:e9:77:e5:7b:68:e9:49:4c:fc:b8:85:36:0a: ca:8d:13:9e:eb:a3:b0:8a:9b:1c:45:8e:d9:13:de:53:a0:3d: 16:d4:de:cb:ee:7b:ab:21:56:5a:4c:13:9e:88:5a:cb:fe:66: b4:95:65:18:03:b9:9b:a0:62:3c:11:12:99:02:e3:9f:37:21: bf:bd:75:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMFaV7Enb+LNxh0hpHO34MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3 YzNlM2QwHhcNMjUxMjE4MDIwMDU1WhcNMjUxMjE5MDIwMDU1WjAzMTEwLwYDVQQD EyhjYjY4OGMzZTM5OWQ4MzJlNjdiZDM2ZDcwMTk4NGY3ZTBiMDI3MWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvnhoqClXX9919m3fL4HsmjyepfN TChe9v8oXCTdGJ8cudD4Qmz8sUCUIJ+AiN2YsvTh1dB9ja0OiDDxd/TWDDP7rdEg TGvQp2sAQ14um8p+5tp2OJOtYxsHonJslrh6jSlXotN5B4T+TzbYVynOm390JsYx GX5hxisfYqmZVuNz40rxxZnJ/ybJYVxEWJuDZjb7g4+wbsM3JX6esrAUgWuFsLjr ELawc71WBQxlSRtCxm+S7v/HPrm+jf9FRs0kVcvwhRuMp0qCsWKQAm6ODoSHpD9D rW927BQQ+8xuxACc0qW7yCwWbeRB7t+6qodD48J3Wm0/kXjmaJ/sUcYVFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtojD45nYMuZ7021wGYT34LAnHjMB8GA1UdIwQY MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXBtdfEd FPljknojCmGxhWi19CiyOjyLedRLTlLZYdaxnIy+SauzJRaaFQ48zE5wXdSgvLMx z/Dnuc8znKm9UXOqnJupM9+HrEIpo/2BPdEQe8PKUH0B9dQ00rAywHYe20pKZdWH hQZm5dS3ziHwxfDVRJErS7IRT1wUfC9l6uc3wIRdM7ffsN1zy952agd0dUuF80Mq 2Kj0RzrYq9v7TinIxOx48LPtPjL5GllbIoRyW4alvp4lsZrpd+V7aOlJTPy4hTYK yo0TnuujsIqbHEWO2RPeU6A9FtTey+57qyFWWkwTnohay/5mtJVlGAO5m6BiPBES mQLjnzchv711IA== -----END CERTIFICATE-----Generated at Thu Dec 18 03:26:58 2025 by rpki-client