This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json) Hash identifier: QbMNFjw85hRtzyMO96oSovhFZtLni51mFcddDAaG0lg= Subject key identifier: B0:C1:4B:C3:3F:FC:3A:5F:05:15:09:15:A8:39:FF:D6:C5:EE:B1:A4 Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092 Certificate serial: 019B397CFDC8458D840D91AAE05861244294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 02:00:51 +0000 Manifest this update: Sat 20 Dec 2025 02:00:51 +0000 Manifest next update: Sun 21 Dec 2025 02:00:51 +0000 Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=) 2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: rNsKbJjeAkBnpwH0GwNX5mVzKpCcZeZc+FbDO1jhNKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7c:fd:c8:45:8d:84:0d:91:aa:e0:58:61:24:42:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092 Validity Not Before: Dec 20 02:00:51 2025 GMT Not After : Dec 21 02:00:51 2025 GMT Subject: CN=b0c14bc33ffc3a5f05150915a839ffd6c5eeb1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d5:8b:b3:93:79:af:8c:5f:3a:c2:98:49:7f: f0:8a:8c:67:20:5d:c3:66:3e:d6:1a:d5:7f:3c:7b: 55:65:74:c5:09:87:35:9a:2c:7a:76:b2:b1:27:cc: a1:c0:7c:e6:73:cf:08:8b:db:b4:22:fb:c4:3f:1a: 18:ec:5d:07:50:06:18:2f:15:8d:83:07:f3:c2:c7: d9:26:3d:2e:ab:42:3e:c1:1d:75:0c:8b:57:5a:e8: cb:21:08:02:35:65:e6:20:11:73:cf:72:ec:87:ad: e0:b2:dc:7e:c7:70:82:60:a6:19:be:58:8e:4e:85: c8:71:5d:8c:2f:19:09:2d:80:e8:0c:ed:53:8d:bc: e0:f1:20:2d:ec:00:5f:5c:31:d1:46:a5:3b:52:bd: 3c:67:50:f2:d5:3f:fe:33:7d:f5:a8:ef:48:92:b0: 7d:bb:69:94:4a:ec:1e:bf:53:9a:73:1a:ff:54:84: 11:ef:b8:1e:d8:4c:f3:e6:07:26:69:cc:49:4c:aa: 74:49:f5:91:d3:67:3e:2f:6b:2e:a9:53:98:00:f3: 53:4f:f1:70:c0:d1:ba:dc:7c:29:9e:36:73:e8:d4: b5:46:57:1a:b8:02:60:2e:f2:6d:d1:66:46:c3:ae: ae:ad:67:79:cb:4b:15:ba:b2:cb:7c:c4:13:70:7e: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C1:4B:C3:3F:FC:3A:5F:05:15:09:15:A8:39:FF:D6:C5:EE:B1:A4 X509v3 Authority Key Identifier: keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:fc:14:9e:7f:a2:b1:b7:98:25:c5:b1:02:e1:4a:0f:eb:36: 48:9c:fb:41:14:3b:0a:7a:49:85:d8:0c:fc:05:ea:84:fd:24: 87:20:0f:c5:3b:bf:4a:85:f5:73:9a:32:8a:00:c4:9f:d2:ae: 06:48:8c:33:95:0c:14:96:8e:a7:05:ed:88:e9:2c:8d:49:80: a0:dc:81:a6:e5:27:85:74:2b:c7:1e:7a:e3:de:5a:ce:c9:d0: dc:b2:e7:df:99:de:10:6b:d2:4a:ba:78:12:b3:cc:0f:72:5d: 98:4a:fe:74:76:30:9a:b6:05:10:e0:9a:af:8e:8a:47:7c:ab: ae:11:3a:de:15:1d:da:bc:19:af:42:02:04:d7:bd:13:60:03: 29:7b:2b:3e:d1:ed:fe:2a:56:19:54:f0:9e:d8:cf:10:f9:c0: 1b:7c:4d:2f:29:76:b1:62:3f:29:be:23:9b:49:e4:d7:a3:19: c3:97:f3:83:8c:b9:8c:c8:da:11:0b:00:ec:b8:1e:85:b5:67: 7b:c3:c4:86:7b:49:47:7d:32:64:83:28:ea:28:2b:43:a8:7c: 33:d1:43:7d:df:5a:b6:dd:16:16:8f:46:b0:39:1d:9b:19:7d: f7:82:97:94:51:3d:e1:35:8e:e0:2f:5f:f7:55:43:56:d8:1c: 7a:ec:d8:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fP3IRY2EDZGq4FhhJEKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz MjMwOTIwHhcNMjUxMjIwMDIwMDUxWhcNMjUxMjIxMDIwMDUxWjAzMTEwLwYDVQQD EyhiMGMxNGJjMzNmZmMzYTVmMDUxNTA5MTVhODM5ZmZkNmM1ZWViMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNWLs5N5r4xfOsKYSX/wioxnIF3D Zj7WGtV/PHtVZXTFCYc1mix6drKxJ8yhwHzmc88Ii9u0IvvEPxoY7F0HUAYYLxWN gwfzwsfZJj0uq0I+wR11DItXWujLIQgCNWXmIBFzz3Lsh63gstx+x3CCYKYZvliO ToXIcV2MLxkJLYDoDO1Tjbzg8SAt7ABfXDHRRqU7Ur08Z1Dy1T/+M331qO9IkrB9 u2mUSuwev1Oacxr/VIQR77ge2Ezz5gcmacxJTKp0SfWR02c+L2suqVOYAPNTT/Fw wNG63HwpnjZz6NS1RlcauAJgLvJt0WZGw66urWd5y0sVurLLfMQTcH5h9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDBS8M//DpfBRUJFag5/9bF7rGkMB8GA1UdIwQY MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3 LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx/wUnn+i sbeYJcWxAuFKD+s2SJz7QRQ7CnpJhdgM/AXqhP0khyAPxTu/SoX1c5oyigDEn9Ku BkiMM5UMFJaOpwXtiOksjUmAoNyBpuUnhXQrxx56495azsnQ3LLn35neEGvSSrp4 ErPMD3JdmEr+dHYwmrYFEOCar46KR3yrrhE63hUd2rwZr0ICBNe9E2ADKXsrPtHt /ipWGVTwntjPEPnAG3xNLyl2sWI/Kb4jm0nk16MZw5fzg4y5jMjaEQsA7LgehbVn e8PEhntJR30yZIMo6igrQ6h8M9FDfd9att0WFo9GsDkdmxl994KXlFE94TWO4C9f 91VDVtgceuzYAA== -----END CERTIFICATE-----Generated at Sat Dec 20 06:58:37 2025 by rpki-client