This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft File: N0MfG-n9wkGQmEec3kV7v3lXF1k.mft (raw, json) Hash identifier: +zpkUWIf1EwbM6ODR2b0SYKB20ZzwLjGU1I4yYgqj/w= Subject key identifier: C0:81:20:3A:1B:4A:50:9E:B2:BE:66:D8:0F:F3:61:6B:C6:49:42:5A Authority key identifier: 37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 Certificate issuer: /CN=37431f1be9fdc2419098479cde457bbf79571759 Certificate serial: 019AEB98AE845A590DBA2B49FDC7E885CA4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft Manifest number: 09E7 Signing time: Thu 04 Dec 2025 23:00:43 +0000 Manifest this update: Thu 04 Dec 2025 23:00:43 +0000 Manifest next update: Fri 05 Dec 2025 23:00:43 +0000 Files and hashes: 1: 7myDqZoO0D52fYkn1KhaJrD96EE.roa (hash: yHoSO6m/e9uh7PHZ1aPdH1Xie0fMoLfRWey6tzleRjk=) 2: BdJsQb2Wyhj6V0MXrOpAeFMeHNc.roa (hash: BCOWfpe+Hm7MDisoXCkcr8quTvjHMSMJ8WxC+uEAJgk=) 3: EX-zgiFifgkRS0MsJ-fm6dynPFQ.roa (hash: NkQ1CRsw1FEEPmAjWSGetO/iDR/XhUi/u+1jVJdjxls=) 4: N0MfG-n9wkGQmEec3kV7v3lXF1k.crl (hash: Z9m9G9BLWDNSKhZ1R4wgKXIVo+TSvMJjID3cXUlEJrA=) 5: X2IBg-0ZoG3nzdbOUqoFpfNzTiM.roa (hash: I3L20uWKmG3AN70fPYDWHSKnKdL/hAFebOsi5YIWBck=) 6: iUjA5-zowUQNvgRjE68BZNBeaJc.roa (hash: 2YZZJqfjMiJEM/TbJsXYsUjZHG10veLYlz1R58c65kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 21:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:eb:98:ae:84:5a:59:0d:ba:2b:49:fd:c7:e8:85:ca:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37431f1be9fdc2419098479cde457bbf79571759 Validity Not Before: Dec 4 23:00:43 2025 GMT Not After : Dec 5 23:00:43 2025 GMT Subject: CN=c081203a1b4a509eb2be66d80ff3616bc649425a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d5:44:24:42:ca:44:ca:fe:60:a0:70:4b:0c: 46:8f:94:19:e6:07:12:f6:92:09:65:23:98:6f:27: 7e:78:01:87:b4:d4:e5:cc:7c:fd:e9:89:36:9b:19: c7:59:36:cc:bc:5b:ac:bb:8e:0e:9e:a7:47:58:5b: 5a:8b:b3:d9:1c:65:46:e4:29:52:ca:2b:72:88:68: 03:31:63:a7:8b:15:5d:88:6c:65:ab:50:a0:e8:3e: 98:21:54:8c:64:40:3a:a3:37:af:05:58:1f:c4:64: 9b:df:53:76:ae:01:07:41:27:a5:f8:31:fd:81:d6: b8:54:e9:b2:86:88:23:b6:89:53:40:3b:1e:cc:b7: 3a:46:c9:4b:b6:a9:c7:06:38:e0:37:4c:4a:53:d4: b7:33:8b:8c:52:68:0b:fb:da:f3:8e:33:40:24:8f: e3:b4:d2:8d:78:6a:42:6e:cf:84:79:7e:f0:b2:0b: 28:cf:8b:03:1b:40:db:2d:d0:21:fa:48:ab:96:18: 20:31:28:72:3e:cb:96:54:a8:ec:e2:6a:84:bd:27: f2:a0:de:74:c0:2a:da:cb:85:32:85:c5:f6:43:99: f5:c9:81:be:23:52:27:14:e2:20:9a:78:3b:75:22: 32:8a:33:7f:74:a4:73:e1:29:9a:f8:1b:9f:d8:84: e3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:81:20:3A:1B:4A:50:9E:B2:BE:66:D8:0F:F3:61:6B:C6:49:42:5A X509v3 Authority Key Identifier: keyid:37:43:1F:1B:E9:FD:C2:41:90:98:47:9C:DE:45:7B:BF:79:57:17:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0MfG-n9wkGQmEec3kV7v3lXF1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b53547-d340-4392-af46-615961312b52/1/N0MfG-n9wkGQmEec3kV7v3lXF1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:72:5f:3a:35:c3:27:59:5d:b3:6f:4e:37:14:22:ba:3c:38: b2:c8:10:8c:7d:7a:26:a2:b2:0d:9f:cf:88:67:a4:10:18:12: 0c:bf:61:86:e9:16:0c:29:1d:f4:53:c1:36:d8:2e:8b:82:4b: ec:87:b0:36:b7:9d:4c:ab:20:86:11:1e:9e:68:36:9d:2e:ad: ab:e1:63:84:7a:12:ea:6e:ea:c4:cb:ec:5e:1c:bd:00:69:72: d0:32:05:be:6a:be:dc:53:c4:46:eb:94:8c:55:fc:4b:31:f0: 15:ce:ee:71:6b:d4:b0:9e:17:00:4e:b5:7c:7c:15:08:4f:d6: 11:95:3c:a9:46:3f:c6:11:a2:60:27:10:1f:53:6e:0a:43:65: 3d:b7:6e:12:dc:e9:88:d7:d5:c3:04:a5:4d:a6:aa:62:dc:a9: 23:30:b3:c4:bd:00:41:77:15:b8:c6:1f:83:0e:09:39:8f:4f: 8c:93:f3:6a:52:f9:c0:3f:95:8f:62:ad:08:06:a2:6a:4e:ab: ef:ec:92:73:d3:5b:63:68:80:c5:4c:c6:a5:48:25:0a:35:0b: ae:56:dd:8d:5e:91:f7:62:9b:a5:76:d9:9e:00:08:c0:e4:0f: 3c:86:af:15:c6:e2:0f:8c:d2:8a:d3:b3:43:48:a9:64:7a:da: e7:a0:ab:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrrmK6EWlkNuitJ/cfohcpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NDMxZjFiZTlmZGMyNDE5MDk4NDc5Y2RlNDU3YmJmNzk1 NzE3NTkwHhcNMjUxMjA0MjMwMDQzWhcNMjUxMjA1MjMwMDQzWjAzMTEwLwYDVQQD EyhjMDgxMjAzYTFiNGE1MDllYjJiZTY2ZDgwZmYzNjE2YmM2NDk0MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tVEJELKRMr+YKBwSwxGj5QZ5gcS 9pIJZSOYbyd+eAGHtNTlzHz96Yk2mxnHWTbMvFusu44OnqdHWFtai7PZHGVG5ClS yityiGgDMWOnixVdiGxlq1Cg6D6YIVSMZEA6ozevBVgfxGSb31N2rgEHQSel+DH9 gda4VOmyhogjtolTQDsezLc6RslLtqnHBjjgN0xKU9S3M4uMUmgL+9rzjjNAJI/j tNKNeGpCbs+EeX7wsgsoz4sDG0DbLdAh+kirlhggMShyPsuWVKjs4mqEvSfyoN50 wCray4UyhcX2Q5n1yYG+I1InFOIgmng7dSIyijN/dKRz4Sma+Buf2ITjIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCBIDobSlCesr5m2A/zYWvGSUJaMB8GA1UdIwQY MBaAFDdDHxvp/cJBkJhHnN5Fe795VxdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYt NjE1OTYxMzEyYjUyLzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9iNTM1NDctZDM0MC00MzkyLWFmNDYtNjE1OTYxMzEyYjUy LzEvTjBNZkctbjl3a0dRbUVlYzNrVjd2M2xYRjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXJfOjXD J1lds29ONxQiujw4ssgQjH16JqKyDZ/PiGekEBgSDL9hhukWDCkd9FPBNtgui4JL 7IewNredTKsghhEenmg2nS6tq+FjhHoS6m7qxMvsXhy9AGly0DIFvmq+3FPERuuU jFX8SzHwFc7ucWvUsJ4XAE61fHwVCE/WEZU8qUY/xhGiYCcQH1NuCkNlPbduEtzp iNfVwwSlTaaqYtypIzCzxL0AQXcVuMYfgw4JOY9PjJPzalL5wD+Vj2KtCAaiak6r 7+ySc9NbY2iAxUzGpUglCjULrlbdjV6R92KbpXbZngAIwOQPPIavFcbiD4zSitOz Q0ipZHra56CrYw== -----END CERTIFICATE-----Generated at Fri Dec 5 07:16:22 2025 by rpki-client