This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft File: n5SSduOmC1L8RnQdcdggr7XuYGA.mft (raw, json) Hash identifier: USQMecn7L4XXTFPoUuLNTN3fHWDzbdJ0t6SJ9Jjb1gI= Subject key identifier: AD:77:FF:C6:C4:61:A7:56:06:5D:E7:B6:85:33:89:28:E7:F4:6E:E0 Authority key identifier: 9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60 Certificate issuer: /CN=9f949276e3a60b52fc46741d71d820afb5ee6060 Certificate serial: 019B5ABFD21189EB3E42FC0A16B62F0A42B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft Manifest number: 05 Signing time: Fri 26 Dec 2025 13:01:19 +0000 Manifest this update: Fri 26 Dec 2025 13:01:19 +0000 Manifest next update: Sat 27 Dec 2025 13:01:19 +0000 Files and hashes: 1: n5SSduOmC1L8RnQdcdggr7XuYGA.crl (hash: EbbCuN37Ur1DyaWrZRui9rgfhWJcOycyRYmKQniA4Xk=) 2: xNaG9yupsGn_e9NSvvb5UpSSc7Y.roa (hash: WgXYfiXVtcnJk2B1S+HBE+pdFZ7RQwgkyoascy6eaVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:d2:11:89:eb:3e:42:fc:0a:16:b6:2f:0a:42:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f949276e3a60b52fc46741d71d820afb5ee6060 Validity Not Before: Dec 26 13:01:19 2025 GMT Not After : Dec 27 13:01:19 2025 GMT Subject: CN=ad77ffc6c461a756065de7b685338928e7f46ee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:47:ed:6b:f1:a3:ce:14:58:af:c3:80:0c: 4a:f5:b5:06:e6:fe:15:e2:a8:5b:0f:42:d2:03:3e: fe:b6:cc:79:80:02:87:7d:8c:92:44:5f:3f:cc:22: 21:ba:22:e3:4b:9b:b1:8a:2c:8d:51:51:8b:58:be: 9f:4d:b6:2e:ca:b9:21:c5:8f:f7:e7:9c:f6:85:3c: 4b:30:04:93:ef:0a:e1:52:0b:a7:b7:97:c9:d8:af: 5a:e0:d2:78:94:2a:d1:b2:93:76:82:68:45:fa:8f: 3d:8f:df:ca:13:d3:65:82:9d:18:25:8e:6d:c2:53: 89:53:4a:11:0a:65:78:f0:47:0d:d4:93:16:6c:b1: 9d:4b:c3:12:18:03:4a:84:11:3b:e5:7f:88:9d:51: 7d:d7:d6:2b:bb:aa:a8:b4:73:22:be:47:1f:e4:a0: b9:b8:3c:18:51:af:90:df:e0:8e:57:a1:d5:e9:5c: af:f8:c1:74:3d:4f:4a:98:3d:c3:92:90:0f:f6:64: c6:2d:aa:7c:86:19:9c:83:3f:fa:2e:91:6c:f4:98: f8:2f:b7:c2:b0:b8:52:e0:90:33:4d:85:3a:24:31: 93:99:e7:b5:4e:ba:c3:91:c0:ea:3d:d3:73:b6:d1: 64:c0:25:48:27:3a:24:2c:3b:2d:a4:19:ce:5b:9f: 6c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:77:FF:C6:C4:61:A7:56:06:5D:E7:B6:85:33:89:28:E7:F4:6E:E0 X509v3 Authority Key Identifier: keyid:9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:59:27:70:8d:bd:c1:48:6e:75:08:ab:84:46:bc:52:5e:6a: c8:2f:9b:59:93:43:cc:44:96:8b:df:73:dd:0c:e7:72:6c:ce: 53:df:11:a3:2f:5d:d0:eb:18:60:5f:00:54:1f:e4:87:05:6c: 10:db:59:14:a6:56:19:a2:d8:a9:20:b0:23:c9:b8:d4:35:75: de:be:89:e3:1b:ae:e9:c2:34:70:67:3c:6c:ff:fe:22:7f:fa: 48:bb:b5:31:9f:31:a7:17:d8:c1:a8:61:84:46:f6:99:b2:83: ea:04:1e:1f:2a:e3:b0:b9:a0:1d:0c:75:15:a1:80:86:8b:61: a3:82:01:dc:28:8b:46:39:5b:17:14:60:f3:33:36:37:31:c4: f0:6b:8e:ec:56:26:4b:08:04:ca:e3:4a:0f:cf:cf:33:02:e2: a3:3a:9b:bb:f9:9f:ae:a7:4e:70:5c:94:b5:90:a6:d9:4e:df: 6a:96:eb:f1:80:c0:5e:af:8d:81:4e:aa:86:11:b4:e1:0a:e2: bc:15:2b:eb:1c:11:91:69:cd:d0:5f:54:e4:73:93:7c:2d:e6: 4f:e6:b0:1b:ad:de:95:00:a6:18:ec:03:df:c1:fc:d7:00:ea: 95:4f:d5:ec:b7:20:dd:4f:d7:05:5a:2a:1b:1e:61:64:55:8c: 6d:10:41:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav9IRies+QvwKFrYvCkKxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTQ5Mjc2ZTNhNjBiNTJmYzQ2NzQxZDcxZDgyMGFmYjVl ZTYwNjAwHhcNMjUxMjI2MTMwMTE5WhcNMjUxMjI3MTMwMTE5WjAzMTEwLwYDVQQD EyhhZDc3ZmZjNmM0NjFhNzU2MDY1ZGU3YjY4NTMzODkyOGU3ZjQ2ZWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO9H7Wvxo84UWK/DgAxK9bUG5v4V 4qhbD0LSAz7+tsx5gAKHfYySRF8/zCIhuiLjS5uxiiyNUVGLWL6fTbYuyrkhxY/3 55z2hTxLMAST7wrhUgunt5fJ2K9a4NJ4lCrRspN2gmhF+o89j9/KE9Nlgp0YJY5t wlOJU0oRCmV48EcN1JMWbLGdS8MSGANKhBE75X+InVF919Yru6qotHMivkcf5KC5 uDwYUa+Q3+COV6HV6Vyv+MF0PU9KmD3DkpAP9mTGLap8hhmcgz/6LpFs9Jj4L7fC sLhS4JAzTYU6JDGTmee1TrrDkcDqPdNzttFkwCVIJzokLDstpBnOW59sqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK13/8bEYadWBl3ntoUziSjn9G7gMB8GA1UdIwQY MBaAFJ+UknbjpgtS/EZ0HXHYIK+17mBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVTU2R1T21DMUw4Um5RZGNkZ2dyN1h1WUdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc1MWUtNzUzNC00MzdkLTlhOWYt NDA4NzQwNDIwZjU3LzEvbjVTU2R1T21DMUw4Um5RZGNkZ2dyN1h1WUdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc1MWUtNzUzNC00MzdkLTlhOWYtNDA4NzQwNDIwZjU3 LzEvbjVTU2R1T21DMUw4Um5RZGNkZ2dyN1h1WUdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblkncI29 wUhudQirhEa8Ul5qyC+bWZNDzESWi99z3QzncmzOU98Roy9d0OsYYF8AVB/khwVs ENtZFKZWGaLYqSCwI8m41DV13r6J4xuu6cI0cGc8bP/+In/6SLu1MZ8xpxfYwahh hEb2mbKD6gQeHyrjsLmgHQx1FaGAhotho4IB3CiLRjlbFxRg8zM2NzHE8GuO7FYm SwgEyuNKD8/PMwLiozqbu/mfrqdOcFyUtZCm2U7fapbr8YDAXq+NgU6qhhG04Qri vBUr6xwRkWnN0F9U5HOTfC3mT+awG63elQCmGOwD38H81wDqlU/V7Lcg3U/XBVoq Gx5hZFWMbRBBWA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:15 2025 by rpki-client