This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json) Hash identifier: rY0JfpauccB6uYRxLF4GQuoJr14yvLJWuDGC8Jq6itM= Subject key identifier: 43:2F:B6:D1:28:52:87:F8:6B:10:1C:3F:52:9B:BD:CE:0A:03:6C:CE Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Certificate serial: 019B0F003A51E38767269134E62756478C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft Manifest number: 0E44 Signing time: Thu 11 Dec 2025 20:00:31 +0000 Manifest this update: Thu 11 Dec 2025 20:00:31 +0000 Manifest next update: Fri 12 Dec 2025 20:00:31 +0000 Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=) 2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: 1XetnEbuEizvHadRzRGRc8idDFGS9uDZCA+eKhEOCco=) 3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:3a:51:e3:87:67:26:91:34:e6:27:56:47:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Validity Not Before: Dec 11 20:00:31 2025 GMT Not After : Dec 12 20:00:31 2025 GMT Subject: CN=432fb6d1285287f86b101c3f529bbdce0a036cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:a8:39:2a:af:d8:02:a6:74:60:7b:db:1b: 7e:47:09:74:32:0c:d3:f5:8d:c7:8c:d7:d9:f4:8f: cc:d6:8d:58:f7:2b:61:6a:dc:54:82:7b:47:9c:39: 8e:99:7a:b7:63:87:d8:69:96:9b:bc:13:bb:14:ce: a9:0a:bf:ed:74:af:a2:f9:82:8d:4f:92:b5:3e:9d: 01:ac:ee:bd:4c:ec:ba:23:69:8a:bd:7b:fc:c8:36: 02:67:3c:0e:7c:0a:4e:22:4e:c7:6c:16:c0:4d:b7: 0c:06:2d:da:44:fa:f4:53:e3:22:53:b9:0f:e3:5a: 38:54:6e:ff:c0:af:4d:8c:ab:d0:15:24:1d:55:91: a0:50:14:45:73:f7:0c:66:53:68:8f:6c:4b:20:ce: d7:f5:a5:da:e9:6f:09:ae:4c:70:be:de:99:b2:96: ad:78:95:ba:7d:3c:c6:d6:bf:b8:63:3a:61:72:e0: 92:7b:12:f3:34:9a:6b:dc:5d:4a:e1:fb:9a:6f:93: ff:b4:0d:ad:17:e2:ca:df:ec:f9:af:4d:2f:78:51: 90:82:17:41:f9:e9:04:c9:36:d6:23:56:6f:e2:96: 75:b1:e2:8a:0c:a5:a3:41:44:d1:2d:fa:ee:a1:97: 71:94:7a:db:09:df:ac:55:ee:6e:fb:5c:c0:0b:22: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:2F:B6:D1:28:52:87:F8:6B:10:1C:3F:52:9B:BD:CE:0A:03:6C:CE X509v3 Authority Key Identifier: keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:71:3c:c8:1e:29:ad:c9:4c:d9:9e:82:73:4e:98:a7:18:ae: 52:fd:53:4d:59:23:0c:d7:70:e1:0a:05:4e:48:c5:2c:14:97: 2c:28:50:48:d9:e1:5d:ab:3c:43:9a:f3:3e:1b:a9:1f:23:8e: 4c:ca:f7:eb:78:a0:70:77:09:a8:49:6e:10:86:a7:eb:0c:05: 5a:03:4a:2c:95:0d:11:c3:12:3b:52:bd:16:16:83:f7:3c:7c: 09:c2:e1:19:59:62:70:1a:b9:c2:58:dd:82:44:86:dd:05:99: 25:b9:0f:c2:0a:30:cb:29:b6:94:fe:11:02:e1:f7:eb:4e:d3: 2d:78:36:d6:74:c1:ee:a9:5e:62:43:c1:47:01:6d:0b:5c:07: 2a:c4:a9:9b:cc:87:23:e3:97:1a:2e:70:4b:f3:97:f3:4f:43: fa:47:34:6e:5a:18:4f:58:23:38:20:8b:08:6e:e5:7c:e1:73: 9d:f2:23:91:44:c3:c3:eb:b3:c0:a2:dc:0a:58:aa:29:47:38: 30:09:5b:6a:8c:50:52:7a:5d:48:ae:e0:1e:3b:f1:e7:1a:51: 64:0b:d9:9d:f2:f8:8a:f9:d0:2e:4d:17:c1:37:11:8c:f7:a8: d2:e2:bc:b0:c6:79:bc:12:1c:ff:b6:26:fe:09:dc:d7:d9:8b: bd:b1:d8:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPADpR44dnJpE05idWR4xCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3 MDcwMmUwHhcNMjUxMjExMjAwMDMxWhcNMjUxMjEyMjAwMDMxWjAzMTEwLwYDVQQD Eyg0MzJmYjZkMTI4NTI4N2Y4NmIxMDFjM2Y1MjliYmRjZTBhMDM2Y2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqROoOSqv2AKmdGB72xt+Rwl0MgzT 9Y3HjNfZ9I/M1o1Y9ythatxUgntHnDmOmXq3Y4fYaZabvBO7FM6pCr/tdK+i+YKN T5K1Pp0BrO69TOy6I2mKvXv8yDYCZzwOfApOIk7HbBbATbcMBi3aRPr0U+MiU7kP 41o4VG7/wK9NjKvQFSQdVZGgUBRFc/cMZlNoj2xLIM7X9aXa6W8Jrkxwvt6Zspat eJW6fTzG1r+4YzphcuCSexLzNJpr3F1K4fuab5P/tA2tF+LK3+z5r00veFGQghdB +ekEyTbWI1Zv4pZ1seKKDKWjQUTRLfruoZdxlHrbCd+sVe5u+1zACyJuWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMvttEoUof4axAcP1Kbvc4KA2zOMB8GA1UdIwQY MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXE8yB4p rclM2Z6Cc06YpxiuUv1TTVkjDNdw4QoFTkjFLBSXLChQSNnhXas8Q5rzPhupHyOO TMr363igcHcJqEluEIan6wwFWgNKLJUNEcMSO1K9FhaD9zx8CcLhGVlicBq5wljd gkSG3QWZJbkPwgowyym2lP4RAuH3607TLXg21nTB7qleYkPBRwFtC1wHKsSpm8yH I+OXGi5wS/OX809D+kc0bloYT1gjOCCLCG7lfOFznfIjkUTDw+uzwKLcCliqKUc4 MAlbaoxQUnpdSK7gHjvx5xpRZAvZnfL4ivnQLk0XwTcRjPeo0uK8sMZ5vBIc/7Ym /gnc19mLvbHYvg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:39 2025 by rpki-client