This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json) Hash identifier: Xwbt+5M+1eCOwiMIuyKXGw/To1jn9vMOiBDHl4Bh03k= Subject key identifier: E0:C4:FB:BC:C2:59:14:16:FE:4F:E6:17:09:20:8C:0D:D9:DD:68:03 Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Certificate serial: 019B432517D164B46BB7FBD07B2B004931C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft Manifest number: 0E5F Signing time: Sun 21 Dec 2025 23:01:02 +0000 Manifest this update: Sun 21 Dec 2025 23:01:02 +0000 Manifest next update: Mon 22 Dec 2025 23:01:02 +0000 Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=) 2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: FKZK/Ceo+h+MMnhV2ljjvyC2Ulg4GzwGXTpkHm4RRBY=) 3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:17:d1:64:b4:6b:b7:fb:d0:7b:2b:00:49:31:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Validity Not Before: Dec 21 23:01:02 2025 GMT Not After : Dec 22 23:01:02 2025 GMT Subject: CN=e0c4fbbcc2591416fe4fe61709208c0dd9dd6803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:68:59:5f:63:15:c4:ad:ba:9c:ab:e7:0e: 81:f8:c0:4b:84:2d:f3:24:31:36:6b:dd:3d:fa:b1: 90:fa:30:cc:81:4d:78:3b:bd:d1:79:98:bc:1a:f1: 73:9f:ad:1d:49:d8:be:fb:e9:82:2a:61:3a:49:9b: bd:fb:e6:ad:49:4b:30:01:fe:0c:83:73:11:62:f7: b9:87:0c:fa:37:78:84:b7:29:bd:71:1e:20:14:27: 07:64:f3:d8:45:28:75:92:0d:08:35:10:5d:f7:7b: 02:27:4b:8d:03:e1:e0:b0:65:21:49:7c:e1:d3:95: 0b:e7:91:36:58:4b:b8:dd:a8:a9:0a:88:10:80:62: be:10:e3:7d:69:c1:e1:7c:3e:74:68:f1:59:3b:3e: 3d:4d:3c:d5:b7:36:bf:b6:ff:14:64:36:b8:ae:ad: 0b:7a:43:63:73:04:37:a8:37:b4:71:fb:e4:de:56: 72:2c:a2:59:e1:9b:98:17:39:a7:81:56:a1:80:b9: 90:0e:94:60:26:6f:a5:7c:86:25:59:78:7e:58:32: ee:5c:fb:7d:92:66:18:08:71:28:ef:0c:ac:c6:a4: d0:fd:d1:08:0c:5a:a7:cb:a1:43:2d:29:05:0d:be: a8:31:fc:c4:c4:3d:ff:b7:ca:11:e4:69:eb:dd:5b: 1a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:C4:FB:BC:C2:59:14:16:FE:4F:E6:17:09:20:8C:0D:D9:DD:68:03 X509v3 Authority Key Identifier: keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:45:e2:5c:65:a1:db:13:42:10:85:e3:1d:2b:af:61:a5:ec: f8:20:2a:43:bc:9b:f4:32:4d:17:43:50:79:00:32:7b:90:10: 89:39:8d:14:46:15:d2:20:8b:01:7c:c9:16:78:5c:04:4e:94: 27:ce:80:b3:05:ee:34:6e:99:ab:82:e8:2f:d3:99:e0:98:d6: ed:58:f3:e3:05:cb:cd:92:57:ea:ff:69:86:ab:7f:5c:7f:9f: 7c:c0:bb:bf:43:12:d5:1e:9f:fc:4d:94:74:75:1c:5b:4e:22: c9:b2:48:a5:84:2e:e4:ff:0c:9f:24:a2:14:a9:e4:33:40:c8: 0b:98:06:e8:b8:ca:3c:97:c5:79:56:6b:aa:08:4f:18:66:16: 65:c5:45:b7:72:c9:d8:02:4a:27:9c:45:b7:e3:db:a8:c4:e1: 5c:ef:22:2b:a2:ef:c7:57:e2:9a:0e:84:9b:d3:f7:00:46:26: 43:e4:04:56:03:f4:0d:ae:53:fa:6b:12:34:3f:11:c0:bc:88: e3:6f:9c:30:45:34:33:18:e6:8c:a9:5d:7e:62:67:d4:60:0f: 87:0a:40:93:0c:27:b2:74:83:01:ad:99:3b:cb:0a:c1:87:bf: 6d:e0:6c:35:8a:7a:f0:20:c1:f8:6a:d7:7d:8c:87:6d:2c:a5: 43:bb:23:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJRfRZLRrt/vQeysASTHEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3 MDcwMmUwHhcNMjUxMjIxMjMwMTAyWhcNMjUxMjIyMjMwMTAyWjAzMTEwLwYDVQQD EyhlMGM0ZmJiY2MyNTkxNDE2ZmU0ZmU2MTcwOTIwOGMwZGQ5ZGQ2ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjloWV9jFcStupyr5w6B+MBLhC3z JDE2a909+rGQ+jDMgU14O73ReZi8GvFzn60dSdi+++mCKmE6SZu9++atSUswAf4M g3MRYve5hwz6N3iEtym9cR4gFCcHZPPYRSh1kg0INRBd93sCJ0uNA+HgsGUhSXzh 05UL55E2WEu43aipCogQgGK+EON9acHhfD50aPFZOz49TTzVtza/tv8UZDa4rq0L ekNjcwQ3qDe0cfvk3lZyLKJZ4ZuYFzmngVahgLmQDpRgJm+lfIYlWXh+WDLuXPt9 kmYYCHEo7wysxqTQ/dEIDFqny6FDLSkFDb6oMfzExD3/t8oR5Gnr3VsafQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODE+7zCWRQW/k/mFwkgjA3Z3WgDMB8GA1UdIwQY MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0XiXGWh 2xNCEIXjHSuvYaXs+CAqQ7yb9DJNF0NQeQAye5AQiTmNFEYV0iCLAXzJFnhcBE6U J86AswXuNG6Zq4LoL9OZ4JjW7Vjz4wXLzZJX6v9phqt/XH+ffMC7v0MS1R6f/E2U dHUcW04iybJIpYQu5P8MnySiFKnkM0DIC5gG6LjKPJfFeVZrqghPGGYWZcVFt3LJ 2AJKJ5xFt+PbqMThXO8iK6Lvx1fimg6Em9P3AEYmQ+QEVgP0Da5T+msSND8RwLyI 42+cMEU0MxjmjKldfmJn1GAPhwpAkwwnsnSDAa2ZO8sKwYe/beBsNYp68CDB+GrX fYyHbSylQ7sjMQ== -----END CERTIFICATE-----Generated at Mon Dec 22 05:32:48 2025 by rpki-client