This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft File: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft (raw, json) Hash identifier: 9DnfipVGEzIK+xZQF6y/a5xBNyALttjy8n+hgoiKl0o= Subject key identifier: 94:FD:A9:AD:D6:FD:E0:3A:D0:22:76:D5:97:CC:56:B4:67:C5:A3:71 Authority key identifier: D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A Certificate issuer: /CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Certificate serial: 019AF98BE5D98F7F1CE03265A8256CFF59A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft Manifest number: 1765 Signing time: Sun 07 Dec 2025 16:01:26 +0000 Manifest this update: Sun 07 Dec 2025 16:01:26 +0000 Manifest next update: Mon 08 Dec 2025 16:01:26 +0000 Files and hashes: 1: 0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl (hash: UVCMxLwWemvqkiVrHtR4YCswMgJbhRKhPLzrYl5N7IE=) 2: 2LgtOWneA5YvGT4_RnemdJk10ZI.roa (hash: i3ijgdJkTo+0tXZivrTiqDYQJFUVEZ40sKvM/03kC6k=) 3: BKyeRj9qftx8WGEdxVWFVc1273A.roa (hash: nhVWVpplcnh6PS/kPe42Tn4vpV4Cv/wcOxTwDykaiQM=) 4: NyrZFNY0uejKVVI5JPC7FPtdUjc.roa (hash: F1z0p2TvKAcesacsMKTiWmQh7lfOeilS7Yll9HRgTgE=) 5: ZOG0pJ01hXVC3r9SBSUX3nP3iWU.roa (hash: M3TtUoEAKZLP5h7xNaBXjv6fTWKL5P7QGAapCue/jYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 16:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:8b:e5:d9:8f:7f:1c:e0:32:65:a8:25:6c:ff:59:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0de618822b8af6f9ecaffcd7d5459b7cc11449a Validity Not Before: Dec 7 16:01:26 2025 GMT Not After : Dec 8 16:01:26 2025 GMT Subject: CN=94fda9add6fde03ad02276d597cc56b467c5a371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c8:40:a3:15:6a:b2:f8:9c:b9:89:5a:24:8f: 5f:96:8e:b6:3d:7a:3f:ed:fa:86:af:0a:50:d8:d6: 31:63:50:10:e3:19:69:5e:3c:e0:5f:dc:17:75:78: 2c:31:46:59:8d:85:0f:26:c4:8a:05:ab:67:6a:21: d0:c3:f3:ef:7b:5e:92:76:aa:d3:50:b4:98:28:f1: 94:3f:00:ab:a2:df:2d:9b:bc:dc:43:3a:da:ad:34: 30:4e:d7:38:15:bf:74:be:b4:1c:2c:90:9e:c2:79: 60:90:1a:6a:b2:b4:d0:0e:87:80:14:43:b0:d2:77: a4:30:61:fd:a6:cd:27:43:a4:80:ea:a5:d5:8d:c9: 84:76:1e:a4:2a:f2:44:bb:49:9f:4f:4f:4a:ae:3b: 93:6d:15:53:e6:64:49:35:84:e4:6d:13:60:a4:6c: be:cd:18:ce:ca:de:de:8f:5b:7f:ec:2c:87:4f:e6: 39:56:0d:d3:96:12:05:6a:9d:ef:33:10:5a:e7:d0: be:26:a4:0c:2f:57:63:91:ea:64:35:d0:06:39:7d: 4b:15:32:d4:0b:2c:59:b3:8c:66:a6:1c:6e:cd:8f: 1b:dd:9a:ec:9b:e8:4d:86:af:f0:14:1d:0b:53:41: c9:2b:49:37:77:5e:82:7a:4c:f6:02:a5:5b:2d:de: f6:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:A9:AD:D6:FD:E0:3A:D0:22:76:D5:97:CC:56:B4:67:C5:A3:71 X509v3 Authority Key Identifier: keyid:D0:DE:61:88:22:B8:AF:6F:9E:CA:FF:CD:7D:54:59:B7:CC:11:44:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0N5hiCK4r2-eyv_NfVRZt8wRRJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5acd78-d670-4192-b564-040e0644fbe8/1/0N5hiCK4r2-eyv_NfVRZt8wRRJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:78:34:5d:a9:87:d5:26:e6:18:82:72:30:a8:bd:b7:4e:fb: 35:2d:2f:07:0c:ee:44:e8:ea:7f:fc:b5:c6:3d:6d:5a:d4:a2: 15:c7:74:ff:6d:ad:91:19:d0:1c:5c:50:ff:35:45:db:c6:4d: 95:7b:ed:aa:9a:b3:d0:4a:cb:00:6e:68:d8:35:37:79:1d:c5: 2a:c1:7f:e0:60:94:f8:2a:47:d5:ca:41:5d:3c:90:83:28:00: 4a:08:50:8d:45:b8:1b:f4:d3:16:5e:af:b2:76:b4:f9:31:59: 2c:00:92:00:03:f9:be:9e:1f:af:22:7c:cb:2a:7b:4d:f3:21: f0:e4:3b:67:e7:0d:81:1c:b2:d8:8e:15:0f:ea:d6:db:20:b2: 92:ea:1c:3d:ab:ad:ec:9d:74:ab:4d:ef:ef:96:3e:ff:ef:fe: 3c:7b:6a:f9:98:f6:72:32:f6:65:15:a5:2f:b4:79:05:63:a4: 46:b3:5a:1f:ed:9a:6a:11:c4:99:62:a1:73:ba:bc:7a:11:30: 8c:47:a8:bd:ce:c4:f7:99:23:b8:79:07:b3:89:e5:0a:a5:ba: ae:85:9f:8f:e1:89:7d:66:98:ee:70:2e:64:57:f6:60:bd:a4: 9b:09:ae:68:75:80:4f:04:b2:b1:cd:0c:cd:75:3c:ab:62:95: 6d:4f:b9:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5i+XZj38c4DJlqCVs/1mjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwZGU2MTg4MjJiOGFmNmY5ZWNhZmZjZDdkNTQ1OWI3Y2Mx MTQ0OWEwHhcNMjUxMjA3MTYwMTI2WhcNMjUxMjA4MTYwMTI2WjAzMTEwLwYDVQQD Eyg5NGZkYTlhZGQ2ZmRlMDNhZDAyMjc2ZDU5N2NjNTZiNDY3YzVhMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8hAoxVqsvicuYlaJI9flo62PXo/ 7fqGrwpQ2NYxY1AQ4xlpXjzgX9wXdXgsMUZZjYUPJsSKBatnaiHQw/Pve16SdqrT ULSYKPGUPwCrot8tm7zcQzrarTQwTtc4Fb90vrQcLJCewnlgkBpqsrTQDoeAFEOw 0nekMGH9ps0nQ6SA6qXVjcmEdh6kKvJEu0mfT09KrjuTbRVT5mRJNYTkbRNgpGy+ zRjOyt7ej1t/7CyHT+Y5Vg3TlhIFap3vMxBa59C+JqQML1djkepkNdAGOX1LFTLU CyxZs4xmphxuzY8b3Zrsm+hNhq/wFB0LU0HJK0k3d16Cekz2AqVbLd72IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT9qa3W/eA60CJ21ZfMVrRnxaNxMB8GA1UdIwQY MBaAFNDeYYgiuK9vnsr/zX1UWbfMEUSaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQt MDQwZTA2NDRmYmU4LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81YWNkNzgtZDY3MC00MTkyLWI1NjQtMDQwZTA2NDRmYmU4 LzEvME41aGlDSzRyMi1leXZfTmZWUlp0OHdSUkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXg0XamH 1SbmGIJyMKi9t077NS0vBwzuROjqf/y1xj1tWtSiFcd0/22tkRnQHFxQ/zVF28ZN lXvtqpqz0ErLAG5o2DU3eR3FKsF/4GCU+CpH1cpBXTyQgygASghQjUW4G/TTFl6v sna0+TFZLACSAAP5vp4fryJ8yyp7TfMh8OQ7Z+cNgRyy2I4VD+rW2yCykuocPaut 7J10q03v75Y+/+/+PHtq+Zj2cjL2ZRWlL7R5BWOkRrNaH+2aahHEmWKhc7q8ehEw jEeovc7E95kjuHkHs4nlCqW6roWfj+GJfWaY7nAuZFf2YL2kmwmuaHWATwSysc0M zXU8q2KVbU+5XA== -----END CERTIFICATE-----Generated at Sun Dec 7 22:25:33 2025 by rpki-client