This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json) Hash identifier: lrmUL0x6tTIFY3W1HA6dJ49xUeiN++ce3Ahk2UCTNZU= Subject key identifier: 3E:5A:50:11:5B:51:11:65:9F:D8:80:2B:62:0D:23:6C:4A:0F:05:77 Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe Certificate serial: 019B59AC9C885A082A3D490E68B3E151F8BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft Manifest number: 0297 Signing time: Fri 26 Dec 2025 08:00:43 +0000 Manifest this update: Fri 26 Dec 2025 08:00:43 +0000 Manifest next update: Sat 27 Dec 2025 08:00:43 +0000 Files and hashes: 1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=) 2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: 7LVVdiGZqTMIOo/TwvCDUdNMFh/4i7xigCv6PJPf0Gg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:9c:88:5a:08:2a:3d:49:0e:68:b3:e1:51:f8:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe Validity Not Before: Dec 26 08:00:43 2025 GMT Not After : Dec 27 08:00:43 2025 GMT Subject: CN=3e5a50115b5111659fd8802b620d236c4a0f0577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9b:83:ed:4b:52:21:47:9e:7f:4a:ed:a0:86: 8c:a3:69:8c:a4:63:6c:aa:79:f8:05:ae:d7:03:13: 17:27:10:5a:30:34:b5:ea:23:5d:53:a6:95:78:a8: f5:9f:72:9c:ca:ab:b0:06:32:96:b7:ca:b8:45:72: 71:db:88:f3:a3:7d:62:92:c6:0e:32:26:b9:30:86: 79:65:4c:ff:87:cb:db:f0:62:aa:2a:1a:10:5f:fb: e2:cb:c4:67:0b:5a:11:62:53:0e:8d:75:4d:01:88: a1:c0:1e:aa:94:72:28:0e:ff:dc:04:0d:1c:bc:97: 06:97:67:7d:de:0d:94:5a:d4:48:b8:7d:54:06:71: f9:37:da:37:10:07:88:19:5a:4e:26:f7:7b:a7:b3: f2:10:d2:46:69:b7:af:e2:4a:a9:5f:45:9a:3a:e0: d1:93:17:99:f6:2a:53:2b:25:f5:e6:73:ee:1b:11: c8:f1:da:ba:76:2e:58:d6:22:ea:00:32:7a:74:32: e0:6d:c2:51:cc:e1:9f:a4:6e:be:ca:6c:1e:b3:19: 85:43:41:34:5e:b2:e9:a7:d1:bd:b8:18:1c:ec:2e: 40:33:22:c0:e2:e5:0b:72:25:0e:f2:6c:2a:03:1f: 86:f6:27:32:88:72:ef:d4:2f:de:fb:4b:94:16:1b: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5A:50:11:5B:51:11:65:9F:D8:80:2B:62:0D:23:6C:4A:0F:05:77 X509v3 Authority Key Identifier: keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:66:13:2a:06:29:bf:6b:d0:9b:b3:24:a0:a1:71:6d:3b:78: dd:7f:35:c3:3c:41:d3:42:85:75:11:6a:68:fa:e8:58:03:2c: f1:54:1d:26:d9:d1:2d:56:7f:77:ae:26:dc:6c:69:f1:7a:fd: 07:5d:67:4b:6e:7a:87:a0:4e:1c:fc:31:af:af:bb:41:c2:f3: 93:c1:7e:0c:a3:15:91:99:a2:7e:6a:2d:0c:53:fe:fa:e7:f8: ed:76:eb:27:8f:3e:b3:43:d5:c0:ce:41:00:8f:7e:bb:bc:a9: 8f:85:3a:a4:fc:aa:a1:73:a5:b0:0e:ab:f0:9b:15:61:fb:3c: bf:19:ee:fe:17:8f:83:83:d3:e2:aa:a8:a2:6d:65:ba:37:6a: fc:24:d2:38:a4:86:88:ed:09:c3:83:2a:6e:73:8a:53:a4:46: 57:cd:82:ea:c6:c1:5e:60:a6:47:c5:02:16:f3:35:d2:a7:7f: d3:0f:29:7d:ad:83:f7:c4:47:dd:d9:ba:d8:f3:b6:a4:ea:1c: 48:db:91:d3:10:2c:a8:33:33:20:e5:68:a8:ed:b6:f7:32:33: 81:45:bf:a6:d7:02:cc:6a:db:e1:c1:43:7f:3c:e7:e1:90:6d: cb:e1:95:e2:ca:fa:29:58:a3:b6:0f:f2:22:4c:87:8f:46:0a: 9e:49:50:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrJyIWggqPUkOaLPhUfi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4 N2NiYmUwHhcNMjUxMjI2MDgwMDQzWhcNMjUxMjI3MDgwMDQzWjAzMTEwLwYDVQQD EygzZTVhNTAxMTViNTExMTY1OWZkODgwMmI2MjBkMjM2YzRhMGYwNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJuD7UtSIUeef0rtoIaMo2mMpGNs qnn4Ba7XAxMXJxBaMDS16iNdU6aVeKj1n3KcyquwBjKWt8q4RXJx24jzo31iksYO Mia5MIZ5ZUz/h8vb8GKqKhoQX/viy8RnC1oRYlMOjXVNAYihwB6qlHIoDv/cBA0c vJcGl2d93g2UWtRIuH1UBnH5N9o3EAeIGVpOJvd7p7PyENJGabev4kqpX0WaOuDR kxeZ9ipTKyX15nPuGxHI8dq6di5Y1iLqADJ6dDLgbcJRzOGfpG6+ymwesxmFQ0E0 XrLpp9G9uBgc7C5AMyLA4uULciUO8mwqAx+G9icyiHLv1C/e+0uUFhumPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5aUBFbURFln9iAK2INI2xKDwV3MB8GA1UdIwQY MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt NjE3MDBkZGU3NjkyLzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFGYTKgYp v2vQm7MkoKFxbTt43X81wzxB00KFdRFqaProWAMs8VQdJtnRLVZ/d64m3Gxp8Xr9 B11nS256h6BOHPwxr6+7QcLzk8F+DKMVkZmifmotDFP++uf47XbrJ48+s0PVwM5B AI9+u7ypj4U6pPyqoXOlsA6r8JsVYfs8vxnu/hePg4PT4qqoom1lujdq/CTSOKSG iO0Jw4MqbnOKU6RGV82C6sbBXmCmR8UCFvM10qd/0w8pfa2D98RH3dm62PO2pOoc SNuR0xAsqDMzIOVoqO229zIzgUW/ptcCzGrb4cFDfzzn4ZBty+GV4sr6KVijtg/y IkyHj0YKnklQNA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:51 2025 by rpki-client