This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json) Hash identifier: cFQnE9/2sYhEci3f5Ima0ON4kUk7+NATcH6JYJQa+3M= Subject key identifier: 97:4F:F5:8B:35:11:45:08:2A:B2:BC:48:EF:8D:5A:2D:EC:DF:37:61 Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Certificate serial: 019B3EA3721B355861C501FB87D98A0E20CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft Manifest number: 0711 Signing time: Sun 21 Dec 2025 02:00:57 +0000 Manifest this update: Sun 21 Dec 2025 02:00:57 +0000 Manifest next update: Mon 22 Dec 2025 02:00:57 +0000 Files and hashes: 1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=) 2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: KtBK/ecs62Ha/3k/7gD1inEf5CbUFLwjXe0GZjhlqng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:72:1b:35:58:61:c5:01:fb:87:d9:8a:0e:20:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Validity Not Before: Dec 21 02:00:57 2025 GMT Not After : Dec 22 02:00:57 2025 GMT Subject: CN=974ff58b351145082ab2bc48ef8d5a2decdf3761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9c:72:60:1b:58:18:29:f8:99:8d:0f:6b:4e: 1d:5a:55:19:eb:40:bd:da:8e:5b:fa:21:be:de:81: 96:a0:8b:b5:15:1e:ba:c1:4c:35:34:39:e8:46:58: f8:01:f1:85:fb:ce:79:c2:c0:68:70:29:33:4b:3c: e5:20:30:da:fc:37:00:d9:30:58:17:82:b1:1b:f6: 36:ce:6a:50:6e:73:81:fb:21:5d:82:92:fa:4c:4d: ae:79:24:b0:86:a6:5e:c4:46:5f:40:6c:d8:26:0d: 76:0c:76:89:3d:ef:86:56:2c:cf:f1:0c:a4:90:19: 26:5f:37:22:73:98:3c:0e:1d:63:f5:50:1f:69:87: 6f:bb:90:b5:a5:eb:bb:2b:61:d5:15:68:f9:b8:45: b8:1b:82:87:b4:3e:e7:0a:6d:83:42:1f:ca:a5:d4: 5a:43:1f:d9:a3:a7:c5:c2:73:44:6a:2b:eb:f7:01: 83:b7:5f:12:e3:a1:62:45:65:32:d0:8f:d1:86:6c: 42:e4:86:cd:20:61:e3:e4:0a:9f:38:1d:2b:81:fb: dc:1a:20:bb:3e:22:e4:07:15:7a:7e:98:61:e3:9b: c9:4e:cc:27:07:bd:a3:fe:bf:ea:ed:aa:65:7b:be: 07:94:19:5d:02:8c:d6:38:1c:ed:9b:89:b5:34:8e: 35:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4F:F5:8B:35:11:45:08:2A:B2:BC:48:EF:8D:5A:2D:EC:DF:37:61 X509v3 Authority Key Identifier: keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:ed:40:78:47:ed:00:57:7c:e9:0b:4a:56:74:e7:9e:77:4a: e2:8d:cb:4e:8f:5f:94:8c:11:04:4b:5d:4b:97:fc:03:0e:0a: 4d:00:be:4c:3f:89:db:7a:61:2f:55:be:8f:65:f0:e2:8b:a5: da:f7:88:39:70:cd:43:3d:f7:1b:e5:45:1b:d3:6e:47:bc:22: c3:07:08:77:b2:d3:2d:29:ba:96:fe:fa:cf:7c:76:f0:d9:5f: 16:0b:fb:35:d9:3f:87:ec:36:35:3c:99:eb:ee:b1:dc:64:c1: 70:c6:a6:97:5c:53:21:05:33:79:7b:de:e7:e9:64:40:1a:1e: 29:4b:ce:cb:fc:7c:c2:59:c1:ba:98:ae:4b:ec:94:08:18:f4: 39:66:68:fb:01:55:e9:17:eb:71:ef:13:7f:92:16:cd:34:e1: 1d:c3:13:ca:b0:66:e6:5d:ff:f6:02:17:c0:ab:d8:81:a1:ef: 53:27:58:dc:81:b1:c8:f5:9c:ac:6e:2f:1c:08:f5:5e:90:ad: 03:39:96:2d:4c:79:2a:e0:de:8e:ea:68:42:48:44:8c:18:8d: f6:0b:d7:27:7c:e8:91:db:5a:26:28:1b:82:60:1d:1b:60:39: 87:4d:c0:c6:5d:1c:8d:2f:05:9d:37:3c:0a:c1:23:2c:82:c9: c4:5d:ef:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3IbNVhhxQH7h9mKDiDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3 YzNlM2QwHhcNMjUxMjIxMDIwMDU3WhcNMjUxMjIyMDIwMDU3WjAzMTEwLwYDVQQD Eyg5NzRmZjU4YjM1MTE0NTA4MmFiMmJjNDhlZjhkNWEyZGVjZGYzNzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppxyYBtYGCn4mY0Pa04dWlUZ60C9 2o5b+iG+3oGWoIu1FR66wUw1NDnoRlj4AfGF+855wsBocCkzSzzlIDDa/DcA2TBY F4KxG/Y2zmpQbnOB+yFdgpL6TE2ueSSwhqZexEZfQGzYJg12DHaJPe+GVizP8Qyk kBkmXzcic5g8Dh1j9VAfaYdvu5C1peu7K2HVFWj5uEW4G4KHtD7nCm2DQh/KpdRa Qx/Zo6fFwnNEaivr9wGDt18S46FiRWUy0I/RhmxC5IbNIGHj5AqfOB0rgfvcGiC7 PiLkBxV6fphh45vJTswnB72j/r/q7aple74HlBldAozWOBztm4m1NI41uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdP9Ys1EUUIKrK8SO+NWi3s3zdhMB8GA1UdIwQY MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn+1AeEft AFd86QtKVnTnnndK4o3LTo9flIwRBEtdS5f8Aw4KTQC+TD+J23phL1W+j2Xw4oul 2veIOXDNQz33G+VFG9NuR7wiwwcId7LTLSm6lv76z3x28NlfFgv7Ndk/h+w2NTyZ 6+6x3GTBcMaml1xTIQUzeXve5+lkQBoeKUvOy/x8wlnBupiuS+yUCBj0OWZo+wFV 6Rfrce8Tf5IWzTThHcMTyrBm5l3/9gIXwKvYgaHvUydY3IGxyPWcrG4vHAj1XpCt AzmWLUx5KuDejupoQkhEjBiN9gvXJ3zokdtaJigbgmAdG2A5h03Axl0cjS8FnTc8 CsEjLILJxF3v5g== -----END CERTIFICATE-----Generated at Sun Dec 21 06:07:05 2025 by rpki-client