This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json) Hash identifier: PoVbbWo0qm3UDjZ0jORiEoy4SuNuShXf0B8NaM5qoJI= Subject key identifier: D5:18:8F:56:D4:3A:67:F3:82:0F:CD:B9:E1:C7:B8:ED:66:65:CC:7F Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35 Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035 Certificate serial: 019B6CC69F38488813C8B581D917DEA29EAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft Manifest number: 0CA1 Signing time: Tue 30 Dec 2025 01:01:54 +0000 Manifest this update: Tue 30 Dec 2025 01:01:54 +0000 Manifest next update: Wed 31 Dec 2025 01:01:54 +0000 Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: iMfg0kzx6a6ree4eE6iBhGdQ4CInpcHcFRQtF/+7caY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:c6:9f:38:48:88:13:c8:b5:81:d9:17:de:a2:9e:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035 Validity Not Before: Dec 30 01:01:54 2025 GMT Not After : Dec 31 01:01:54 2025 GMT Subject: CN=d5188f56d43a67f3820fcdb9e1c7b8ed6665cc7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:af:2d:21:25:d4:ae:a8:96:f0:08:cd:02: 08:80:57:dd:e1:41:f4:e4:db:a2:00:3a:9b:ae:1b: 9f:59:7a:7e:c3:ca:23:13:50:ad:73:2a:47:5f:92: bb:a4:2c:18:4b:8f:ad:14:09:fb:cc:63:b8:b6:4a: 97:be:02:da:81:5c:6f:63:9a:a0:58:22:fc:c2:b8: c7:be:2a:c7:c9:fa:d2:7a:7c:ce:93:10:9c:85:c5: 8a:cf:46:73:fd:95:34:7a:c5:94:f4:0b:22:1c:c8: ae:c9:c7:47:88:1b:f4:22:83:85:a3:39:93:7b:02: 25:0f:d8:f0:0b:6a:91:c6:e8:2c:f2:e5:81:c2:5d: 12:21:81:11:6c:1b:22:e0:1b:2c:08:c3:ee:f6:a3: ab:01:15:44:35:6c:16:52:d7:d7:73:0a:a9:7e:27: ab:fe:b8:03:d9:63:8b:35:1a:c9:88:56:f4:e7:f2: eb:3f:17:6e:17:11:6c:45:ff:08:20:3c:45:7c:ad: 05:d0:dc:d8:f5:6d:da:35:d3:ab:48:f9:dd:57:a6: bf:57:65:a3:a8:ea:fe:44:0d:36:c0:ee:7c:ee:a2: 5c:d6:2a:b7:e6:c8:35:19:5f:f1:4d:0a:71:01:2c: 5c:8b:45:fa:78:17:ad:27:ff:b3:7a:af:b8:fa:0c: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:18:8F:56:D4:3A:67:F3:82:0F:CD:B9:E1:C7:B8:ED:66:65:CC:7F X509v3 Authority Key Identifier: keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:b0:ee:25:3f:38:0c:03:3a:5d:96:0b:27:6e:0a:cd:3d:ef: 7f:19:63:79:f9:3b:c5:3b:14:da:2e:d2:3f:0e:56:2a:7b:15: a1:e3:ed:39:f5:67:7a:ea:de:38:4b:d0:d7:7a:53:2a:5e:9f: 12:bd:b9:6e:63:d5:98:35:a6:b6:d1:d2:e5:58:a3:6b:9d:e0: 3f:5e:52:dc:e2:4b:23:50:5e:dd:20:22:d6:65:eb:af:a0:c9: 0d:f1:a3:45:03:1a:8e:98:23:a5:91:92:41:cd:d8:e1:c7:49: ce:57:de:86:6f:2c:98:bd:54:d6:58:21:a5:f7:3d:b1:8d:50: 55:98:65:73:dd:a8:3f:c0:71:1c:19:f6:8a:04:31:d8:42:4e: 39:75:de:67:bb:1b:f1:2c:55:25:3e:b3:45:c1:2a:3a:0c:67: 44:15:60:d7:e1:6a:0b:15:94:60:1a:3d:a9:51:64:60:ae:9b: 42:0d:44:83:83:8e:da:6c:af:27:85:b4:5d:e4:c6:7a:3e:e4: b4:40:e1:0b:eb:16:75:e3:d6:16:d7:53:ec:d9:f6:24:04:56: a2:1e:91:69:f5:45:83:ce:3c:ab:12:1a:16:68:ff:7b:e6:07: 8d:a6:76:49:08:77:c0:17:5d:02:45:75:83:a3:91:05:4b:31: 86:76:58:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsxp84SIgTyLWB2Rfeop6tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTcxMTA5ZDJlYTU2OWIzM2U5MGEzOGUwMzAyY2ZmMTY3 YmQwMzUwHhcNMjUxMjMwMDEwMTU0WhcNMjUxMjMxMDEwMTU0WjAzMTEwLwYDVQQD EyhkNTE4OGY1NmQ0M2E2N2YzODIwZmNkYjllMWM3YjhlZDY2NjVjYzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzKvLSEl1K6olvAIzQIIgFfd4UH0 5NuiADqbrhufWXp+w8ojE1CtcypHX5K7pCwYS4+tFAn7zGO4tkqXvgLagVxvY5qg WCL8wrjHvirHyfrSenzOkxCchcWKz0Zz/ZU0esWU9AsiHMiuycdHiBv0IoOFozmT ewIlD9jwC2qRxugs8uWBwl0SIYERbBsi4BssCMPu9qOrARVENWwWUtfXcwqpfier /rgD2WOLNRrJiFb05/LrPxduFxFsRf8IIDxFfK0F0NzY9W3aNdOrSPndV6a/V2Wj qOr+RA02wO587qJc1iq35sg1GV/xTQpxASxci0X6eBetJ/+zeq+4+gy7pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUYj1bUOmfzgg/NueHHuO1mZcx/MB8GA1UdIwQY MBaAFJ+XEQnS6labM+kKOOAwLP8We9A1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUt OTZiMjI0MjE5M2Y5LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUtOTZiMjI0MjE5M2Y5 LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACbDuJT84 DAM6XZYLJ24KzT3vfxljefk7xTsU2i7SPw5WKnsVoePtOfVneureOEvQ13pTKl6f Er25bmPVmDWmttHS5Vija53gP15S3OJLI1Be3SAi1mXrr6DJDfGjRQMajpgjpZGS Qc3Y4cdJzlfehm8smL1U1lghpfc9sY1QVZhlc92oP8BxHBn2igQx2EJOOXXeZ7sb 8SxVJT6zRcEqOgxnRBVg1+FqCxWUYBo9qVFkYK6bQg1Eg4OO2myvJ4W0XeTGej7k tEDhC+sWdePWFtdT7Nn2JARWoh6RafVFg848qxIaFmj/e+YHjaZ2SQh3wBddAkV1 g6ORBUsxhnZYbA== -----END CERTIFICATE-----Generated at Tue Dec 30 07:16:09 2025 by rpki-client