This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json) Hash identifier: ATIYrCnRbKqsDPex/W0lrzULKCFGsuXQERkfUykKU5I= Subject key identifier: 15:C5:A3:C7:C0:EA:D7:2E:9B:0B:16:EE:6C:29:0E:C8:BA:18:DC:3D Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092 Certificate serial: 019B3B6B2D5A3D5B0C1E94E0076CA1503A00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 11:00:38 +0000 Manifest this update: Sat 20 Dec 2025 11:00:38 +0000 Manifest next update: Sun 21 Dec 2025 11:00:38 +0000 Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=) 2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: 8BNL9Nd4dbAfyDatqzA2DvGdZ61P5BRvKXoAMdx1Tkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:2d:5a:3d:5b:0c:1e:94:e0:07:6c:a1:50:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092 Validity Not Before: Dec 20 11:00:38 2025 GMT Not After : Dec 21 11:00:38 2025 GMT Subject: CN=15c5a3c7c0ead72e9b0b16ee6c290ec8ba18dc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:59:09:69:9d:ed:5d:97:a9:b9:d7:34:9f:46: b4:6c:a5:a9:e2:01:1a:ab:f0:40:41:28:ad:14:d7: c7:e2:43:2f:e8:f8:ce:4a:46:de:57:10:5f:5e:a1: 58:7f:32:d3:6b:19:a4:91:92:4c:21:91:39:e0:86: d8:03:e4:f0:32:0b:cc:01:dd:33:41:c1:b5:dd:bb: ad:7b:3d:bd:26:f9:f0:f5:0c:0d:8f:b1:82:4b:65: 27:c0:41:c6:0f:de:96:f5:46:d9:32:51:8d:3b:b9: e2:11:1a:09:96:b5:18:2d:47:b3:9a:88:4b:cc:30: e6:62:8a:ba:e2:42:45:7d:67:7c:0d:86:79:ab:75: 35:3b:93:46:1f:0c:fd:ff:db:30:6b:f5:96:43:80: cd:da:a2:b5:a2:55:42:b3:f4:3e:b8:f6:af:ae:0d: 96:45:e6:e8:31:1c:81:ea:81:3b:69:4e:61:a0:2e: bd:05:cd:4f:6f:ea:91:6c:62:7b:f9:39:08:73:cc: b1:17:ce:2b:37:07:7c:07:3a:25:29:4b:57:7a:22: 22:bd:6b:0f:45:4d:68:d5:3e:7a:32:6e:75:1c:66: 54:37:00:00:46:a7:d7:de:e5:c8:a0:f1:93:e7:b2: 1b:30:6e:74:5b:b3:6a:03:7c:0b:b3:c8:91:bc:cd: 2f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C5:A3:C7:C0:EA:D7:2E:9B:0B:16:EE:6C:29:0E:C8:BA:18:DC:3D X509v3 Authority Key Identifier: keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:f1:d7:6b:e9:c6:d1:17:ad:f7:fc:86:42:45:fb:cb:a0:a5: 99:82:1b:29:cc:f5:d4:f2:1e:46:6f:6b:d2:93:50:82:0b:86: 71:79:59:f4:98:ab:ff:5d:be:87:75:21:a8:c7:c9:bd:cb:ad: 1f:20:77:70:6d:54:b6:0b:21:f6:1f:58:dc:66:fb:50:22:52: 12:ea:d4:8c:bb:e3:f8:89:77:fd:24:2b:d3:ce:20:ed:d1:ac: c8:09:8a:28:5b:00:a6:97:49:f3:bd:53:e3:7a:ac:fc:43:3b: c8:0a:b5:9a:79:88:c4:cf:04:06:eb:ec:bb:62:10:c4:a4:9a: 9e:e6:ed:9f:61:a5:b9:5d:e2:06:88:dc:3f:e6:ae:21:32:82: 81:a7:e1:4d:9b:22:f1:08:93:12:8e:67:71:8d:d6:a9:ff:54: 84:c2:46:08:4e:21:dc:64:24:b0:50:15:15:12:c2:82:f1:14: bb:52:95:65:4d:28:98:ec:cc:99:54:c2:6f:26:6d:b1:60:17: ee:0b:60:ef:39:a2:be:64:4f:09:de:af:c4:4a:b5:7f:ae:6d: 7d:2c:7b:f2:86:33:91:31:c2:1c:81:35:f4:8d:77:be:28:aa: 4f:91:2b:d8:c7:bb:15:93:1d:23:af:c4:e4:fc:58:fc:ba:5e: 58:05:ba:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ay1aPVsMHpTgB2yhUDoAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz MjMwOTIwHhcNMjUxMjIwMTEwMDM4WhcNMjUxMjIxMTEwMDM4WjAzMTEwLwYDVQQD EygxNWM1YTNjN2MwZWFkNzJlOWIwYjE2ZWU2YzI5MGVjOGJhMThkYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFkJaZ3tXZepudc0n0a0bKWp4gEa q/BAQSitFNfH4kMv6PjOSkbeVxBfXqFYfzLTaxmkkZJMIZE54IbYA+TwMgvMAd0z QcG13butez29Jvnw9QwNj7GCS2UnwEHGD96W9UbZMlGNO7niERoJlrUYLUezmohL zDDmYoq64kJFfWd8DYZ5q3U1O5NGHwz9/9swa/WWQ4DN2qK1olVCs/Q+uPavrg2W ReboMRyB6oE7aU5hoC69Bc1Pb+qRbGJ7+TkIc8yxF84rNwd8BzolKUtXeiIivWsP RU1o1T56Mm51HGZUNwAARqfX3uXIoPGT57IbMG50W7NqA3wLs8iRvM0vBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXFo8fA6tcumwsW7mwpDsi6GNw9MB8GA1UdIwQY MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3 LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqfHXa+nG 0Ret9/yGQkX7y6ClmYIbKcz11PIeRm9r0pNQgguGcXlZ9Jir/12+h3UhqMfJvcut HyB3cG1Utgsh9h9Y3Gb7UCJSEurUjLvj+Il3/SQr084g7dGsyAmKKFsAppdJ871T 43qs/EM7yAq1mnmIxM8EBuvsu2IQxKSanubtn2GluV3iBojcP+auITKCgafhTZsi 8QiTEo5ncY3Wqf9UhMJGCE4h3GQksFAVFRLCgvEUu1KVZU0omOzMmVTCbyZtsWAX 7gtg7zmivmRPCd6vxEq1f65tfSx78oYzkTHCHIE19I13viiqT5Er2Me7FZMdI6/E 5PxY/LpeWAW6hA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:49:47 2025 by rpki-client