This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft File: n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json) Hash identifier: 0zjvESqjW0Dw/cNt0HB1gjy6nKygJel2DqmSOlXauNk= Subject key identifier: 29:B2:96:F3:1F:F9:5D:C6:DC:1E:7D:AE:15:73:DE:1E:9A:C4:A6:FD Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01 Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01 Certificate serial: 019B405CE2896E172F2E4EAB124A59DA12D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft Manifest number: 10C5 Signing time: Sun 21 Dec 2025 10:03:07 +0000 Manifest this update: Sun 21 Dec 2025 10:03:07 +0000 Manifest next update: Mon 22 Dec 2025 10:03:07 +0000 Files and hashes: 1: FVg-EXFcHktuG7QQnavEaXe-fnM.roa (hash: mi0+1itCdMO3yynnGJ5oIkWt7SrPDpOOMP9BVB9K+Jc=) 2: T3nKkG-dCBEn2EriUuJalbbWuME.roa (hash: NecAgRoxclxz3UKtAie4B0/FU5sK9TM4xXuPGjhm4Kc=) 3: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: A/PpzpwLCvSq44PbLQVpCEWisGD7RmtSC55HnVnhlwI=) 4: nl8-f4Y4T6rTsqYQijhuiNifL1Q.roa (hash: D8rqvsrK84p8WeU5jZAqKp61j1ey2NYKXftp+gwX6/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:e2:89:6e:17:2f:2e:4e:ab:12:4a:59:da:12:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01 Validity Not Before: Dec 21 10:03:07 2025 GMT Not After : Dec 22 10:03:07 2025 GMT Subject: CN=29b296f31ff95dc6dc1e7dae1573de1e9ac4a6fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:6b:d5:97:ae:06:c8:ce:9d:af:07:99:69: b3:85:fa:5d:e0:62:ee:e0:75:b5:97:15:e6:13:f6: de:7b:d1:49:5f:dc:73:ad:4f:7b:3f:b5:c8:f1:3d: f2:66:d4:a7:f1:34:66:08:8c:e7:6a:77:51:17:06: f7:49:2c:be:91:b7:ad:2b:a1:24:b6:d8:6e:23:52: 1a:85:94:1b:4e:65:87:18:2a:ba:20:a1:a2:b7:ea: af:c7:4b:51:fb:67:f9:ac:7b:05:d3:a0:b1:7a:05: bc:49:0c:9b:ba:f9:b2:b3:23:f6:95:49:4f:73:4d: 77:63:d8:be:5d:65:f4:ae:8d:21:eb:43:53:d5:5a: a3:4a:ca:64:52:e1:98:c6:a1:0d:08:0d:8c:4b:ed: 6c:f7:08:18:d1:8c:14:d8:1b:8f:e7:79:93:01:35: e7:8b:10:b0:6c:56:27:29:5c:f4:a2:ee:c0:e2:38: 12:56:9f:43:d8:c3:14:a2:db:8a:cb:0d:4b:42:6d: c1:4c:e9:92:db:36:01:5c:02:0a:2e:3e:1c:7d:eb: 5d:e2:c9:9d:a1:6a:88:dd:1b:3a:f0:ad:34:d1:8b: fa:20:13:c3:ac:ee:04:0b:3c:cc:c5:41:6e:21:81: 46:a9:2e:c8:91:84:d8:ce:ab:b8:e1:93:61:83:91: af:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B2:96:F3:1F:F9:5D:C6:DC:1E:7D:AE:15:73:DE:1E:9A:C4:A6:FD X509v3 Authority Key Identifier: keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:6e:36:4c:0b:eb:e2:26:fb:7f:e7:f3:48:b4:d1:29:7f: f5:7a:10:c7:22:e8:d2:80:12:a1:c8:86:85:d2:22:c2:b3:6b: b8:6e:4b:15:78:86:7d:99:ab:40:16:84:db:53:ea:ca:88:57: 17:c5:e4:b9:fc:35:2c:d1:70:7f:97:43:7f:20:6c:29:6b:a6: c6:0e:fa:b7:80:3e:15:d4:59:b4:59:c0:ce:0a:bf:e1:59:d5: ad:a7:a7:f5:22:01:58:5c:19:8d:91:80:b3:18:2f:17:6d:b4: fe:1e:f6:8a:3d:53:e8:e6:c3:3a:36:d1:79:6e:e9:8e:35:9a: 70:53:9b:37:30:64:d6:50:47:2a:0f:1a:a1:9f:3c:2a:06:d8: 41:e5:56:2e:16:ff:ba:68:3d:e1:41:45:10:e1:e1:cc:2e:23: 25:c2:14:a9:f1:0b:e4:9d:8e:b6:e1:64:e5:2b:9f:09:30:ae: 8b:b6:f9:f1:a0:3d:bf:24:ed:b2:55:10:df:3a:29:4b:93:9d: 22:a4:0c:b1:62:7f:fa:6e:9b:45:1a:71:c3:2c:49:e6:78:04: c5:39:39:63:0c:d1:32:7a:30:d5:9e:ff:8a:4d:7c:30:c4:99: 2a:b0:92:2c:dc:2e:19:42:b6:6e:6e:02:d2:6a:5f:9e:b4:ac: 5a:13:63:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXOKJbhcvLk6rEkpZ2hLXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2 NDJmMDEwHhcNMjUxMjIxMTAwMzA3WhcNMjUxMjIyMTAwMzA3WjAzMTEwLwYDVQQD EygyOWIyOTZmMzFmZjk1ZGM2ZGMxZTdkYWUxNTczZGUxZTlhYzRhNmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsB5r1ZeuBsjOna8HmWmzhfpd4GLu 4HW1lxXmE/bee9FJX9xzrU97P7XI8T3yZtSn8TRmCIznandRFwb3SSy+kbetK6Ek tthuI1IahZQbTmWHGCq6IKGit+qvx0tR+2f5rHsF06CxegW8SQybuvmysyP2lUlP c013Y9i+XWX0ro0h60NT1VqjSspkUuGYxqENCA2MS+1s9wgY0YwU2BuP53mTATXn ixCwbFYnKVz0ou7A4jgSVp9D2MMUotuKyw1LQm3BTOmS2zYBXAIKLj4cfetd4smd oWqI3Rs68K000Yv6IBPDrO4ECzzMxUFuIYFGqS7IkYTYzqu44ZNhg5GvOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmylvMf+V3G3B59rhVz3h6axKb9MB8GA1UdIwQY MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3 LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDVuNkwL 6+Im+3/n80i00Sl/9XoQxyLo0oASociGhdIiwrNruG5LFXiGfZmrQBaE21PqyohX F8Xkufw1LNFwf5dDfyBsKWumxg76t4A+FdRZtFnAzgq/4VnVraen9SIBWFwZjZGA sxgvF220/h72ij1T6ObDOjbReW7pjjWacFObNzBk1lBHKg8aoZ88KgbYQeVWLhb/ umg94UFFEOHhzC4jJcIUqfEL5J2OtuFk5SufCTCui7b58aA9vyTtslUQ3zopS5Od IqQMsWJ/+m6bRRpxwyxJ5ngExTk5YwzRMnow1Z7/ik18MMSZKrCSLNwuGUK2bm4C 0mpfnrSsWhNjQg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:08:36 2025 by rpki-client