This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json) Hash identifier: nr/ubjzuNJhsJLrDw+wdIOwYhhJAA/pix8kncFQKO8E= Subject key identifier: 5D:76:0E:AA:55:99:E3:6B:D2:3B:B1:0A:2A:90:33:7C:C7:E6:AE:43 Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a Certificate serial: 019B6BEA05C1AC80FDAABA51EC2C54D3A76E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft Manifest number: 0709 Signing time: Mon 29 Dec 2025 21:00:57 +0000 Manifest this update: Mon 29 Dec 2025 21:00:57 +0000 Manifest next update: Tue 30 Dec 2025 21:00:57 +0000 Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=) 2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: EbVYlS2F1Di/01CCqjCFxPz7Qqe8Lb1DK++PRua7+C8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:ea:05:c1:ac:80:fd:aa:ba:51:ec:2c:54:d3:a7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a Validity Not Before: Dec 29 21:00:57 2025 GMT Not After : Dec 30 21:00:57 2025 GMT Subject: CN=5d760eaa5599e36bd23bb10a2a90337cc7e6ae43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:43:28:e9:d7:f4:5e:7a:4a:15:3c:e4:2c: e9:b8:06:24:fb:8d:26:0c:aa:49:b2:83:cb:ca:c0: d4:a4:a5:8e:ec:be:6c:43:f8:88:e2:ff:30:f3:35: db:9f:65:e1:ab:32:ea:b0:cc:57:03:85:ca:40:d7: 4b:c0:52:8e:89:71:75:1d:37:e2:1c:35:5d:95:63: 6b:df:6d:bb:4b:cf:d6:82:99:3f:3b:1e:a7:48:78: f2:3c:32:f8:f4:6f:e4:49:1c:df:f1:15:ef:c4:33: d0:6d:04:fb:85:f3:8a:7e:00:46:49:6e:ea:34:e2: e1:9a:e5:1b:db:e1:77:33:17:67:80:23:7c:23:ec: ee:44:16:b0:af:c4:f9:6e:39:71:02:bc:99:27:b2: 20:d8:e8:9c:56:1b:bf:ce:ad:bc:1c:a4:4c:e7:ac: 59:a6:09:07:33:bf:48:67:80:54:fc:8b:9b:cc:8d: a7:4f:bd:ce:33:75:e9:6f:68:fd:6c:a3:8f:8a:63: fc:1f:d5:7b:87:0b:58:51:98:4a:1d:40:ba:76:a2: ab:3d:6a:2d:31:2c:24:79:01:13:5d:a6:d5:db:44: 06:3d:1c:65:c8:f7:35:6e:0d:4e:3d:77:f0:d0:4f: 62:73:d3:86:8c:09:0b:d5:56:f8:11:8a:21:c9:8a: 64:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:76:0E:AA:55:99:E3:6B:D2:3B:B1:0A:2A:90:33:7C:C7:E6:AE:43 X509v3 Authority Key Identifier: keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:84:3b:a9:94:25:14:38:77:d2:15:4f:6e:33:ed:58:1e:69: 69:c8:fe:e1:cf:4f:c0:7a:ac:b2:a3:b9:32:12:d6:80:5d:93: 53:b8:16:0f:eb:d6:1d:a1:4d:34:69:be:16:be:7d:db:94:bb: 40:66:41:d0:d1:84:7e:24:7f:8a:be:d8:7f:66:3e:3e:cd:6d: 33:b5:0e:6b:4f:4b:b4:74:d1:e9:82:ce:67:14:2f:24:8d:7c: 9d:03:d8:63:9f:ce:e0:9c:1a:27:92:ac:7d:10:6e:2c:45:48: 1e:9a:99:b6:b6:81:b2:ec:9e:dd:99:23:19:82:63:75:9b:bf: 72:79:71:91:e3:a2:e4:da:aa:8b:d7:dd:b5:db:cb:a5:93:a7: 10:bb:26:32:b1:fc:9c:31:f4:c6:d0:14:16:ec:91:72:a2:a1: 5e:61:4f:b3:09:6d:fb:38:54:ec:27:5b:1e:46:0d:cc:c6:8a: 42:00:2b:76:55:41:a6:53:04:d8:e8:58:f6:47:59:ad:05:38: 7e:08:f3:6b:da:06:3e:55:72:54:f9:34:92:d0:e0:79:74:25: 62:c2:2b:7f:96:b1:44:c3:b3:91:6d:54:13:6a:bf:2e:05:03: 57:f7:c1:67:5f:52:29:e6:2d:02:86:25:8e:96:fe:98:9a:23: a4:c3:39:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6gXBrID9qrpR7CxU06duMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTc0ZGE0NWQ1OTE0ZWRlMTM4MWVlYWY5YzJiYjE2NDVi NjY0M2EwHhcNMjUxMjI5MjEwMDU3WhcNMjUxMjMwMjEwMDU3WjAzMTEwLwYDVQQD Eyg1ZDc2MGVhYTU1OTllMzZiZDIzYmIxMGEyYTkwMzM3Y2M3ZTZhZTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJDKOnX9F56ShU85CzpuAYk+40m DKpJsoPLysDUpKWO7L5sQ/iI4v8w8zXbn2XhqzLqsMxXA4XKQNdLwFKOiXF1HTfi HDVdlWNr3227S8/Wgpk/Ox6nSHjyPDL49G/kSRzf8RXvxDPQbQT7hfOKfgBGSW7q NOLhmuUb2+F3MxdngCN8I+zuRBawr8T5bjlxAryZJ7Ig2OicVhu/zq28HKRM56xZ pgkHM79IZ4BU/IubzI2nT73OM3Xpb2j9bKOPimP8H9V7hwtYUZhKHUC6dqKrPWot MSwkeQETXabV20QGPRxlyPc1bg1OPXfw0E9ic9OGjAkL1Vb4EYohyYpkBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF12DqpVmeNr0juxCiqQM3zH5q5DMB8GA1UdIwQY MBaAFJ+XTaRdWRTt4Tge6vnCuxZFtmQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQt N2Q1ZWNiNGYxODFmLzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQtN2Q1ZWNiNGYxODFm LzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4Q7qZQl FDh30hVPbjPtWB5pacj+4c9PwHqssqO5MhLWgF2TU7gWD+vWHaFNNGm+Fr5925S7 QGZB0NGEfiR/ir7Yf2Y+Ps1tM7UOa09LtHTR6YLOZxQvJI18nQPYY5/O4JwaJ5Ks fRBuLEVIHpqZtraBsuye3ZkjGYJjdZu/cnlxkeOi5Nqqi9fdtdvLpZOnELsmMrH8 nDH0xtAUFuyRcqKhXmFPswlt+zhU7CdbHkYNzMaKQgArdlVBplME2OhY9kdZrQU4 fgjza9oGPlVyVPk0ktDgeXQlYsIrf5axRMOzkW1UE2q/LgUDV/fBZ19SKeYtAoYl jpb+mJojpMM5sA== -----END CERTIFICATE-----Generated at Tue Dec 30 02:11:45 2025 by rpki-client