This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json) Hash identifier: WjyONwW6H9dOtXec7NGNDt8DorS8VtkscVYEBQQsed4= Subject key identifier: AC:38:E1:DC:68:1E:C5:C0:27:6C:AE:F0:0B:38:ED:B2:C3:2F:84:CD Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Certificate serial: 019B620AC95716D320DFDAC36203C8477038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft Manifest number: 0E6F Signing time: Sat 27 Dec 2025 23:00:32 +0000 Manifest this update: Sat 27 Dec 2025 23:00:32 +0000 Manifest next update: Sun 28 Dec 2025 23:00:32 +0000 Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=) 2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: hClKPaK9OtrLu49JOcrK3CAH/sVUNSvHrI7NdFSVRGY=) 3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:c9:57:16:d3:20:df:da:c3:62:03:c8:47:70:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Validity Not Before: Dec 27 23:00:32 2025 GMT Not After : Dec 28 23:00:32 2025 GMT Subject: CN=ac38e1dc681ec5c0276caef00b38edb2c32f84cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:a4:cf:f1:22:5a:c0:dd:f7:ee:6b:15:a4: 8a:29:1c:9a:9d:7b:1c:24:14:82:03:19:5a:cd:1b: 5d:cb:93:03:42:89:86:5f:91:00:90:2b:8c:b5:1a: 56:a0:d2:8f:69:d0:ad:fb:51:24:de:72:6c:15:a1: 80:a5:5a:98:ee:fd:12:2d:0f:9c:41:44:3e:23:39: 37:d8:09:67:c2:f1:f4:81:e8:0b:78:7b:d5:20:03: c4:06:38:0d:fa:d9:53:3a:2f:6b:1b:34:38:1f:21: 09:22:d2:fe:35:01:cf:d5:93:c0:f0:8d:8d:d4:bf: 79:14:68:a7:0e:a9:d6:df:46:29:8b:e0:b2:ff:f2: e3:dc:d5:28:7b:6c:2a:f1:57:2a:64:07:a8:bf:4f: 2a:60:38:8a:53:0b:fa:78:d6:40:df:9c:e6:a1:5f: 60:00:b3:e2:5e:0d:fc:e4:0f:2c:8e:22:cf:7d:83: 9c:3b:72:16:b0:4c:00:92:f7:72:0c:44:d8:e9:32: 74:be:b3:6a:dd:9c:d1:52:5b:66:d3:e6:d3:4c:13: b0:c8:4a:0c:95:cb:14:56:e5:f2:aa:ff:54:00:ea: 60:b5:ac:ac:75:26:aa:8b:1d:af:15:ef:85:db:dc: 1f:bf:28:76:4f:53:d3:7c:0a:4f:71:d9:17:9a:cf: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:38:E1:DC:68:1E:C5:C0:27:6C:AE:F0:0B:38:ED:B2:C3:2F:84:CD X509v3 Authority Key Identifier: keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f4:d4:9d:32:6d:78:c7:7e:64:f5:fe:60:1a:a7:e9:8a:e1: cb:09:3a:3a:7a:46:a1:86:df:ea:31:b0:a7:2e:83:c7:16:ed: b9:68:cb:d5:a0:87:94:f1:ce:90:f5:10:d6:29:7d:86:34:bb: 51:7f:3a:bb:fd:fb:66:83:a5:e3:e4:84:13:59:76:85:1f:0e: f4:94:83:b4:8b:eb:08:1b:a1:78:71:02:f5:ff:29:f3:e0:20: 57:35:3c:9d:ba:fb:d5:94:d2:a8:a1:06:a5:94:d1:6f:95:57: 01:fb:10:9a:2a:d2:76:2b:a4:d6:df:ad:9f:32:e6:25:59:b8: cc:79:17:7e:0a:15:5d:12:9b:0b:a7:a5:7f:e1:32:37:b5:3c: cb:4d:79:4d:e1:c6:25:8e:4f:01:cf:82:00:53:3d:b9:14:16: f3:98:d8:ad:70:98:71:39:d4:6f:89:ad:e5:eb:c9:84:a0:be: aa:2e:e8:fe:39:07:be:b8:0e:ad:bc:91:84:83:7c:a2:80:8a: 70:55:62:98:e9:25:47:a8:a3:39:0b:6e:ff:70:ca:24:d7:70: 7c:56:1c:82:67:03:ee:b1:31:5a:9b:3f:c2:1f:fc:9e:f1:01: 08:e5:25:76:08:36:80:8b:da:67:d0:e3:56:d9:f8:c0:60:da: 80:60:fc:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCslXFtMg39rDYgPIR3A4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3 MDcwMmUwHhcNMjUxMjI3MjMwMDMyWhcNMjUxMjI4MjMwMDMyWjAzMTEwLwYDVQQD EyhhYzM4ZTFkYzY4MWVjNWMwMjc2Y2FlZjAwYjM4ZWRiMmMzMmY4NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pakz/EiWsDd9+5rFaSKKRyanXsc JBSCAxlazRtdy5MDQomGX5EAkCuMtRpWoNKPadCt+1Ek3nJsFaGApVqY7v0SLQ+c QUQ+Izk32AlnwvH0gegLeHvVIAPEBjgN+tlTOi9rGzQ4HyEJItL+NQHP1ZPA8I2N 1L95FGinDqnW30Ypi+Cy//Lj3NUoe2wq8VcqZAeov08qYDiKUwv6eNZA35zmoV9g ALPiXg385A8sjiLPfYOcO3IWsEwAkvdyDETY6TJ0vrNq3ZzRUltm0+bTTBOwyEoM lcsUVuXyqv9UAOpgtaysdSaqix2vFe+F29wfvyh2T1PTfApPcdkXms8x0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKw44dxoHsXAJ2yu8As47bLDL4TNMB8GA1UdIwQY MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvTUnTJt eMd+ZPX+YBqn6Yrhywk6OnpGoYbf6jGwpy6DxxbtuWjL1aCHlPHOkPUQ1il9hjS7 UX86u/37ZoOl4+SEE1l2hR8O9JSDtIvrCBuheHEC9f8p8+AgVzU8nbr71ZTSqKEG pZTRb5VXAfsQmirSdiuk1t+tnzLmJVm4zHkXfgoVXRKbC6elf+EyN7U8y015TeHG JY5PAc+CAFM9uRQW85jYrXCYcTnUb4mt5evJhKC+qi7o/jkHvrgOrbyRhIN8ooCK cFVimOklR6ijOQtu/3DKJNdwfFYcgmcD7rExWps/wh/8nvEBCOUldgg2gIvaZ9Dj Vtn4wGDagGD8Ug== -----END CERTIFICATE-----Generated at Sun Dec 28 07:33:58 2025 by rpki-client