This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json) Hash identifier: cjxd3D4LhBut2Z6bFFRwrN61i+fUYP0ne/mxy/uvpEo= Subject key identifier: E8:11:5D:E4:24:7A:24:20:50:57:0B:E5:3C:7B:8D:2A:7E:8B:60:F6 Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Certificate serial: 019B3B6B1A078C82E235BC168F20B57325D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft Manifest number: 0E5B Signing time: Sat 20 Dec 2025 11:00:33 +0000 Manifest this update: Sat 20 Dec 2025 11:00:33 +0000 Manifest next update: Sun 21 Dec 2025 11:00:33 +0000 Files and hashes: 1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=) 2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: jl7J8/8DVU7dvZG/qM35wGS7Tap/X1sACFhIjj4WTHY=) 3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:1a:07:8c:82:e2:35:bc:16:8f:20:b5:73:25:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e Validity Not Before: Dec 20 11:00:33 2025 GMT Not After : Dec 21 11:00:33 2025 GMT Subject: CN=e8115de4247a242050570be53c7b8d2a7e8b60f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:93:59:aa:4b:11:b6:3a:77:85:9a:71:be:9e: 43:12:ee:6e:80:cc:63:36:70:85:17:47:56:bd:c2: e3:c1:ff:57:b1:e4:d4:d9:a8:18:a1:41:5f:c2:59: 1c:0c:d7:b3:2a:e5:60:45:97:ff:9f:0a:e2:cc:df: 03:00:fb:c3:b5:24:34:cf:82:04:a4:e5:c2:e2:a1: a2:35:94:30:80:d9:d6:40:1b:ea:e7:ed:5d:38:6b: f2:04:87:d4:59:a0:cb:80:a9:13:4a:75:1b:2f:b9: b4:ae:28:34:99:f8:2e:a5:51:39:70:e2:06:d1:75: 08:b4:71:bc:4b:1a:09:10:e1:89:81:10:24:f3:28: 5f:74:88:97:d1:d8:de:86:1b:7a:62:dc:2d:7c:1e: 10:a2:8b:80:ed:1b:6d:92:4e:e1:ed:59:b4:ff:b4: cb:3b:ec:71:02:26:65:d8:df:08:a7:e3:89:f9:6f: cd:47:3b:b5:2e:db:19:b9:5e:99:d2:bc:99:fc:f6: 57:5d:31:8c:00:2f:a2:4d:72:3b:1b:fc:b8:63:de: 0c:4d:b7:8b:b7:e1:be:d8:30:54:b4:58:d5:31:f4: 29:4f:04:69:d4:e9:d6:77:65:a3:05:fb:99:a6:64: c9:06:5a:3b:ba:5d:68:6a:bd:31:c4:80:fc:12:49: 6f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:11:5D:E4:24:7A:24:20:50:57:0B:E5:3C:7B:8D:2A:7E:8B:60:F6 X509v3 Authority Key Identifier: keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:2a:7e:67:bf:0f:44:d5:01:f9:02:4c:37:ed:bd:44:03:83: b9:4e:3c:86:fe:e4:df:30:e3:d2:f4:8d:bf:3a:07:6e:6b:54: 2c:f7:f1:dd:3f:87:4e:3e:73:93:2f:f5:a3:1a:48:a0:74:31: 7d:2f:7e:6d:70:ab:69:e8:be:d6:91:ea:16:65:1b:00:2f:e7: be:d5:39:c1:e4:f1:c6:b5:f6:3f:1d:ca:e2:81:85:3b:dd:c4: 94:5b:2c:d9:67:05:67:a8:a3:46:8a:ce:2a:75:3b:f6:81:de: 63:95:8c:29:65:78:da:d9:37:b3:5a:e0:0b:22:5e:65:1a:f1: 00:d0:4b:fa:28:38:3d:39:82:4d:c5:ab:65:95:0a:fb:95:aa: 21:18:d7:86:a9:e5:2f:f2:10:ec:5c:04:4f:52:cb:92:16:31: 26:a2:f5:0a:a2:ba:1e:08:2c:b4:79:63:5e:94:36:6a:7d:e6: fd:41:07:a6:ad:f1:15:e4:c6:45:cc:df:ad:77:42:18:49:f2: 6c:ab:4c:8b:63:43:95:eb:94:9f:77:f6:cc:f2:c0:4a:09:1b: 69:2d:fe:49:0e:26:01:2b:f2:f3:e1:b9:82:64:91:25:43:45: 5e:3f:9b:ac:a4:23:a4:24:3b:fc:cb:02:1a:b4:19:d0:81:4c: dc:36:15:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7axoHjILiNbwWjyC1cyXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3 MDcwMmUwHhcNMjUxMjIwMTEwMDMzWhcNMjUxMjIxMTEwMDMzWjAzMTEwLwYDVQQD EyhlODExNWRlNDI0N2EyNDIwNTA1NzBiZTUzYzdiOGQyYTdlOGI2MGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpNZqksRtjp3hZpxvp5DEu5ugMxj NnCFF0dWvcLjwf9XseTU2agYoUFfwlkcDNezKuVgRZf/nwrizN8DAPvDtSQ0z4IE pOXC4qGiNZQwgNnWQBvq5+1dOGvyBIfUWaDLgKkTSnUbL7m0rig0mfgupVE5cOIG 0XUItHG8SxoJEOGJgRAk8yhfdIiX0djehht6YtwtfB4QoouA7Rttkk7h7Vm0/7TL O+xxAiZl2N8Ip+OJ+W/NRzu1LtsZuV6Z0ryZ/PZXXTGMAC+iTXI7G/y4Y94MTbeL t+G+2DBUtFjVMfQpTwRp1OnWd2WjBfuZpmTJBlo7ul1oar0xxID8Eklv6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgRXeQkeiQgUFcL5Tx7jSp+i2D2MB8GA1UdIwQY MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKSp+Z78P RNUB+QJMN+29RAODuU48hv7k3zDj0vSNvzoHbmtULPfx3T+HTj5zky/1oxpIoHQx fS9+bXCraei+1pHqFmUbAC/nvtU5weTxxrX2Px3K4oGFO93ElFss2WcFZ6ijRorO KnU79oHeY5WMKWV42tk3s1rgCyJeZRrxANBL+ig4PTmCTcWrZZUK+5WqIRjXhqnl L/IQ7FwET1LLkhYxJqL1CqK6HggstHljXpQ2an3m/UEHpq3xFeTGRczfrXdCGEny bKtMi2NDleuUn3f2zPLASgkbaS3+SQ4mASvy8+G5gmSRJUNFXj+brKQjpCQ7/MsC GrQZ0IFM3DYVyA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:13:05 2025 by rpki-client