This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json) Hash identifier: LkH9IrTATjXDXjJkX9NmW8Buvcxf/mYT1TqP6+ZH7YE= Subject key identifier: F4:F9:8B:BF:3E:76:50:F0:4D:E6:7E:E0:50:5A:54:0A:2C:62:14:87 Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe Certificate serial: 019B330CFD8C4547178454A28DE4ADC05A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft Manifest number: 0283 Signing time: Thu 18 Dec 2025 20:00:47 +0000 Manifest this update: Thu 18 Dec 2025 20:00:47 +0000 Manifest next update: Fri 19 Dec 2025 20:00:47 +0000 Files and hashes: 1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=) 2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: dJyn5hFe8QV4GeTZIoTGJDOamBYLU3uADAqXhbVy2zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:fd:8c:45:47:17:84:54:a2:8d:e4:ad:c0:5a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe Validity Not Before: Dec 18 20:00:47 2025 GMT Not After : Dec 19 20:00:47 2025 GMT Subject: CN=f4f98bbf3e7650f04de67ee0505a540a2c621487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:dc:9e:ba:5a:63:26:4b:9c:77:49:29:dc:33: a8:68:9e:06:af:d7:4c:50:8d:66:18:2e:e4:01:c4: eb:57:08:09:59:81:6a:56:9c:55:34:b4:25:97:40: 08:d5:c2:98:0e:88:b8:04:cc:d8:4f:9f:e9:b8:7d: 4d:a5:64:26:a3:cd:5a:2b:9b:84:30:15:89:45:4b: 25:d3:dd:ab:d7:c4:04:70:b3:0f:73:b0:18:18:da: 14:3b:3c:e6:af:28:35:23:ed:1f:4d:6e:26:0b:13: d6:c3:ea:06:3d:18:ac:ac:44:48:4c:52:1f:37:6a: fe:0d:0f:9b:1b:ed:38:7d:91:09:9f:7b:9d:15:9b: ae:d0:3a:9d:bd:1b:6c:8f:93:61:64:c3:2d:61:7a: db:9e:d2:e8:c8:bd:8f:d1:da:9f:d3:a7:27:0f:74: 68:db:d6:e5:15:5f:36:05:5f:7e:ff:e6:41:de:e8: e8:c5:a6:56:cb:99:6e:05:e2:ed:07:05:6a:b4:d0: 97:3a:2f:59:f5:cc:90:ad:b6:f4:da:ac:48:3c:f9: dc:06:9a:45:f2:2f:ea:d2:c2:00:c3:4f:b7:6b:f4: f5:4f:4c:5a:f5:70:03:33:0d:75:f1:80:00:d5:df: 66:56:07:af:f4:81:33:60:e1:4b:2a:1e:82:b5:fa: 7d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F9:8B:BF:3E:76:50:F0:4D:E6:7E:E0:50:5A:54:0A:2C:62:14:87 X509v3 Authority Key Identifier: keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:9b:93:ab:1f:fb:fd:e8:ec:5c:aa:a2:87:b2:17:65:cb:d8: 82:09:02:fb:43:e6:ea:28:87:f9:be:5a:39:59:d6:be:b2:ff: da:55:aa:0c:c0:77:82:b8:ba:76:74:60:4e:49:6b:b9:f0:4c: 9f:a0:6f:03:6e:2d:9e:fc:52:18:2f:9a:c0:b2:4f:2c:33:66: 33:13:5f:08:9c:11:f5:5a:59:06:10:a1:7d:9b:57:bc:09:22: 3f:71:84:bb:2d:e4:70:b5:d6:08:f7:f1:ac:ea:4d:61:b7:e6: 29:fc:0c:a8:da:72:bd:83:c6:b2:50:c0:4d:9e:d0:ea:9f:fc: 34:b1:3f:c7:7b:4b:aa:78:1c:f7:10:9f:30:dc:16:ad:e1:c2: d0:98:14:ea:4b:09:7a:35:5d:7e:e7:54:42:dc:83:4a:6d:8c: d7:66:ee:09:f8:2f:99:53:0e:04:0e:3f:66:91:09:b7:4e:6c: a9:49:89:a2:97:d7:e6:79:55:c0:05:5b:d8:18:ce:fc:ab:f2: 29:dd:34:2d:18:79:a0:9c:ab:2e:1a:97:df:ba:93:51:4b:b3: a4:bb:f6:73:92:c3:69:e2:54:86:12:ab:37:84:28:f9:27:bb: 4e:ee:3f:09:bf:82:78:8e:ef:17:21:b8:a8:5d:25:03:f3:37: 4f:6b:b4:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDP2MRUcXhFSijeStwFqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4 N2NiYmUwHhcNMjUxMjE4MjAwMDQ3WhcNMjUxMjE5MjAwMDQ3WjAzMTEwLwYDVQQD EyhmNGY5OGJiZjNlNzY1MGYwNGRlNjdlZTA1MDVhNTQwYTJjNjIxNDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79yeulpjJkucd0kp3DOoaJ4Gr9dM UI1mGC7kAcTrVwgJWYFqVpxVNLQll0AI1cKYDoi4BMzYT5/puH1NpWQmo81aK5uE MBWJRUsl092r18QEcLMPc7AYGNoUOzzmryg1I+0fTW4mCxPWw+oGPRisrERITFIf N2r+DQ+bG+04fZEJn3udFZuu0DqdvRtsj5NhZMMtYXrbntLoyL2P0dqf06cnD3Ro 29blFV82BV9+/+ZB3ujoxaZWy5luBeLtBwVqtNCXOi9Z9cyQrbb02qxIPPncBppF 8i/q0sIAw0+3a/T1T0xa9XADMw118YAA1d9mVgev9IEzYOFLKh6Ctfp9OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT5i78+dlDwTeZ+4FBaVAosYhSHMB8GA1UdIwQY MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt NjE3MDBkZGU3NjkyLzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5uTqx/7 /ejsXKqih7IXZcvYggkC+0Pm6iiH+b5aOVnWvrL/2lWqDMB3gri6dnRgTklrufBM n6BvA24tnvxSGC+awLJPLDNmMxNfCJwR9VpZBhChfZtXvAkiP3GEuy3kcLXWCPfx rOpNYbfmKfwMqNpyvYPGslDATZ7Q6p/8NLE/x3tLqngc9xCfMNwWreHC0JgU6ksJ ejVdfudUQtyDSm2M12buCfgvmVMOBA4/ZpEJt05sqUmJopfX5nlVwAVb2BjO/Kvy Kd00LRh5oJyrLhqX37qTUUuzpLv2c5LDaeJUhhKrN4Qo+Se7Tu4/Cb+CeI7vFyG4 qF0lA/M3T2u0+g== -----END CERTIFICATE-----Generated at Thu Dec 18 22:10:12 2025 by rpki-client