This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json) Hash identifier: 3BApZePBe29dKrROV3MIRTR2JXtUKMtdkm9TtF6RjEM= Subject key identifier: 59:09:9D:F6:59:ED:67:5F:6B:A4:69:89:A9:69:C3:DD:1E:21:86:22 Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Certificate serial: 019AF35297BF722D301B0A716DB2C1AEB456 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft Manifest number: 06EA Signing time: Sat 06 Dec 2025 11:01:07 +0000 Manifest this update: Sat 06 Dec 2025 11:01:07 +0000 Manifest next update: Sun 07 Dec 2025 11:01:07 +0000 Files and hashes: 1: WSYa3_tchQR10uxAsRC4J-pvnlQ.roa (hash: iJOQStqk9Th4Gtiw4MFS+D+76u4fKoXio9RjTudU1og=) 2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: xcYqeTWGSfrRjz29OkfTEkmwxqxKIlSmTMhBNHnnxek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:97:bf:72:2d:30:1b:0a:71:6d:b2:c1:ae:b4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d Validity Not Before: Dec 6 11:01:07 2025 GMT Not After : Dec 7 11:01:07 2025 GMT Subject: CN=59099df659ed675f6ba46989a969c3dd1e218622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:34:a6:5f:6c:45:a9:61:88:c6:71:3a:ed:24: f9:54:20:f4:2a:9b:b2:95:2e:8b:13:bf:94:e7:57: 5f:5a:a2:98:c9:7b:0f:04:0d:56:8e:6f:8a:db:c2: a0:f4:b8:64:39:ca:ec:e6:ec:a6:47:14:18:68:96: f9:5d:1f:93:55:9d:0a:9c:52:9c:f0:b3:eb:4a:5e: a7:10:63:2f:4a:2e:2d:2a:1a:26:14:f6:e3:4a:b1: c8:6a:76:1f:68:3a:63:75:9e:d9:fb:a0:c6:d6:56: 73:53:f4:1e:2b:ea:97:dd:d5:9a:f4:c3:f1:39:e9: c2:d2:ce:67:7f:42:dc:b3:0e:9b:1d:7b:fe:97:23: c3:1a:06:a6:5b:d7:77:7e:22:c8:fe:17:07:3b:d2: c1:44:ac:68:72:57:8e:83:2e:b3:ba:47:2e:c9:e9: 78:36:2f:52:3a:9d:c0:7b:33:14:10:e8:26:1c:75: 66:72:3a:21:f8:c9:48:80:11:3c:af:a1:ed:f9:dd: 0a:6f:b8:91:5b:6b:7f:b9:fc:2d:ad:75:64:cb:c9: 33:1f:7d:ea:c7:ec:92:d7:b6:bd:82:6d:60:1e:8b: 7e:0f:92:b7:8d:db:c8:52:ee:37:f1:66:75:d2:99: b6:01:9f:91:a2:ea:3d:73:1f:c0:40:4b:32:44:d0: 80:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:09:9D:F6:59:ED:67:5F:6B:A4:69:89:A9:69:C3:DD:1E:21:86:22 X509v3 Authority Key Identifier: keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:3a:60:cf:75:88:99:8c:6b:4e:4f:72:c0:d0:a0:b9:81:ba: ab:02:65:73:dd:c1:3b:c7:42:e2:04:4c:25:32:e7:41:e1:54: d4:6c:d0:1d:c9:49:5b:89:7e:3f:6d:ff:b9:95:7f:b7:98:7c: 73:56:3e:d3:5a:18:f5:f5:d7:c6:a9:bd:38:f8:9f:6e:f3:0b: 7d:86:18:d4:d6:9e:ed:76:01:8b:95:a3:5b:32:18:ae:44:b6: 79:5c:a0:72:c5:00:40:86:e9:a9:09:27:d9:cb:70:bb:a2:c3: 58:d8:a2:e4:85:eb:3b:13:dd:6a:64:c6:ec:c5:1d:33:97:ce: 8b:da:af:68:6f:ce:31:86:52:12:db:c8:96:30:cd:85:42:9e: 02:8d:7d:74:75:f8:71:f8:53:db:3a:d3:99:a1:34:06:a8:48: 9b:7d:b6:c6:b0:ea:a1:65:bc:91:c4:7f:59:34:5d:e6:9c:db: 37:cb:0b:c0:c8:3f:c9:5d:be:81:0d:52:df:d8:79:75:39:45: 13:c4:21:cc:ec:09:4b:39:7f:72:aa:24:cd:32:c9:ec:11:9a: 0b:96:0b:64:e2:e4:1a:47:f9:24:48:62:3a:9a:05:f4:90:f7: ed:cc:ce:16:01:34:d9:a9:d0:1d:c8:b5:d5:b9:12:fb:98:ee: 67:c2:54:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUpe/ci0wGwpxbbLBrrRWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZmMxN2Y4N2NlYWZhODc4ZmNlM2JkZTY4YTcxNWRkZTE3 YzNlM2QwHhcNMjUxMjA2MTEwMTA3WhcNMjUxMjA3MTEwMTA3WjAzMTEwLwYDVQQD Eyg1OTA5OWRmNjU5ZWQ2NzVmNmJhNDY5ODlhOTY5YzNkZDFlMjE4NjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTSmX2xFqWGIxnE67ST5VCD0Kpuy lS6LE7+U51dfWqKYyXsPBA1Wjm+K28Kg9LhkOcrs5uymRxQYaJb5XR+TVZ0KnFKc 8LPrSl6nEGMvSi4tKhomFPbjSrHIanYfaDpjdZ7Z+6DG1lZzU/QeK+qX3dWa9MPx OenC0s5nf0Lcsw6bHXv+lyPDGgamW9d3fiLI/hcHO9LBRKxocleOgy6zukcuyel4 Ni9SOp3AezMUEOgmHHVmcjoh+MlIgBE8r6Ht+d0Kb7iRW2t/ufwtrXVky8kzH33q x+yS17a9gm1gHot+D5K3jdvIUu438WZ10pm2AZ+Rouo9cx/AQEsyRNCAYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkJnfZZ7Wdfa6Rpialpw90eIYYiMB8GA1UdIwQY MBaAFJ/8F/h86vqHj8473minFd3hfD49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjkt MWYyNDUwMDJkNjQwLzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9lYzU2ZjktN2ZmMC00MjliLWIwNjktMWYyNDUwMDJkNjQw LzEvbl93WC1IenEtb2VQemp2ZWFLY1YzZUY4UGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjpgz3WI mYxrTk9ywNCguYG6qwJlc93BO8dC4gRMJTLnQeFU1GzQHclJW4l+P23/uZV/t5h8 c1Y+01oY9fXXxqm9OPifbvMLfYYY1Nae7XYBi5WjWzIYrkS2eVygcsUAQIbpqQkn 2ctwu6LDWNii5IXrOxPdamTG7MUdM5fOi9qvaG/OMYZSEtvIljDNhUKeAo19dHX4 cfhT2zrTmaE0BqhIm322xrDqoWW8kcR/WTRd5pzbN8sLwMg/yV2+gQ1S39h5dTlF E8QhzOwJSzl/cqokzTLJ7BGaC5YLZOLkGkf5JEhiOpoF9JD37czOFgE02anQHci1 1bkS+5juZ8JUZg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:37 2025 by rpki-client