This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json) Hash identifier: MWSOs80TLO5QA6iT6LgdJUL9jPQYTJwEtY46p5O++k0= Subject key identifier: F0:14:A5:2E:BD:4E:C5:38:0A:0E:2C:27:64:C4:4A:AA:55:12:7C:51 Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35 Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035 Certificate serial: 019B3C7E1EF5791D4672637840D00532D8EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft Manifest number: 0C88 Signing time: Sat 20 Dec 2025 16:00:56 +0000 Manifest this update: Sat 20 Dec 2025 16:00:56 +0000 Manifest next update: Sun 21 Dec 2025 16:00:56 +0000 Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: ojdVcU1ereq+9W28haF3lyG9s34S/vhoqH9XfEQSrDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:1e:f5:79:1d:46:72:63:78:40:d0:05:32:d8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035 Validity Not Before: Dec 20 16:00:56 2025 GMT Not After : Dec 21 16:00:56 2025 GMT Subject: CN=f014a52ebd4ec5380a0e2c2764c44aaa55127c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4a:f5:c2:8e:4a:24:c2:b4:65:74:71:c5:0b: 1f:05:8f:4c:46:c1:1b:cf:8b:46:49:99:17:fa:0c: f5:09:d9:ca:b1:32:ce:ee:80:70:07:21:36:31:b9: 58:3a:71:95:32:8a:a9:73:ee:a3:07:c7:cc:1e:d3: 94:50:21:71:1b:08:5c:6f:65:90:82:d0:f9:6f:72: 02:c5:9d:40:1e:fb:88:e3:12:ff:72:61:24:b3:e4: e1:2f:ec:b7:f4:ff:04:13:8d:31:6a:b3:8b:56:46: 36:52:68:b8:4f:97:c1:34:98:e8:34:c5:d1:d2:53: 5a:d3:a2:03:3c:4a:ba:16:1f:d5:29:a9:5d:84:5c: 5a:e4:9e:63:25:5f:fc:de:3f:46:a8:bc:cd:02:3c: bd:e5:58:14:65:94:97:34:00:cf:f9:ab:8f:aa:f0: 82:11:12:b6:e9:c6:09:1f:3b:c0:ed:f3:e9:0d:11: 63:b3:22:6b:1b:40:78:40:7b:8b:5f:e4:7e:83:f2: 29:be:f8:b1:88:c1:05:15:a8:91:23:9c:c7:98:f5: 3f:11:e6:72:31:6d:f4:2f:05:18:bd:2e:6b:15:f5: 2c:4b:8d:6f:12:f6:bb:ea:a2:9c:0b:66:c7:90:cd: 83:ee:67:36:68:b2:0c:0c:1d:fc:32:2a:13:0d:32: 8e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:14:A5:2E:BD:4E:C5:38:0A:0E:2C:27:64:C4:4A:AA:55:12:7C:51 X509v3 Authority Key Identifier: keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:3f:c2:26:48:f3:6b:1b:cf:00:9d:2f:e5:43:ba:5a:f6:36: c4:15:0b:50:7a:46:d7:12:7c:97:ac:5b:4a:dc:e1:45:9b:e1: 32:b2:d6:2e:ed:21:e5:ce:34:af:47:91:8e:ad:82:86:af:84: cf:1e:5e:8f:d4:a0:36:85:fb:d5:18:f7:6d:26:4f:38:0b:55: 1d:73:26:9b:fe:82:67:f2:d0:a1:ba:a4:1d:7c:2e:d6:66:46: dd:4c:86:82:37:d4:2a:b0:72:09:f2:82:b0:32:3f:15:81:fb: 81:b9:ad:9a:85:1a:ad:e0:18:42:2c:90:78:34:92:56:b1:9f: 53:20:8c:2f:87:da:ee:50:5e:fe:54:fb:7b:f7:07:72:3f:71: c7:ef:97:20:99:8b:c7:63:56:dc:0a:b0:b5:87:84:71:05:32: 57:0f:f6:75:54:60:70:1e:67:55:b4:b4:40:bf:d6:5e:6f:50: 50:dd:c1:16:15:ad:4c:ac:a1:c7:7a:e6:ca:51:f3:6e:54:c0: 85:d4:bd:e5:71:aa:13:20:56:5d:84:40:72:6d:e4:3f:af:5a: 55:56:78:bd:3d:d2:52:b1:3f:3c:39:91:e5:f5:e8:c9:05:a1: a5:1b:d5:af:69:04:86:21:b4:9a:b3:44:a0:88:4f:bf:13:cb: ba:08:fc:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fh71eR1GcmN4QNAFMtjvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTcxMTA5ZDJlYTU2OWIzM2U5MGEzOGUwMzAyY2ZmMTY3 YmQwMzUwHhcNMjUxMjIwMTYwMDU2WhcNMjUxMjIxMTYwMDU2WjAzMTEwLwYDVQQD EyhmMDE0YTUyZWJkNGVjNTM4MGEwZTJjMjc2NGM0NGFhYTU1MTI3YzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUr1wo5KJMK0ZXRxxQsfBY9MRsEb z4tGSZkX+gz1CdnKsTLO7oBwByE2MblYOnGVMoqpc+6jB8fMHtOUUCFxGwhcb2WQ gtD5b3ICxZ1AHvuI4xL/cmEks+ThL+y39P8EE40xarOLVkY2Umi4T5fBNJjoNMXR 0lNa06IDPEq6Fh/VKaldhFxa5J5jJV/83j9GqLzNAjy95VgUZZSXNADP+auPqvCC ERK26cYJHzvA7fPpDRFjsyJrG0B4QHuLX+R+g/IpvvixiMEFFaiRI5zHmPU/EeZy MW30LwUYvS5rFfUsS41vEva76qKcC2bHkM2D7mc2aLIMDB38MioTDTKOQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAUpS69TsU4Cg4sJ2TESqpVEnxRMB8GA1UdIwQY MBaAFJ+XEQnS6labM+kKOOAwLP8We9A1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUt OTZiMjI0MjE5M2Y5LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUtOTZiMjI0MjE5M2Y5 LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZj/CJkjz axvPAJ0v5UO6WvY2xBULUHpG1xJ8l6xbStzhRZvhMrLWLu0h5c40r0eRjq2Chq+E zx5ej9SgNoX71Rj3bSZPOAtVHXMmm/6CZ/LQobqkHXwu1mZG3UyGgjfUKrByCfKC sDI/FYH7gbmtmoUareAYQiyQeDSSVrGfUyCML4fa7lBe/lT7e/cHcj9xx++XIJmL x2NW3AqwtYeEcQUyVw/2dVRgcB5nVbS0QL/WXm9QUN3BFhWtTKyhx3rmylHzblTA hdS95XGqEyBWXYRAcm3kP69aVVZ4vT3SUrE/PDmR5fXoyQWhpRvVr2kEhiG0mrNE oIhPvxPLugj8xQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:31:29 2025 by rpki-client