This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json) Hash identifier: xvBUJ2/SxwqUBIeLY6LaR7W1+4gZt0TtAo5tAQ6d8BU= Subject key identifier: 2D:02:B2:FF:20:EC:73:F0:14:4B:72:E7:EE:2F:35:49:87:25:A3:59 Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35 Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035 Certificate serial: 019AF12D53EE7968224F1C901FEC17278013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft Manifest number: 0C61 Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: I/2pC62ips6MWdLuBWPlusnrdakW2qpljZUCFIFF3Js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:53:ee:79:68:22:4f:1c:90:1f:ec:17:27:80:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=2d02b2ff20ec73f0144b72e7ee2f35498725a359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cc:04:20:04:7a:63:37:aa:08:9f:8b:d8:29: cf:94:0a:c9:57:75:49:01:93:c4:4b:d3:a9:be:b1: 8c:26:97:7b:3c:6d:09:b1:61:04:88:ab:f6:ee:8c: 73:73:77:9f:19:78:97:40:a9:26:77:c7:0e:4d:ef: bb:61:7e:2b:14:d2:ff:94:25:d8:9a:2e:b9:5c:bc: b3:b6:c6:ae:e0:8f:61:ab:f9:e8:f3:5b:b4:a9:d8: d4:3e:aa:1c:98:f8:1c:2d:56:55:21:d6:f9:0b:a1: 26:0b:27:5b:aa:82:7c:66:bd:62:0a:cd:4a:4b:dc: 13:57:d5:b5:8a:54:e4:f5:69:f5:26:5d:8c:f2:15: 1f:8f:e4:e6:ad:0e:58:c4:ec:62:30:7d:70:15:94: d7:9c:94:dc:af:c9:a8:15:34:36:27:d2:2a:2a:76: b7:3d:f2:08:ac:5e:ce:4a:b6:f6:85:ce:e4:f8:03: b2:ff:9d:2d:aa:c2:13:a6:1b:fc:b5:57:a2:95:24: 99:29:5e:09:bb:09:5d:2a:9c:c3:f2:60:2a:90:09: 77:8d:ca:24:5c:d3:76:b9:82:35:27:f6:e1:3f:b6: 9f:46:e1:8c:c4:34:f3:5d:c1:8d:53:b5:d7:35:7e: f7:f8:5e:49:8f:05:b9:42:74:0c:96:13:8b:fb:90: c9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:02:B2:FF:20:EC:73:F0:14:4B:72:E7:EE:2F:35:49:87:25:A3:59 X509v3 Authority Key Identifier: keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:65:44:6b:9c:57:4c:7e:f2:6c:32:a7:b3:34:31:66:c1:2e: ff:55:1f:b4:15:c2:e0:5f:0c:6d:cb:fc:c4:f2:d4:95:5b:97: 8e:24:72:69:fa:66:81:f8:9b:f7:76:f2:01:8d:1a:9c:15:06: 05:75:f5:ed:76:80:ee:7a:06:e5:3d:69:79:92:07:01:4c:7b: 1b:27:ee:6e:c7:26:28:0f:6c:2c:f3:2d:ae:06:2e:91:53:80: 1b:9f:f9:8e:e1:bf:2a:75:db:81:f6:29:d3:2c:71:15:92:32: b8:20:31:7f:dd:fd:52:3a:2b:39:55:45:a4:3b:c5:0d:a4:00: 51:bd:0c:9f:a8:af:0e:2c:6b:74:e6:b0:9e:fa:d3:84:97:8e: 40:95:95:4c:35:cc:31:d6:0f:fa:c5:0f:3f:43:97:02:96:d6: 31:e9:9f:97:e7:01:57:27:36:26:64:f3:94:9c:89:0c:61:06: ff:be:c8:1e:f3:94:e7:aa:ec:dc:cb:ac:de:5f:2b:cc:17:49: 11:b6:c8:81:ac:f7:f5:39:28:c1:57:05:7e:7f:dd:f5:dd:53: 7a:1d:99:5b:82:09:7c:ac:ba:8c:7a:6c:71:6b:4b:2c:cc:dd: ac:1a:42:f9:2b:fd:a2:17:7f:56:88:b8:75:2b:61:a5:49:71: 5e:9d:29:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVPueWgiTxyQH+wXJ4ATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTcxMTA5ZDJlYTU2OWIzM2U5MGEzOGUwMzAyY2ZmMTY3 YmQwMzUwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EygyZDAyYjJmZjIwZWM3M2YwMTQ0YjcyZTdlZTJmMzU0OTg3MjVhMzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MwEIAR6YzeqCJ+L2CnPlArJV3VJ AZPES9OpvrGMJpd7PG0JsWEEiKv27oxzc3efGXiXQKkmd8cOTe+7YX4rFNL/lCXY mi65XLyztsau4I9hq/no81u0qdjUPqocmPgcLVZVIdb5C6EmCydbqoJ8Zr1iCs1K S9wTV9W1ilTk9Wn1Jl2M8hUfj+TmrQ5YxOxiMH1wFZTXnJTcr8moFTQ2J9IqKna3 PfIIrF7OSrb2hc7k+AOy/50tqsITphv8tVeilSSZKV4JuwldKpzD8mAqkAl3jcok XNN2uYI1J/bhP7afRuGMxDTzXcGNU7XXNX73+F5JjwW5QnQMlhOL+5DJUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0Csv8g7HPwFEty5+4vNUmHJaNZMB8GA1UdIwQY MBaAFJ+XEQnS6labM+kKOOAwLP8We9A1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUt OTZiMjI0MjE5M2Y5LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUtOTZiMjI0MjE5M2Y5 LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGVEa5xX TH7ybDKnszQxZsEu/1UftBXC4F8Mbcv8xPLUlVuXjiRyafpmgfib93byAY0anBUG BXX17XaA7noG5T1peZIHAUx7GyfubscmKA9sLPMtrgYukVOAG5/5juG/KnXbgfYp 0yxxFZIyuCAxf939UjorOVVFpDvFDaQAUb0Mn6ivDixrdOawnvrThJeOQJWVTDXM MdYP+sUPP0OXApbWMemfl+cBVyc2JmTzlJyJDGEG/77IHvOU56rs3Mus3l8rzBdJ EbbIgaz39TkowVcFfn/d9d1Teh2ZW4IJfKy6jHpscWtLLMzdrBpC+Sv9ohd/Voi4 dSthpUlxXp0phA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:29 2025 by rpki-client