This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft File: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft (raw, json) Hash identifier: WVAWsm/E7H1bmEuEYF7M9/XfhBTBarMnIuVsW5XKuBI= Subject key identifier: 1D:A0:BB:82:8A:D0:AD:28:1A:2E:17:AA:C2:C2:CE:6E:4F:E2:EB:79 Authority key identifier: 9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 Certificate issuer: /CN=9ff3396374cbf5d767125f02dcf0f97296323092 Certificate serial: 019AF3F7ECC56E29D84B927B7A0826EB38B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 14:01:42 +0000 Manifest this update: Sat 06 Dec 2025 14:01:42 +0000 Manifest next update: Sun 07 Dec 2025 14:01:42 +0000 Files and hashes: 1: g5PI0OIlX5tTjsen3s8hXQzEWx4.roa (hash: uE1lBW16SA+r7c4/Tg2mSsWjcv7alroQQDQoG/Ta6JA=) 2: n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl (hash: LXON3ryvzmScUOVh3DqxbhwUXqGrNFMFohHkGIlVT/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ec:c5:6e:29:d8:4b:92:7b:7a:08:26:eb:38:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff3396374cbf5d767125f02dcf0f97296323092 Validity Not Before: Dec 6 14:01:42 2025 GMT Not After : Dec 7 14:01:42 2025 GMT Subject: CN=1da0bb828ad0ad281a2e17aac2c2ce6e4fe2eb79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:05:40:15:09:b6:f7:37:34:76:0a:73:2b: 08:a6:de:5e:61:95:22:37:19:a8:b7:60:de:a8:d8: ef:ed:32:16:fd:8d:35:91:ec:9c:44:e4:c6:6d:d0: 64:78:11:e9:f4:0e:cb:55:38:2e:e4:6c:f9:05:30: ee:70:00:70:92:ce:aa:ca:1f:62:e4:81:c1:de:9f: 6b:0c:76:29:c3:f7:69:36:a4:44:c3:dc:86:a3:ac: 8d:a7:6a:b5:98:5f:e5:31:2b:d8:70:ce:16:b8:6d: 4e:60:2b:44:ec:35:df:7a:86:72:ab:65:42:5c:0e: 34:2c:b4:3f:fe:94:ce:f4:48:0f:5f:73:91:d3:cc: 8d:22:c5:86:85:d9:ed:77:e4:4a:18:3b:2b:62:c9: 45:51:e2:27:d9:88:9b:6a:82:8d:d6:cc:11:a8:ab: 34:0c:d0:a0:56:55:a2:60:90:98:53:c2:1a:76:ff: 53:69:65:4c:19:23:92:87:bc:1c:e1:12:3d:e8:8c: be:58:78:66:bd:0b:e6:ce:0a:16:7d:d9:d8:07:87: 71:cb:60:4f:63:4e:ca:cd:7c:c4:41:32:80:56:37: 31:70:e0:9e:9c:32:12:1a:5e:bc:23:aa:7b:46:c2: f1:cc:df:a7:9a:b7:89:a0:21:90:22:ee:2f:e6:50: f7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A0:BB:82:8A:D0:AD:28:1A:2E:17:AA:C2:C2:CE:6E:4F:E2:EB:79 X509v3 Authority Key Identifier: keyid:9F:F3:39:63:74:CB:F5:D7:67:12:5F:02:DC:F0:F9:72:96:32:30:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/316020-9fc5-4b7c-ae41-e9554483ffa7/1/n_M5Y3TL9ddnEl8C3PD5cpYyMJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8c:ed:3f:49:1c:b8:41:45:9d:52:f8:57:1f:4c:0f:f2:4c: b8:b0:89:64:f1:a2:8a:2c:79:12:dd:c6:a3:c2:0c:ff:11:59: d1:16:31:85:44:b1:fb:31:bf:5f:97:3b:53:c8:6d:20:55:a4: aa:df:79:4a:87:ba:04:b8:2f:d7:e7:a0:9e:f8:9e:82:f0:1d: 4f:18:3d:4a:c5:3d:3d:90:dc:7b:48:16:3f:ac:06:34:bf:d6: ab:97:5c:f5:64:1f:b3:cc:2d:43:9f:b7:6d:d3:1a:55:a8:3b: 39:39:91:38:db:fa:62:35:bb:41:7f:81:39:4a:64:60:fc:86: b8:2a:38:01:9c:13:0b:f3:fe:bf:d6:3c:02:d1:6f:bd:33:a8: e4:e9:1f:90:84:04:2f:c9:7d:11:b5:bb:47:77:24:2b:34:44: 07:7b:93:ba:f0:33:db:44:dc:52:44:7b:b5:d7:a0:b2:87:44: 89:9f:19:5c:07:a5:d4:6f:2f:69:43:30:8f:f0:48:86:5b:64: 70:17:f0:12:b6:fc:98:71:cb:2d:69:46:23:8e:a1:3d:23:30: 53:1d:b4:b9:0f:74:fd:24:dc:b2:7e:fb:46:56:b1:d0:00:72: bc:f2:e9:41:1c:ac:9a:a4:ad:c5:38:32:7b:a9:55:de:b8:40: 13:e6:01:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+zFbinYS5J7eggm6zizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjMzOTYzNzRjYmY1ZDc2NzEyNWYwMmRjZjBmOTcyOTYz MjMwOTIwHhcNMjUxMjA2MTQwMTQyWhcNMjUxMjA3MTQwMTQyWjAzMTEwLwYDVQQD EygxZGEwYmI4MjhhZDBhZDI4MWEyZTE3YWFjMmMyY2U2ZTRmZTJlYjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBsFQBUJtvc3NHYKcysIpt5eYZUi Nxmot2DeqNjv7TIW/Y01keycROTGbdBkeBHp9A7LVTgu5Gz5BTDucABwks6qyh9i 5IHB3p9rDHYpw/dpNqREw9yGo6yNp2q1mF/lMSvYcM4WuG1OYCtE7DXfeoZyq2VC XA40LLQ//pTO9EgPX3OR08yNIsWGhdntd+RKGDsrYslFUeIn2YibaoKN1swRqKs0 DNCgVlWiYJCYU8Iadv9TaWVMGSOSh7wc4RI96Iy+WHhmvQvmzgoWfdnYB4dxy2BP Y07KzXzEQTKAVjcxcOCenDISGl68I6p7RsLxzN+nmreJoCGQIu4v5lD3RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2gu4KK0K0oGi4XqsLCzm5P4ut5MB8GA1UdIwQY MBaAFJ/zOWN0y/XXZxJfAtzw+XKWMjCSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEt ZTk1NTQ0ODNmZmE3LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zMTYwMjAtOWZjNS00YjdjLWFlNDEtZTk1NTQ0ODNmZmE3 LzEvbl9NNVkzVEw5ZGRuRWw4QzNQRDVjcFl5TUpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIztP0kc uEFFnVL4Vx9MD/JMuLCJZPGiiix5Et3Go8IM/xFZ0RYxhUSx+zG/X5c7U8htIFWk qt95Soe6BLgv1+egnviegvAdTxg9SsU9PZDce0gWP6wGNL/Wq5dc9WQfs8wtQ5+3 bdMaVag7OTmRONv6YjW7QX+BOUpkYPyGuCo4AZwTC/P+v9Y8AtFvvTOo5OkfkIQE L8l9EbW7R3ckKzREB3uTuvAz20TcUkR7tdegsodEiZ8ZXAel1G8vaUMwj/BIhltk cBfwErb8mHHLLWlGI46hPSMwUx20uQ90/STcsn77Rlax0AByvPLpQRysmqStxTgy e6lV3rhAE+YBjw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:23 2025 by rpki-client