This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft File: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft (raw, json) Hash identifier: T1pQl0tfNMqKkRv7cb8JUu3mkbFBWFthl9xL3YT9VgI= Subject key identifier: 98:D6:17:28:7C:34:7D:3C:48:31:FC:02:6C:24:00:27:77:CC:0D:F2 Authority key identifier: 9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A Certificate issuer: /CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a Certificate serial: 019AF23FB496DAD16721E6828418AE285403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft Manifest number: 06CA Signing time: Sat 06 Dec 2025 06:00:52 +0000 Manifest this update: Sat 06 Dec 2025 06:00:52 +0000 Manifest next update: Sun 07 Dec 2025 06:00:52 +0000 Files and hashes: 1: FKRN7VX-M9zNuJ0Xi5mXAJ-i93Y.roa (hash: tPWo9Bc4jubOwnfbiLhbqZLh4bX+yga6cCmXXhQ2NPA=) 2: n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl (hash: flK0G+33ahyZapIKLP6ZrGm3LjB96EZrgm8Jlgv6IDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:b4:96:da:d1:67:21:e6:82:84:18:ae:28:54:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f974da45d5914ede1381eeaf9c2bb1645b6643a Validity Not Before: Dec 6 06:00:52 2025 GMT Not After : Dec 7 06:00:52 2025 GMT Subject: CN=98d617287c347d3c4831fc026c24002777cc0df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:7b:6e:aa:0d:79:3b:e0:3a:f5:08:3f:ed: 06:68:06:22:3d:cd:d0:df:d7:90:0e:2f:fa:4d:4d: 53:22:8c:de:1a:02:71:5e:d5:8e:8e:cf:05:f9:83: f4:e2:ac:c7:ca:40:b0:74:11:ea:b6:06:a4:42:c1: 69:b4:23:f4:80:d0:98:3d:5c:5d:f4:4e:5c:82:ee: 2e:ed:09:5b:9d:10:40:e0:41:08:fb:51:71:48:e6: 8b:69:7d:2d:69:6d:79:12:59:af:cc:58:f6:e0:9d: b3:f4:dd:33:76:9f:40:4e:7b:92:d3:83:22:42:b8: ee:23:65:45:d8:a2:9b:e2:a4:e7:92:2b:c0:81:03: 3d:84:41:eb:ce:ea:a9:a7:9f:4a:5a:a1:21:45:ee: b0:53:27:88:28:39:40:d5:41:37:bf:b2:2b:c5:0f: fa:0e:31:30:61:69:01:af:b8:85:5e:8e:4e:86:9f: 24:67:bc:6c:6b:09:b0:e5:80:03:54:b0:f2:a0:c4: 0b:64:6b:10:e9:be:4e:04:a5:96:24:58:fe:b2:a6: 77:61:bd:a1:40:95:30:5c:95:c3:7f:63:5a:12:be: ca:e3:b4:1a:17:51:08:42:f8:c9:78:f3:29:7b:a2: 95:0e:fc:63:20:8c:0a:a7:c9:8d:51:59:6b:1b:ee: 42:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:17:28:7C:34:7D:3C:48:31:FC:02:6C:24:00:27:77:CC:0D:F2 X509v3 Authority Key Identifier: keyid:9F:97:4D:A4:5D:59:14:ED:E1:38:1E:EA:F9:C2:BB:16:45:B6:64:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/51ea49-7128-46e0-838d-7d5ecb4f181f/1/n5dNpF1ZFO3hOB7q-cK7FkW2ZDo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ac:49:29:53:8a:c9:7a:28:25:85:07:35:2a:bc:40:d7:c3: 5f:22:ff:84:49:9a:07:56:07:fa:33:fa:f9:75:e5:97:cd:d7: 74:58:09:9f:de:7b:93:3f:b1:8b:75:7f:ba:1d:0c:6d:14:24: ce:00:b1:ae:a2:b6:ec:78:f3:c0:74:72:db:62:f8:cc:30:8c: 04:6f:5a:77:ef:89:2a:38:e8:0e:33:f4:e1:54:fd:fc:93:99: 6f:02:71:b7:41:eb:59:90:e8:2d:00:24:78:62:e7:85:bc:5b: 54:d4:83:c2:b6:ee:18:00:6e:49:c6:a7:ef:f8:06:1b:ea:aa: f6:75:c5:cd:8f:c1:11:ad:38:42:a9:4e:88:cb:1a:cb:5a:26: f4:0e:10:1a:99:76:cb:c6:95:57:cd:23:3f:83:89:16:30:d2: d8:0d:82:f7:b9:7a:23:c7:75:62:8b:7a:cf:4c:4b:e4:9e:dd: 6b:97:b7:65:d4:cb:9a:9d:36:ef:9b:0b:c4:84:5a:dd:ac:7e: 5b:87:4e:77:22:1c:24:96:7b:6e:9c:dd:1f:b2:92:02:db:0c: f5:19:68:2a:58:58:71:35:9c:dd:5e:9b:2b:ba:85:07:ed:70: fd:56:c2:e3:68:d3:23:9f:b0:d5:cf:12:40:c8:e0:51:1c:f4: 0b:5d:c4:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7SW2tFnIeaChBiuKFQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTc0ZGE0NWQ1OTE0ZWRlMTM4MWVlYWY5YzJiYjE2NDVi NjY0M2EwHhcNMjUxMjA2MDYwMDUyWhcNMjUxMjA3MDYwMDUyWjAzMTEwLwYDVQQD Eyg5OGQ2MTcyODdjMzQ3ZDNjNDgzMWZjMDI2YzI0MDAyNzc3Y2MwZGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNl7bqoNeTvgOvUIP+0GaAYiPc3Q 39eQDi/6TU1TIozeGgJxXtWOjs8F+YP04qzHykCwdBHqtgakQsFptCP0gNCYPVxd 9E5cgu4u7QlbnRBA4EEI+1FxSOaLaX0taW15ElmvzFj24J2z9N0zdp9ATnuS04Mi QrjuI2VF2KKb4qTnkivAgQM9hEHrzuqpp59KWqEhRe6wUyeIKDlA1UE3v7IrxQ/6 DjEwYWkBr7iFXo5Ohp8kZ7xsawmw5YADVLDyoMQLZGsQ6b5OBKWWJFj+sqZ3Yb2h QJUwXJXDf2NaEr7K47QaF1EIQvjJePMpe6KVDvxjIIwKp8mNUVlrG+5CHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjWFyh8NH08SDH8AmwkACd3zA3yMB8GA1UdIwQY MBaAFJ+XTaRdWRTt4Tge6vnCuxZFtmQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQt N2Q1ZWNiNGYxODFmLzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81MWVhNDktNzEyOC00NmUwLTgzOGQtN2Q1ZWNiNGYxODFm LzEvbjVkTnBGMVpGTzNoT0I3cS1jSzdGa1cyWkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxqxJKVOK yXooJYUHNSq8QNfDXyL/hEmaB1YH+jP6+XXll83XdFgJn957kz+xi3V/uh0MbRQk zgCxrqK27HjzwHRy22L4zDCMBG9ad++JKjjoDjP04VT9/JOZbwJxt0HrWZDoLQAk eGLnhbxbVNSDwrbuGABuScan7/gGG+qq9nXFzY/BEa04QqlOiMsay1om9A4QGpl2 y8aVV80jP4OJFjDS2A2C97l6I8d1Yot6z0xL5J7da5e3ZdTLmp0275sLxIRa3ax+ W4dOdyIcJJZ7bpzdH7KSAtsM9RloKlhYcTWc3V6bK7qFB+1w/VbC42jTI5+w1c8S QMjgURz0C13Ekg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:37 2025 by rpki-client