This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json) Hash identifier: tFg6LMDA6rXCyoM29UUqBnIf18c15pa2euR3LRZrfeg= Subject key identifier: E0:33:42:DD:BD:52:5F:B7:51:23:D8:26:D6:AD:C8:26:72:C2:A7:87 Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a Certificate serial: 019AF2766D0B4BF5EEA3B457128C40C09DF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:00:38 +0000 Manifest this update: Sat 06 Dec 2025 07:00:38 +0000 Manifest next update: Sun 07 Dec 2025 07:00:38 +0000 Files and hashes: 1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=) 2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: QRtVm+cgAFN0BPNbM6nCC7OMi7OPByJJy7MCwyf0J70=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:6d:0b:4b:f5:ee:a3:b4:57:12:8c:40:c0:9d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a Validity Not Before: Dec 6 07:00:38 2025 GMT Not After : Dec 7 07:00:38 2025 GMT Subject: CN=e03342ddbd525fb75123d826d6adc82672c2a787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:66:4a:b8:51:00:44:76:a7:8a:18:27:68: d2:ec:ca:99:bd:cc:d5:0e:5f:9c:de:84:c5:07:92: 13:c8:1e:20:6c:e6:d8:4f:64:a8:a1:6d:cf:46:90: 60:c2:97:07:a5:79:c9:24:98:7d:58:1f:88:13:79: fa:1e:a5:f3:fc:cb:8f:5a:c0:99:e4:cd:79:1d:a7: d5:d1:79:c2:73:70:39:c8:26:95:7c:81:b6:3b:0d: f5:25:65:57:7b:52:c5:2d:af:0b:d7:74:6c:32:73: 47:d3:4e:97:92:c1:0b:f4:e0:01:83:c6:44:48:73: 28:01:0b:a7:7a:dc:ee:02:a2:0e:ff:1e:86:7d:77: 2d:c2:66:ee:52:c6:d8:ad:1a:a3:8c:cf:18:8e:5a: 25:4e:0f:e1:5c:20:47:67:ef:b9:9b:4b:7d:27:8b: df:14:c8:70:3d:f3:17:72:14:77:b0:0a:ee:fd:19: 84:47:77:9d:fa:c3:a1:14:c4:2b:b7:d0:a9:6e:4c: f8:12:3d:92:15:5f:b7:4d:e7:2c:c2:b8:b9:0d:4a: 91:af:08:0f:d1:fe:50:a4:35:fe:a6:a6:df:a3:34: 77:ea:30:9b:73:e3:56:0a:5b:01:07:5c:d9:1b:36: 37:fa:dd:aa:ab:d9:f7:dd:ed:b2:a9:93:5c:5f:2d: 36:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:33:42:DD:BD:52:5F:B7:51:23:D8:26:D6:AD:C8:26:72:C2:A7:87 X509v3 Authority Key Identifier: keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2f:67:d3:e7:32:9b:d8:48:ad:0f:26:ca:3d:1b:e2:e2:8e: f9:79:20:f3:ee:a1:57:1c:a2:eb:7e:c6:5a:84:25:ce:3f:2f: 0f:09:52:57:e1:4f:18:b2:86:b0:18:27:8c:76:0a:25:5f:49: ee:28:02:ee:8d:96:c4:71:93:19:9c:a7:3a:26:13:b9:f4:bd: 09:47:b7:2e:00:f1:46:1f:54:ab:74:ec:4d:34:2f:a1:2d:d6: 66:6b:34:31:85:d0:d8:0b:03:b0:65:55:66:6b:70:ed:77:41: fc:83:ce:b9:c7:b4:22:b1:d1:3b:e7:9c:09:6c:32:e3:a3:35: ea:50:dc:b1:74:c8:6d:f2:05:ea:69:8e:42:28:70:74:ef:89: 55:bb:47:22:6a:fa:19:f9:d8:54:1a:f6:64:e3:7e:0a:9d:15: f5:9e:13:96:44:ac:89:99:3c:bb:2d:79:1a:1c:f2:5e:ba:9a: db:e4:96:f6:20:c9:20:44:9d:4e:06:e0:bb:b6:47:00:06:3a: 3f:c2:7d:2b:43:52:72:00:8e:36:e0:86:fa:8e:15:95:ce:bd: a4:5d:c1:7f:0b:3f:5a:1f:a0:9b:69:dc:d0:5a:5b:04:e3:a8: 26:e0:87:b5:c9:74:8f:11:6c:bc:06:4a:e1:dd:d2:cc:a8:21: 9e:01:e9:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydm0LS/Xuo7RXEoxAwJ30MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZmU2N2Y0YmY0ZGQyNmFlMzE1YjMxYTdiNDcyY2U0ZDVj MWFlNmEwHhcNMjUxMjA2MDcwMDM4WhcNMjUxMjA3MDcwMDM4WjAzMTEwLwYDVQQD EyhlMDMzNDJkZGJkNTI1ZmI3NTEyM2Q4MjZkNmFkYzgyNjcyYzJhNzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI9mSrhRAER2p4oYJ2jS7MqZvczV Dl+c3oTFB5ITyB4gbObYT2SooW3PRpBgwpcHpXnJJJh9WB+IE3n6HqXz/MuPWsCZ 5M15HafV0XnCc3A5yCaVfIG2Ow31JWVXe1LFLa8L13RsMnNH006XksEL9OABg8ZE SHMoAQunetzuAqIO/x6GfXctwmbuUsbYrRqjjM8YjlolTg/hXCBHZ++5m0t9J4vf FMhwPfMXchR3sAru/RmER3ed+sOhFMQrt9Cpbkz4Ej2SFV+3Tecswri5DUqRrwgP 0f5QpDX+pqbfozR36jCbc+NWClsBB1zZGzY3+t2qq9n33e2yqZNcXy02TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAzQt29Ul+3USPYJtatyCZywqeHMB8GA1UdIwQY MBaAFJn+Z/S/TdJq4xWzGntHLOTVwa5qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzIt YTA1YmQyMjgzMzdjLzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8yN2ZiNDgtZDA2Ni00MmQ5LTk0MzItYTA1YmQyMjgzMzdj LzEvbWY1bjlMOU4wbXJqRmJNYWUwY3M1TlhCcm1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC9n0+cy m9hIrQ8myj0b4uKO+Xkg8+6hVxyi637GWoQlzj8vDwlSV+FPGLKGsBgnjHYKJV9J 7igC7o2WxHGTGZynOiYTufS9CUe3LgDxRh9Uq3TsTTQvoS3WZms0MYXQ2AsDsGVV Zmtw7XdB/IPOuce0IrHRO+ecCWwy46M16lDcsXTIbfIF6mmOQihwdO+JVbtHImr6 GfnYVBr2ZON+Cp0V9Z4TlkSsiZk8uy15GhzyXrqa2+SW9iDJIESdTgbgu7ZHAAY6 P8J9K0NScgCONuCG+o4Vlc69pF3Bfws/Wh+gm2nc0FpbBOOoJuCHtcl0jxFsvAZK 4d3SzKghngHpCw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:12:53 2025 by rpki-client