This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json) Hash identifier: g0NGFiYZQLpofQGvE4c8igO/plCdH7MezknCRBAkUvA= Subject key identifier: FB:AA:70:DC:A6:AA:A7:6F:5B:D3:C4:0D:F7:7B:1A:51:C9:D0:34:08 Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe Certificate serial: 019AF1640B2EE99A75C6990EE7DD8A3EF72F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft Manifest number: 0261 Signing time: Sat 06 Dec 2025 02:00:56 +0000 Manifest this update: Sat 06 Dec 2025 02:00:56 +0000 Manifest next update: Sun 07 Dec 2025 02:00:56 +0000 Files and hashes: 1: FTz3I1LwzTnAWMfdkHFOvWrYtnw.roa (hash: ON7nD9k8gZbbUe0iuDqX0lxMxjEVRpGMdIVVvIAhjDg=) 2: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: yu8N6QwsLgwn+ujO8LDNjOrDI2+0z79/bK0zfAzNa8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:0b:2e:e9:9a:75:c6:99:0e:e7:dd:8a:3e:f7:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe Validity Not Before: Dec 6 02:00:56 2025 GMT Not After : Dec 7 02:00:56 2025 GMT Subject: CN=fbaa70dca6aaa76f5bd3c40df77b1a51c9d03408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:07:2f:df:c3:10:4a:a4:0e:44:48:3d:f8: 2e:0b:2d:fc:dc:a2:38:45:50:0b:ea:8c:0e:1a:5a: c5:54:37:6a:71:d0:fc:36:e8:0e:08:a9:1b:88:3a: a5:6b:64:1c:98:d0:bf:51:a9:d1:ef:1c:2d:f6:c6: 30:94:e5:2b:4c:9f:bc:3e:ca:cb:1c:8e:a8:84:3b: 1e:5c:6d:df:37:48:2b:d1:47:24:16:cd:d1:52:cf: 5b:38:71:02:30:4a:9d:25:de:bf:20:25:be:cd:74: 99:86:0a:fe:28:80:b2:d8:3d:af:f6:dc:85:8c:5e: d2:07:64:1f:63:2b:73:52:78:73:36:05:27:15:89: a4:18:dd:74:98:1d:96:42:0f:89:76:ba:d9:b6:8c: 8b:08:39:26:d8:89:11:2c:1d:0e:36:30:7c:d0:f8: d6:5c:25:de:00:25:8c:44:96:07:f7:21:b5:a4:ba: 84:bc:03:a3:83:61:08:ea:e3:3d:74:fb:1f:c2:b7: d4:2a:cc:10:04:a0:9d:4a:a9:15:22:9f:38:27:cb: 0b:15:d8:48:9b:aa:d4:9d:0d:ea:69:71:b0:a4:ed: 8c:7f:28:8a:4f:34:46:9a:cc:84:d3:0f:71:f1:6e: 60:84:b7:27:a6:5a:e2:7e:a5:ae:e3:b1:73:7f:41: 58:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:AA:70:DC:A6:AA:A7:6F:5B:D3:C4:0D:F7:7B:1A:51:C9:D0:34:08 X509v3 Authority Key Identifier: keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b3:5c:56:bc:f6:46:a2:25:f2:f6:48:6f:a2:f9:df:7f:5c: 23:30:f0:ef:20:a4:83:e1:ba:82:ca:ff:ed:34:15:c3:02:4a: d9:2b:52:b9:23:de:9d:67:6f:a3:a3:89:a6:c6:69:f0:19:c1: a1:c9:03:34:5f:39:95:2b:50:c5:85:fc:07:e0:2a:8f:ec:02: 21:cd:7c:c5:62:86:80:90:fc:eb:fc:a7:f1:65:6b:9f:ac:e8: 51:14:a3:39:9c:19:52:6e:42:52:e5:42:89:20:1f:49:f5:12: 09:21:1d:53:a6:1b:fc:11:47:f1:5f:a3:35:4f:c3:ff:a1:22: b4:68:07:4f:00:dd:3a:9a:08:9f:44:9d:d7:6b:bb:4b:1b:38: c1:99:39:83:2c:95:94:ca:ef:da:0e:39:77:a2:b3:89:19:d1: 2e:e4:25:aa:04:8d:e3:07:50:1a:7e:28:1b:d3:9e:13:b6:d7: 5d:af:7d:c5:f7:49:f8:8e:0c:c3:45:54:4a:c0:b0:62:1e:18: 6f:8e:6c:14:08:02:ea:6e:d9:e7:ae:c9:26:02:d3:7d:42:f5: e0:c9:a6:0f:ea:43:fb:55:62:32:b9:30:ce:72:74:79:38:12: 19:06:86:14:43:00:95:b0:09:70:72:c0:71:6c:d6:50:d9:ae: 77:01:03:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZAsu6Zp1xpkO592KPvcvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4 N2NiYmUwHhcNMjUxMjA2MDIwMDU2WhcNMjUxMjA3MDIwMDU2WjAzMTEwLwYDVQQD EyhmYmFhNzBkY2E2YWFhNzZmNWJkM2M0MGRmNzdiMWE1MWM5ZDAzNDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQHL9/DEEqkDkRIPfguCy383KI4 RVAL6owOGlrFVDdqcdD8NugOCKkbiDqla2QcmNC/UanR7xwt9sYwlOUrTJ+8PsrL HI6ohDseXG3fN0gr0UckFs3RUs9bOHECMEqdJd6/ICW+zXSZhgr+KICy2D2v9tyF jF7SB2QfYytzUnhzNgUnFYmkGN10mB2WQg+JdrrZtoyLCDkm2IkRLB0ONjB80PjW XCXeACWMRJYH9yG1pLqEvAOjg2EI6uM9dPsfwrfUKswQBKCdSqkVIp84J8sLFdhI m6rUnQ3qaXGwpO2MfyiKTzRGmsyE0w9x8W5ghLcnplrifqWu47Fzf0FYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuqcNymqqdvW9PEDfd7GlHJ0DQIMB8GA1UdIwQY MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt NjE3MDBkZGU3NjkyLzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbNcVrz2 RqIl8vZIb6L5339cIzDw7yCkg+G6gsr/7TQVwwJK2StSuSPenWdvo6OJpsZp8BnB ockDNF85lStQxYX8B+Aqj+wCIc18xWKGgJD86/yn8WVrn6zoURSjOZwZUm5CUuVC iSAfSfUSCSEdU6Yb/BFH8V+jNU/D/6EitGgHTwDdOpoIn0Sd12u7Sxs4wZk5gyyV lMrv2g45d6KziRnRLuQlqgSN4wdQGn4oG9OeE7bXXa99xfdJ+I4Mw0VUSsCwYh4Y b45sFAgC6m7Z567JJgLTfUL14MmmD+pD+1ViMrkwznJ0eTgSGQaGFEMAlbAJcHLA cWzWUNmudwEDcA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:12:57 2025 by rpki-client