This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json) Hash identifier: twwn/7jVQLCQWf2bZxI7d6Wqf7sR8pwFB7owT6/sybw= Subject key identifier: 6E:79:0E:6B:07:67:5A:35:79:CF:8E:29:F2:B8:F1:A8:B3:4D:FE:27 Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Certificate serial: 019B36B320C9D8CB1BCB3FF785EBED22FEAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 13:01:07 +0000 Manifest this update: Fri 19 Dec 2025 13:01:07 +0000 Manifest next update: Sat 20 Dec 2025 13:01:07 +0000 Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=) 2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: lT1Sx6i5v04nweoHlhubiLibFVLd742Boh3+yMj2Xgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:20:c9:d8:cb:1b:cb:3f:f7:85:eb:ed:22:fe:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Validity Not Before: Dec 19 13:01:07 2025 GMT Not After : Dec 20 13:01:07 2025 GMT Subject: CN=6e790e6b07675a3579cf8e29f2b8f1a8b34dfe27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c8:d6:a4:14:cf:1e:77:6f:10:46:f4:28:1d: cd:19:d5:56:f3:59:2d:37:70:a6:33:6f:c2:63:73: b4:67:94:37:e6:c0:60:f8:72:91:94:b6:21:6d:24: 8f:12:94:4f:de:83:d8:42:eb:4b:e2:52:4a:dc:3c: ca:45:58:bd:1d:b7:b1:81:e2:c5:8a:41:6c:6a:89: f1:96:58:ff:b5:7c:96:e9:89:a5:a5:2a:af:a5:cf: a1:ff:5b:74:d9:14:92:f1:1e:40:c7:12:01:a8:1d: 8d:f9:a4:76:eb:c0:82:31:ba:e7:30:4c:51:3d:5b: 6b:ce:c2:ef:de:d0:0d:ec:50:0c:87:62:79:03:d5: 28:a4:96:d5:80:30:2f:d9:47:49:8d:0b:3d:40:7a: 2e:ea:74:68:aa:f9:8d:17:5d:85:46:b4:4e:05:a1: 75:5f:05:41:f4:f6:e3:ea:7a:7e:2a:9a:0f:e8:67: 9a:98:25:8a:57:5c:cb:36:21:ed:7d:71:ee:bd:b7: 8f:ae:a3:eb:bb:0f:c7:c8:69:f5:0b:e9:9f:fe:6f: 6b:75:da:7e:6f:5b:cb:0a:0c:12:7b:a3:a2:3c:c3: 00:8e:6d:eb:ee:ec:15:83:1b:4f:0f:a3:f4:39:b5: 12:0a:07:cd:73:f4:70:6b:b3:69:94:d2:41:7e:88: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:79:0E:6B:07:67:5A:35:79:CF:8E:29:F2:B8:F1:A8:B3:4D:FE:27 X509v3 Authority Key Identifier: keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7e:67:19:6d:9e:1e:ec:ce:2d:4e:3a:36:2b:9d:d9:24:35: 09:1d:f8:dc:23:16:89:11:bc:cd:be:4a:dd:b2:fd:5d:aa:ac: 59:66:29:28:44:f8:7a:4b:0b:06:1d:60:d0:cb:9e:f4:e4:6e: fa:90:9d:bd:ce:ca:4f:04:30:f4:65:78:cf:06:1b:36:c3:2e: 83:6d:9e:8b:4d:b9:6b:7d:f9:0c:6a:ba:dc:ee:49:24:8d:46: 45:9c:d6:88:50:8a:f9:35:96:e4:80:67:56:f2:c4:48:0a:f6: 9c:30:34:a0:69:6f:25:c5:10:9e:9c:1b:83:38:62:c2:11:bb: 62:a7:cb:56:62:3e:73:c5:b2:51:38:1d:68:87:df:35:3c:0f: e6:3a:3f:0d:fe:54:38:26:dd:fe:e0:8e:96:43:37:69:0d:6b: b9:d7:6e:0e:eb:cf:e4:da:b0:8d:b9:b3:67:3f:8a:1c:e3:71: b2:55:de:a0:6b:b8:bc:ae:96:b8:8b:17:13:04:ba:75:49:59: c9:75:55:94:7c:15:d3:b5:9d:ea:20:13:2e:90:fb:cf:c9:85: 0f:54:f6:57:00:b9:e1:b7:22:3a:47:9e:eb:72:b8:66:2b:df: 7b:28:a1:3a:8d:56:98:b2:91:06:4a:3b:31:8c:93:7c:97:f8: 8a:c0:b2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2syDJ2Msbyz/3hevtIv6qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz NDJkNjQwHhcNMjUxMjE5MTMwMTA3WhcNMjUxMjIwMTMwMTA3WjAzMTEwLwYDVQQD Eyg2ZTc5MGU2YjA3Njc1YTM1NzljZjhlMjlmMmI4ZjFhOGIzNGRmZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMjWpBTPHndvEEb0KB3NGdVW81kt N3CmM2/CY3O0Z5Q35sBg+HKRlLYhbSSPEpRP3oPYQutL4lJK3DzKRVi9HbexgeLF ikFsaonxllj/tXyW6YmlpSqvpc+h/1t02RSS8R5AxxIBqB2N+aR268CCMbrnMExR PVtrzsLv3tAN7FAMh2J5A9UopJbVgDAv2UdJjQs9QHou6nRoqvmNF12FRrROBaF1 XwVB9Pbj6np+KpoP6GeamCWKV1zLNiHtfXHuvbePrqPruw/HyGn1C+mf/m9rddp+ b1vLCgwSe6OiPMMAjm3r7uwVgxtPD6P0ObUSCgfNc/Rwa7NplNJBfojgzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG55DmsHZ1o1ec+OKfK48aizTf4nMB8GA1UdIwQY MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3 LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX5nGW2e HuzOLU46Niud2SQ1CR343CMWiRG8zb5K3bL9XaqsWWYpKET4eksLBh1g0Mue9ORu +pCdvc7KTwQw9GV4zwYbNsMug22ei025a335DGq63O5JJI1GRZzWiFCK+TWW5IBn VvLESAr2nDA0oGlvJcUQnpwbgzhiwhG7YqfLVmI+c8WyUTgdaIffNTwP5jo/Df5U OCbd/uCOlkM3aQ1rudduDuvP5NqwjbmzZz+KHONxslXeoGu4vK6WuIsXEwS6dUlZ yXVVlHwV07Wd6iATLpD7z8mFD1T2VwC54bciOkee63K4ZivfeyihOo1WmLKRBko7 MYyTfJf4isCyEg== -----END CERTIFICATE-----Generated at Fri Dec 19 17:45:34 2025 by rpki-client