This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json) Hash identifier: 6tlDZ8LMrZVLqMKRt8Rd4ZBibC0PTcIZC1FaSHVOeCo= Subject key identifier: 01:F4:80:3D:81:84:C8:0A:5D:19:33:52:96:12:FF:1B:98:C4:47:DD Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c Certificate serial: 019B35D7227126D35DD96C39DE7DD920A42C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 09:00:50 +0000 Manifest this update: Fri 19 Dec 2025 09:00:50 +0000 Manifest next update: Sat 20 Dec 2025 09:00:50 +0000 Files and hashes: 1: 6zp8k7ws-z1aCcsmWGLYmfVsv4E.roa (hash: bUIQEUVAIaujbjPg7okGrEKCeQdfL4efouwX9EGneXc=) 2: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: Sys90lkTn7TD11IpXGx3mNG/L7wWD7vIazPiAkkej94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:22:71:26:d3:5d:d9:6c:39:de:7d:d9:20:a4:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd68f1b241423da97647b99224530386d25698c Validity Not Before: Dec 19 09:00:50 2025 GMT Not After : Dec 20 09:00:50 2025 GMT Subject: CN=01f4803d8184c80a5d1933529612ff1b98c447dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:0d:f0:ea:58:0c:3a:40:18:b3:37:81:07: 63:46:c6:39:a8:ee:6e:40:47:7d:b9:9e:d0:98:40: 02:10:f5:a8:97:d1:b2:34:09:1b:ad:c8:de:a3:25: 91:c9:3d:6c:d9:ba:32:05:6a:aa:de:da:c8:50:2f: db:15:f5:1d:2c:e2:e0:b0:78:59:27:65:f7:fd:0d: 17:20:dd:05:c4:1f:ca:e1:68:bf:15:c3:dc:61:51: d3:f4:03:fe:a2:6f:a5:a8:f9:e8:de:6a:e5:ba:09: b3:f8:d8:c7:1c:bd:44:90:f2:5b:68:d6:4d:c8:c0: ca:ce:ae:e5:99:c8:08:0d:01:a2:21:c9:f3:f5:97: 37:86:7f:0e:32:23:a5:c2:08:3f:5f:4b:25:6a:af: 59:94:f3:44:1d:2b:ca:4f:57:14:37:52:71:b8:82: a2:de:00:cb:14:9e:66:83:ab:4f:79:1d:7a:ed:3e: 3f:b3:10:2b:69:0b:bc:70:3d:0e:60:f7:22:40:9d: 67:c9:ed:98:41:b2:4d:f1:17:60:5d:6b:0d:62:57: c2:81:df:d2:20:42:19:96:7d:f5:08:0b:d8:89:0b: 07:44:c0:a5:fd:6d:e3:33:bc:50:91:65:88:16:af: 93:a8:bb:70:a0:e2:d5:da:1b:00:1e:ed:7a:7d:1d: 4b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F4:80:3D:81:84:C8:0A:5D:19:33:52:96:12:FF:1B:98:C4:47:DD X509v3 Authority Key Identifier: keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:08:4e:67:e7:78:ee:40:d2:78:17:55:11:6e:a8:46:bd:b9: 88:91:4e:f2:4b:a4:a8:26:b2:ca:35:7c:56:cf:2c:71:e0:34: 5e:32:d8:46:11:6e:65:4f:62:b9:46:5f:d9:20:ed:77:70:cd: fa:10:7f:90:1e:e9:01:96:ab:73:61:b1:3d:78:8a:8d:c1:9e: fc:9f:ce:32:86:cb:ba:bf:c8:f8:2f:e1:a0:80:95:c9:f6:69: e4:aa:92:65:b3:a8:b2:89:75:08:40:9a:ce:89:68:15:b1:8b: f6:1a:fe:39:da:d1:74:63:d3:5f:fd:7f:82:c0:c7:54:22:f4: 5f:d6:bd:02:87:e4:c9:1f:f5:aa:60:21:35:e4:6d:62:bf:8b: 5e:48:10:64:42:57:09:51:f6:6f:30:88:2c:71:c3:e7:6c:8d: 2b:43:2a:04:2c:72:cf:fd:22:89:9b:42:bc:56:8b:28:ff:f0: 52:43:d3:c7:99:06:90:6a:d3:57:7d:3c:0d:f1:78:77:a9:8b: e9:de:74:7e:2f:e1:7d:67:30:49:5d:e6:9b:41:5c:ee:b2:f2: 5c:61:88:ba:30:34:b5:04:64:83:43:fe:c6:b2:ca:34:7f:a0: 11:fc:de:c0:13:ee:50:7e:b3:a1:f7:ea:d2:d9:8b:79:76:c9: 14:ab:27:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11yJxJtNd2Ww53n3ZIKQsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDY4ZjFiMjQxNDIzZGE5NzY0N2I5OTIyNDUzMDM4NmQy NTY5OGMwHhcNMjUxMjE5MDkwMDUwWhcNMjUxMjIwMDkwMDUwWjAzMTEwLwYDVQQD EygwMWY0ODAzZDgxODRjODBhNWQxOTMzNTI5NjEyZmYxYjk4YzQ0N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE0N8OpYDDpAGLM3gQdjRsY5qO5u QEd9uZ7QmEACEPWol9GyNAkbrcjeoyWRyT1s2boyBWqq3trIUC/bFfUdLOLgsHhZ J2X3/Q0XIN0FxB/K4Wi/FcPcYVHT9AP+om+lqPno3mrlugmz+NjHHL1EkPJbaNZN yMDKzq7lmcgIDQGiIcnz9Zc3hn8OMiOlwgg/X0slaq9ZlPNEHSvKT1cUN1JxuIKi 3gDLFJ5mg6tPeR167T4/sxAraQu8cD0OYPciQJ1nye2YQbJN8RdgXWsNYlfCgd/S IEIZln31CAvYiQsHRMCl/W3jM7xQkWWIFq+TqLtwoOLV2hsAHu16fR1L7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAH0gD2BhMgKXRkzUpYS/xuYxEfdMB8GA1UdIwQY MBaAFJ/WjxskFCPal2R7mSJFMDhtJWmMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmIt MDgxMGQxNmJjYzg3LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni8zNWRlZTUtZDhkYi00OGUzLWI3YmItMDgxMGQxNmJjYzg3 LzEvbjlhUEd5UVVJOXFYWkh1WklrVXdPRzBsYVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAhOZ+d4 7kDSeBdVEW6oRr25iJFO8kukqCayyjV8Vs8sceA0XjLYRhFuZU9iuUZf2SDtd3DN +hB/kB7pAZarc2GxPXiKjcGe/J/OMobLur/I+C/hoICVyfZp5KqSZbOosol1CECa zoloFbGL9hr+OdrRdGPTX/1/gsDHVCL0X9a9AofkyR/1qmAhNeRtYr+LXkgQZEJX CVH2bzCILHHD52yNK0MqBCxyz/0iiZtCvFaLKP/wUkPTx5kGkGrTV308DfF4d6mL 6d50fi/hfWcwSV3mm0Fc7rLyXGGIujA0tQRkg0P+xrLKNH+gEfzewBPuUH6zoffq 0tmLeXbJFKsnWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:01:50 2025 by rpki-client