This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft File: B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json) Hash identifier: b5oY9BTjqg4bFQAUnZb5WB/yXu0/RAbyyrhXUfaecOQ= Subject key identifier: 11:E0:C9:B5:F6:B0:36:2B:3F:11:AB:3B:BD:4D:DF:D0:75:02:13:47 Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D Certificate issuer: /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d Certificate serial: 019B33E8B490CD7C0CC0BC14ADF56CC7FB04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 00:00:47 +0000 Manifest this update: Fri 19 Dec 2025 00:00:47 +0000 Manifest next update: Sat 20 Dec 2025 00:00:47 +0000 Files and hashes: 1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: c9AwLpkuWYVVDH6Vdt6Ze4sjjsSJM+mJnlVx4zFUcO8=) 2: f3raIBer4Wbe3buOh8JkfhD4mEA.roa (hash: B9RYB76x05XWJNka7NBoycDREl2ucTVGVKrV+eIK26g=) 3: hfYnlizg3MwR5qQug8OaGFYUftA.roa (hash: DTFlk5aAr3e9+sYI7V08QHNOE3ZymaaIt731TRyJnHQ=) 4: tBNDimUXEukADWJF9dJCQTAu8Xs.roa (hash: xy9pbAco54L3WlU6x7baSUsepcCgwp7AyR8Cg3prULc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:b4:90:cd:7c:0c:c0:bc:14:ad:f5:6c:c7:fb:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d Validity Not Before: Dec 19 00:00:47 2025 GMT Not After : Dec 20 00:00:47 2025 GMT Subject: CN=11e0c9b5f6b0362b3f11ab3bbd4ddfd075021347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:58:58:74:4b:c1:5b:51:30:a9:d6:fe:fa: 4f:1c:c9:6b:fc:2e:bb:61:f4:de:88:cc:05:da:7b: a3:94:bd:78:57:f9:a6:89:00:aa:1b:80:ea:08:1c: 4b:e2:00:7e:c1:76:d6:17:2c:12:59:e2:e1:41:71: 3d:76:d6:ee:2d:c7:6e:d2:36:9e:7c:8a:6d:34:e6: a1:f5:f5:06:9e:1c:9b:b7:12:16:94:71:00:2e:76: a7:3c:ac:b2:d6:14:73:9a:89:60:ad:3a:71:d7:db: 7a:62:92:5c:ad:7d:6b:a9:3d:d2:37:d3:6c:a7:d2: 96:d8:98:9f:2e:24:e8:a6:5c:98:6d:62:c8:b4:0e: aa:16:ff:d7:bf:f0:d3:20:7e:58:2a:5b:9c:74:3d: 7b:9c:1f:4e:bb:a6:85:bd:e0:39:03:82:a9:49:13: 88:16:76:9a:ad:4b:18:ae:fe:ee:70:e0:3c:e9:79: 5d:18:7f:a7:8b:80:1e:43:db:a6:82:84:86:8a:92: e1:61:4b:c7:45:bf:71:6c:91:6e:b2:10:ad:95:aa: d7:48:a4:16:94:94:92:9b:3d:b8:5f:e4:21:3a:67: d6:22:b6:3a:4e:39:8e:20:85:41:37:99:05:98:c5: fe:df:f8:ed:8e:f0:54:a6:58:32:a1:ec:1c:fe:9a: d4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:C9:B5:F6:B0:36:2B:3F:11:AB:3B:BD:4D:DF:D0:75:02:13:47 X509v3 Authority Key Identifier: keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:92:68:35:43:a7:6c:f6:73:51:5b:9c:64:8f:34:65:df:01: 25:ba:ff:49:95:06:c5:fb:cb:4d:25:5c:79:d3:f5:14:d0:db: ce:78:a4:76:7a:e8:ad:88:22:b1:d7:71:b4:e7:76:45:cd:76: 4f:f0:40:e0:6a:c6:4b:05:4d:c2:85:8e:57:8d:f1:f1:3c:49: c7:2a:e9:47:d2:fd:cf:78:da:6b:b3:1f:24:92:0b:12:d8:db: 71:87:18:52:ec:66:34:43:d2:97:cd:b6:72:05:ad:4d:02:56: 53:f0:82:04:d7:81:35:e8:6a:71:5e:be:45:6e:c3:99:ec:ba: 5c:58:1d:75:54:7c:7c:3c:b0:97:c7:4f:b1:00:a9:f5:f7:7f: 2f:18:eb:8b:6a:68:fa:d7:31:00:48:7e:24:8d:fb:b3:d7:9a: b4:6b:0e:eb:c8:1a:03:1d:39:5d:ec:d6:5a:d7:3b:89:7f:13: 9b:a7:58:d9:4d:64:dd:0d:fa:69:19:2f:af:9c:0f:a8:5c:8b: f2:be:2f:95:24:2f:71:b4:a2:f2:e5:a9:87:4d:33:00:f2:13: 16:ac:7c:c9:f5:cb:91:78:f5:15:a2:51:5a:20:97:9d:ec:fe: 38:f5:de:ac:ae:80:dd:8b:4a:d7:d1:10:82:7a:c8:46:cf:2d: 42:fb:d9:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6LSQzXwMwLwUrfVsx/sEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz YThlMWQwHhcNMjUxMjE5MDAwMDQ3WhcNMjUxMjIwMDAwMDQ3WjAzMTEwLwYDVQQD EygxMWUwYzliNWY2YjAzNjJiM2YxMWFiM2JiZDRkZGZkMDc1MDIxMzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq19YWHRLwVtRMKnW/vpPHMlr/C67 YfTeiMwF2nujlL14V/mmiQCqG4DqCBxL4gB+wXbWFywSWeLhQXE9dtbuLcdu0jae fIptNOah9fUGnhybtxIWlHEALnanPKyy1hRzmolgrTpx19t6YpJcrX1rqT3SN9Ns p9KW2JifLiToplyYbWLItA6qFv/Xv/DTIH5YKlucdD17nB9Ou6aFveA5A4KpSROI FnaarUsYrv7ucOA86XldGH+ni4AeQ9umgoSGipLhYUvHRb9xbJFushCtlarXSKQW lJSSmz24X+QhOmfWIrY6TjmOIIVBN5kFmMX+3/jtjvBUplgyoewc/prUTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHgybX2sDYrPxGrO71N39B1AhNHMB8GA1UdIwQY MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1 LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpJoNUOn bPZzUVucZI80Zd8BJbr/SZUGxfvLTSVcedP1FNDbznikdnrorYgisddxtOd2Rc12 T/BA4GrGSwVNwoWOV43x8TxJxyrpR9L9z3jaa7MfJJILEtjbcYcYUuxmNEPSl822 cgWtTQJWU/CCBNeBNehqcV6+RW7Dmey6XFgddVR8fDywl8dPsQCp9fd/Lxjri2po +tcxAEh+JI37s9eatGsO68gaAx05XezWWtc7iX8Tm6dY2U1k3Q36aRkvr5wPqFyL 8r4vlSQvcbSi8uWph00zAPITFqx8yfXLkXj1FaJRWiCXnez+OPXerK6A3YtK19EQ gnrIRs8tQvvZRg== -----END CERTIFICATE-----Generated at Fri Dec 19 05:22:03 2025 by rpki-client