This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json) Hash identifier: zx07rr+2QRa/FPwc3xDyFY7AomA8ff+tY3OII7RiFfw= Subject key identifier: 05:DE:E2:09:81:EF:E9:2C:A9:5E:DE:19:13:DC:37:DB:02:E9:51:2A Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Certificate serial: 019B228746BB0AC892C542A72FE1FC372A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft Manifest number: 0BA4 Signing time: Mon 15 Dec 2025 15:00:49 +0000 Manifest this update: Mon 15 Dec 2025 15:00:49 +0000 Manifest next update: Tue 16 Dec 2025 15:00:49 +0000 Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=) 2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: 18lT1tbb9D6CigVa9Av4FuYHv+uDZ1bknIy4w0ccllw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:87:46:bb:0a:c8:92:c5:42:a7:2f:e1:fc:37:2a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Validity Not Before: Dec 15 15:00:49 2025 GMT Not After : Dec 16 15:00:49 2025 GMT Subject: CN=05dee20981efe92ca95ede1913dc37db02e9512a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7c:1d:6a:7b:b8:a0:f4:05:04:67:d8:54:15: c9:06:04:c7:71:b1:04:54:b7:3e:a7:08:42:25:9b: 34:90:74:25:1d:ec:ca:21:4d:07:21:bf:f0:fe:73: 64:c1:5d:79:9e:ee:9a:0f:8c:62:57:ae:80:14:40: 80:a4:14:bb:3b:56:f9:f3:71:7e:4c:1b:57:bb:b3: ec:ca:47:92:39:2c:5a:ad:48:6f:f4:35:59:9d:28: a6:d9:8e:3f:29:af:53:1c:ad:d9:ee:ec:68:67:49: 8d:3d:04:66:9a:15:3a:e1:03:27:ba:19:46:bb:5f: 7f:8e:b4:1f:09:cc:3f:cb:11:a4:44:d5:c9:f2:08: c5:e2:65:7c:e4:88:d6:a2:ce:f0:f2:a3:18:4a:d3: 70:96:2c:28:10:30:5c:ed:02:17:0d:c6:50:22:ab: 36:e0:5d:25:a3:c8:d8:41:e5:84:b6:a5:66:ea:6f: 39:16:ad:22:ff:d2:4e:63:a7:35:f5:e3:39:03:7b: 98:ab:9f:36:a3:bb:09:a4:b1:a8:ea:54:b3:c4:f5: 40:4c:73:8e:ff:e6:00:fc:c0:7d:80:21:5c:65:47: 55:72:f3:f6:02:b1:0a:7d:d5:72:a4:d5:ea:b8:61: 24:2a:34:04:37:2c:e4:d2:39:40:3a:5a:cf:b5:5f: 85:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:E2:09:81:EF:E9:2C:A9:5E:DE:19:13:DC:37:DB:02:E9:51:2A X509v3 Authority Key Identifier: keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:26:df:21:90:f0:18:62:68:78:fb:60:7e:ff:b9:f1:0a:d2: f1:1f:6b:f6:c6:66:91:6d:af:ab:4d:ab:c9:62:c7:2e:c0:a8: de:34:ea:a6:37:2d:89:eb:58:35:9b:d4:fe:3c:86:91:7e:62: 40:9d:b0:8c:e5:d2:86:94:70:08:ac:01:3f:47:81:c7:a8:c4: 36:db:5f:3b:b2:a0:2a:91:f0:ea:ee:90:c3:6a:e1:27:7d:69: 12:d9:48:1e:22:a6:ed:a5:e5:b0:a8:7c:fe:b1:b9:de:ac:b0: 1e:54:18:45:62:b0:61:69:2e:7f:34:ed:03:b9:9e:e5:24:62: cd:5b:81:cb:45:f0:6e:07:f7:60:3f:2e:ca:6a:79:d4:d2:c9: 40:89:77:e6:97:ad:27:8e:49:fe:27:13:99:25:48:9b:a1:8a: d6:4c:f4:d7:50:60:1e:81:98:24:54:57:77:f5:d7:f9:2b:50: 96:0d:1e:8c:04:f9:e6:73:98:6a:29:00:6d:77:ff:8c:ec:30: 0e:af:aa:6b:af:05:c7:87:5b:55:ed:77:16:03:ab:21:8e:5b: 83:29:01:5b:57:ee:23:30:5e:9d:de:6b:53:9c:43:04:44:e2: b7:66:b0:cb:49:4b:b3:ad:7d:03:35:44:5b:45:59:ed:a3:d3: 61:c3:f2:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsih0a7CsiSxUKnL+H8Nyo2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj NTliOTIwHhcNMjUxMjE1MTUwMDQ5WhcNMjUxMjE2MTUwMDQ5WjAzMTEwLwYDVQQD EygwNWRlZTIwOTgxZWZlOTJjYTk1ZWRlMTkxM2RjMzdkYjAyZTk1MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHwdanu4oPQFBGfYVBXJBgTHcbEE VLc+pwhCJZs0kHQlHezKIU0HIb/w/nNkwV15nu6aD4xiV66AFECApBS7O1b583F+ TBtXu7PsykeSOSxarUhv9DVZnSim2Y4/Ka9THK3Z7uxoZ0mNPQRmmhU64QMnuhlG u19/jrQfCcw/yxGkRNXJ8gjF4mV85IjWos7w8qMYStNwliwoEDBc7QIXDcZQIqs2 4F0lo8jYQeWEtqVm6m85Fq0i/9JOY6c19eM5A3uYq582o7sJpLGo6lSzxPVATHOO /+YA/MB9gCFcZUdVcvP2ArEKfdVypNXquGEkKjQENyzk0jlAOlrPtV+F6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXe4gmB7+ksqV7eGRPcN9sC6VEqMB8GA1UdIwQY MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCbfIZDw GGJoePtgfv+58QrS8R9r9sZmkW2vq02ryWLHLsCo3jTqpjctietYNZvU/jyGkX5i QJ2wjOXShpRwCKwBP0eBx6jENttfO7KgKpHw6u6Qw2rhJ31pEtlIHiKm7aXlsKh8 /rG53qywHlQYRWKwYWkufzTtA7me5SRizVuBy0Xwbgf3YD8uymp51NLJQIl35pet J45J/icTmSVIm6GK1kz011BgHoGYJFRXd/XX+StQlg0ejAT55nOYaikAbXf/jOww Dq+qa68Fx4dbVe13FgOrIY5bgykBW1fuIzBend5rU5xDBETit2awy0lLs619AzVE W0VZ7aPTYcPyaA== -----END CERTIFICATE-----Generated at Tue Dec 16 00:18:53 2025 by rpki-client