This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json) Hash identifier: zoWs9hJ2HFjmUSqMgqTxH5K4ba1pAsAwua9gXAAXXuo= Subject key identifier: 64:33:B6:11:C1:E0:17:17:39:21:80:AD:19:4C:C1:30:AD:4E:EF:27 Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Certificate serial: 019B36E990449CAE9F7D8E1E84625C51E726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 14:00:34 +0000 Manifest this update: Fri 19 Dec 2025 14:00:34 +0000 Manifest next update: Sat 20 Dec 2025 14:00:34 +0000 Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: q089G37VMQnL73ftaOzwtjW4d5CClpvCbEEkHHDSY64=) 2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=) 3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=) 4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=) 5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=) 6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:90:44:9c:ae:9f:7d:8e:1e:84:62:5c:51:e7:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Validity Not Before: Dec 19 14:00:34 2025 GMT Not After : Dec 20 14:00:34 2025 GMT Subject: CN=6433b611c1e01717392180ad194cc130ad4eef27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b5:bd:43:64:7e:ce:cc:a2:b7:69:d8:7f:fb: f3:3f:da:7c:c2:5e:22:b2:13:fa:98:a0:c4:47:ef: a5:0e:e3:c0:69:c2:5e:39:32:72:26:81:03:8a:57: 27:8c:cd:4f:c0:85:76:b4:ec:6a:ef:46:eb:29:b6: b4:32:fe:c7:24:ee:2d:e2:65:c2:40:82:5e:7f:36: c8:30:88:38:01:b4:92:77:8d:59:84:85:32:d7:e2: c9:4c:2c:19:c2:6b:df:e7:dc:8f:65:55:f0:b3:b3: a6:1d:c7:1c:53:de:79:09:5f:07:a8:67:f3:b1:f4: 2a:3d:ae:bc:d0:0d:bc:32:de:37:e2:a5:a7:f6:51: 55:5b:ef:bf:76:e7:c1:7d:b8:8f:73:d7:2c:cd:05: 71:c5:a4:b5:a4:9f:ea:1a:f0:b9:b6:74:7b:9a:01: 52:ea:a1:a2:9c:6c:af:a1:a3:9a:d6:da:92:16:2d: 77:c7:5a:7b:c7:76:54:20:f0:c7:15:de:d3:0c:85: 64:0b:1c:6c:6c:b1:85:9f:ed:60:16:a3:14:ed:26: 31:05:9e:70:a4:d8:22:92:aa:37:b2:57:c8:b2:63: b8:91:e9:ed:f3:fa:98:d5:1d:f8:a9:0d:fb:29:68: c0:1c:24:a9:d9:5a:45:f4:30:6c:f6:aa:8f:4a:10: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:33:B6:11:C1:E0:17:17:39:21:80:AD:19:4C:C1:30:AD:4E:EF:27 X509v3 Authority Key Identifier: keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:95:35:82:c1:01:5b:d1:33:7a:9f:91:02:1b:05:1a:73:27: ed:ed:8b:76:c4:91:04:5b:e1:80:eb:b8:fc:a1:89:e9:da:2f: bc:4c:b4:b6:d8:c6:49:8e:aa:3b:00:fa:88:04:fd:19:a5:fe: 8f:fa:21:7d:0b:55:b0:2d:c5:b1:b0:3d:54:2b:b4:0f:6d:18: 26:c8:fd:f8:c6:f7:7e:fa:6f:b0:8f:fb:e3:52:3b:fd:29:b3: 9b:cc:d5:5c:db:b4:e7:3a:11:88:e8:19:79:6c:eb:df:c5:47: 8a:21:e5:50:a7:4e:b8:95:cd:f8:02:21:85:60:28:ed:0f:d8: 6a:8f:e2:e7:36:37:53:a0:8e:2d:ac:90:0f:4a:a8:9e:12:d9: f3:2a:26:3c:66:1d:ab:fd:60:e5:0b:8e:2b:e2:cf:1c:82:d7: a0:78:f7:9a:14:41:6f:f7:7c:b8:5c:44:88:00:35:06:d1:e7: 8f:df:f0:b7:15:4a:a5:f9:50:38:c5:cd:74:3c:8e:1d:bc:e4: 39:89:bc:91:a4:d0:86:23:42:a5:31:00:ec:5a:d2:50:8d:bb: e3:99:a9:03:78:89:cb:a9:77:db:28:11:50:5d:82:eb:ae:a1: ab:1b:f1:b8:a0:74:50:1a:f2:7d:ef:91:d9:ff:7c:38:65:7f: f3:2f:fd:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26ZBEnK6ffY4ehGJcUecmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5 M2U3ODkwHhcNMjUxMjE5MTQwMDM0WhcNMjUxMjIwMTQwMDM0WjAzMTEwLwYDVQQD Eyg2NDMzYjYxMWMxZTAxNzE3MzkyMTgwYWQxOTRjYzEzMGFkNGVlZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrW9Q2R+zsyit2nYf/vzP9p8wl4i shP6mKDER++lDuPAacJeOTJyJoEDilcnjM1PwIV2tOxq70brKba0Mv7HJO4t4mXC QIJefzbIMIg4AbSSd41ZhIUy1+LJTCwZwmvf59yPZVXws7OmHcccU955CV8HqGfz sfQqPa680A28Mt434qWn9lFVW++/dufBfbiPc9cszQVxxaS1pJ/qGvC5tnR7mgFS 6qGinGyvoaOa1tqSFi13x1p7x3ZUIPDHFd7TDIVkCxxsbLGFn+1gFqMU7SYxBZ5w pNgikqo3slfIsmO4kent8/qY1R34qQ37KWjAHCSp2VpF9DBs9qqPShCf3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQzthHB4BcXOSGArRlMwTCtTu8nMB8GA1UdIwQY MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2 LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZU1gsEB W9Ezep+RAhsFGnMn7e2LdsSRBFvhgOu4/KGJ6dovvEy0ttjGSY6qOwD6iAT9GaX+ j/ohfQtVsC3FsbA9VCu0D20YJsj9+Mb3fvpvsI/741I7/Smzm8zVXNu05zoRiOgZ eWzr38VHiiHlUKdOuJXN+AIhhWAo7Q/Yao/i5zY3U6COLayQD0qonhLZ8yomPGYd q/1g5QuOK+LPHILXoHj3mhRBb/d8uFxEiAA1BtHnj9/wtxVKpflQOMXNdDyOHbzk OYm8kaTQhiNCpTEA7FrSUI2745mpA3iJy6l32ygRUF2C666hqxvxuKB0UBryfe+R 2f98OGV/8y/9FA== -----END CERTIFICATE-----Generated at Fri Dec 19 18:32:46 2025 by rpki-client