This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft File: 9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json) Hash identifier: cOdD/RTjic9a+xhezSAh+K4bt9PcJT6cu6abBsQBsFg= Subject key identifier: C1:2F:95:1F:E7:56:E0:B3:3A:A7:F3:D0:53:1A:B5:71:9B:B3:F0:1C Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d Certificate serial: 019B077DDB14E53187EE753F16EBFA8C524E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft Manifest number: 06F5 Signing time: Wed 10 Dec 2025 09:00:46 +0000 Manifest this update: Wed 10 Dec 2025 09:00:46 +0000 Manifest next update: Thu 11 Dec 2025 09:00:46 +0000 Files and hashes: 1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=) 2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=) 3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: qO31Fl7VxkB/07qmGmGASqHTXMhsQDwDdlbKJ+SWdfA=) 4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7d:db:14:e5:31:87:ee:75:3f:16:eb:fa:8c:52:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d Validity Not Before: Dec 10 09:00:46 2025 GMT Not After : Dec 11 09:00:46 2025 GMT Subject: CN=c12f951fe756e0b33aa7f3d0531ab5719bb3f01c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:62:c7:72:38:b7:bf:16:ba:ff:90:af:37:7b: a5:d1:88:44:df:24:65:e8:48:05:94:fb:c0:de:79: 75:2d:f2:b0:56:e9:91:e0:4c:f6:55:90:33:96:58: 81:c7:5b:b4:0d:3c:f4:b5:4d:fa:e9:dc:76:f0:86: 4e:7b:18:f5:a0:d6:31:ba:6f:8f:f3:cc:98:ee:46: 75:d9:d8:37:d2:00:63:1a:ce:d1:b2:0d:be:cc:44: da:ad:d3:95:b2:d9:ac:76:a6:8e:f7:c0:ae:73:b4: b2:1e:a1:dd:40:22:54:8a:2a:4d:b9:94:82:d1:29: 2f:5b:4b:2a:2a:35:1f:d5:86:ef:4a:71:4d:4c:e8: da:31:77:16:43:70:ec:89:2d:1f:bf:8b:18:8a:d8: f3:12:99:e2:b8:92:23:e4:c6:b4:96:08:55:65:5e: bd:9b:8e:f6:11:d9:bb:f7:49:92:68:f2:ac:3b:09: e8:1f:d1:0e:4f:4c:42:6b:fd:5f:7a:c0:c9:42:9c: ea:7e:f4:5e:66:37:fd:27:13:91:3f:0c:b5:24:76: 90:29:37:2c:db:8c:82:8a:04:02:76:02:23:c5:de: 32:1d:f2:2f:22:5e:4b:37:e0:88:7d:51:f7:b0:82: 76:1d:86:dc:3a:61:8a:3e:df:a6:69:6f:59:d9:37: 3d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:95:1F:E7:56:E0:B3:3A:A7:F3:D0:53:1A:B5:71:9B:B3:F0:1C X509v3 Authority Key Identifier: keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:b0:bb:d2:a0:bd:63:14:05:fb:87:01:55:5b:b3:be:86:72: 45:07:67:9f:77:90:41:3d:68:5f:18:04:ed:7c:0d:42:c0:51: a9:fd:ce:59:69:d8:5f:5f:85:48:cc:d9:07:65:40:4d:1c:60: fa:1a:a3:39:ea:be:be:31:29:dc:e8:56:5b:75:1e:a1:02:a8: d1:c1:90:83:2f:84:e3:e8:10:f7:5d:96:24:a3:07:27:74:ac: 8c:84:72:c4:65:58:05:2a:84:c6:df:ef:c9:94:f2:59:d7:55: 90:e5:9f:c4:55:c7:80:ac:27:49:16:e1:d0:03:45:53:d5:ab: 8b:70:42:57:8e:9b:96:8a:02:d8:3d:02:cc:e8:52:df:a6:34: 99:1c:e0:ea:49:24:a3:9d:c6:4e:d8:04:1b:01:3f:49:75:83: 05:3a:9e:33:db:8e:02:81:d1:9b:45:0b:31:4c:45:18:fa:1e: 43:f2:36:53:45:df:be:5a:35:c5:b0:ed:d3:4b:a2:a0:83:c3: 3e:56:00:b1:39:3b:0f:49:4d:8d:89:cf:77:8d:6d:a0:06:88: 8a:e5:2f:3c:dd:fb:9e:b6:5e:67:70:ad:1c:d8:bf:1b:b0:98: f7:fe:15:3e:83:2a:2c:fa:05:47:da:ec:57:b3:1e:4f:fc:41: 89:c7:5f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfdsU5TGH7nU/Fuv6jFJOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MDU1NzgyMTVhY2VlNzNjMTdmYTMwZDAyOTVlMGQ4ZGQ3 YmU4OWQwHhcNMjUxMjEwMDkwMDQ2WhcNMjUxMjExMDkwMDQ2WjAzMTEwLwYDVQQD EyhjMTJmOTUxZmU3NTZlMGIzM2FhN2YzZDA1MzFhYjU3MTliYjNmMDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmLHcji3vxa6/5CvN3ul0YhE3yRl 6EgFlPvA3nl1LfKwVumR4Ez2VZAzlliBx1u0DTz0tU366dx28IZOexj1oNYxum+P 88yY7kZ12dg30gBjGs7Rsg2+zETardOVstmsdqaO98Cuc7SyHqHdQCJUiipNuZSC 0SkvW0sqKjUf1YbvSnFNTOjaMXcWQ3DsiS0fv4sYitjzEpniuJIj5Ma0lghVZV69 m472Edm790mSaPKsOwnoH9EOT0xCa/1fesDJQpzqfvReZjf9JxORPwy1JHaQKTcs 24yCigQCdgIjxd4yHfIvIl5LN+CIfVH3sIJ2HYbcOmGKPt+maW9Z2Tc9hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEvlR/nVuCzOqfz0FMatXGbs/AcMB8GA1UdIwQY MBaAFPUFV4IVrO5zwX+jDQKV4Njde+idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQt ZjBjOWQ2NDE3ZWU3LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQtZjBjOWQ2NDE3ZWU3 LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArrC70qC9 YxQF+4cBVVuzvoZyRQdnn3eQQT1oXxgE7XwNQsBRqf3OWWnYX1+FSMzZB2VATRxg +hqjOeq+vjEp3OhWW3UeoQKo0cGQgy+E4+gQ912WJKMHJ3SsjIRyxGVYBSqExt/v yZTyWddVkOWfxFXHgKwnSRbh0ANFU9Wri3BCV46blooC2D0CzOhS36Y0mRzg6kkk o53GTtgEGwE/SXWDBTqeM9uOAoHRm0ULMUxFGPoeQ/I2U0Xfvlo1xbDt00uioIPD PlYAsTk7D0lNjYnPd41toAaIiuUvPN37nrZeZ3CtHNi/G7CY9/4VPoMqLPoFR9rs V7MeT/xBicdfMw== -----END CERTIFICATE-----Generated at Wed Dec 10 18:45:32 2025 by rpki-client