This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json) Hash identifier: OieNmI95KBqo/AFpzb8ozUroz55DUB7mCXjepd6rehU= Subject key identifier: 89:07:98:7E:7B:C9:40:6F:01:D2:E8:AC:25:FA:3E:82:E9:A9:B8:6B Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Certificate serial: 019B3E3576254C2B5895CEB952CFC8FB82B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft Manifest number: 0B9D Signing time: Sun 21 Dec 2025 00:00:49 +0000 Manifest this update: Sun 21 Dec 2025 00:00:49 +0000 Manifest next update: Mon 22 Dec 2025 00:00:49 +0000 Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=) 2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: PEG0TnYnVC/X4O+BV0QlDDGNf5l8BgPCAh6GYegKOg0=) 3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=) 4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:76:25:4c:2b:58:95:ce:b9:52:cf:c8:fb:82:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Validity Not Before: Dec 21 00:00:49 2025 GMT Not After : Dec 22 00:00:49 2025 GMT Subject: CN=8907987e7bc9406f01d2e8ac25fa3e82e9a9b86b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:c2:50:73:56:9b:04:0a:eb:3d:03:1f:11: 3e:69:25:38:30:bd:b9:87:66:b0:ff:62:1a:3c:f8: d5:ca:b7:d6:40:b2:b8:31:30:82:9d:d8:0b:7a:39: 81:90:3e:a6:39:2d:6c:d7:d3:a3:14:f4:de:aa:3c: 37:50:e2:31:55:84:c2:4e:98:69:49:ef:d6:2d:ec: 9e:d7:6b:71:f4:0e:ac:7e:63:97:84:01:6f:16:59: 93:e9:14:85:2a:12:26:c3:8e:78:cf:5a:e2:83:e2: 1e:d1:00:dc:bc:24:c4:20:fe:f4:7a:9b:14:90:80: 96:51:32:72:0f:60:80:b1:a8:48:8a:5f:f7:b8:37: 79:04:00:0d:0c:15:0e:48:01:21:b2:f8:38:f0:4b: 62:5f:42:40:cb:c6:3a:08:ef:ef:0f:59:88:2b:81: e6:49:5d:c2:a2:ad:d2:0c:fe:bb:e6:e7:c2:25:48: b8:78:4f:9c:0d:8a:9f:af:cf:15:a1:e1:89:31:de: 5d:29:52:97:01:56:3e:57:4b:b1:fc:67:83:b5:2a: c9:9c:e2:4b:bc:78:09:73:1d:c5:7f:9d:45:24:13: 9e:01:26:2b:0a:e5:ab:58:09:15:9a:1a:f5:0e:eb: 20:6f:9a:d6:2b:3a:dc:50:39:3d:60:d4:7f:59:ba: 35:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:07:98:7E:7B:C9:40:6F:01:D2:E8:AC:25:FA:3E:82:E9:A9:B8:6B X509v3 Authority Key Identifier: keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:ed:7c:fc:84:00:e2:c6:29:8a:02:37:4d:36:31:ba:5c:b0: 7e:b4:40:85:15:7e:f5:f9:21:20:00:aa:35:3f:1e:77:af:8a: 17:f5:dd:46:d6:2e:bb:97:44:5c:d4:e3:90:3b:83:d0:8e:4a: c1:89:58:a7:7a:8c:ab:cd:f8:3f:2e:bb:01:9c:08:65:54:e4: 48:e2:98:b6:c7:cd:b4:46:3c:1f:58:0b:66:d2:6f:b9:c6:b0: 01:ac:6f:19:6e:13:cd:6e:f6:f9:f8:fc:a0:e5:f7:c8:88:c7: 38:e5:77:22:46:5c:01:d9:68:3b:9f:f2:19:5a:da:2e:ec:f2: 01:4c:e1:2c:9b:c4:59:f1:8c:97:57:7c:4f:6e:c0:81:5c:ca: 2c:cf:33:72:06:fd:04:cc:c7:2a:31:05:10:f2:2a:b9:d9:1f: 64:65:3f:81:b4:0d:49:c5:04:5d:58:08:ec:fb:e9:1d:4e:59: e9:0f:b2:62:58:cf:16:86:ec:c8:cc:97:3d:42:93:c8:d7:72: bf:6c:5f:c4:b7:7a:a0:21:5a:2c:e1:7b:34:18:5a:50:61:c6: de:05:2c:bc:cf:76:70:08:d4:8f:3a:09:44:63:3c:4f:70:79: 83:2a:7d:98:26:2e:6b:b4:57:c6:f8:c8:04:c1:7a:8f:5d:73: 8b:79:28:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXYlTCtYlc65Us/I+4KyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli YmIxZTIwHhcNMjUxMjIxMDAwMDQ5WhcNMjUxMjIyMDAwMDQ5WjAzMTEwLwYDVQQD Eyg4OTA3OTg3ZTdiYzk0MDZmMDFkMmU4YWMyNWZhM2U4MmU5YTliODZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufDCUHNWmwQK6z0DHxE+aSU4ML25 h2aw/2IaPPjVyrfWQLK4MTCCndgLejmBkD6mOS1s19OjFPTeqjw3UOIxVYTCTphp Se/WLeye12tx9A6sfmOXhAFvFlmT6RSFKhImw454z1rig+Ie0QDcvCTEIP70epsU kICWUTJyD2CAsahIil/3uDd5BAANDBUOSAEhsvg48EtiX0JAy8Y6CO/vD1mIK4Hm SV3Coq3SDP675ufCJUi4eE+cDYqfr88VoeGJMd5dKVKXAVY+V0ux/GeDtSrJnOJL vHgJcx3Ff51FJBOeASYrCuWrWAkVmhr1Dusgb5rWKzrcUDk9YNR/Wbo1KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkHmH57yUBvAdLorCX6PoLpqbhrMB8GA1UdIwQY MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3u18/IQA 4sYpigI3TTYxulywfrRAhRV+9fkhIACqNT8ed6+KF/XdRtYuu5dEXNTjkDuD0I5K wYlYp3qMq834Py67AZwIZVTkSOKYtsfNtEY8H1gLZtJvucawAaxvGW4TzW72+fj8 oOX3yIjHOOV3IkZcAdloO5/yGVraLuzyAUzhLJvEWfGMl1d8T27AgVzKLM8zcgb9 BMzHKjEFEPIqudkfZGU/gbQNScUEXVgI7PvpHU5Z6Q+yYljPFobsyMyXPUKTyNdy v2xfxLd6oCFaLOF7NBhaUGHG3gUsvM92cAjUjzoJRGM8T3B5gyp9mCYua7RXxvjI BMF6j11zi3koUA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:26:06 2025 by rpki-client