This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft File: pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json) Hash identifier: AwWfere/NVVHpCBKvon1Jbe6eQbqJT46F3ahvPiWGW0= Subject key identifier: A1:7D:06:D1:B8:D9:F3:26:05:B5:2B:8A:1A:99:B0:6F:A4:8A:A0:27 Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Certificate serial: 019B033387F7FC1B145CDF43A8F62C7EFDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft Manifest number: 0F98 Signing time: Tue 09 Dec 2025 13:01:07 +0000 Manifest this update: Tue 09 Dec 2025 13:01:07 +0000 Manifest next update: Wed 10 Dec 2025 13:01:07 +0000 Files and hashes: 1: Fhu6eteSMh-I7iJVqiXmMyG026Q.roa (hash: F9PD+ubtwzitBN7aKci6vGXmXOFiGygMSM+2xXKhmeU=) 2: O79Bxg0BR0VFMQ_a0ZyezMPMz0M.roa (hash: wV2tjiSpv38ZVgcsHYOWBKswr9oGmugpMMubTRaOGF4=) 3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: ycWawLd7rsMIFqqzt1eXR//d7RWYdiEcdyM7vQlt+9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:33:87:f7:fc:1b:14:5c:df:43:a8:f6:2c:7e:fd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Validity Not Before: Dec 9 13:01:07 2025 GMT Not After : Dec 10 13:01:07 2025 GMT Subject: CN=a17d06d1b8d9f32605b52b8a1a99b06fa48aa027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:9c:bc:c9:18:db:e7:64:66:7f:c7:a5:1b: b1:72:30:84:2f:02:bd:01:0b:41:ab:3a:0a:45:4c: 6b:82:e0:cd:6e:22:eb:87:90:59:80:52:94:af:b4: cc:94:81:37:4a:1d:36:60:28:aa:75:81:e6:69:ed: be:f7:6e:6f:48:cd:e5:26:57:e7:ea:86:5e:33:4f: 65:6b:57:ad:ee:91:19:24:d7:b0:7b:5b:13:5e:89: fe:01:1c:0b:3b:d3:75:a8:0a:b6:bd:c4:03:53:25: a4:4e:b3:a6:38:4c:32:d8:3b:81:1e:41:a7:d8:12: 82:8e:d2:55:a8:fb:cb:f4:da:d1:c0:ae:e3:1a:d6: 3d:d0:c4:95:5d:24:f5:e6:6b:98:f3:dd:07:a5:18: a7:e2:ce:9e:3b:77:7d:3d:c0:05:97:92:f9:c3:e9: 5f:b4:0a:2a:57:dd:a9:17:73:a1:2a:8a:95:a0:46: 32:98:68:1b:0c:0f:02:a7:b3:44:0a:2f:b1:f9:13: 15:6a:25:46:77:e7:fd:5b:94:5e:40:42:ee:bf:2c: 08:df:06:49:8c:30:53:03:0d:7c:a5:78:3e:c7:76: 6d:ae:0e:f3:4d:4b:f3:d6:15:42:6b:23:2e:43:90: ec:80:21:3a:7c:6e:dc:fb:7d:20:28:75:e3:1c:57: b1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:7D:06:D1:B8:D9:F3:26:05:B5:2B:8A:1A:99:B0:6F:A4:8A:A0:27 X509v3 Authority Key Identifier: keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d6:71:f6:88:ff:90:fa:2f:ae:96:dd:01:64:e2:be:a7:d0: d4:86:aa:bb:e2:41:a0:9a:84:09:5e:42:bd:40:89:fd:04:aa: 2b:09:00:d3:6f:86:3e:4e:f6:e6:d9:d6:06:76:bd:e0:52:f4: b8:03:0b:fe:88:bd:9d:9f:c0:3f:c3:22:28:39:af:51:e2:5d: dd:7e:05:88:5f:db:71:34:d1:34:bc:6d:5e:04:e0:24:6b:d4: ca:ea:f3:83:4a:8c:fc:be:dc:ab:9e:6f:d1:cc:10:78:42:84: cc:50:1f:27:34:d1:62:73:c3:68:28:ce:d2:7f:4d:ab:0e:b5: 4c:15:23:45:aa:f6:e9:f7:26:d6:18:cf:e9:71:4d:f4:eb:b0: 62:44:2f:b4:1a:ba:4b:26:02:9f:0a:83:ec:c2:1d:18:4d:af: 1e:91:19:dd:3f:3a:96:75:e0:5b:b8:3c:2a:f8:24:55:f4:e5: 3c:9f:57:8c:86:e7:1d:b4:fb:54:c1:18:a8:d6:27:ea:8b:a6: ef:7a:be:b2:83:33:a8:2e:ba:d9:d6:01:3a:13:4f:c7:0b:b6: b9:ef:52:c0:eb:fd:11:2d:c2:bf:e9:dd:e4:66:8f:b0:18:bf: 8c:1f:32:7b:a8:a8:d0:44:e2:ef:67:d5:5a:2b:0c:07:34:7b: 24:6b:8a:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsDM4f3/BsUXN9DqPYsfv3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi YmIzN2IwHhcNMjUxMjA5MTMwMTA3WhcNMjUxMjEwMTMwMTA3WjAzMTEwLwYDVQQD EyhhMTdkMDZkMWI4ZDlmMzI2MDViNTJiOGExYTk5YjA2ZmE0OGFhMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNKcvMkY2+dkZn/HpRuxcjCELwK9 AQtBqzoKRUxrguDNbiLrh5BZgFKUr7TMlIE3Sh02YCiqdYHmae2+925vSM3lJlfn 6oZeM09la1et7pEZJNewe1sTXon+ARwLO9N1qAq2vcQDUyWkTrOmOEwy2DuBHkGn 2BKCjtJVqPvL9NrRwK7jGtY90MSVXST15muY890HpRin4s6eO3d9PcAFl5L5w+lf tAoqV92pF3OhKoqVoEYymGgbDA8Cp7NECi+x+RMVaiVGd+f9W5ReQELuvywI3wZJ jDBTAw18pXg+x3Ztrg7zTUvz1hVCayMuQ5DsgCE6fG7c+30gKHXjHFexRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKF9BtG42fMmBbUrihqZsG+kiqAnMB8GA1UdIwQY MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0 LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9Zx9oj/ kPovrpbdAWTivqfQ1Iaqu+JBoJqECV5CvUCJ/QSqKwkA02+GPk725tnWBna94FL0 uAML/oi9nZ/AP8MiKDmvUeJd3X4FiF/bcTTRNLxtXgTgJGvUyurzg0qM/L7cq55v 0cwQeEKEzFAfJzTRYnPDaCjO0n9Nqw61TBUjRar26fcm1hjP6XFN9OuwYkQvtBq6 SyYCnwqD7MIdGE2vHpEZ3T86lnXgW7g8KvgkVfTlPJ9XjIbnHbT7VMEYqNYn6oum 73q+soMzqC662dYBOhNPxwu2ue9SwOv9ES3Cv+nd5GaPsBi/jB8ye6io0ETi72fV WisMBzR7JGuKQw== -----END CERTIFICATE-----Generated at Tue Dec 9 15:29:48 2025 by rpki-client