This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json) Hash identifier: btpAByao7Ec1abiGnz4xC+O8V19UtK/dQt1N0+n8CCQ= Subject key identifier: D5:FB:CE:A2:76:51:C7:2D:DF:3C:E8:B2:86:4D:E8:FF:DB:4A:A7:EA Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e Certificate serial: 019B101391D281196256400724CE2A966D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft Manifest number: 052F Signing time: Fri 12 Dec 2025 01:01:16 +0000 Manifest this update: Fri 12 Dec 2025 01:01:16 +0000 Manifest next update: Sat 13 Dec 2025 01:01:16 +0000 Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=) 2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: xhCa2CVqLPhJa4B7PqzDk+xVdV5eCpBythwXEH3xSxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:91:d2:81:19:62:56:40:07:24:ce:2a:96:6d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e Validity Not Before: Dec 12 01:01:16 2025 GMT Not After : Dec 13 01:01:16 2025 GMT Subject: CN=d5fbcea27651c72ddf3ce8b2864de8ffdb4aa7ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a9:83:c1:04:30:2c:c4:ed:8d:50:04:d4:48: d9:3f:9f:c2:80:82:3c:2d:1b:e9:fb:7f:ee:3e:d1: c4:fd:87:79:15:12:86:e8:3b:2d:32:0d:d9:88:48: ec:01:03:c5:68:07:a3:c1:0a:db:97:ab:10:b2:69: 7c:76:8b:75:e1:3e:97:75:6f:70:97:f9:24:7c:5c: 4c:9f:25:4c:5a:40:e4:16:a5:23:51:63:c6:84:5f: 20:d4:8b:a3:5b:d7:b7:d8:8c:d6:4a:bc:88:6a:77: 90:55:17:30:d9:c5:10:00:90:11:da:43:de:19:40: cf:91:c1:e8:05:93:75:d5:49:7d:4c:64:62:3c:9a: fe:5c:b8:c3:18:ea:c2:a4:10:88:83:9d:6b:c6:20: 8c:37:9b:c7:94:48:b2:d9:8a:88:55:6a:50:3d:44: 35:c7:55:5b:ec:50:0f:91:95:3f:93:36:65:f1:7e: 3f:b1:cc:21:1e:ac:b7:e1:0a:06:fa:ed:39:2d:cd: 37:e2:89:17:e3:ec:25:ad:e4:bc:be:aa:74:22:e4: 9c:1a:08:ab:04:ac:b5:b6:20:57:ac:22:b4:da:69: 98:1b:ad:57:03:3f:d1:d0:f5:e6:d5:84:51:ee:23: b6:cc:50:f0:27:42:d5:c7:e0:a5:5a:1c:bb:e5:64: ab:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FB:CE:A2:76:51:C7:2D:DF:3C:E8:B2:86:4D:E8:FF:DB:4A:A7:EA X509v3 Authority Key Identifier: keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bc:83:9d:03:31:59:d6:2b:28:f5:6d:c8:96:d8:42:6f:1e: 3f:5f:8a:79:d8:6e:d3:ee:95:73:50:42:66:e5:f4:af:c5:ab: 90:3d:06:9b:99:81:ab:4d:4c:31:ec:d4:57:3f:c5:69:31:69: 78:8d:2e:11:e5:fe:11:05:eb:f6:62:d3:32:5b:02:6c:cc:4b: 79:cf:aa:c2:14:72:33:06:70:ad:ae:41:f5:57:23:56:1d:4e: ae:38:06:3e:7e:b4:05:44:f1:29:4c:b2:b0:b3:27:78:56:51: 66:f1:b2:e4:28:ec:3a:06:d8:19:02:bd:cb:dd:ec:f3:a4:ac: 9c:28:aa:4b:71:8e:f8:95:d1:68:82:16:43:e5:da:b5:7a:80: 89:cb:bd:63:56:eb:e9:fd:6a:c5:fd:a3:e7:bf:18:8b:97:e2: d8:ac:a1:c8:35:a9:eb:44:8f:2b:f7:5c:6e:e6:0f:84:e0:e5: 7d:21:33:64:2a:fd:31:7b:30:b5:68:03:99:2d:ed:11:3d:32: a0:86:3f:42:ea:95:05:1e:bd:84:35:a2:73:bd:22:53:b8:a3: 22:8a:7e:cd:d1:fe:99:fe:81:8b:27:4d:e5:83:d8:60:20:f1: 42:e2:14:d4:18:4f:8e:27:d6:27:59:58:ad:f5:57:07:63:fb: 4b:21:f1:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE5HSgRliVkAHJM4qlm14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4 OGQzNmUwHhcNMjUxMjEyMDEwMTE2WhcNMjUxMjEzMDEwMTE2WjAzMTEwLwYDVQQD EyhkNWZiY2VhMjc2NTFjNzJkZGYzY2U4YjI4NjRkZThmZmRiNGFhN2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKmDwQQwLMTtjVAE1EjZP5/CgII8 LRvp+3/uPtHE/Yd5FRKG6DstMg3ZiEjsAQPFaAejwQrbl6sQsml8dot14T6XdW9w l/kkfFxMnyVMWkDkFqUjUWPGhF8g1IujW9e32IzWSryIaneQVRcw2cUQAJAR2kPe GUDPkcHoBZN11Ul9TGRiPJr+XLjDGOrCpBCIg51rxiCMN5vHlEiy2YqIVWpQPUQ1 x1Vb7FAPkZU/kzZl8X4/scwhHqy34QoG+u05Lc034okX4+wlreS8vqp0IuScGgir BKy1tiBXrCK02mmYG61XAz/R0PXm1YRR7iO2zFDwJ0LVx+ClWhy75WSr/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNX7zqJ2Ucct3zzosoZN6P/bSqfqMB8GA1UdIwQY MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFryDnQMx WdYrKPVtyJbYQm8eP1+Kedhu0+6Vc1BCZuX0r8WrkD0Gm5mBq01MMezUVz/FaTFp eI0uEeX+EQXr9mLTMlsCbMxLec+qwhRyMwZwra5B9VcjVh1OrjgGPn60BUTxKUyy sLMneFZRZvGy5CjsOgbYGQK9y93s86SsnCiqS3GO+JXRaIIWQ+XatXqAicu9Y1br 6f1qxf2j578Yi5fi2KyhyDWp60SPK/dcbuYPhODlfSEzZCr9MXswtWgDmS3tET0y oIY/QuqVBR69hDWic70iU7ijIop+zdH+mf6BiydN5YPYYCDxQuIU1BhPjifWJ1lY rfVXB2P7SyHxVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 09:09:12 2025 by rpki-client