This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json) Hash identifier: hlyqAp/im195NJkxgTqOYiOq5lznuxx9qp4mcab81vM= Subject key identifier: 9B:26:D5:4C:9A:02:EE:B6:E5:FB:F4:8D:AC:2D:E3:E5:88:40:FB:8C Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Certificate serial: 019B5C09532B0B6378CE2C60732F643BBE75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft Manifest number: 08D9 Signing time: Fri 26 Dec 2025 19:01:13 +0000 Manifest this update: Fri 26 Dec 2025 19:01:13 +0000 Manifest next update: Sat 27 Dec 2025 19:01:13 +0000 Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 9xbOqY/qAhnfoHiq8bTPf74tfI5STSmejk3aIAZ7Sik=) 2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:09:53:2b:0b:63:78:ce:2c:60:73:2f:64:3b:be:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Validity Not Before: Dec 26 19:01:13 2025 GMT Not After : Dec 27 19:01:13 2025 GMT Subject: CN=9b26d54c9a02eeb6e5fbf48dac2de3e58840fb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9a:b3:56:53:f0:e8:e6:86:1b:4c:a0:75:23: 64:80:e6:92:2a:5b:86:da:6c:2d:d8:ec:b1:32:78: 1f:d0:8a:c3:38:e5:37:d0:91:93:24:91:f9:2e:63: da:ed:ad:9c:73:9d:23:dd:70:2f:79:ce:37:61:b2: 30:7a:14:3c:cf:31:db:d1:c3:43:19:47:76:66:ef: 1c:4a:e2:f5:b3:e8:27:aa:72:e0:bf:c6:40:16:e0: 26:62:03:8b:99:3d:41:5d:5a:a3:ab:f9:a8:ec:97: d0:6b:9e:4d:5f:f7:81:49:6d:fd:70:e2:71:2e:ff: db:d4:0b:4f:ac:0d:52:23:08:88:4f:bf:82:d0:15: 12:ca:14:a6:00:49:b9:2b:02:06:e0:7a:7d:13:5e: e0:f5:22:d8:a8:6e:7d:9a:54:bc:f8:0a:74:68:10: 9a:3e:b8:4d:35:12:fd:aa:37:8e:95:41:4a:f2:71: d0:d5:4c:09:43:85:86:8c:e8:a7:49:5a:7e:a4:4c: 7a:51:70:0a:88:61:d4:96:8c:21:cc:ec:ff:70:2f: ce:c5:27:ce:7b:ca:2f:b4:a3:7f:fc:ce:28:46:a5: 41:c3:71:c0:d4:96:fd:48:30:c8:02:5f:05:cd:7f: b4:47:52:18:26:9a:5c:33:6f:8f:0a:a1:62:6c:bf: c1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:D5:4C:9A:02:EE:B6:E5:FB:F4:8D:AC:2D:E3:E5:88:40:FB:8C X509v3 Authority Key Identifier: keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a6:33:cf:d3:99:15:6c:2e:c3:dc:0a:47:ba:a9:fb:91:a4: 51:28:62:dc:33:80:63:6a:b1:87:70:e9:2a:0c:2a:dc:eb:61: 4f:9c:c1:40:c7:9f:4b:db:a4:c8:cf:a3:00:70:a3:e3:9f:28: 8a:89:38:a7:66:47:7f:74:f1:a4:98:37:54:b6:56:6a:3c:2a: 7a:19:e1:73:03:68:29:2e:9a:8a:48:2f:c0:1b:df:52:40:7f: 6c:c8:07:eb:75:cc:84:1c:8a:6a:bc:fe:4c:02:29:d1:5f:87: 23:1d:9c:24:91:d0:b6:25:8a:8c:97:c6:e9:56:49:01:ef:ce: 95:21:23:44:05:52:e2:33:d7:e0:e0:bb:12:f1:34:c7:3f:07: bd:81:4a:3b:ca:2c:a1:a7:05:6d:e9:6c:ca:d2:27:ab:ee:47: 6a:5e:71:2e:6b:31:b9:1c:14:63:f6:f7:53:67:75:66:14:43: b1:30:2e:55:45:d6:3c:1e:7a:cb:d7:9d:6e:ab:e7:9d:1f:c5: 92:21:f8:c6:66:41:6d:c9:20:13:24:f6:fb:01:62:98:4c:d5: f5:11:a5:52:70:83:b6:65:f9:b7:8b:58:41:a0:23:cb:ce:47: 15:79:34:b9:c3:5c:4d:91:f1:23:1b:5f:1a:20:c0:cc:e0:c0: e2:e0:53:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcCVMrC2N4zixgcy9kO751MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ1ZTU4MjA2YTFiOWQ1OWVkZGZhOGY5ODhiMzI3MTdi ZjljNmIwHhcNMjUxMjI2MTkwMTEzWhcNMjUxMjI3MTkwMTEzWjAzMTEwLwYDVQQD Eyg5YjI2ZDU0YzlhMDJlZWI2ZTVmYmY0OGRhYzJkZTNlNTg4NDBmYjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZqzVlPw6OaGG0ygdSNkgOaSKluG 2mwt2OyxMngf0IrDOOU30JGTJJH5LmPa7a2cc50j3XAvec43YbIwehQ8zzHb0cND GUd2Zu8cSuL1s+gnqnLgv8ZAFuAmYgOLmT1BXVqjq/mo7JfQa55NX/eBSW39cOJx Lv/b1AtPrA1SIwiIT7+C0BUSyhSmAEm5KwIG4Hp9E17g9SLYqG59mlS8+Ap0aBCa PrhNNRL9qjeOlUFK8nHQ1UwJQ4WGjOinSVp+pEx6UXAKiGHUlowhzOz/cC/OxSfO e8ovtKN//M4oRqVBw3HA1Jb9SDDIAl8FzX+0R1IYJppcM2+PCqFibL/BrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsm1UyaAu625fv0jawt4+WIQPuMMB8GA1UdIwQY MBaAFEvUXlggahudWe3fqPmIsycXv5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQt MDc4NTEwY2VhYzBkLzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQtMDc4NTEwY2VhYzBk LzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeKYzz9OZ FWwuw9wKR7qp+5GkUShi3DOAY2qxh3DpKgwq3OthT5zBQMefS9ukyM+jAHCj458o iok4p2ZHf3TxpJg3VLZWajwqehnhcwNoKS6aikgvwBvfUkB/bMgH63XMhByKarz+ TAIp0V+HIx2cJJHQtiWKjJfG6VZJAe/OlSEjRAVS4jPX4OC7EvE0xz8HvYFKO8os oacFbelsytInq+5Hal5xLmsxuRwUY/b3U2d1ZhRDsTAuVUXWPB56y9edbqvnnR/F kiH4xmZBbckgEyT2+wFimEzV9RGlUnCDtmX5t4tYQaAjy85HFXk0ucNcTZHxIxtf GiDAzODA4uBTow== -----END CERTIFICATE-----Generated at Fri Dec 26 21:12:59 2025 by rpki-client