This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft File: c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json) Hash identifier: aFEgGwihBdo3XHTfntcsFStYY9Tm5UiCzwcyFPDdVT4= Subject key identifier: 5B:F4:58:BD:16:8D:AB:E0:C0:7A:4D:22:1C:00:2E:CB:90:89:44:82 Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D Certificate issuer: /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Certificate serial: 019B5A51C95328C24BD000CE9D86AF28BE6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft Manifest number: 43 Signing time: Fri 26 Dec 2025 11:01:07 +0000 Manifest this update: Fri 26 Dec 2025 11:01:07 +0000 Manifest next update: Sat 27 Dec 2025 11:01:07 +0000 Files and hashes: 1: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: UXAGvtOQei3k/PSx3DXyS7aL9iiXldyyfXeRkuTWHWg=) 2: sLoOUnSSa6nYXCPKvYp_V6IOuY4.roa (hash: bChaFq62gDaAnOWbCA9DJxsS2gbYsBJKbJ42SILhQpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c9:53:28:c2:4b:d0:00:ce:9d:86:af:28:be:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d Validity Not Before: Dec 26 11:01:07 2025 GMT Not After : Dec 27 11:01:07 2025 GMT Subject: CN=5bf458bd168dabe0c07a4d221c002ecb90894482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:02:3b:23:c8:3b:18:25:c7:71:95:b1:f1: af:12:9f:d8:e3:33:4f:18:60:99:22:c4:a7:5f:6f: fc:77:fa:0d:b7:9f:03:55:63:85:36:88:77:18:35: 8d:3a:49:58:86:d4:e9:d3:d4:2d:27:77:e3:3b:71: 90:74:74:e6:49:2c:3b:0f:1f:30:9e:4a:24:a6:e6: f8:5c:30:6a:ce:fe:fd:47:85:c8:63:f8:89:47:67: 62:00:9c:6d:88:25:e9:7c:76:04:d4:fd:0a:13:58: 82:8a:8b:84:dd:24:36:cb:46:10:07:3b:3b:e0:f9: b6:fc:f9:96:68:14:6d:ae:8b:9b:f0:59:a8:f1:6d: 5b:ba:62:ca:44:be:33:83:71:f8:5e:98:cd:33:5d: ea:60:f1:6b:7b:33:0d:a4:d8:85:e8:ee:6d:f1:49: 46:58:ee:09:e9:a5:49:27:55:7b:6b:48:ef:30:d4: 90:de:52:f5:5b:1f:0a:31:99:55:dd:10:9c:b4:9a: 37:5a:95:40:47:e8:94:cf:c3:e1:9a:7b:08:25:68: ec:35:d1:e7:03:d8:4f:d3:3d:6c:0d:61:25:bb:f6: c7:78:1a:79:05:a8:b2:74:24:ba:10:0c:6b:21:f6: 79:38:0e:d7:44:1d:cf:34:bd:1b:ac:2a:a6:ca:45: 52:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F4:58:BD:16:8D:AB:E0:C0:7A:4D:22:1C:00:2E:CB:90:89:44:82 X509v3 Authority Key Identifier: keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:40:88:5b:15:ae:4a:75:ef:6a:ee:c1:7e:c3:cd:7f:36:99: 90:ff:76:fe:ea:53:06:d6:9b:5a:6e:f7:62:96:84:b5:c4:12: 8c:57:ad:c6:05:ca:ff:3a:72:e7:1e:14:78:40:90:14:cb:a2: a0:e0:5d:ff:fe:ca:65:9b:a1:d5:30:13:56:59:c7:22:76:12: 0b:70:2b:92:8c:78:cb:4b:23:fb:12:fe:9f:45:e4:21:71:f8: c1:86:68:b7:94:8a:cf:ca:46:99:85:2a:07:fb:05:11:22:ec: 9d:d5:ba:a4:54:a0:3b:4b:27:8c:b0:2c:63:42:8e:a6:af:b2: c6:2b:86:9c:4e:c2:9f:c3:6c:29:1e:f2:31:bd:5a:26:ce:3e: 57:a8:53:a8:2f:df:22:bd:88:1b:0e:f8:ca:4a:16:53:6d:72: 03:8b:eb:c5:b3:47:6d:d6:ca:7f:c7:7f:08:67:c7:d0:bc:ab: 3c:9d:a8:4c:f3:0f:66:e7:19:28:ad:09:a3:6d:c0:dd:78:aa: 17:be:18:9d:cf:25:7e:22:74:da:1f:34:d6:03:19:ef:1d:9a: 79:e2:89:94:7a:90:36:7f:fa:4e:ff:df:eb:76:37:f7:3d:a2: b8:3d:0b:5c:f1:c7:bf:ed:2a:2d:91:dc:23:69:6f:5f:1a:62: f1:20:49:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUclTKMJL0ADOnYavKL5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy ZGYwN2QwHhcNMjUxMjI2MTEwMTA3WhcNMjUxMjI3MTEwMTA3WjAzMTEwLwYDVQQD Eyg1YmY0NThiZDE2OGRhYmUwYzA3YTRkMjIxYzAwMmVjYjkwODk0NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZUCOyPIOxglx3GVsfGvEp/Y4zNP GGCZIsSnX2/8d/oNt58DVWOFNoh3GDWNOklYhtTp09QtJ3fjO3GQdHTmSSw7Dx8w nkokpub4XDBqzv79R4XIY/iJR2diAJxtiCXpfHYE1P0KE1iCiouE3SQ2y0YQBzs7 4Pm2/PmWaBRtroub8Fmo8W1bumLKRL4zg3H4XpjNM13qYPFrezMNpNiF6O5t8UlG WO4J6aVJJ1V7a0jvMNSQ3lL1Wx8KMZlV3RCctJo3WpVAR+iUz8PhmnsIJWjsNdHn A9hP0z1sDWElu/bHeBp5BaiydCS6EAxrIfZ5OA7XRB3PNL0brCqmykVSGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFv0WL0WjavgwHpNIhwALsuQiUSCMB8GA1UdIwQY MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt YjE1NTI0MDliNmQxLzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwkCIWxWu SnXvau7BfsPNfzaZkP92/upTBtabWm73YpaEtcQSjFetxgXK/zpy5x4UeECQFMui oOBd//7KZZuh1TATVlnHInYSC3Arkox4y0sj+xL+n0XkIXH4wYZot5SKz8pGmYUq B/sFESLsndW6pFSgO0snjLAsY0KOpq+yxiuGnE7Cn8NsKR7yMb1aJs4+V6hTqC/f Ir2IGw74ykoWU21yA4vrxbNHbdbKf8d/CGfH0LyrPJ2oTPMPZucZKK0Jo23A3Xiq F74Ync8lfiJ02h801gMZ7x2aeeKJlHqQNn/6Tv/f63Y39z2iuD0LXPHHv+0qLZHc I2lvXxpi8SBJAg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:27 2025 by rpki-client