This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json) Hash identifier: YRma2C3C2zXUoqpOymJHwk73s6DXbuPX2D7dUfQYEqo= Subject key identifier: C9:55:BC:F2:CF:A7:37:5C:6D:9F:0F:2B:FD:DD:20:E5:F0:1D:97:29 Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Certificate serial: 019B5976F52B86B83E8FFED85F8251E65A58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft Manifest number: 0C8B Signing time: Fri 26 Dec 2025 07:02:06 +0000 Manifest this update: Fri 26 Dec 2025 07:02:06 +0000 Manifest next update: Sat 27 Dec 2025 07:02:06 +0000 Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: 2t+VIxnA6eShh4uhG3dwJZRjYWSyurjMoL4f+gE4xrw=) 2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:f5:2b:86:b8:3e:8f:fe:d8:5f:82:51:e6:5a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Validity Not Before: Dec 26 07:02:06 2025 GMT Not After : Dec 27 07:02:06 2025 GMT Subject: CN=c955bcf2cfa7375c6d9f0f2bfddd20e5f01d9729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:b7:2c:c0:7a:42:44:d6:54:ab:f4:a7:3b: 7e:a3:04:b3:d6:78:ed:6a:20:e6:c7:7b:a1:e4:38: 24:c7:54:c1:0b:68:0b:b8:49:f6:48:45:71:9b:29: ae:7b:9f:40:38:3f:9e:20:cd:ee:09:43:24:86:07: 9d:12:d3:26:e4:fb:c4:21:5a:74:33:ad:15:8b:21: 3d:5f:30:bd:fd:b8:8b:3b:56:08:3f:ee:77:ce:2a: 73:8c:55:3b:5c:39:c5:b2:c9:95:8f:e9:b4:3a:76: a6:a9:33:46:4a:40:0c:89:54:f2:f5:d6:f4:2d:53: fb:dd:45:cf:97:2e:a4:aa:d9:47:ac:5e:b6:ac:75: 08:69:42:a1:c8:52:a1:49:95:1e:e8:7b:0e:02:50: 10:a7:57:26:fc:2b:1e:53:a6:df:f9:2a:98:c4:06: 3d:ba:e7:fe:ea:a9:4c:7e:49:30:f3:32:ac:0f:3b: dc:1e:8b:60:81:68:8d:62:3b:2a:d7:4d:2e:23:bb: 55:3e:e2:d5:0e:51:60:8f:75:64:f6:40:c0:b3:a5: 6b:1b:3e:1d:fe:cd:be:cc:88:4d:6a:df:1e:52:c7: 01:6c:5a:cf:56:70:82:b2:60:ef:04:a3:5f:2f:b5: ff:b1:5d:8b:39:25:6d:1a:bf:10:38:21:53:22:88: 48:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:55:BC:F2:CF:A7:37:5C:6D:9F:0F:2B:FD:DD:20:E5:F0:1D:97:29 X509v3 Authority Key Identifier: keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:45:0e:c5:84:83:9b:c2:59:33:c3:16:70:d3:01:f5:c4:71: fe:e3:b6:f8:38:98:5a:c8:28:41:bf:ac:25:45:45:9d:a3:c4: d6:46:e8:ea:0d:a2:ed:f5:5f:01:35:0f:e7:16:a0:fd:fa:6b: ed:ba:c5:41:50:b8:13:af:b9:09:72:d9:60:52:1e:86:27:79: 82:b5:b8:ea:81:ab:7b:b4:91:a0:94:b0:7a:44:c5:b3:3d:a8: 94:7e:a8:de:2f:06:2d:f9:3f:c6:68:79:c0:d5:25:b3:0a:2e: 1e:b5:1c:6b:5e:f7:1c:18:f3:00:94:d3:ef:21:6a:df:5f:11: 4d:59:30:de:1a:39:7b:e3:d6:d4:22:8d:39:d1:6c:7f:21:bb: bf:ec:3b:2b:5c:a6:c2:40:09:f5:ab:ba:e1:45:5b:4a:ce:90: a8:a2:1a:ea:2b:05:61:5e:7f:3e:55:d0:a2:6b:1c:94:a0:e0: b9:54:f9:87:1b:d7:af:26:00:40:57:f3:50:5a:67:85:5e:f5: 9b:52:1f:c9:14:a2:1c:a6:4a:94:61:6e:1b:b3:bb:d7:a5:78: 24:07:9b:e7:a6:03:df:88:94:97:22:0e:92:70:1f:a4:f6:c5: d2:cb:01:71:9d:ab:2a:6b:7d:59:a7:48:6f:d3:05:1a:c0:56: 7a:a1:3a:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvUrhrg+j/7YX4JR5lpYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2 NmU3ZGUwHhcNMjUxMjI2MDcwMjA2WhcNMjUxMjI3MDcwMjA2WjAzMTEwLwYDVQQD EyhjOTU1YmNmMmNmYTczNzVjNmQ5ZjBmMmJmZGRkMjBlNWYwMWQ5NzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbG3LMB6QkTWVKv0pzt+owSz1njt aiDmx3uh5Dgkx1TBC2gLuEn2SEVxmymue59AOD+eIM3uCUMkhgedEtMm5PvEIVp0 M60ViyE9XzC9/biLO1YIP+53zipzjFU7XDnFssmVj+m0OnamqTNGSkAMiVTy9db0 LVP73UXPly6kqtlHrF62rHUIaUKhyFKhSZUe6HsOAlAQp1cm/CseU6bf+SqYxAY9 uuf+6qlMfkkw8zKsDzvcHotggWiNYjsq100uI7tVPuLVDlFgj3Vk9kDAs6VrGz4d /s2+zIhNat8eUscBbFrPVnCCsmDvBKNfL7X/sV2LOSVtGr8QOCFTIohIpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlVvPLPpzdcbZ8PK/3dIOXwHZcpMB8GA1UdIwQY MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0 LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA30UOxYSD m8JZM8MWcNMB9cRx/uO2+DiYWsgoQb+sJUVFnaPE1kbo6g2i7fVfATUP5xag/fpr 7brFQVC4E6+5CXLZYFIehid5grW46oGre7SRoJSwekTFsz2olH6o3i8GLfk/xmh5 wNUlswouHrUca173HBjzAJTT7yFq318RTVkw3ho5e+PW1CKNOdFsfyG7v+w7K1ym wkAJ9au64UVbSs6QqKIa6isFYV5/PlXQomsclKDguVT5hxvXryYAQFfzUFpnhV71 m1IfyRSiHKZKlGFuG7O716V4JAeb56YD34iUlyIOknAfpPbF0ssBcZ2rKmt9WadI b9MFGsBWeqE6ow== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:01 2025 by rpki-client