This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json) Hash identifier: MGAv1PrLeMnYKB+om7gJwITye2CFZiCiTJXmmn5HEgg= Subject key identifier: 55:72:17:C5:5A:93:A4:B8:23:D3:DA:1D:F2:34:DC:A8:91:54:82:65 Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Certificate serial: 019B1D983A0379E9A6598EBCAABF889D7A79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft Manifest number: 0681 Signing time: Sun 14 Dec 2025 16:01:14 +0000 Manifest this update: Sun 14 Dec 2025 16:01:14 +0000 Manifest next update: Mon 15 Dec 2025 16:01:14 +0000 Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: GKQbleIApNwig2quI9WgSpztud+Nvv0Sc7BC33/g5zU=) 2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1d:98:3a:03:79:e9:a6:59:8e:bc:aa:bf:88:9d:7a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Validity Not Before: Dec 14 16:01:14 2025 GMT Not After : Dec 15 16:01:14 2025 GMT Subject: CN=557217c55a93a4b823d3da1df234dca891548265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:3b:81:b9:11:f6:05:fc:9e:50:94:d6:20: df:9c:a4:1f:04:34:0b:b3:39:ae:e6:e1:88:3e:48: 9e:e5:a7:ad:c5:ed:2f:7b:53:11:2b:52:48:97:a0: 77:16:53:4d:1a:eb:ef:ac:01:a3:02:70:33:24:8c: 33:79:f2:84:35:a7:c4:82:32:95:91:5e:72:60:ec: c3:92:73:33:cb:a5:6f:14:8f:18:98:0b:0c:45:f7: 43:40:b8:71:0f:56:c2:09:7a:95:a6:20:02:59:20: 47:73:4c:49:8c:03:ad:45:80:94:31:b7:bb:80:db: eb:91:01:3c:a1:21:cd:97:a3:37:89:dc:ed:95:3a: e5:74:3a:9a:17:57:6d:75:8a:d3:49:ee:59:7c:4f: bf:37:b4:d6:d6:f9:85:c9:62:8b:2a:db:b2:92:92: 78:8a:79:2c:d0:02:ca:d4:fe:55:0e:f3:2e:61:4b: 84:56:9a:f0:60:93:9f:72:46:dd:d0:20:32:e1:dd: 6b:01:f4:86:c4:b5:a7:e3:d8:b6:28:b3:d8:2c:70: da:00:cb:6e:2c:50:08:cf:6f:db:08:d3:c9:8d:d0: 4a:5d:11:dc:3e:b5:99:0c:96:75:f0:b7:8b:c2:7d: 80:11:15:33:47:4f:16:99:da:eb:71:47:56:9b:89: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:72:17:C5:5A:93:A4:B8:23:D3:DA:1D:F2:34:DC:A8:91:54:82:65 X509v3 Authority Key Identifier: keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:de:c4:50:df:31:d3:95:f1:2f:44:a5:b3:ed:0f:52:d5:8e: ce:d9:b4:b1:ba:87:13:15:80:00:79:e4:4d:4a:2a:90:40:af: 31:44:7f:dc:0b:3e:ce:12:09:ef:42:bd:77:2a:f5:d5:4d:86: e3:44:b9:c2:c7:d0:ec:0c:90:b2:d8:a7:1e:43:da:b2:86:20: 9e:c4:96:47:6c:fc:d7:58:79:d6:47:1b:25:6b:1d:41:6e:32: 24:53:5a:e6:c3:9d:1d:a4:08:4b:bf:c0:18:36:4b:e1:ec:72: 3f:50:4a:39:a6:73:09:ed:f8:8d:6b:22:be:7a:2b:09:97:5c: ea:dd:7e:f1:e4:3b:8f:c8:be:e4:dc:62:0f:28:b9:b2:2a:ea: 4d:c8:6b:4c:bb:62:35:fc:cf:82:d5:ac:e6:16:f2:8f:5f:19: 33:c7:52:e8:13:92:07:0c:72:29:35:f2:07:6a:41:06:1e:97: c1:fc:82:c3:c1:3d:ce:9e:55:c8:5a:a2:38:31:f7:02:ca:00: 79:c9:06:3c:88:d0:1d:61:63:b4:48:9e:7d:52:12:1b:86:b4: 66:8c:8e:42:da:5a:e1:fa:27:d3:66:f3:8d:71:b4:e9:f5:2b: 98:06:a2:8c:03:fd:0e:7b:17:fd:53:2f:7a:28:eb:b5:f1:81: c8:51:2b:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsdmDoDeemmWY68qr+InXp5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4 NWNmYzIwHhcNMjUxMjE0MTYwMTE0WhcNMjUxMjE1MTYwMTE0WjAzMTEwLwYDVQQD Eyg1NTcyMTdjNTVhOTNhNGI4MjNkM2RhMWRmMjM0ZGNhODkxNTQ4MjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSU7gbkR9gX8nlCU1iDfnKQfBDQL szmu5uGIPkie5aetxe0ve1MRK1JIl6B3FlNNGuvvrAGjAnAzJIwzefKENafEgjKV kV5yYOzDknMzy6VvFI8YmAsMRfdDQLhxD1bCCXqVpiACWSBHc0xJjAOtRYCUMbe7 gNvrkQE8oSHNl6M3idztlTrldDqaF1dtdYrTSe5ZfE+/N7TW1vmFyWKLKtuykpJ4 inks0ALK1P5VDvMuYUuEVprwYJOfckbd0CAy4d1rAfSGxLWn49i2KLPYLHDaAMtu LFAIz2/bCNPJjdBKXRHcPrWZDJZ18LeLwn2AERUzR08WmdrrcUdWm4mlkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFVyF8Vak6S4I9PaHfI03KiRVIJlMB8GA1UdIwQY MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2 LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO97EUN8x 05XxL0Sls+0PUtWOztm0sbqHExWAAHnkTUoqkECvMUR/3As+zhIJ70K9dyr11U2G 40S5wsfQ7AyQstinHkPasoYgnsSWR2z811h51kcbJWsdQW4yJFNa5sOdHaQIS7/A GDZL4exyP1BKOaZzCe34jWsivnorCZdc6t1+8eQ7j8i+5NxiDyi5sirqTchrTLti NfzPgtWs5hbyj18ZM8dS6BOSBwxyKTXyB2pBBh6XwfyCw8E9zp5VyFqiODH3AsoA eckGPIjQHWFjtEiefVISG4a0ZoyOQtpa4fon02bzjXG06fUrmAaijAP9DnsX/VMv eijrtfGByFErOA== -----END CERTIFICATE-----Generated at Sun Dec 14 21:40:04 2025 by rpki-client