This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: OuC1zEixpAmWVaen98z/IE04MYeF/6SYX3F98n3ixko= Subject key identifier: FF:C1:48:46:46:F4:6E:B0:4E:7C:02:47:AC:16:7E:E6:F9:44:76:99 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019B0C36550ACDB6E2645A673F8648417269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 1563 Signing time: Thu 11 Dec 2025 07:00:45 +0000 Manifest this update: Thu 11 Dec 2025 07:00:45 +0000 Manifest next update: Fri 12 Dec 2025 07:00:45 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: b/r4y5S9fwYVlSlHZAIjW+6r0LbhLK7qJuz1r2ummGg=) 2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=) 3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=) 4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=) 5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:36:55:0a:cd:b6:e2:64:5a:67:3f:86:48:41:72:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Dec 11 07:00:45 2025 GMT Not After : Dec 12 07:00:45 2025 GMT Subject: CN=ffc1484646f46eb04e7c0247ac167ee6f9447699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:e1:33:68:ac:4a:bc:cd:91:53:e3:f7:8f: d1:b6:52:f7:4a:48:d1:64:dd:c5:ea:13:47:1e:60: ce:20:78:4d:d2:1c:c3:6e:86:42:3a:30:3c:54:26: 39:4f:3b:18:cc:54:66:52:75:26:51:f3:87:20:09: b4:45:32:72:3d:09:10:81:47:2e:c4:be:85:b6:4f: 95:a0:c4:44:1c:ee:31:fc:77:c5:6a:be:f4:35:10: f0:10:36:24:f1:af:3c:e8:c8:d0:90:b8:03:4c:78: e2:41:f8:d1:de:7a:70:a3:01:40:d4:79:ac:31:05: 37:ea:42:27:61:cc:73:18:c9:8a:ef:53:fd:48:d9: ea:95:2f:89:93:87:5e:7f:c3:3a:1d:61:15:af:6a: d8:70:6d:19:66:12:c1:78:ef:36:d3:92:6c:d8:31: 4e:6e:f5:f0:77:1a:81:22:c1:77:7a:88:fa:3d:78: e2:40:88:21:6c:36:de:83:48:34:4d:ba:13:bc:09: d6:86:d7:09:d8:bc:b4:f2:9f:16:52:1c:fd:bf:e0: aa:7d:25:c8:35:ca:f7:e3:67:5d:63:05:38:0c:3a: 88:ce:9d:91:d7:fc:85:fe:a7:f9:d6:16:7a:6b:7c: 10:26:19:5f:f6:ed:06:28:30:36:cb:c1:2e:ce:68: 2a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:48:46:46:F4:6E:B0:4E:7C:02:47:AC:16:7E:E6:F9:44:76:99 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b3:a5:bd:53:70:c4:c8:7a:b7:01:f9:24:52:42:11:88:5a: e2:0a:28:c0:c2:67:33:d2:26:2e:20:b1:cf:2a:55:c6:79:d8: 4e:be:6c:47:98:b2:be:c9:12:ff:74:57:e5:6c:bd:55:e9:ec: fd:f4:f1:8c:b8:f4:c2:9c:10:33:30:83:84:42:97:e1:ab:26: 0c:02:bd:e2:e7:ad:bd:77:4c:7f:6d:c8:c1:59:08:5e:22:26: c2:4c:a3:c9:c9:66:ad:4d:e3:c7:15:f4:02:24:58:3d:45:cf: 1d:27:e9:71:a3:7a:55:61:7b:e0:5d:cf:52:58:bc:9d:82:d9: 41:36:bd:f0:3f:3a:56:f4:ca:a5:1e:e2:23:24:f5:47:6d:c5: 99:89:9b:c6:18:a2:51:ed:3c:25:88:2b:eb:18:ff:7a:0a:98: ee:64:47:6e:7d:a7:b7:08:c3:ca:8a:0c:49:e4:5a:40:99:df: 7e:ac:2e:20:86:63:af:07:96:39:20:aa:61:1a:d8:59:7f:3a: fd:4d:56:a0:ac:4e:45:83:d5:91:ed:89:59:1d:88:68:3e:66: 4a:ad:47:b1:c0:34:84:3d:0c:e4:3d:f6:02:7e:db:97:3c:3b: a3:3a:e5:14:ec:df:34:be:cb:fc:1e:54:32:ac:88:a0:0d:8d: b8:72:68:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsMNlUKzbbiZFpnP4ZIQXJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjUxMjExMDcwMDQ1WhcNMjUxMjEyMDcwMDQ1WjAzMTEwLwYDVQQD EyhmZmMxNDg0NjQ2ZjQ2ZWIwNGU3YzAyNDdhYzE2N2VlNmY5NDQ3Njk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj/hM2isSrzNkVPj94/RtlL3SkjR ZN3F6hNHHmDOIHhN0hzDboZCOjA8VCY5TzsYzFRmUnUmUfOHIAm0RTJyPQkQgUcu xL6Ftk+VoMREHO4x/HfFar70NRDwEDYk8a886MjQkLgDTHjiQfjR3npwowFA1Hms MQU36kInYcxzGMmK71P9SNnqlS+Jk4def8M6HWEVr2rYcG0ZZhLBeO8205Js2DFO bvXwdxqBIsF3eoj6PXjiQIghbDbeg0g0TboTvAnWhtcJ2Ly08p8WUhz9v+CqfSXI Ncr342ddYwU4DDqIzp2R1/yF/qf51hZ6a3wQJhlf9u0GKDA2y8EuzmgqgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/BSEZG9G6wTnwCR6wWfub5RHaZMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7OlvVNw xMh6twH5JFJCEYha4goowMJnM9ImLiCxzypVxnnYTr5sR5iyvskS/3RX5Wy9Vens /fTxjLj0wpwQMzCDhEKX4asmDAK94uetvXdMf23IwVkIXiImwkyjyclmrU3jxxX0 AiRYPUXPHSfpcaN6VWF74F3PUli8nYLZQTa98D86VvTKpR7iIyT1R23FmYmbxhii Ue08JYgr6xj/egqY7mRHbn2ntwjDyooMSeRaQJnffqwuIIZjrweWOSCqYRrYWX86 /U1WoKxORYPVke2JWR2IaD5mSq1HscA0hD0M5D32An7blzw7ozrlFOzfNL7L/B5U MqyIoA2NuHJoew== -----END CERTIFICATE-----Generated at Thu Dec 11 14:17:26 2025 by rpki-client