This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft File: _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json) Hash identifier: b0PpzDOjPt9mxYbBCynSjiPhCEikaTaZfPhSUuXtt0c= Subject key identifier: 9D:03:64:8F:61:3A:44:1B:9E:19:AE:21:2C:1F:9E:FB:7B:F6:73:24 Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E Certificate issuer: /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e Certificate serial: 019B296552CD85D7F930E9B7E8594DA44DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft Manifest number: 0213 Signing time: Tue 16 Dec 2025 23:01:04 +0000 Manifest this update: Tue 16 Dec 2025 23:01:04 +0000 Manifest next update: Wed 17 Dec 2025 23:01:04 +0000 Files and hashes: 1: Z_12fyPWjJvCb6FBNMUkeSsk2Qk.roa (hash: a0cw7dhkqyFjfij3KupwibkS70jrF4XOR8zbXlfILTw=) 2: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: uXuaGddm+BxITSBkqNydQH0QLMEmWqS2ysr67RfU2Co=) 3: kRViFV84QiCQrgo4yYmWKRh5CzU.roa (hash: 6PeAm40biQyAtXjJ6bGkrq1TCpNcQvYYhMRNmz/ZkGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:65:52:cd:85:d7:f9:30:e9:b7:e8:59:4d:a4:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e Validity Not Before: Dec 16 23:01:04 2025 GMT Not After : Dec 17 23:01:04 2025 GMT Subject: CN=9d03648f613a441b9e19ae212c1f9efb7bf67324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:11:3f:90:6d:e9:46:8f:ec:91:0e:36:04: 91:74:ed:90:80:53:62:35:d2:ab:10:3d:86:31:64: 23:d8:e3:b2:75:10:71:3f:fd:4c:aa:b9:81:45:99: 37:65:a9:16:57:33:fa:a1:94:93:46:1d:0f:a8:53: a7:29:45:5d:49:38:da:09:ff:96:e1:fd:fe:26:f2: 81:8b:79:fd:4c:fc:c2:d0:36:bc:51:36:b4:5d:ca: 87:a8:33:de:0a:ab:8a:62:83:9d:70:1d:05:45:30: e5:78:f3:79:f5:8a:56:e8:53:3b:a7:54:a2:3b:c9: 54:dd:5e:5c:35:cf:66:f1:4a:a1:38:78:a9:84:4c: be:66:18:0c:d6:6e:d2:f3:a4:5b:61:68:a1:bc:1e: 94:85:ee:9b:0c:84:dc:ea:a7:12:33:e0:88:0f:7e: 27:42:8e:d2:35:6c:da:ba:37:9a:e3:9e:39:2c:06: 22:67:3c:6c:00:bf:29:fe:a0:91:9a:c6:cd:a7:ee: 1a:21:1d:99:ac:49:2e:62:d8:23:07:8a:b7:46:02: 3d:ae:a5:84:f1:8d:50:48:00:c4:e9:b9:db:e2:29: 9c:ff:44:38:16:5c:39:2a:0c:1f:e2:0e:dd:d4:a7: 86:9c:81:e7:0d:88:d0:cb:05:24:e0:0f:7e:09:15: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:03:64:8F:61:3A:44:1B:9E:19:AE:21:2C:1F:9E:FB:7B:F6:73:24 X509v3 Authority Key Identifier: keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3d:17:47:1a:6a:80:c7:1a:cf:81:9a:30:96:9a:f3:ea:6d: 3b:97:7a:91:79:6f:14:80:c7:ac:33:3a:cd:fb:88:57:6a:a0: de:af:5d:83:37:c3:88:b4:31:2f:8c:58:f5:be:c5:26:3a:6c: 9a:40:67:10:89:66:8f:c6:db:bc:38:91:dc:b9:59:59:bb:f9: 7a:9b:75:37:1d:1a:ec:fe:58:dd:a2:cf:fe:54:8d:10:b1:4a: 56:d0:ce:41:2a:53:df:71:27:fd:d8:7d:52:64:dc:2d:4f:cc: e4:ad:20:27:f6:e0:77:99:e6:5e:d1:ac:92:d4:3c:c3:b4:a9: 1e:b8:e6:41:85:aa:53:db:7d:57:39:7b:5e:94:6a:da:a7:a8: 44:0f:8c:2c:56:49:8f:7e:c9:d4:bf:d1:68:f7:08:a1:51:a3: a3:09:c7:b3:3a:9a:09:c7:da:fb:58:22:1b:33:71:fc:75:29: 14:3c:d3:76:41:33:cc:39:ec:81:22:c4:6a:83:e8:c8:55:20: 10:ee:25:14:30:02:81:e3:85:5e:23:12:88:d1:24:98:26:a1: 60:51:47:06:5e:83:76:05:2d:98:9b:b2:3c:40:27:49:5a:eb: a2:2f:9b:70:3c:ef:7d:c5:59:40:a2:69:63:d8:a4:0a:10:b2: 5d:6e:1d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspZVLNhdf5MOm36FlNpE2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYWY0MWQwNGJjNjg3ZDBmZjk4YWQ3ZDQwNzY4NDc1MWM0 NmNhM2UwHhcNMjUxMjE2MjMwMTA0WhcNMjUxMjE3MjMwMTA0WjAzMTEwLwYDVQQD Eyg5ZDAzNjQ4ZjYxM2E0NDFiOWUxOWFlMjEyYzFmOWVmYjdiZjY3MzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMwRP5Bt6UaP7JEONgSRdO2QgFNi NdKrED2GMWQj2OOydRBxP/1MqrmBRZk3ZakWVzP6oZSTRh0PqFOnKUVdSTjaCf+W 4f3+JvKBi3n9TPzC0Da8UTa0XcqHqDPeCquKYoOdcB0FRTDlePN59YpW6FM7p1Si O8lU3V5cNc9m8UqhOHiphEy+ZhgM1m7S86RbYWihvB6Uhe6bDITc6qcSM+CID34n Qo7SNWzaujea4545LAYiZzxsAL8p/qCRmsbNp+4aIR2ZrEkuYtgjB4q3RgI9rqWE 8Y1QSADE6bnb4imc/0Q4Flw5Kgwf4g7d1KeGnIHnDYjQywUk4A9+CRUvqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0DZI9hOkQbnhmuISwfnvt79nMkMB8GA1UdIwQY MBaAFP2vQdBLxofQ/5itfUB2hHUcRso+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEt ZWEyMDIxODAwMzQyLzEvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEtZWEyMDIxODAwMzQy LzEvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmT0XRxpq gMcaz4GaMJaa8+ptO5d6kXlvFIDHrDM6zfuIV2qg3q9dgzfDiLQxL4xY9b7FJjps mkBnEIlmj8bbvDiR3LlZWbv5ept1Nx0a7P5Y3aLP/lSNELFKVtDOQSpT33En/dh9 UmTcLU/M5K0gJ/bgd5nmXtGsktQ8w7SpHrjmQYWqU9t9Vzl7XpRq2qeoRA+MLFZJ j37J1L/RaPcIoVGjownHszqaCcfa+1giGzNx/HUpFDzTdkEzzDnsgSLEaoPoyFUg EO4lFDACgeOFXiMSiNEkmCahYFFHBl6DdgUtmJuyPEAnSVrroi+bcDzvfcVZQKJp Y9ikChCyXW4d8A== -----END CERTIFICATE-----Generated at Wed Dec 17 09:22:35 2025 by rpki-client