This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json) Hash identifier: XLj04XfglVufwnLmTZ7KalpMtHrrTMOjnnikE7bB3+Y= Subject key identifier: 46:35:D4:A8:83:50:41:A5:75:98:02:F1:88:94:CB:4E:CE:3F:4B:DC Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41 Certificate serial: 019B206287DDFDF21E7976806CE55FE53BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft Manifest number: 0648 Signing time: Mon 15 Dec 2025 05:01:26 +0000 Manifest this update: Mon 15 Dec 2025 05:01:26 +0000 Manifest next update: Tue 16 Dec 2025 05:01:26 +0000 Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: tC4723eE8jW2SvErM4xS9OTLkNTvz5CtcjifByz0v5I=) 2: 9JJ19zbpfgmK5cWw4_TivjNeu1c.roa (hash: nwELuyNPxarY0R8dzJoxHRf1m9BsPwpa7s4U5L6T37U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 05:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:62:87:dd:fd:f2:1e:79:76:80:6c:e5:5f:e5:3b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41 Validity Not Before: Dec 15 05:01:26 2025 GMT Not After : Dec 16 05:01:26 2025 GMT Subject: CN=4635d4a8835041a5759802f18894cb4ece3f4bdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bd:63:e6:a1:4a:8f:86:0e:a2:3f:7c:92:23: 64:1f:f6:cb:2a:04:b5:e4:53:ff:3e:f8:44:f1:34: 42:2b:85:bf:b2:90:a1:87:0b:29:fb:23:21:bc:b1: af:4e:86:5b:42:e6:47:d0:60:4e:00:ef:0d:8a:52: 5c:b7:e8:81:9e:8e:d2:8f:53:11:26:89:07:b7:cd: f9:ae:78:30:96:ff:1d:47:5d:25:33:b6:4a:08:68: 20:ae:01:7c:16:fc:d2:73:7a:4e:1e:8b:11:67:91: 4c:cf:56:9e:46:03:4b:70:3c:eb:03:4b:82:c8:93: ec:21:74:e6:14:03:fe:97:79:40:c5:5e:ee:c5:e7: 9b:90:48:85:60:37:f9:30:86:86:69:77:3b:32:80: 38:a3:b3:1e:12:31:0b:65:76:72:0e:7f:49:d0:59: 9f:ab:21:b4:55:e1:f4:c6:c5:f0:21:52:93:6a:97: 60:40:e1:49:32:dd:bd:5e:63:a4:c8:3e:8a:10:2f: bf:e2:d5:01:42:72:4b:64:f5:02:73:5f:ad:50:fd: 51:73:92:58:20:9f:c0:8f:86:c6:db:e0:8f:eb:40: 0e:1a:9b:58:a5:be:e5:14:71:1d:5a:39:e0:a5:c3: f6:f8:da:d3:53:36:0c:67:f7:e0:df:df:b8:da:b2: 4f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:D4:A8:83:50:41:A5:75:98:02:F1:88:94:CB:4E:CE:3F:4B:DC X509v3 Authority Key Identifier: keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:36:5b:8c:09:d9:25:24:4a:0c:e9:8d:5b:9b:6a:a4:ca:32: 20:b2:61:5d:dd:0d:cb:c6:e3:50:c6:be:c1:4e:4c:4a:0d:0b: 85:89:15:4b:63:bb:00:e0:35:1d:ab:ea:9b:08:8e:6b:88:32: 89:ad:7b:a8:56:f9:d0:aa:a3:4f:5f:bb:4c:75:94:89:11:6d: 95:d5:9e:f7:d5:d8:93:0b:7d:e2:c9:4a:5b:de:6c:40:07:05: d0:7a:25:3e:ae:07:8e:72:79:6e:0f:b2:02:8f:e6:84:0e:fd: b5:35:e5:c7:d4:fe:e0:2b:cd:2b:7a:44:cb:0e:e4:dd:2f:8b: 81:2a:f5:cd:01:69:45:5f:8e:d6:81:66:a9:c9:87:a4:85:56: 67:32:ac:01:81:11:24:1e:b5:01:34:30:0b:43:aa:ee:c5:c8: 45:55:b2:ea:b1:ab:e7:3f:e0:d9:bb:d0:35:cb:d4:d4:79:68: 70:93:6b:47:62:6c:be:c8:bc:bf:39:0b:69:c9:fc:49:24:bf: 5f:6e:6b:a9:a5:14:4e:dc:c1:71:e0:40:ad:e9:70:6e:21:e2: 59:b1:ec:f4:e3:27:aa:e9:fe:59:ff:7b:ac:eb:a6:2f:3a:04: 11:f0:a6:0c:9e:76:83:37:74:67:1a:8f:e3:42:3a:f0:c0:62: 47:86:b6:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgYofd/fIeeXaAbOVf5TvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4 MzBmNDEwHhcNMjUxMjE1MDUwMTI2WhcNMjUxMjE2MDUwMTI2WjAzMTEwLwYDVQQD Eyg0NjM1ZDRhODgzNTA0MWE1NzU5ODAyZjE4ODk0Y2I0ZWNlM2Y0YmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr1j5qFKj4YOoj98kiNkH/bLKgS1 5FP/PvhE8TRCK4W/spChhwsp+yMhvLGvToZbQuZH0GBOAO8NilJct+iBno7Sj1MR JokHt835rngwlv8dR10lM7ZKCGggrgF8FvzSc3pOHosRZ5FMz1aeRgNLcDzrA0uC yJPsIXTmFAP+l3lAxV7uxeebkEiFYDf5MIaGaXc7MoA4o7MeEjELZXZyDn9J0Fmf qyG0VeH0xsXwIVKTapdgQOFJMt29XmOkyD6KEC+/4tUBQnJLZPUCc1+tUP1Rc5JY IJ/Aj4bG2+CP60AOGptYpb7lFHEdWjngpcP2+NrTUzYMZ/fg39+42rJPgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEY11KiDUEGldZgC8YiUy07OP0vcMB8GA1UdIwQY MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1 LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzZbjAnZ JSRKDOmNW5tqpMoyILJhXd0Ny8bjUMa+wU5MSg0LhYkVS2O7AOA1HavqmwiOa4gy ia17qFb50KqjT1+7THWUiRFtldWe99XYkwt94slKW95sQAcF0HolPq4HjnJ5bg+y Ao/mhA79tTXlx9T+4CvNK3pEyw7k3S+LgSr1zQFpRV+O1oFmqcmHpIVWZzKsAYER JB61ATQwC0Oq7sXIRVWy6rGr5z/g2bvQNcvU1HlocJNrR2Jsvsi8vzkLacn8SSS/ X25rqaUUTtzBceBArelwbiHiWbHs9OMnqun+Wf97rOumLzoEEfCmDJ52gzd0ZxqP 40I68MBiR4a2zw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:19:17 2025 by rpki-client