This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json) Hash identifier: tg4KUIvrvRi00TA3n5Z50jowICxfUPGnnhaj1/89yHQ= Subject key identifier: D2:92:F9:20:2C:F4:7D:EE:39:E4:AF:52:6F:CA:D0:FC:29:05:65:7A Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Certificate serial: 019B4814CD0CB6F2650D2374EF4AC8A5FD31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft Manifest number: 0A88 Signing time: Mon 22 Dec 2025 22:01:21 +0000 Manifest this update: Mon 22 Dec 2025 22:01:21 +0000 Manifest next update: Tue 23 Dec 2025 22:01:21 +0000 Files and hashes: 1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: 3N6EK+ofcv6WoRDfK3ihrzxzPGXZ8EDoZzrdFjXkU4Y=) 2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:14:cd:0c:b6:f2:65:0d:23:74:ef:4a:c8:a5:fd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Validity Not Before: Dec 22 22:01:21 2025 GMT Not After : Dec 23 22:01:21 2025 GMT Subject: CN=d292f9202cf47dee39e4af526fcad0fc2905657a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:57:c2:b1:12:3a:dc:a8:0f:31:fe:ec:e8:de: f4:16:08:be:7b:22:f3:8e:d5:bf:38:3e:05:8e:1e: 2e:04:bd:44:10:22:e2:51:e8:bf:c4:67:7d:10:9c: 7e:82:07:41:9a:92:2f:92:25:51:18:14:ea:dd:79: 58:7f:60:65:de:f6:25:58:99:1c:c9:96:aa:b4:22: 32:8d:e4:ec:b4:fe:0b:58:2d:6c:d9:da:9d:a9:cd: d4:4d:3a:f0:61:d6:61:d4:78:67:ec:92:85:40:9e: 61:c8:06:72:f5:c5:12:10:2f:38:83:4a:30:8f:a0: 15:e1:09:e0:db:eb:a5:85:e9:16:87:56:75:ef:92: 65:30:5c:89:c2:cb:69:89:ae:84:23:5c:2d:cd:d7: b4:60:ff:f1:a9:10:75:73:4f:aa:c1:91:4f:3b:48: db:bc:f3:cb:65:39:0e:23:41:ae:b1:b8:c6:1f:54: 20:58:97:b5:7e:3f:59:18:73:8a:18:c9:e3:b8:2c: 70:94:5f:04:c3:a7:e2:89:93:62:0e:46:1e:3b:ca: 6b:11:26:81:68:ba:c1:12:1b:b7:70:97:7d:ae:58: a4:64:9c:ce:ec:5f:b8:d8:7e:0c:8e:6c:fe:b9:3d: 6c:77:0d:0f:53:c8:b9:b0:4d:28:e0:ab:a5:1a:8e: 5f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:92:F9:20:2C:F4:7D:EE:39:E4:AF:52:6F:CA:D0:FC:29:05:65:7A X509v3 Authority Key Identifier: keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f5:bd:93:9d:87:8d:55:dd:e7:6c:95:67:09:88:cf:66:2c: 0f:7f:ee:11:b5:b4:29:ee:ec:d2:2d:d3:7d:60:1e:7a:fa:6a: 89:2e:ed:40:22:00:51:eb:70:44:b3:e8:c3:cc:b3:20:b9:40: d2:e1:81:bb:9d:e3:37:a6:24:8b:33:ed:39:28:2f:e2:64:70: 9c:bd:aa:4c:8f:18:19:9f:6c:a6:73:ab:97:ed:04:3e:95:9b: 51:41:22:39:e5:1a:54:30:c7:26:bf:2e:ac:51:c8:71:74:94: 88:a4:52:57:96:fc:b0:a4:9b:21:ec:fb:38:92:1f:64:1c:5a: 5a:6c:17:05:7d:44:7e:6a:da:2a:49:ae:ef:7c:5c:51:ac:de: ae:d3:67:06:68:73:ac:0e:f8:b7:1b:d4:36:4a:de:46:3e:4a: c0:ce:54:78:27:ea:39:10:72:37:d3:08:ba:e5:ad:a5:b5:42: d6:bb:cd:98:55:2d:30:58:57:d6:4a:9b:0e:8f:76:3b:b0:9a: 9c:57:f3:19:fa:18:00:d7:1a:46:00:18:8f:07:a4:d5:03:16: 5a:f1:7f:74:1c:9c:71:c1:0d:74:d8:09:8f:76:80:ce:46:6d: be:c2:2d:86:a2:bd:e7:4f:4c:8f:e1:ac:7e:23:0e:9a:92:f3: fc:b2:0a:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFM0MtvJlDSN070rIpf0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTE2ZDdmMjhjZGJlOGIzZjU1ZDc1MzcyYWFkNGQzYjEw YmUwOWYwHhcNMjUxMjIyMjIwMTIxWhcNMjUxMjIzMjIwMTIxWjAzMTEwLwYDVQQD EyhkMjkyZjkyMDJjZjQ3ZGVlMzllNGFmNTI2ZmNhZDBmYzI5MDU2NTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFfCsRI63KgPMf7s6N70Fgi+eyLz jtW/OD4Fjh4uBL1EECLiUei/xGd9EJx+ggdBmpIvkiVRGBTq3XlYf2Bl3vYlWJkc yZaqtCIyjeTstP4LWC1s2dqdqc3UTTrwYdZh1Hhn7JKFQJ5hyAZy9cUSEC84g0ow j6AV4Qng2+ulhekWh1Z175JlMFyJwstpia6EI1wtzde0YP/xqRB1c0+qwZFPO0jb vPPLZTkOI0GusbjGH1QgWJe1fj9ZGHOKGMnjuCxwlF8Ew6fiiZNiDkYeO8prESaB aLrBEhu3cJd9rlikZJzO7F+42H4Mjmz+uT1sdw0PU8i5sE0o4KulGo5f8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNKS+SAs9H3uOeSvUm/K0PwpBWV6MB8GA1UdIwQY MBaAFPZRbX8ozb6LP1XXU3Kq1NOxC+CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2It ZTk3YWU1YzYwNTY4LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2ItZTk3YWU1YzYwNTY4 LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfW9k52H jVXd52yVZwmIz2YsD3/uEbW0Ke7s0i3TfWAeevpqiS7tQCIAUetwRLPow8yzILlA 0uGBu53jN6YkizPtOSgv4mRwnL2qTI8YGZ9spnOrl+0EPpWbUUEiOeUaVDDHJr8u rFHIcXSUiKRSV5b8sKSbIez7OJIfZBxaWmwXBX1EfmraKkmu73xcUazertNnBmhz rA74txvUNkreRj5KwM5UeCfqORByN9MIuuWtpbVC1rvNmFUtMFhX1kqbDo92O7Ca nFfzGfoYANcaRgAYjwek1QMWWvF/dBycccENdNgJj3aAzkZtvsIthqK9509Mj+Gs fiMOmpLz/LIKPQ== -----END CERTIFICATE-----Generated at Tue Dec 23 07:59:26 2025 by rpki-client