This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json) Hash identifier: O7HxYGGQfjpjJ2VZ1YGHeluuXJInLu6yf8UHqF/zVPE= Subject key identifier: 02:55:1D:00:53:53:9C:84:F7:97:09:95:BD:AC:E3:D5:40:C4:DF:D9 Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019AF42E80D41D84516AC8758404341BD64D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft Manifest number: 1777 Signing time: Sat 06 Dec 2025 15:01:19 +0000 Manifest this update: Sat 06 Dec 2025 15:01:19 +0000 Manifest next update: Sun 07 Dec 2025 15:01:19 +0000 Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: In0oLbHr5nP6ilsKFnDCBqwLWUa4snecNBA48A8U3AM=) 2: CegXcjWKkYbf_Mtu-eu8FyZqxu4.roa (hash: JzYcfLcp0NWOaqlj/D/2sPVuBUCIgNaQuV9Yb0hBAUo=) 3: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=) 4: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=) 5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=) 6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=) 7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=) 8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:80:d4:1d:84:51:6a:c8:75:84:04:34:1b:d6:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Dec 6 15:01:19 2025 GMT Not After : Dec 7 15:01:19 2025 GMT Subject: CN=02551d0053539c84f7970995bdace3d540c4dfd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7a:fb:54:25:c0:b2:57:3c:0e:18:80:5f:7a: 29:1c:80:e6:14:00:ba:a7:c1:39:20:1a:f1:36:78: bb:e0:d8:a6:db:72:03:b2:e0:2d:ca:cb:b9:04:a4: 90:ae:76:65:ce:07:41:52:68:43:a0:07:02:25:75: 8b:45:77:00:a9:75:2f:af:f8:b1:69:f9:04:bf:a9: ea:d1:07:7b:99:a0:14:36:cd:15:3e:fa:24:71:c5: 99:c1:ce:fd:7d:f1:f2:e4:eb:22:29:1c:f0:9b:8f: f5:c0:86:28:f9:1a:5e:3a:30:c4:e5:82:b8:34:43: d1:44:22:00:09:d5:fa:bf:7f:ba:c0:f1:c8:95:f6: f9:26:0f:6b:64:f6:43:2c:27:2f:53:6d:4e:97:6a: db:5a:a4:43:79:0f:9c:f2:f6:33:96:f1:fa:cd:32: 32:cd:4a:e1:e9:9e:37:2e:38:ad:02:47:41:b6:97: b1:e8:23:6a:ea:9f:13:52:ae:b8:94:80:f2:59:21: c2:fd:f1:f9:2c:04:7b:52:7a:5c:60:93:1e:40:ec: 04:45:39:6c:9c:0b:19:ec:37:47:76:fe:6d:45:1e: eb:a4:a6:e2:29:9b:09:69:c3:c5:b9:02:2f:b6:31: 68:3c:b5:40:b6:26:47:c1:5e:10:f6:0b:04:cc:68: 62:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:55:1D:00:53:53:9C:84:F7:97:09:95:BD:AC:E3:D5:40:C4:DF:D9 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:90:bb:51:e8:36:c4:03:38:b2:a5:46:9a:ba:2a:56:ec:54: 6d:f9:db:86:ca:85:f8:67:21:da:c9:7c:c0:e6:c6:92:42:ba: b3:2f:dd:42:74:22:95:47:29:3a:a6:a9:8e:16:79:a9:49:9b: de:d1:08:b3:51:ba:55:9b:ba:5e:b3:c6:13:f0:24:94:6c:c7: 5a:b1:7a:c7:60:55:40:41:e5:94:b1:72:86:a6:42:e1:ad:a7: 4c:05:00:1c:37:7f:d3:07:5f:46:53:99:9c:b2:3e:ff:4e:23: 02:b0:21:53:80:a2:90:fc:c4:23:ad:21:80:ae:66:e2:65:7f: 32:60:b4:df:4e:b4:6e:fd:77:6a:f4:38:73:fa:4e:f7:81:55: 8b:cb:3f:af:96:ce:de:3b:2b:53:60:c7:b5:6f:64:0d:5b:83: 00:80:e6:0b:04:af:42:d5:d5:ac:0f:c8:f0:4a:f1:24:6f:eb: 9f:62:b5:b6:48:18:00:48:a4:6b:39:00:a8:4e:1b:c8:fc:f1: bb:f1:82:e2:d6:ca:86:69:89:09:64:51:d7:2f:f8:c2:b8:63: 30:d9:12:6f:a1:ce:83:5e:43:68:ea:d7:1a:ff:e8:38:9d:d6: 77:cc:1e:da:09:e6:8d:ba:db:30:02:b8:62:4b:05:7e:cb:7c: f0:ea:57:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LoDUHYRRash1hAQ0G9ZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjUxMjA2MTUwMTE5WhcNMjUxMjA3MTUwMTE5WjAzMTEwLwYDVQQD EygwMjU1MWQwMDUzNTM5Yzg0Zjc5NzA5OTViZGFjZTNkNTQwYzRkZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3r7VCXAslc8DhiAX3opHIDmFAC6 p8E5IBrxNni74Nim23IDsuAtysu5BKSQrnZlzgdBUmhDoAcCJXWLRXcAqXUvr/ix afkEv6nq0Qd7maAUNs0VPvokccWZwc79ffHy5OsiKRzwm4/1wIYo+RpeOjDE5YK4 NEPRRCIACdX6v3+6wPHIlfb5Jg9rZPZDLCcvU21Ol2rbWqRDeQ+c8vYzlvH6zTIy zUrh6Z43LjitAkdBtpex6CNq6p8TUq64lIDyWSHC/fH5LAR7UnpcYJMeQOwERTls nAsZ7DdHdv5tRR7rpKbiKZsJacPFuQIvtjFoPLVAtiZHwV4Q9gsEzGhixQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJVHQBTU5yE95cJlb2s49VAxN/ZMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJC7Ueg2 xAM4sqVGmroqVuxUbfnbhsqF+Gch2sl8wObGkkK6sy/dQnQilUcpOqapjhZ5qUmb 3tEIs1G6VZu6XrPGE/AklGzHWrF6x2BVQEHllLFyhqZC4a2nTAUAHDd/0wdfRlOZ nLI+/04jArAhU4CikPzEI60hgK5m4mV/MmC03060bv13avQ4c/pO94FVi8s/r5bO 3jsrU2DHtW9kDVuDAIDmCwSvQtXVrA/I8ErxJG/rn2K1tkgYAEikazkAqE4byPzx u/GC4tbKhmmJCWRR1y/4wrhjMNkSb6HOg15DaOrXGv/oOJ3Wd8we2gnmjbrbMAK4 YksFfst88OpXpw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:35 2025 by rpki-client