This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json) Hash identifier: yXFhdNk7QwVreHqFE9/Y140EpEMcVoQB0A3xMmW0glY= Subject key identifier: 0C:65:4A:BB:8E:E8:84:2E:28:31:84:CC:96:C2:84:BC:69:A6:AE:B7 Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Certificate serial: 019B5976C656E235A62EB89AE81037F2791B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft Manifest number: 106F Signing time: Fri 26 Dec 2025 07:01:54 +0000 Manifest this update: Fri 26 Dec 2025 07:01:54 +0000 Manifest next update: Sat 27 Dec 2025 07:01:54 +0000 Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=) 2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: M7959/vAF8TG5eyQnbVjKOpnx/Evm2Px0o1XvtHJV/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:c6:56:e2:35:a6:2e:b8:9a:e8:10:37:f2:79:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Validity Not Before: Dec 26 07:01:54 2025 GMT Not After : Dec 27 07:01:54 2025 GMT Subject: CN=0c654abb8ee8842e283184cc96c284bc69a6aeb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7d:c1:8f:c2:bd:b4:ab:09:27:ad:ea:d6:3c: de:31:26:17:1c:6b:4c:4d:22:71:ab:84:cd:56:24: 25:f2:4d:a4:77:de:a3:73:3d:93:31:fb:ed:a6:db: 00:70:06:c6:6e:c5:65:28:e1:31:33:ef:7a:81:0d: 6a:5f:37:43:0a:5d:6e:e9:ad:c5:b6:47:c2:9b:ac: e7:04:11:a0:c5:d9:f2:b9:f5:2b:4d:05:b0:ab:a3: c0:5d:4c:28:2e:67:62:ab:8a:8d:49:cd:b6:1a:65: b0:37:33:7a:f6:4b:ba:8d:ff:b0:25:15:02:2d:ef: 1f:8a:e1:74:1e:b7:a3:4c:37:42:4c:3d:1c:54:2c: 1b:ca:44:43:02:0c:50:0d:57:4f:c8:09:c1:3c:f5: 93:b0:56:de:1a:cc:1e:c3:de:2a:07:ca:12:8f:8a: 66:65:c1:78:4e:9e:00:77:82:79:1b:0d:b0:9f:91: c7:5a:71:e7:b9:9e:4a:8e:e4:57:64:c9:59:f4:77: 20:70:7c:56:5a:c6:05:40:f6:da:ff:29:fc:28:6e: c7:43:05:4f:f1:b7:b1:71:bd:6b:79:8b:11:10:1d: d8:bb:36:41:c0:cb:26:18:76:e2:b9:e3:18:13:c1: 71:0e:be:ba:a8:77:23:ce:6e:5b:c4:ae:97:21:66: 90:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:65:4A:BB:8E:E8:84:2E:28:31:84:CC:96:C2:84:BC:69:A6:AE:B7 X509v3 Authority Key Identifier: keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a6:4a:14:b8:d8:5a:48:80:40:bc:ac:03:51:eb:f3:ff:36: 36:45:8e:39:75:16:5a:e4:f6:2a:04:0f:26:96:86:ae:e9:2f: 88:93:fb:2a:19:ea:83:8d:a9:41:19:e3:13:e1:e0:15:f2:01: db:ef:ea:64:6a:cf:04:bf:cc:f1:8f:2b:19:8c:98:01:47:d4: 5e:49:34:12:5f:1d:ca:71:aa:29:01:7c:b7:04:de:44:42:c9: f3:7c:b8:4d:95:c0:66:f8:70:e1:7b:c9:09:99:61:56:6b:d7: 12:3c:2f:c6:62:bd:c9:91:df:a5:8c:be:40:33:e7:3d:5f:12: 08:99:41:8b:1f:d7:64:7f:fc:35:0a:4d:de:50:c3:1c:73:9c: 8c:91:97:7a:13:42:bc:9c:90:0e:b1:41:fd:e4:e0:bb:04:49: 56:e8:3f:e4:f8:87:5b:0c:b4:0e:53:83:64:5d:e0:5a:2d:8c: 85:61:f6:ae:57:e4:08:3b:76:fd:14:b2:f1:ac:f8:c7:22:f4: 4c:69:1b:05:9c:80:4b:cc:a0:3b:fd:e3:5a:b6:07:bb:d3:8a: 3d:93:cd:bd:2f:a1:78:cb:e7:52:f2:0f:05:2d:f1:3e:6e:6d: 78:b2:ff:50:9d:cf:cb:f1:d2:25:e2:8e:e0:2a:d2:30:94:3b: 92:e9:6c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdsZW4jWmLria6BA38nkbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm NTE3OGEwHhcNMjUxMjI2MDcwMTU0WhcNMjUxMjI3MDcwMTU0WjAzMTEwLwYDVQQD EygwYzY1NGFiYjhlZTg4NDJlMjgzMTg0Y2M5NmMyODRiYzY5YTZhZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln3Bj8K9tKsJJ63q1jzeMSYXHGtM TSJxq4TNViQl8k2kd96jcz2TMfvtptsAcAbGbsVlKOExM+96gQ1qXzdDCl1u6a3F tkfCm6znBBGgxdnyufUrTQWwq6PAXUwoLmdiq4qNSc22GmWwNzN69ku6jf+wJRUC Le8fiuF0HrejTDdCTD0cVCwbykRDAgxQDVdPyAnBPPWTsFbeGswew94qB8oSj4pm ZcF4Tp4Ad4J5Gw2wn5HHWnHnuZ5KjuRXZMlZ9HcgcHxWWsYFQPba/yn8KG7HQwVP 8bexcb1reYsREB3YuzZBwMsmGHbiueMYE8FxDr66qHcjzm5bxK6XIWaQAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxlSruO6IQuKDGEzJbChLxppq63MB8GA1UdIwQY MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5 LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASaZKFLjY WkiAQLysA1Hr8/82NkWOOXUWWuT2KgQPJpaGrukviJP7Khnqg42pQRnjE+HgFfIB 2+/qZGrPBL/M8Y8rGYyYAUfUXkk0El8dynGqKQF8twTeRELJ83y4TZXAZvhw4XvJ CZlhVmvXEjwvxmK9yZHfpYy+QDPnPV8SCJlBix/XZH/8NQpN3lDDHHOcjJGXehNC vJyQDrFB/eTguwRJVug/5PiHWwy0DlODZF3gWi2MhWH2rlfkCDt2/RSy8az4xyL0 TGkbBZyAS8ygO/3jWrYHu9OKPZPNvS+heMvnUvIPBS3xPm5teLL/UJ3Py/HSJeKO 4CrSMJQ7kulspA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:29 2025 by rpki-client