This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft File: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft (raw, json) Hash identifier: xcJpVBKtOf3u/3ljx2eN4KrX1ou63CI0jWftMY3XtDo= Subject key identifier: 14:CA:5E:63:46:76:D9:62:AD:48:97:DF:2C:ED:92:B5:C9:B0:F4:52 Authority key identifier: F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4 Certificate issuer: /CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4 Certificate serial: 019B42B74ADCA0779C3E733C408587A2D378 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft Manifest number: 0336 Signing time: Sun 21 Dec 2025 21:01:06 +0000 Manifest this update: Sun 21 Dec 2025 21:01:06 +0000 Manifest next update: Mon 22 Dec 2025 21:01:06 +0000 Files and hashes: 1: 9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl (hash: suq2DwKzz2Gj8r0afThivLBCTDZv8nwmxYXWiXnGJlg=) 2: PPSqCB6yaGdvCZ-tsYoPWq8l0VU.roa (hash: LL8gW3Q1TN3/WR1DSBlXf67Lrrr8/Z0DptcYdMs1Ro4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:4a:dc:a0:77:9c:3e:73:3c:40:85:87:a2:d3:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4fa758ee1d32a1cbd94646faf436d7b8d809ea4 Validity Not Before: Dec 21 21:01:06 2025 GMT Not After : Dec 22 21:01:06 2025 GMT Subject: CN=14ca5e634676d962ad4897df2ced92b5c9b0f452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:01:f7:aa:98:f5:83:32:c5:c0:d0:ca:a4:26: 70:d9:4c:5c:80:36:1c:da:40:74:9a:69:80:3d:8b: 60:68:0c:9f:89:ab:73:80:9a:49:cd:96:83:41:18: a7:3a:84:f9:e8:35:ec:3b:d5:d0:ea:4c:87:08:b7: 86:82:07:c7:38:a7:4c:59:a1:60:4e:d4:74:18:55: 4f:d8:b5:41:7e:c7:81:0d:75:ea:4d:2a:8b:90:21: ca:41:c1:88:4b:87:03:c5:c8:15:4f:d2:f3:58:77: 27:f7:4d:6f:70:69:1c:13:75:11:4f:87:71:f6:23: 7b:94:c9:b2:15:54:18:72:c3:51:a8:8b:57:c8:1a: 94:03:5b:36:42:99:c6:40:9f:3a:5e:02:40:f5:fc: af:f5:81:3a:eb:ab:ba:14:8d:e8:06:d0:7d:4b:cc: aa:ec:ba:50:78:8d:fb:75:c5:01:89:44:e2:e9:2f: fb:a0:74:0e:5e:80:de:b4:1c:df:2c:01:3c:e8:79: 07:c1:9b:a1:c4:46:cd:cb:7b:55:70:57:b6:26:be: 5e:3f:75:72:5d:c1:80:b4:57:a4:95:cf:05:3d:d9: 24:26:40:d6:59:59:5e:77:81:a6:a1:ed:ac:dd:f3: 90:07:31:82:87:51:33:1d:7e:f9:bb:e3:55:54:f3: de:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CA:5E:63:46:76:D9:62:AD:48:97:DF:2C:ED:92:B5:C9:B0:F4:52 X509v3 Authority Key Identifier: keyid:F4:FA:75:8E:E1:D3:2A:1C:BD:94:64:6F:AF:43:6D:7B:8D:80:9E:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Pp1juHTKhy9lGRvr0Nte42AnqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/bf0c26-2277-4050-ac49-e79f8db313bf/1/9Pp1juHTKhy9lGRvr0Nte42AnqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:9e:7a:15:ac:95:c0:a2:f7:4f:7b:f6:13:ae:6f:1a:37:92: 63:5f:3c:15:b3:87:e8:f3:72:19:ba:98:3e:1e:d7:28:f7:8c: 32:39:7a:ef:c3:ca:3c:33:8d:c5:ab:27:d3:cc:0b:59:a0:b3: c5:d2:ab:5d:6f:2b:c6:d6:fe:f2:5e:b3:0c:a7:05:83:e3:c3: 65:c4:75:41:78:ea:fb:7a:12:d6:b9:e3:b7:48:57:79:46:38: 42:b5:8d:12:ed:62:a7:f7:c9:46:aa:0d:39:f4:11:d1:6f:07: 74:a1:4f:63:05:e1:f6:b7:77:cc:8f:55:06:43:51:2b:ee:18: e2:39:9d:2e:91:d4:ea:08:70:d0:74:5f:38:40:ee:b2:74:84: 0b:0c:17:c7:3e:17:22:fe:0c:83:c4:70:53:28:7a:3a:17:77: 41:f6:c1:52:1f:34:bd:90:a7:f2:bf:7d:6f:51:a6:23:81:26: 98:0d:b5:98:65:21:b9:24:f5:e2:e6:65:f0:99:e6:bc:87:53: f4:c2:0e:2f:63:4a:84:97:41:21:86:9b:8e:d8:a7:bf:c9:9a: 74:3c:eb:25:63:2d:34:e4:0f:99:d3:18:89:a2:89:11:47:8a: 80:e4:06:67:ed:6f:a1:83:12:d0:b7:ab:dd:b5:ab:28:82:4e: c7:6b:d9:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt0rcoHecPnM8QIWHotN4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZmE3NThlZTFkMzJhMWNiZDk0NjQ2ZmFmNDM2ZDdiOGQ4 MDllYTQwHhcNMjUxMjIxMjEwMTA2WhcNMjUxMjIyMjEwMTA2WjAzMTEwLwYDVQQD EygxNGNhNWU2MzQ2NzZkOTYyYWQ0ODk3ZGYyY2VkOTJiNWM5YjBmNDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AH3qpj1gzLFwNDKpCZw2UxcgDYc 2kB0mmmAPYtgaAyfiatzgJpJzZaDQRinOoT56DXsO9XQ6kyHCLeGggfHOKdMWaFg TtR0GFVP2LVBfseBDXXqTSqLkCHKQcGIS4cDxcgVT9LzWHcn901vcGkcE3URT4dx 9iN7lMmyFVQYcsNRqItXyBqUA1s2QpnGQJ86XgJA9fyv9YE666u6FI3oBtB9S8yq 7LpQeI37dcUBiUTi6S/7oHQOXoDetBzfLAE86HkHwZuhxEbNy3tVcFe2Jr5eP3Vy XcGAtFeklc8FPdkkJkDWWVled4Gmoe2s3fOQBzGCh1EzHX75u+NVVPPerQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTKXmNGdtlirUiX3yztkrXJsPRSMB8GA1UdIwQY MBaAFPT6dY7h0yocvZRkb69DbXuNgJ6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBwMWp1SFRLaHk5bEdSdnIwTnRlNDJBbnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9iZjBjMjYtMjI3Ny00MDUwLWFjNDkt ZTc5ZjhkYjMxM2JmLzEvOVBwMWp1SFRLaHk5bEdSdnIwTnRlNDJBbnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9iZjBjMjYtMjI3Ny00MDUwLWFjNDktZTc5ZjhkYjMxM2Jm LzEvOVBwMWp1SFRLaHk5bEdSdnIwTnRlNDJBbnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJ56FayV wKL3T3v2E65vGjeSY188FbOH6PNyGbqYPh7XKPeMMjl678PKPDONxasn08wLWaCz xdKrXW8rxtb+8l6zDKcFg+PDZcR1QXjq+3oS1rnjt0hXeUY4QrWNEu1ip/fJRqoN OfQR0W8HdKFPYwXh9rd3zI9VBkNRK+4Y4jmdLpHU6ghw0HRfOEDusnSECwwXxz4X Iv4Mg8RwUyh6Ohd3QfbBUh80vZCn8r99b1GmI4EmmA21mGUhuST14uZl8JnmvIdT 9MIOL2NKhJdBIYabjtinv8madDzrJWMtNOQPmdMYiaKJEUeKgOQGZ+1voYMS0Ler 3bWrKIJOx2vZ0g== -----END CERTIFICATE-----Generated at Mon Dec 22 05:38:21 2025 by rpki-client