This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json) Hash identifier: XtJvlCU2e6Yaw9se+cexuWncAaIz2TeYstAaNFvp7Dg= Subject key identifier: E4:1A:AB:47:7C:96:AB:A4:88:45:CB:AB:64:55:3C:C2:BE:EF:64:A8 Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a Certificate serial: 019B33E904860ED3D84F9C670A4B5CFCFDD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft Manifest number: 0293 Signing time: Fri 19 Dec 2025 00:01:07 +0000 Manifest this update: Fri 19 Dec 2025 00:01:07 +0000 Manifest next update: Sat 20 Dec 2025 00:01:07 +0000 Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: lnQFZ7ul1IGPZa9kbYKuctHSOYlVD5H7j1cOukAFkrc=) 2: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (hash: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:04:86:0e:d3:d8:4f:9c:67:0a:4b:5c:fc:fd:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a Validity Not Before: Dec 19 00:01:07 2025 GMT Not After : Dec 20 00:01:07 2025 GMT Subject: CN=e41aab477c96aba48845cbab64553cc2beef64a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:68:fd:a4:5d:9c:54:20:f5:8f:d3:85:34:1e: f4:26:8a:fc:e1:f8:9c:12:86:d7:8f:0a:db:7b:66: 30:30:dc:12:dd:ac:78:3e:4e:30:fa:92:f3:ad:ec: 23:9f:8f:4c:84:09:68:f6:f4:2d:2b:64:ed:88:89: f0:68:88:42:54:63:93:d6:b0:c1:85:d0:bb:48:04: 1c:e9:39:90:fb:05:9b:e1:17:72:42:0e:26:97:ce: ea:9b:fc:3a:72:cc:c8:9d:7f:36:45:56:45:42:c5: 9b:07:6c:91:23:78:e2:7a:2c:ea:90:e6:08:ff:64: 83:f6:b1:1f:d3:15:e2:d1:5e:8c:70:de:16:37:69: 32:2e:0b:c5:3a:df:df:6e:f7:35:d0:cf:94:4c:f1: 3a:2f:99:a6:65:63:3b:58:19:39:14:e8:92:e0:f6: dd:d2:71:2a:d2:ba:41:68:94:4e:c9:92:92:41:88: bc:14:13:22:9a:35:53:86:4b:d5:2b:80:01:3a:53: a0:3f:88:ce:69:77:be:bd:83:57:db:9f:23:a8:b1: b2:bb:3b:a6:18:9a:73:88:d4:64:1e:b1:7d:88:fa: 6d:34:05:2c:9a:c4:5b:38:c1:26:84:66:55:4d:ac: bd:ad:d9:36:12:e6:35:f6:eb:a8:1b:0d:06:2a:2d: a1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1A:AB:47:7C:96:AB:A4:88:45:CB:AB:64:55:3C:C2:BE:EF:64:A8 X509v3 Authority Key Identifier: keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:c5:8d:99:c5:96:ca:78:a0:56:0a:8b:b2:b7:cf:6e:93:90: 4c:84:79:8b:90:fe:9f:82:17:82:09:bf:1b:31:4b:0f:b7:78: 39:eb:e9:ba:75:ac:96:24:e3:c4:e5:c3:f9:9f:a3:2f:85:a2: 90:e9:12:8b:01:66:b1:75:f0:0e:ee:de:61:d1:20:c7:66:a1: ff:b5:ae:da:67:ff:eb:e5:24:ac:ee:99:3f:1a:00:43:81:2a: be:59:fe:4b:b2:e3:1a:a2:6b:d5:71:3b:51:f7:6e:d0:f2:07: 1b:ca:36:0e:76:08:7d:6e:d2:e2:4c:fc:42:98:1a:09:6d:04: 02:70:56:41:ed:a5:90:7b:54:e1:7c:18:a0:fa:f8:c3:bc:3d: 0d:45:04:2c:72:ef:47:ce:f5:df:7e:a9:95:9d:0c:17:d0:f1: 2e:0a:36:77:ba:43:af:23:b5:38:c5:cc:5e:40:93:45:11:12: 71:d8:d0:45:d8:9d:69:bb:3c:9e:0f:ba:c8:36:ef:85:18:81: 25:7d:f4:52:a7:53:12:cd:e3:e2:0a:94:a8:2c:51:d4:0a:79: 95:ef:3d:57:2e:21:6c:08:0c:e4:e4:cc:0e:c6:e2:c5:72:77: cc:a0:3d:5b:4a:cf:bb:90:58:f6:97:68:82:a5:5f:5a:75:07: 34:da:5d:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6QSGDtPYT5xnCktc/P3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQxMDlmMjE3NzAyZTY5ODBkYjkwNTNhOGY0NzEwZmMw YTBhN2EwHhcNMjUxMjE5MDAwMTA3WhcNMjUxMjIwMDAwMTA3WjAzMTEwLwYDVQQD EyhlNDFhYWI0NzdjOTZhYmE0ODg0NWNiYWI2NDU1M2NjMmJlZWY2NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wj9pF2cVCD1j9OFNB70Jor84fic EobXjwrbe2YwMNwS3ax4Pk4w+pLzrewjn49MhAlo9vQtK2TtiInwaIhCVGOT1rDB hdC7SAQc6TmQ+wWb4RdyQg4ml87qm/w6cszInX82RVZFQsWbB2yRI3jieizqkOYI /2SD9rEf0xXi0V6McN4WN2kyLgvFOt/fbvc10M+UTPE6L5mmZWM7WBk5FOiS4Pbd 0nEq0rpBaJROyZKSQYi8FBMimjVThkvVK4ABOlOgP4jOaXe+vYNX258jqLGyuzum GJpziNRkHrF9iPptNAUsmsRbOMEmhGZVTay9rdk2EuY19uuoGw0GKi2hrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQaq0d8lqukiEXLq2RVPMK+72SoMB8GA1UdIwQY MBaAFPckEJ8hdwLmmA25BTqPRxD8Cgp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgt YjJmNmJjM2UwYjM1LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgtYjJmNmJjM2UwYjM1 LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjsWNmcWW ynigVgqLsrfPbpOQTIR5i5D+n4IXggm/GzFLD7d4OevpunWsliTjxOXD+Z+jL4Wi kOkSiwFmsXXwDu7eYdEgx2ah/7Wu2mf/6+UkrO6ZPxoAQ4Eqvln+S7LjGqJr1XE7 Ufdu0PIHG8o2DnYIfW7S4kz8QpgaCW0EAnBWQe2lkHtU4XwYoPr4w7w9DUUELHLv R871336plZ0MF9DxLgo2d7pDryO1OMXMXkCTRREScdjQRdidabs8ng+6yDbvhRiB JX30UqdTEs3j4gqUqCxR1Ap5le89Vy4hbAgM5OTMDsbixXJ3zKA9W0rPu5BY9pdo gqVfWnUHNNpdMA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:31 2025 by rpki-client