This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json) Hash identifier: QCx/vdGZ3x1DuhdBliwsVWe4WiTaP/TZDqoKSn6qiAs= Subject key identifier: 2F:C4:C9:90:5A:0C:11:38:1C:11:85:BA:4F:80:9B:FA:B4:4A:C2:F6 Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47 Certificate serial: 019B484B0DFB0CC3BDADC765B38E5CBD1435 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft Manifest number: 0564 Signing time: Mon 22 Dec 2025 23:00:36 +0000 Manifest this update: Mon 22 Dec 2025 23:00:36 +0000 Manifest next update: Tue 23 Dec 2025 23:00:36 +0000 Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: de1gHsRiJ8Kkpo5u4R6z4q8HB5Dr7GgveMi6F7W8Yac=) 2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:0d:fb:0c:c3:bd:ad:c7:65:b3:8e:5c:bd:14:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47 Validity Not Before: Dec 22 23:00:36 2025 GMT Not After : Dec 23 23:00:36 2025 GMT Subject: CN=2fc4c9905a0c11381c1185ba4f809bfab44ac2f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:67:30:61:a7:98:65:9b:9f:8f:30:bd:44:f6: 4d:cc:df:dd:f0:92:9b:90:11:d1:12:43:91:3b:0c: a8:3b:f1:c7:fb:b9:dd:6a:c7:7d:b6:1c:cf:68:1f: c1:98:da:73:c0:28:e4:1e:ce:92:17:0c:f5:50:10: c4:36:dd:ca:a1:0d:a8:a7:c3:15:27:37:6c:72:32: 34:da:c6:a2:cf:e0:2b:17:2c:b0:8d:e4:ee:3d:46: 4c:3d:fe:24:e7:d3:8a:0a:cb:72:52:00:b0:55:a6: da:c9:d3:63:81:ee:bc:14:92:d6:81:c8:32:e8:24: bc:1b:62:db:4d:39:9a:6e:34:79:53:d4:5f:51:b2: d2:81:84:fa:33:93:34:c9:28:7b:04:83:4c:f7:97: 74:cf:db:50:2c:be:57:14:09:4b:49:27:88:11:78: 3e:35:42:00:7a:31:b0:a3:96:26:31:43:e4:d8:00: 76:10:46:9b:82:cf:e2:d7:da:fa:a9:8b:d9:dc:c8: c5:7d:67:dc:5c:03:f7:f3:46:a0:ec:bd:93:18:8d: 84:71:b9:22:42:8d:30:8a:90:5a:be:57:6d:7f:61: 28:f6:fd:cc:ac:83:a6:eb:99:65:e7:39:c6:b0:9b: f9:6f:f2:49:d9:52:03:2b:46:96:41:65:7d:c0:6c: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C4:C9:90:5A:0C:11:38:1C:11:85:BA:4F:80:9B:FA:B4:4A:C2:F6 X509v3 Authority Key Identifier: keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:86:46:7a:bb:a7:e8:7c:d0:9a:4e:04:4c:78:d4:30:aa: 76:12:26:75:bd:60:7e:14:a4:2b:63:00:17:02:c9:13:17:61: a5:d0:7d:3e:cb:d4:96:4b:d1:47:26:1e:f1:31:e9:a9:68:6b: f5:47:ea:26:ec:27:2f:3e:12:0a:ee:d3:76:88:1f:4c:a7:10: d9:d3:53:1b:a0:ff:9d:5f:9e:6a:5f:49:1b:95:c2:ff:8c:07: 88:76:02:c4:a6:60:15:ea:c4:3e:a4:b3:8f:06:ab:7f:4a:91: 6d:fe:d1:be:98:7f:2a:10:7b:7d:11:08:80:4a:a4:b3:a9:63: 5b:0f:aa:15:13:d1:7f:ed:82:7e:4d:e4:2a:4f:0b:6a:53:af: c9:77:26:a5:da:65:92:b4:08:e1:63:e8:d8:bf:49:2c:d2:75: 44:d4:ab:d1:61:40:66:37:9a:d9:b9:84:04:2c:a1:c1:24:33: 02:d9:57:10:54:49:7d:7e:ce:ae:7b:29:c3:eb:b3:93:d4:b8: f1:d3:c9:fe:87:cd:b6:cf:a9:c7:00:58:f5:54:ec:51:cc:bd: 44:53:12:be:d7:5a:41:fa:4c:1d:4f:2d:cf:ec:2d:0e:23:61: ba:8e:bd:fd:e8:c9:b9:22:b9:05:f2:0f:57:0f:41:36:ef:c7: 0a:6c:e0:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISw37DMO9rcdls45cvRQ1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzlhMDdlZjQ3ZjgwNWNjYTA3YzEwYWUxODdjOTM5Njg4 MDhjNDcwHhcNMjUxMjIyMjMwMDM2WhcNMjUxMjIzMjMwMDM2WjAzMTEwLwYDVQQD EygyZmM0Yzk5MDVhMGMxMTM4MWMxMTg1YmE0ZjgwOWJmYWI0NGFjMmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWcwYaeYZZufjzC9RPZNzN/d8JKb kBHREkOROwyoO/HH+7ndasd9thzPaB/BmNpzwCjkHs6SFwz1UBDENt3KoQ2op8MV JzdscjI02saiz+ArFyywjeTuPUZMPf4k59OKCstyUgCwVabaydNjge68FJLWgcgy 6CS8G2LbTTmabjR5U9RfUbLSgYT6M5M0ySh7BINM95d0z9tQLL5XFAlLSSeIEXg+ NUIAejGwo5YmMUPk2AB2EEabgs/i19r6qYvZ3MjFfWfcXAP380ag7L2TGI2Ecbki Qo0wipBavldtf2Eo9v3MrIOm65ll5znGsJv5b/JJ2VIDK0aWQWV9wGwvVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/EyZBaDBE4HBGFuk+Am/q0SsL2MB8GA1UdIwQY MBaAFPU5oH70f4BcygfBCuGHyTlogIxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUt NTAzYTlmYzU5YTIwLzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUtNTAzYTlmYzU5YTIw LzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANs2GRnq7 p+h80JpOBEx41DCqdhImdb1gfhSkK2MAFwLJExdhpdB9PsvUlkvRRyYe8THpqWhr 9UfqJuwnLz4SCu7TdogfTKcQ2dNTG6D/nV+eal9JG5XC/4wHiHYCxKZgFerEPqSz jwarf0qRbf7Rvph/KhB7fREIgEqks6ljWw+qFRPRf+2Cfk3kKk8LalOvyXcmpdpl krQI4WPo2L9JLNJ1RNSr0WFAZjea2bmEBCyhwSQzAtlXEFRJfX7Ornspw+uzk9S4 8dPJ/ofNts+pxwBY9VTsUcy9RFMSvtdaQfpMHU8tz+wtDiNhuo69/ejJuSK5BfIP Vw9BNu/HCmzgfg== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:47 2025 by rpki-client