This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft File: m9_8i9uESXC44oubS-bywG39eYU.mft (raw, json) Hash identifier: JYYWWkReObaTj6UvgjoTQALW0xygGwwpNbZ+rbHEc+Q= Subject key identifier: 78:64:1D:90:CC:6F:66:B5:45:8A:BA:48:A9:0F:A2:DD:84:97:A5:D6 Authority key identifier: 9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85 Certificate issuer: /CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985 Certificate serial: 019B5A1AA1AAF4DCE90665BDE65104699E96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft Manifest number: 1572 Signing time: Fri 26 Dec 2025 10:00:53 +0000 Manifest this update: Fri 26 Dec 2025 10:00:53 +0000 Manifest next update: Sat 27 Dec 2025 10:00:53 +0000 Files and hashes: 1: QAk6JCs2jjSqyiQ-YA0VdOCDCeI.roa (hash: FpR2ZM6Bp7jsZvcIkRbwo6z9Bs9HecznXsZ9i9f2MH4=) 2: m9_8i9uESXC44oubS-bywG39eYU.crl (hash: LljHf9q89dUeSFQFo/xEwbQCUzbNFEoqgpJRjMiEtFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:a1:aa:f4:dc:e9:06:65:bd:e6:51:04:69:9e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bdffc8bdb844970b8e28b9b4be6f2c06dfd7985 Validity Not Before: Dec 26 10:00:53 2025 GMT Not After : Dec 27 10:00:53 2025 GMT Subject: CN=78641d90cc6f66b5458aba48a90fa2dd8497a5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:65:e6:bf:93:83:54:c6:e7:0f:18:a1:f0:49: 2f:20:3a:6d:c7:51:f5:da:4f:cc:36:57:eb:54:08: cb:00:e7:3e:53:20:76:b5:fd:12:a9:72:c5:a8:95: e6:6d:ed:58:f4:03:71:d8:a9:57:cc:9c:ba:d5:79: 32:3f:1e:b2:15:f8:87:38:1e:46:09:97:6f:e5:4d: fc:9d:51:44:fe:2b:98:50:99:6a:15:9e:04:bd:82: fb:c3:84:11:04:49:57:33:3f:f6:09:6c:12:6a:81: 0e:9c:7c:5d:f2:b0:d9:bd:b6:9b:6a:0d:17:13:45: 81:4c:fe:a3:da:d1:1f:17:bf:f4:97:ca:bc:4c:b1: 3a:db:51:9d:6b:ec:42:9a:3c:2b:f3:29:d9:f2:1a: c3:66:b9:30:4c:fc:4d:1b:07:8c:fb:23:9c:be:45: f4:f8:6d:96:40:31:82:99:fb:66:09:28:b8:4b:33: 08:60:14:7f:39:e0:a0:9b:07:19:9b:9f:fc:1b:7f: 82:cf:5b:5f:8c:f5:5e:17:0c:07:84:71:5f:95:c3: 68:fa:28:8d:2d:10:db:b6:1b:04:fb:fc:f5:a9:f6: 57:68:7e:7d:a0:28:57:95:f6:a2:77:29:e1:e7:31: 2c:38:8c:2d:80:cb:d8:12:f6:41:4b:03:a3:ed:b2: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:64:1D:90:CC:6F:66:B5:45:8A:BA:48:A9:0F:A2:DD:84:97:A5:D6 X509v3 Authority Key Identifier: keyid:9B:DF:FC:8B:DB:84:49:70:B8:E2:8B:9B:4B:E6:F2:C0:6D:FD:79:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9_8i9uESXC44oubS-bywG39eYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0157a2-9076-4a80-be23-053f3dfc1521/1/m9_8i9uESXC44oubS-bywG39eYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:23:75:81:7d:07:be:80:89:b1:2c:eb:77:d4:0a:51:4d:c9: 4e:6b:82:09:9b:3b:cd:1a:4f:90:37:60:40:e4:37:92:d6:3d: 21:50:d8:83:b1:11:76:17:92:6e:7c:62:d9:bf:f9:0d:2c:75: 3f:5d:89:e5:7f:6f:59:28:3e:db:ab:d3:ff:0d:e9:a8:dd:9a: 05:10:bd:4c:0a:bd:d9:88:97:23:ba:ca:80:2c:69:fd:8a:b3: bc:36:bb:dc:d2:8e:4c:7a:27:2d:9c:90:41:7a:a6:b2:15:93: 9d:54:56:fd:5a:c4:8d:46:0a:17:67:1c:22:eb:0a:7d:f6:be: be:f6:0d:b4:53:a3:fb:88:9a:57:77:7c:4d:3d:69:60:5c:bc: cc:20:4b:9c:c5:de:e2:c4:a1:e7:53:e7:be:9e:de:ff:96:73: 10:1c:38:54:90:d3:53:1f:51:f7:21:59:ce:5a:ab:1a:0a:10: f8:eb:6a:07:41:02:06:ab:a6:41:c8:7c:b6:10:6b:0d:0f:16: a4:d4:dc:73:ef:67:be:c1:89:d2:d6:78:69:7c:15:b1:94:24: ec:bd:97:c1:b0:fb:ec:f3:d7:d1:a3:ca:57:cd:d5:d0:96:c9: 5f:4d:b9:11:5a:b5:ea:62:dd:e7:75:0e:e4:8f:bc:5c:ce:5c: 84:ff:24:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGqGq9NzpBmW95lEEaZ6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGZmYzhiZGI4NDQ5NzBiOGUyOGI5YjRiZTZmMmMwNmRm ZDc5ODUwHhcNMjUxMjI2MTAwMDUzWhcNMjUxMjI3MTAwMDUzWjAzMTEwLwYDVQQD Eyg3ODY0MWQ5MGNjNmY2NmI1NDU4YWJhNDhhOTBmYTJkZDg0OTdhNWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2Xmv5ODVMbnDxih8EkvIDptx1H1 2k/MNlfrVAjLAOc+UyB2tf0SqXLFqJXmbe1Y9ANx2KlXzJy61XkyPx6yFfiHOB5G CZdv5U38nVFE/iuYUJlqFZ4EvYL7w4QRBElXMz/2CWwSaoEOnHxd8rDZvbabag0X E0WBTP6j2tEfF7/0l8q8TLE621Gda+xCmjwr8ynZ8hrDZrkwTPxNGweM+yOcvkX0 +G2WQDGCmftmCSi4SzMIYBR/OeCgmwcZm5/8G3+Cz1tfjPVeFwwHhHFflcNo+iiN LRDbthsE+/z1qfZXaH59oChXlfaidynh5zEsOIwtgMvYEvZBSwOj7bJ0XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhkHZDMb2a1RYq6SKkPot2El6XWMB8GA1UdIwQY MBaAFJvf/IvbhElwuOKLm0vm8sBt/XmFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMt MDUzZjNkZmMxNTIxLzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wMTU3YTItOTA3Ni00YTgwLWJlMjMtMDUzZjNkZmMxNTIx LzEvbTlfOGk5dUVTWEM0NG91YlMtYnl3RzM5ZVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiN1gX0H voCJsSzrd9QKUU3JTmuCCZs7zRpPkDdgQOQ3ktY9IVDYg7ERdheSbnxi2b/5DSx1 P12J5X9vWSg+26vT/w3pqN2aBRC9TAq92YiXI7rKgCxp/YqzvDa73NKOTHonLZyQ QXqmshWTnVRW/VrEjUYKF2ccIusKffa+vvYNtFOj+4iaV3d8TT1pYFy8zCBLnMXe 4sSh51Pnvp7e/5ZzEBw4VJDTUx9R9yFZzlqrGgoQ+OtqB0ECBqumQch8thBrDQ8W pNTcc+9nvsGJ0tZ4aXwVsZQk7L2XwbD77PPX0aPKV83V0JbJX025EVq16mLd53UO 5I+8XM5chP8kMA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:55 2025 by rpki-client