This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json) Hash identifier: lQGfz7+Y8tRI8FrMt2gzRVw88qsQ1BYWy8vHesokhHc= Subject key identifier: EB:59:D9:F5:24:E0:33:88:13:9F:BC:72:50:43:FE:31:96:88:3D:F3 Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Certificate serial: 019B18DFBA2C318EFAF7FF4C5E10B56FF0BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft Manifest number: 0185 Signing time: Sat 13 Dec 2025 18:01:13 +0000 Manifest this update: Sat 13 Dec 2025 18:01:13 +0000 Manifest next update: Sun 14 Dec 2025 18:01:13 +0000 Files and hashes: 1: 249HxpirTi_osbw5WvlBrcgIzks.roa (hash: yk0Ki2ByYsC3iFN0F5s91hPx79cwtd3H/FikkHXhlh8=) 2: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: j+MIDglQ7Sjiohcv5sJpwQAANKPPVcHI36t88iwVBMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:18:df:ba:2c:31:8e:fa:f7:ff:4c:5e:10:b5:6f:f0:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Validity Not Before: Dec 13 18:01:13 2025 GMT Not After : Dec 14 18:01:13 2025 GMT Subject: CN=eb59d9f524e03388139fbc725043fe3196883df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c4:d2:65:af:9b:50:f7:47:1d:53:4e:cf:fc: a1:2f:8c:23:53:f3:b9:95:cf:ba:87:c7:3b:b6:eb: 15:22:85:db:22:d5:19:1d:fa:5f:d7:8c:6a:8d:2f: de:9d:63:46:ea:63:3b:1a:a4:c7:2e:0d:ca:6e:f9: d8:3c:50:cc:e7:32:0c:d4:13:2c:a2:b1:bc:fb:21: 21:96:2f:ea:28:85:31:79:ee:59:72:91:db:36:27: 79:78:8c:3b:45:3e:9e:cd:a5:d2:48:71:df:c3:5b: 27:9c:17:d0:26:64:89:6d:fe:11:da:c7:31:18:62: b9:5f:62:bb:11:13:38:f6:b3:97:1a:f1:ad:dd:7e: 95:b6:6c:77:d4:3c:67:27:0b:31:f7:86:db:fe:f5: ed:f5:23:03:bc:4e:a4:6d:f2:c7:26:28:49:31:fa: d4:0d:7d:1b:fd:06:fa:2c:36:46:a7:9e:ed:3c:48: d7:3a:48:07:66:b4:aa:f4:83:48:c1:a2:5e:49:e6: 83:c0:75:b3:a3:22:09:f3:c8:a5:1a:3c:36:b1:7b: b9:92:49:50:08:8c:23:3d:da:6a:6e:bf:53:b3:43: fc:b2:5b:4c:49:59:c1:af:b6:df:0f:e5:13:57:71: c5:4e:87:90:6f:dd:16:74:ab:06:98:92:57:80:99: 56:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:59:D9:F5:24:E0:33:88:13:9F:BC:72:50:43:FE:31:96:88:3D:F3 X509v3 Authority Key Identifier: keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d9:94:7a:d6:2c:1a:cb:2f:d8:2a:dd:41:b0:71:31:29:de: f1:e9:9a:44:ee:89:46:97:ff:99:21:87:84:36:f4:1a:27:54: b1:55:7e:f4:16:4e:16:d2:f5:55:4f:9b:b0:93:02:99:b6:0d: 6b:04:e4:d5:f9:68:c0:fa:41:41:27:58:c1:52:f8:f3:f7:f4: 3d:eb:ba:42:a8:2f:5c:3c:3d:5d:03:8a:ed:78:74:4e:33:cd: 30:29:8a:ec:fa:73:4b:71:80:a1:fb:85:77:b7:54:53:c7:e2: 12:d7:1e:50:9f:c4:11:15:ef:b2:51:d1:24:ab:4f:01:5e:94: 8a:d4:f5:b0:b7:3e:15:27:73:b2:8c:e3:98:c9:72:0a:f9:6f: b5:22:77:c3:42:8f:32:e0:33:ea:43:42:c6:62:11:91:40:73: cf:35:bd:eb:a4:7d:fa:39:33:35:36:2a:e2:61:92:38:53:be: a4:b2:ca:7f:69:09:1f:76:26:f6:71:9f:8f:56:60:09:7f:21: ab:87:66:5e:56:ac:94:66:78:d2:b4:0d:bd:98:50:24:60:5e: 99:3d:63:f1:f3:b4:eb:b1:7f:e1:63:3e:35:19:1b:d1:5c:3d: 98:ef:a5:e2:45:57:4f:fc:7b:a4:93:4e:54:5e:cf:e5:0a:a1: ec:34:76:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsY37osMY769/9MXhC1b/C9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZDFkMGNjNTMyMTliNmZlNjgxZTE4OWU1ZTkzZDYzNTc3 MzZjY2YwHhcNMjUxMjEzMTgwMTEzWhcNMjUxMjE0MTgwMTEzWjAzMTEwLwYDVQQD EyhlYjU5ZDlmNTI0ZTAzMzg4MTM5ZmJjNzI1MDQzZmUzMTk2ODgzZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocTSZa+bUPdHHVNOz/yhL4wjU/O5 lc+6h8c7tusVIoXbItUZHfpf14xqjS/enWNG6mM7GqTHLg3KbvnYPFDM5zIM1BMs orG8+yEhli/qKIUxee5ZcpHbNid5eIw7RT6ezaXSSHHfw1snnBfQJmSJbf4R2scx GGK5X2K7ERM49rOXGvGt3X6Vtmx31DxnJwsx94bb/vXt9SMDvE6kbfLHJihJMfrU DX0b/Qb6LDZGp57tPEjXOkgHZrSq9INIwaJeSeaDwHWzoyIJ88ilGjw2sXu5kklQ CIwjPdpqbr9Ts0P8sltMSVnBr7bfD+UTV3HFToeQb90WdKsGmJJXgJlWDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtZ2fUk4DOIE5+8clBD/jGWiD3zMB8GA1UdIwQY MBaAFA/R0MxTIZtv5oHhieXpPWNXc2zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQt NDEwYjk5NjZlMjA1LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQtNDEwYjk5NjZlMjA1 LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdmUetYs Gssv2CrdQbBxMSne8emaRO6JRpf/mSGHhDb0GidUsVV+9BZOFtL1VU+bsJMCmbYN awTk1flowPpBQSdYwVL48/f0Peu6QqgvXDw9XQOK7Xh0TjPNMCmK7PpzS3GAofuF d7dUU8fiEtceUJ/EERXvslHRJKtPAV6UitT1sLc+FSdzsozjmMlyCvlvtSJ3w0KP MuAz6kNCxmIRkUBzzzW966R9+jkzNTYq4mGSOFO+pLLKf2kJH3Ym9nGfj1ZgCX8h q4dmXlaslGZ40rQNvZhQJGBemT1j8fO067F/4WM+NRkb0Vw9mO+l4kVXT/x7pJNO VF7P5Qqh7DR2Gw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:06:04 2025 by rpki-client