This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json) Hash identifier: RmephZsjGMsbdgwdKKiPaBxy5Awkh5W7whChIRTyqp4= Subject key identifier: C8:5C:20:65:CF:C0:92:AA:7B:F5:6C:23:51:05:04:1B:8E:4D:42:B5 Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019AF955293F4919793BF580B13E909650DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft Manifest number: 1772 Signing time: Sun 07 Dec 2025 15:01:39 +0000 Manifest this update: Sun 07 Dec 2025 15:01:39 +0000 Manifest next update: Mon 08 Dec 2025 15:01:39 +0000 Files and hashes: 1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=) 2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=) 3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=) 4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: 3Eur+HR9Tjmtgd8WAP0xflcUuXMZshhBCUhoDM3WdIE=) 5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=) 6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 15:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f9:55:29:3f:49:19:79:3b:f5:80:b1:3e:90:96:50:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Dec 7 15:01:39 2025 GMT Not After : Dec 8 15:01:39 2025 GMT Subject: CN=c85c2065cfc092aa7bf56c235105041b8e4d42b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:15:25:25:c4:ee:55:ce:c6:11:52:dd:d3: 81:4d:7f:e0:00:35:8b:c5:df:63:28:2b:78:1e:ec: d9:c0:c2:7f:df:27:86:05:b3:50:32:95:a8:45:88: 4b:ef:3c:0c:92:09:69:85:cc:d9:18:27:eb:fd:31: 09:e1:86:35:ee:b8:29:19:cb:66:c5:c3:51:94:52: a3:7b:1b:5b:d3:46:e5:06:c2:cc:20:75:1d:96:5a: f7:6f:5c:a1:fd:55:43:f2:c5:d3:e6:3e:ea:6e:30: 41:1d:d6:f6:27:e6:05:8c:74:69:f7:1f:e9:87:08: 53:87:33:83:c2:a7:32:13:24:e5:2a:2b:b1:35:6c: ec:87:a0:d9:f4:ee:82:b9:d9:61:59:6c:e7:03:67: d6:ca:bf:5c:da:a5:aa:ec:b9:12:d5:47:de:8a:24: 80:71:cc:7f:06:84:64:2a:b7:1b:5b:37:01:f0:f4: 57:55:d2:42:f3:16:4d:d7:bf:93:2d:05:cd:5d:e7: b3:72:f0:2c:01:20:64:4d:f2:6c:50:61:49:9d:57: 86:fd:f5:aa:c7:3c:42:eb:2d:1e:d4:bd:88:c8:64: 56:e3:79:4c:59:1b:3f:b5:b7:87:0f:47:2e:a3:3f: eb:c6:12:8e:da:b6:10:54:91:8e:ba:78:d2:f2:08: a9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5C:20:65:CF:C0:92:AA:7B:F5:6C:23:51:05:04:1B:8E:4D:42:B5 X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:01:f0:c5:0d:02:18:de:56:41:42:35:4a:d7:46:a1:69:a9: 58:38:f8:f9:e1:37:db:06:02:97:6e:da:be:eb:c1:bb:1d:7d: 1b:b4:e3:fc:88:b5:13:48:b5:42:d4:d4:fb:6d:06:4b:73:86: 55:c7:63:8e:64:a1:5d:8b:37:ae:10:c1:b4:25:fc:fa:f0:ca: 54:65:3e:93:7e:a3:61:6c:19:c1:72:c4:47:e9:7e:38:3c:0e: d7:04:9c:5d:7e:ce:99:e5:bd:21:e5:44:35:df:07:90:d8:02: 3a:b4:5e:ec:43:7a:dc:84:7a:59:f2:8b:2c:b2:3d:02:18:e1: 7c:8e:84:55:aa:d9:7f:c2:82:1c:42:5f:cc:80:a3:6b:ee:5e: e9:da:80:a6:5a:f1:e6:2c:46:3d:41:a1:5d:e2:9d:e5:d4:3d: 25:f1:c4:17:7e:03:94:df:a1:92:f7:2c:8d:86:34:d3:12:ee: 91:6a:fc:a0:21:d4:db:79:9b:6b:02:b8:52:b0:f4:5a:31:4b: e9:12:7a:5d:76:c7:9b:3e:e0:5a:2d:5a:a6:cc:65:02:e5:f2: 84:4f:dd:3e:42:09:2f:bb:3e:12:74:58:2a:e1:b6:d6:e7:a1: 0c:04:36:7e:71:39:0f:8d:62:3d:3e:ed:98:6c:1e:62:11:f9: f9:ea:b3:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr5VSk/SRl5O/WAsT6QllDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjUxMjA3MTUwMTM5WhcNMjUxMjA4MTUwMTM5WjAzMTEwLwYDVQQD EyhjODVjMjA2NWNmYzA5MmFhN2JmNTZjMjM1MTA1MDQxYjhlNGQ0MmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8kVJSXE7lXOxhFS3dOBTX/gADWL xd9jKCt4HuzZwMJ/3yeGBbNQMpWoRYhL7zwMkglphczZGCfr/TEJ4YY17rgpGctm xcNRlFKjextb00blBsLMIHUdllr3b1yh/VVD8sXT5j7qbjBBHdb2J+YFjHRp9x/p hwhThzODwqcyEyTlKiuxNWzsh6DZ9O6CudlhWWznA2fWyr9c2qWq7LkS1UfeiiSA ccx/BoRkKrcbWzcB8PRXVdJC8xZN17+TLQXNXeezcvAsASBkTfJsUGFJnVeG/fWq xzxC6y0e1L2IyGRW43lMWRs/tbeHD0cuoz/rxhKO2rYQVJGOunjS8gipKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhcIGXPwJKqe/VsI1EFBBuOTUK1MB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFgHwxQ0C GN5WQUI1StdGoWmpWDj4+eE32wYCl27avuvBux19G7Tj/Ii1E0i1QtTU+20GS3OG VcdjjmShXYs3rhDBtCX8+vDKVGU+k36jYWwZwXLER+l+ODwO1wScXX7OmeW9IeVE Nd8HkNgCOrRe7EN63IR6WfKLLLI9AhjhfI6EVarZf8KCHEJfzICja+5e6dqAplrx 5ixGPUGhXeKd5dQ9JfHEF34DlN+hkvcsjYY00xLukWr8oCHU23mbawK4UrD0WjFL 6RJ6XXbHmz7gWi1apsxlAuXyhE/dPkIJL7s+EnRYKuG21uehDAQ2fnE5D41iPT7t mGweYhH5+eqz7A== -----END CERTIFICATE-----Generated at Sun Dec 7 21:33:53 2025 by rpki-client