This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json) Hash identifier: dUI7mAAYEQOsiNNQWl/EvAOB9r/ZgQvBUqBSDZjE1bY= Subject key identifier: 18:81:1E:EE:64:91:BC:55:5A:09:53:95:38:DF:91:F1:73:90:3B:B2 Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91 Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391 Certificate serial: 019B5A51F679E2628D0FB178EAF5D4557EFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft Manifest number: 160D Signing time: Fri 26 Dec 2025 11:01:19 +0000 Manifest this update: Fri 26 Dec 2025 11:01:19 +0000 Manifest next update: Sat 27 Dec 2025 11:01:19 +0000 Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: prpfl8miWr3iTOO0jvplwi00Vx1ebAu83EdnOegLsNM=) 2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:f6:79:e2:62:8d:0f:b1:78:ea:f5:d4:55:7e:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391 Validity Not Before: Dec 26 11:01:19 2025 GMT Not After : Dec 27 11:01:19 2025 GMT Subject: CN=18811eee6491bc555a09539538df91f173903bb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b1:35:49:ba:a5:4d:07:bd:b6:63:6c:c9:e0: fc:07:67:54:e9:92:02:9f:a6:c0:c9:85:de:9d:85: b1:20:b4:fc:5d:d6:36:a8:8c:b5:e8:05:87:4c:bc: fe:4f:d2:00:33:f5:54:c9:a8:a9:a0:8d:4b:d8:52: fe:6e:74:9c:a6:24:d6:b3:bd:e4:fd:8e:b1:2d:d4: c8:54:2e:64:d6:c2:24:14:3d:82:2a:29:a6:56:28: 73:61:8d:60:fd:9a:7b:25:59:9d:2d:ec:c5:80:31: 80:3d:12:6a:70:dc:e4:5a:9d:f0:af:33:54:ca:54: 35:4b:fb:63:c3:83:27:97:55:4a:74:5f:32:70:75: c9:83:5c:12:a5:42:93:7b:f4:99:2b:00:85:3e:71: a1:15:1e:ac:5f:5d:01:62:99:d5:65:0d:3d:ba:3a: ca:0a:f0:52:2d:16:95:c9:8e:82:91:95:30:33:23: 89:28:dd:ee:e1:9a:20:83:a4:ab:3d:bc:54:de:7a: 44:be:58:93:ab:d0:26:db:47:28:e0:47:85:9b:c2: 59:2c:29:08:34:48:c2:96:ba:06:6d:e9:91:23:6f: a6:ec:cb:1f:6c:03:e0:8d:da:21:4c:45:63:49:bc: 81:d5:30:0b:96:a9:88:65:62:fd:be:00:7a:80:e4: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:81:1E:EE:64:91:BC:55:5A:09:53:95:38:DF:91:F1:73:90:3B:B2 X509v3 Authority Key Identifier: keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b1:37:57:c7:bd:84:16:49:f1:9d:aa:8e:b6:96:01:26:d4: fa:b2:3a:aa:17:24:fb:02:2b:fd:0b:02:cc:04:af:88:0e:c2: ae:e5:fb:36:a8:f7:b2:55:92:01:7d:6c:77:5d:5d:60:b4:a0: 26:22:9b:28:d8:b4:f8:3b:05:b1:23:6a:e5:ad:fc:1f:52:b4: ce:85:70:b1:54:bb:34:ce:20:37:7d:72:a1:2f:74:09:cc:6f: f5:d0:56:ee:db:24:b8:f8:67:3c:1d:ea:e3:a9:8f:3d:03:ea: 7c:1f:90:fb:0f:05:f2:20:a0:45:e3:8b:86:79:de:6e:41:72: cf:61:ba:bc:9b:f1:56:f1:2c:af:b0:21:5a:f0:e5:81:53:88: b8:1e:e3:b8:48:04:74:4a:7e:3d:b7:57:8c:43:c4:2c:53:d2: 89:70:86:b1:c0:ee:d5:db:88:63:09:ef:9f:d5:ae:8b:54:72: fa:20:5c:2d:d0:38:77:93:5d:0e:88:04:a8:17:da:13:2b:34: 58:28:30:b8:91:41:c3:3c:c3:b8:60:a0:e6:67:4d:21:a2:e8: bc:4d:6c:d7:93:07:48:43:0f:29:2a:7b:0a:2e:7a:5d:d7:5e: d3:42:49:df:6e:13:11:82:6d:de:7d:af:7e:97:5a:f5:8c:4b: c7:6a:77:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUfZ54mKND7F46vXUVX76MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw ODgzOTEwHhcNMjUxMjI2MTEwMTE5WhcNMjUxMjI3MTEwMTE5WjAzMTEwLwYDVQQD EygxODgxMWVlZTY0OTFiYzU1NWEwOTUzOTUzOGRmOTFmMTczOTAzYmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77E1SbqlTQe9tmNsyeD8B2dU6ZIC n6bAyYXenYWxILT8XdY2qIy16AWHTLz+T9IAM/VUyaipoI1L2FL+bnScpiTWs73k /Y6xLdTIVC5k1sIkFD2CKimmVihzYY1g/Zp7JVmdLezFgDGAPRJqcNzkWp3wrzNU ylQ1S/tjw4Mnl1VKdF8ycHXJg1wSpUKTe/SZKwCFPnGhFR6sX10BYpnVZQ09ujrK CvBSLRaVyY6CkZUwMyOJKN3u4Zogg6SrPbxU3npEvliTq9Am20co4EeFm8JZLCkI NEjClroGbemRI2+m7MsfbAPgjdohTEVjSbyB1TALlqmIZWL9vgB6gOTulQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiBHu5kkbxVWglTlTjfkfFzkDuyMB8GA1UdIwQY MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtrE3V8e9 hBZJ8Z2qjraWASbU+rI6qhck+wIr/QsCzASviA7CruX7Nqj3slWSAX1sd11dYLSg JiKbKNi0+DsFsSNq5a38H1K0zoVwsVS7NM4gN31yoS90Ccxv9dBW7tskuPhnPB3q 46mPPQPqfB+Q+w8F8iCgReOLhnnebkFyz2G6vJvxVvEsr7AhWvDlgVOIuB7juEgE dEp+PbdXjEPELFPSiXCGscDu1duIYwnvn9Wui1Ry+iBcLdA4d5NdDogEqBfaEys0 WCgwuJFBwzzDuGCg5mdNIaLovE1s15MHSEMPKSp7Ci56Xdde00JJ324TEYJt3n2v fpda9YxLx2p32g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:40 2025 by rpki-client