This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft File: 9O9duhAKkrJETz5RLQGlksAZUcI.mft (raw, json) Hash identifier: D/y3t0N3BG+wH6987acn1Xpd3fBkzs4iR1X8j2zeSqI= Subject key identifier: 9D:5E:2E:E4:ED:AA:98:74:84:47:93:AD:22:12:24:6D:32:2C:07:2A Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Certificate serial: 019B1ACDF4EE62529598BA7CBE8CB31BD77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft Manifest number: 09E3 Signing time: Sun 14 Dec 2025 03:01:03 +0000 Manifest this update: Sun 14 Dec 2025 03:01:03 +0000 Manifest next update: Mon 15 Dec 2025 03:01:03 +0000 Files and hashes: 1: 9O9duhAKkrJETz5RLQGlksAZUcI.crl (hash: T6ZWChAU57x4LjbcbTzn15oYuAORFvHbbU0kNPMH5r8=) 2: AmSXBHT3ckJxS__llRle1pOg_Gk.roa (hash: NGUzsrMFkYpqygz3V48C568ROl1XZloZCRkdB8fnGRs=) 3: RqMgMpdcD54HUHiiovgo2_7eo94.roa (hash: eRUbOt1afNalKvV81WeaR6eAgifd6J7LvG2r3czI9hc=) 4: gzBqFqX-GOiBCBUlEgTsEnHuXvM.roa (hash: d9Lvaxwm2cOVNLGx1WtIoyEgpf/MLPQzSYnTj875od0=) 5: wdTC4RawEs-5fFZUa4R_HIRxO2U.roa (hash: Rtc4DEopTsErPd8Vo2cqobz/fHQCAfYf819UnyzhAlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:f4:ee:62:52:95:98:ba:7c:be:8c:b3:1b:d7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2 Validity Not Before: Dec 14 03:01:03 2025 GMT Not After : Dec 15 03:01:03 2025 GMT Subject: CN=9d5e2ee4edaa9874844793ad2212246d322c072a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ec:3d:d1:3e:a8:0d:33:1e:09:aa:66:79:c3: 25:0d:c5:9e:ab:ec:5f:b9:0c:53:3b:af:9e:82:7f: 13:ee:ad:3b:8b:93:53:3e:d2:11:08:14:b5:19:fa: 35:16:fb:62:45:9e:4c:e0:c2:8b:d9:99:2b:54:74: ae:60:80:af:32:37:4c:ff:77:c4:fc:22:04:ad:fe: 61:05:42:09:b7:d0:28:45:70:23:5c:63:33:a2:f8: 64:86:95:1f:64:e1:3c:55:6f:92:f3:06:8f:e2:3a: 77:10:80:57:9d:aa:0d:f8:de:e3:c0:33:0e:32:7c: d9:45:91:eb:91:04:c3:b1:61:af:97:d9:62:7f:79: 79:7c:1b:f9:cc:4b:f1:8a:41:34:7e:11:bc:0f:cb: e2:88:97:4b:e3:a1:0b:64:d4:5c:2b:c6:0b:4b:00: 7d:75:fb:a1:c6:f5:1b:10:fb:ee:b9:b2:3e:9a:c9: c0:a4:70:9d:3c:84:d3:df:fd:40:a9:db:f4:19:0d: 63:e8:65:eb:81:d0:5d:a0:74:5b:05:30:cc:1e:0f: e4:0c:79:f6:e9:d1:d2:04:88:fc:c4:ea:29:61:cb: 49:a8:9e:9d:5c:36:9f:dc:06:66:17:c4:a4:ad:63: b7:05:0d:15:b7:e3:bf:c8:89:f6:32:7a:d2:5c:1f: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5E:2E:E4:ED:AA:98:74:84:47:93:AD:22:12:24:6D:32:2C:07:2A X509v3 Authority Key Identifier: keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:14:5e:66:66:a5:ad:76:29:e9:a7:3b:8b:78:85:71:44:7f: 76:84:1f:9c:80:70:22:27:fa:79:6f:f1:57:4d:8f:54:ed:53: 5d:c0:95:39:de:69:17:61:8b:7f:48:4a:b3:e2:05:a7:2a:e3: 03:e2:01:cd:22:cc:95:ed:e9:41:b0:62:d2:c8:19:85:b8:50: 2e:cf:f1:da:12:cc:d7:75:6e:c7:43:bf:5a:71:80:2a:d0:50: de:6c:50:c0:f4:97:43:39:87:82:bc:6b:ea:c0:d9:d2:27:e0: af:26:8d:6f:8a:bf:42:03:3f:1f:7b:58:70:4a:9f:e4:2f:dd: b5:6f:d9:86:34:51:58:bb:0b:a5:1d:ed:06:6c:72:9e:74:ec: d7:7e:7f:75:8e:7b:29:d8:b9:6c:fb:9f:7a:3d:e1:f1:33:78: b4:d6:94:fe:d5:95:c9:ed:10:f3:14:63:66:46:7c:a0:af:18: fe:97:b2:7e:fb:7d:54:5b:ab:b2:3f:1b:1f:67:4e:85:14:24: 9d:2d:b0:5c:e4:d1:1f:8d:e2:50:b8:00:b5:88:d8:68:df:7d: 53:9f:40:9c:e0:12:52:b4:ea:ff:54:45:f3:ca:2c:83:bd:94: 0a:74:33:14:f7:e4:15:56:cb:1b:ff:ce:3d:6e:64:c6:3a:6d: 08:8a:fd:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazfTuYlKVmLp8voyzG9d+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx OTUxYzIwHhcNMjUxMjE0MDMwMTAzWhcNMjUxMjE1MDMwMTAzWjAzMTEwLwYDVQQD Eyg5ZDVlMmVlNGVkYWE5ODc0ODQ0NzkzYWQyMjEyMjQ2ZDMyMmMwNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuw90T6oDTMeCapmecMlDcWeq+xf uQxTO6+egn8T7q07i5NTPtIRCBS1Gfo1FvtiRZ5M4MKL2ZkrVHSuYICvMjdM/3fE /CIErf5hBUIJt9AoRXAjXGMzovhkhpUfZOE8VW+S8waP4jp3EIBXnaoN+N7jwDMO MnzZRZHrkQTDsWGvl9lif3l5fBv5zEvxikE0fhG8D8viiJdL46ELZNRcK8YLSwB9 dfuhxvUbEPvuubI+msnApHCdPITT3/1Aqdv0GQ1j6GXrgdBdoHRbBTDMHg/kDHn2 6dHSBIj8xOopYctJqJ6dXDaf3AZmF8SkrWO3BQ0Vt+O/yIn2MnrSXB9OwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1eLuTtqph0hEeTrSISJG0yLAcqMB8GA1UdIwQY MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct YWQwMjdlOTVjNWM3LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3 LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRReZmal rXYp6ac7i3iFcUR/doQfnIBwIif6eW/xV02PVO1TXcCVOd5pF2GLf0hKs+IFpyrj A+IBzSLMle3pQbBi0sgZhbhQLs/x2hLM13Vux0O/WnGAKtBQ3mxQwPSXQzmHgrxr 6sDZ0ifgryaNb4q/QgM/H3tYcEqf5C/dtW/ZhjRRWLsLpR3tBmxynnTs135/dY57 Kdi5bPufej3h8TN4tNaU/tWVye0Q8xRjZkZ8oK8Y/peyfvt9VFursj8bH2dOhRQk nS2wXOTRH43iULgAtYjYaN99U59AnOASUrTq/1RF88osg72UCnQzFPfkFVbLG//O PW5kxjptCIr9Bw== -----END CERTIFICATE-----Generated at Sun Dec 14 08:45:05 2025 by rpki-client