This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft File: 9rrOePyQJ42C8ehmiooZ7pmCzcM.mft (raw, json) Hash identifier: BcPOaxfr/tDqEk3+Z9rnnDvgK1Z8pxtjCzUCWfODY+k= Subject key identifier: 57:07:FB:02:52:70:EF:3B:30:15:68:71:44:AC:F6:A8:FA:46:62:50 Authority key identifier: F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3 Certificate issuer: /CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3 Certificate serial: 019B37C5437BB80DD25EB8BF2125E6DE986F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft Manifest number: 09A9 Signing time: Fri 19 Dec 2025 18:00:33 +0000 Manifest this update: Fri 19 Dec 2025 18:00:33 +0000 Manifest next update: Sat 20 Dec 2025 18:00:33 +0000 Files and hashes: 1: 9rrOePyQJ42C8ehmiooZ7pmCzcM.crl (hash: rRK/FCVl/Q7TXzJ6qfkTyiQZz6tLxXjTYAfZdQt210g=) 2: Re-MnmstUpcAurL3wCFgIhLu13s.roa (hash: vb/Pgmd/HetEo03wgkmW9gqUHrd1AuiVR8CC1XhD05w=) 3: Sev5X02oiIv7Gv_3mq5yAVy5Txs.roa (hash: 0c/Q4ud2dbzbznUS25t1/df9lnnZpZNmLVMc8gJSoDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:43:7b:b8:0d:d2:5e:b8:bf:21:25:e6:de:98:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6bace78fc90278d82f1e8668a8a19ee9982cdc3 Validity Not Before: Dec 19 18:00:33 2025 GMT Not After : Dec 20 18:00:33 2025 GMT Subject: CN=5707fb025270ef3b3015687144acf6a8fa466250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:f7:3e:11:7b:31:af:a7:5e:31:39:a4:f7: 56:46:c3:46:96:55:95:ac:47:af:b2:bd:93:65:78: d8:93:6e:67:ea:da:ba:81:67:d1:28:07:c3:96:8a: bb:b9:63:fd:5e:42:fb:f1:de:a1:8e:ac:19:a5:37: a9:1c:6d:01:68:0d:63:b5:00:b8:96:c5:ce:f8:29: 37:20:69:f4:5e:15:b7:95:fa:47:ca:8f:9d:23:67: cd:a8:2b:77:be:51:ac:80:08:59:64:9f:72:d9:13: a5:48:85:96:9c:a8:a5:15:4e:18:d9:7d:f3:92:cb: 79:a6:3a:26:bd:7e:f7:72:cb:a8:b0:8a:6c:25:48: 27:fc:14:40:ca:42:3d:67:70:d9:a4:df:1b:4a:36: 73:33:a6:37:c7:2c:d7:bc:77:53:6c:e4:ff:ef:08: c6:57:80:f3:8f:d2:c0:5f:77:d3:ff:32:f1:1a:61: 5a:dd:c7:3e:0e:bb:03:d1:91:7b:75:97:84:8a:5b: 3d:8f:b7:54:86:e8:25:d4:42:24:b2:7c:2b:14:f3: 80:76:ce:c4:3c:46:4d:38:3b:f6:12:fc:da:16:32: 95:de:3d:2b:36:c7:d4:ab:df:6c:df:cf:63:78:e1: ca:ea:34:2d:71:8d:bd:d6:b9:cf:2e:e4:ad:41:6e: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:FB:02:52:70:EF:3B:30:15:68:71:44:AC:F6:A8:FA:46:62:50 X509v3 Authority Key Identifier: keyid:F6:BA:CE:78:FC:90:27:8D:82:F1:E8:66:8A:8A:19:EE:99:82:CD:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rrOePyQJ42C8ehmiooZ7pmCzcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/7835c2-204c-4dde-8ef9-f6dd3b5161f5/1/9rrOePyQJ42C8ehmiooZ7pmCzcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:b4:af:17:71:6f:8a:58:0b:da:cc:09:7d:50:06:62:27:6d: 7f:65:b4:76:19:a7:be:9e:75:0d:52:7d:7f:a0:e4:67:40:41: d1:29:77:60:c8:52:57:bb:88:2a:9a:5c:85:9f:97:70:a7:20: 11:2c:24:fe:b9:ee:87:49:d4:87:88:cd:f5:76:aa:b0:ad:e4: fc:c3:95:27:f9:af:c4:8c:46:fc:f0:e3:e1:60:4a:dd:f1:bc: 40:30:cc:09:7c:79:7f:8e:47:87:4a:e3:e8:b5:94:6a:55:82: 6d:e9:80:aa:63:e6:a1:f2:f0:bd:f8:f3:e9:db:77:ec:9e:64: 2c:b6:9a:7a:bf:b1:6a:29:da:39:81:f7:85:3d:8e:cf:e2:c3: f1:8f:7b:7f:fd:e8:1c:fd:bc:3c:01:31:22:40:ea:1c:2b:79: 17:4e:dd:94:90:13:71:98:a9:98:6d:a8:91:70:b5:97:55:c9: bf:13:c5:d5:ff:b9:96:4a:b7:41:07:3a:8f:3f:30:58:58:f9: 23:2a:1c:3a:98:ac:f4:33:e0:95:dc:2a:23:9b:40:e4:cd:c8: 4b:15:33:e0:09:84:ec:0e:a7:5f:56:9c:94:3c:c0:88:51:79: 20:26:44:e0:cf:92:51:e1:0d:eb:0c:55:bc:f0:fb:40:b0:60: e7:3b:7c:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xUN7uA3SXri/ISXm3phvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YmFjZTc4ZmM5MDI3OGQ4MmYxZTg2NjhhOGExOWVlOTk4 MmNkYzMwHhcNMjUxMjE5MTgwMDMzWhcNMjUxMjIwMTgwMDMzWjAzMTEwLwYDVQQD Eyg1NzA3ZmIwMjUyNzBlZjNiMzAxNTY4NzE0NGFjZjZhOGZhNDY2MjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsa73PhF7Ma+nXjE5pPdWRsNGllWV rEevsr2TZXjYk25n6tq6gWfRKAfDloq7uWP9XkL78d6hjqwZpTepHG0BaA1jtQC4 lsXO+Ck3IGn0XhW3lfpHyo+dI2fNqCt3vlGsgAhZZJ9y2ROlSIWWnKilFU4Y2X3z kst5pjomvX73csuosIpsJUgn/BRAykI9Z3DZpN8bSjZzM6Y3xyzXvHdTbOT/7wjG V4Dzj9LAX3fT/zLxGmFa3cc+DrsD0ZF7dZeEils9j7dUhugl1EIksnwrFPOAds7E PEZNODv2EvzaFjKV3j0rNsfUq99s389jeOHK6jQtcY291rnPLuStQW4kfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcH+wJScO87MBVocUSs9qj6RmJQMB8GA1UdIwQY MBaAFPa6znj8kCeNgvHoZoqKGe6Zgs3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjkt ZjZkZDNiNTE2MWY1LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC83ODM1YzItMjA0Yy00ZGRlLThlZjktZjZkZDNiNTE2MWY1 LzEvOXJyT2VQeVFKNDJDOGVobWlvb1o3cG1DemNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANLSvF3Fv ilgL2swJfVAGYidtf2W0dhmnvp51DVJ9f6DkZ0BB0Sl3YMhSV7uIKppchZ+XcKcg ESwk/rnuh0nUh4jN9XaqsK3k/MOVJ/mvxIxG/PDj4WBK3fG8QDDMCXx5f45Hh0rj 6LWUalWCbemAqmPmofLwvfjz6dt37J5kLLaaer+xainaOYH3hT2Oz+LD8Y97f/3o HP28PAExIkDqHCt5F07dlJATcZipmG2okXC1l1XJvxPF1f+5lkq3QQc6jz8wWFj5 IyocOpis9DPgldwqI5tA5M3ISxUz4AmE7A6nX1aclDzAiFF5ICZE4M+SUeEN6wxV vPD7QLBg5zt8sw== -----END CERTIFICATE-----Generated at Sat Dec 20 03:00:58 2025 by rpki-client