This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json) Hash identifier: oFW69+m3xrVgKxhys/vD51lvVPoCsX9n3vCaPmVP9Vs= Subject key identifier: E4:42:4D:07:91:ED:98:D3:83:93:DA:0C:6F:E6:1F:2C:77:EE:20:30 Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Certificate serial: 019B4AA7A3611CA3B6B1E7D50F100D0099EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft Manifest number: 0A86 Signing time: Tue 23 Dec 2025 10:00:58 +0000 Manifest this update: Tue 23 Dec 2025 10:00:58 +0000 Manifest next update: Wed 24 Dec 2025 10:00:58 +0000 Files and hashes: 1: 84Ad1KJPc9jhr8WAEOEs6s8tmPc.roa (hash: UeaLHRP7oFc/d7B28fPSHAmNwBiXwzZTNmEOfITVZrU=) 2: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: 8SKqM1I79O/UWTyF5mB8T5xy3Gsrot73N+T4ZimRT/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a7:a3:61:1c:a3:b6:b1:e7:d5:0f:10:0d:00:99:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386 Validity Not Before: Dec 23 10:00:58 2025 GMT Not After : Dec 24 10:00:58 2025 GMT Subject: CN=e4424d0791ed98d38393da0c6fe61f2c77ee2030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:8a:16:33:42:eb:df:62:59:3c:cd:43:29: e0:14:4e:1f:08:81:9e:4d:03:64:87:9c:5e:27:0d: 0b:8c:37:ec:82:6e:fc:eb:00:63:48:2a:82:44:17: da:eb:de:6d:22:db:bf:e4:5a:7a:74:5f:e7:96:a3: b0:96:c3:c3:fa:4d:53:14:6d:0a:49:b4:bb:f9:3f: f5:69:cb:cf:76:c6:fe:7e:4d:56:12:52:32:ee:ba: 14:94:75:cc:b0:ae:2b:76:52:8c:3f:14:e1:8a:76: 16:b6:59:ad:ea:f2:ad:56:06:b1:e2:ab:05:23:65: 4e:bc:51:73:3d:d5:5e:17:91:6d:94:2e:86:fa:eb: da:25:16:ea:c0:e2:ab:47:75:50:dd:d5:04:94:75: e2:7f:87:f0:08:b7:69:58:cc:ec:0d:f9:f3:d3:75: f8:9c:5e:22:6e:e7:af:d3:00:9c:a3:29:eb:da:60: 51:e6:1a:a4:ce:d1:f6:60:81:7c:72:6f:ac:6a:b6: 33:48:23:ac:35:90:de:77:73:ba:40:3b:c7:11:6f: 0f:a0:ff:29:ea:a9:98:54:f5:3a:74:1e:5a:ff:f2: ec:8d:4c:d1:7e:a4:4f:31:6a:de:e5:9e:03:96:09: 5e:41:5e:54:3c:04:32:36:ce:ad:d1:11:05:d6:48: d3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:4D:07:91:ED:98:D3:83:93:DA:0C:6F:E6:1F:2C:77:EE:20:30 X509v3 Authority Key Identifier: keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:db:87:3c:f2:44:bd:a7:c3:e6:1c:47:ef:16:c8:02:19:71: 99:79:36:f9:7e:62:99:8f:40:d7:c6:59:aa:a6:fb:9a:51:d8: 62:f1:a4:30:5f:57:8a:cb:bd:de:e4:fa:dc:1f:3a:c9:3b:77: 56:d0:25:23:08:fd:06:d8:4a:44:0e:d2:20:f0:d7:e1:a0:30: 6b:7d:6c:5f:a0:ee:6b:a4:ed:e3:83:8b:fa:2c:5b:41:78:c3: 26:73:c7:1b:e2:7e:f5:ee:68:eb:bd:fc:9f:50:98:90:2d:a0: c7:44:96:2f:d4:f8:81:a4:4f:6d:90:9d:64:86:e6:de:66:4b: ca:bb:43:6e:50:51:69:20:4c:73:e4:07:c1:cf:93:63:7a:ea: 16:30:23:08:35:f0:f3:74:55:ec:7f:42:45:1c:91:42:c3:3d: dc:60:23:b4:6c:07:81:12:e1:a6:de:7d:c9:51:39:a0:a3:0f: 66:9b:25:05:fb:d2:6d:58:bb:2a:c4:23:dc:2e:66:40:ec:29: c0:85:a7:bf:29:9c:9e:1b:2a:fa:78:95:f7:06:66:f1:2f:a3: fd:4c:ca:cb:3b:0f:09:62:89:71:1f:f7:96:6f:5c:4a:83:c6: 03:de:36:09:d2:ac:7c:e0:f4:49:14:e2:70:53:a8:b6:1e:74: ae:61:33:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKp6NhHKO2sefVDxANAJnvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OWJhOTkxMTRlYmRhYmQ2ZTRjYmQzNmY2Y2Q0NzViMzNj ZjEzODYwHhcNMjUxMjIzMTAwMDU4WhcNMjUxMjI0MTAwMDU4WjAzMTEwLwYDVQQD EyhlNDQyNGQwNzkxZWQ5OGQzODM5M2RhMGM2ZmU2MWYyYzc3ZWUyMDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+aKFjNC699iWTzNQyngFE4fCIGe TQNkh5xeJw0LjDfsgm786wBjSCqCRBfa695tItu/5Fp6dF/nlqOwlsPD+k1TFG0K SbS7+T/1acvPdsb+fk1WElIy7roUlHXMsK4rdlKMPxThinYWtlmt6vKtVgax4qsF I2VOvFFzPdVeF5FtlC6G+uvaJRbqwOKrR3VQ3dUElHXif4fwCLdpWMzsDfnz03X4 nF4ibuev0wCcoynr2mBR5hqkztH2YIF8cm+sarYzSCOsNZDed3O6QDvHEW8PoP8p 6qmYVPU6dB5a//LsjUzRfqRPMWre5Z4DlgleQV5UPAQyNs6t0REF1kjTDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORCTQeR7ZjTg5PaDG/mHyx37iAwMB8GA1UdIwQY MBaAFPSbqZEU69q9bky9NvbNR1szzxOGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQt OWE2ZWU0ODZlZmY3LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTRkYjctNDVhOC00OTkzLWIzODQtOWE2ZWU0ODZlZmY3 LzEvOUp1cGtSVHIycjF1VEwwMjlzMUhXelBQRTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9uHPPJE vafD5hxH7xbIAhlxmXk2+X5imY9A18ZZqqb7mlHYYvGkMF9Xisu93uT63B86yTt3 VtAlIwj9BthKRA7SIPDX4aAwa31sX6Dua6Tt44OL+ixbQXjDJnPHG+J+9e5o6738 n1CYkC2gx0SWL9T4gaRPbZCdZIbm3mZLyrtDblBRaSBMc+QHwc+TY3rqFjAjCDXw 83RV7H9CRRyRQsM93GAjtGwHgRLhpt59yVE5oKMPZpslBfvSbVi7KsQj3C5mQOwp wIWnvymcnhsq+niV9wZm8S+j/UzKyzsPCWKJcR/3lm9cSoPGA942CdKsfOD0SRTi cFOoth50rmEzbA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:41:55 2025 by rpki-client