This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft File: 9us1U0TzVfLF8cawuowwnBFDxsc.mft (raw, json) Hash identifier: T9nTYJXdxLLVzcqgQ3K4GGK959+32CCoXyJSupB66UE= Subject key identifier: 44:5F:9F:EF:A6:D5:D1:48:A1:4C:68:AF:E9:46:9D:CB:5D:99:86:7D Authority key identifier: F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7 Certificate issuer: /CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7 Certificate serial: 019B39EB10EEB96278F35AE9ED03A08597CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft Manifest number: 125E Signing time: Sat 20 Dec 2025 04:01:05 +0000 Manifest this update: Sat 20 Dec 2025 04:01:05 +0000 Manifest next update: Sun 21 Dec 2025 04:01:05 +0000 Files and hashes: 1: 9us1U0TzVfLF8cawuowwnBFDxsc.crl (hash: hebVfMvK5MHtkfmq1DqrsWaXz30uWJh1wkRgWNudaH0=) 2: xm2GnCrITkLspXymDcS4A7YJbbI.roa (hash: +DAgDZIg9Wj4wTdH4O9JnrjTmjk3rUCiBhMUo5eAXI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:eb:10:ee:b9:62:78:f3:5a:e9:ed:03:a0:85:97:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6eb355344f355f2c5f1c6b0ba8c309c1143c6c7 Validity Not Before: Dec 20 04:01:05 2025 GMT Not After : Dec 21 04:01:05 2025 GMT Subject: CN=445f9fefa6d5d148a14c68afe9469dcb5d99867d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:6e:00:f4:39:c6:d0:7d:fd:f9:d8:71:9f: cc:9e:8d:64:35:72:3b:a7:dc:c4:34:9e:11:93:41: ab:7c:41:b5:b3:67:fa:62:40:bb:08:21:2b:b2:78: e7:db:76:89:b8:b4:74:9c:7f:40:f4:e0:55:27:66: 51:fd:a8:90:33:91:52:fd:22:d2:6b:c1:a7:cc:c7: 32:84:e4:21:6b:99:34:05:60:31:78:05:f0:8f:78: 7e:c1:57:eb:3c:52:86:a2:dd:ca:5f:e7:e5:0c:8f: 5c:f9:b1:79:91:41:33:4d:1f:6c:0c:3a:74:0c:97: 01:26:0b:eb:00:ec:5e:c9:6e:dd:17:30:80:1d:24: 1c:37:80:96:5a:e3:51:5e:28:0d:1e:7c:9d:8f:e8: b3:04:7a:ac:36:4b:e2:66:a8:ce:6c:52:5f:4c:cc: 9d:ae:cc:fc:b3:78:a9:21:b0:61:fa:9b:bc:34:a1: 78:82:5d:21:97:e5:be:ea:e8:e2:73:63:6a:f7:33: 08:55:79:c5:73:49:9d:fd:10:bc:c6:ea:8d:39:4a: 75:ce:8b:aa:8c:82:5a:56:38:cd:57:f3:2d:54:b1: 65:e3:74:95:d2:44:6a:6e:af:75:84:4a:6f:c0:83: ec:fc:11:24:08:04:3d:30:d3:ea:90:1d:40:61:49: d0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5F:9F:EF:A6:D5:D1:48:A1:4C:68:AF:E9:46:9D:CB:5D:99:86:7D X509v3 Authority Key Identifier: keyid:F6:EB:35:53:44:F3:55:F2:C5:F1:C6:B0:BA:8C:30:9C:11:43:C6:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9us1U0TzVfLF8cawuowwnBFDxsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/810cf1-cf41-4cbb-a53a-493da9cc4c0c/1/9us1U0TzVfLF8cawuowwnBFDxsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:64:b5:46:34:4e:08:93:44:33:ea:c8:0e:90:0e:db:32:c0: 3b:05:25:25:c9:cf:45:93:c7:4e:3b:03:e0:2e:45:0f:5a:ab: 6e:bc:c8:12:9b:60:23:ac:c4:dc:1b:a5:70:59:a2:20:6a:2d: 83:ab:4f:e6:c6:3f:d0:28:68:53:73:f8:ae:a5:6e:65:1e:9a: 03:82:4a:b7:b6:d8:2b:28:bd:0b:59:9e:77:7d:48:39:d8:78: 5c:f3:89:17:f6:6a:32:10:eb:c7:0a:9f:2d:81:c1:49:29:9b: 19:eb:f4:b4:83:6a:f8:b6:2e:d1:39:6f:74:4b:7d:1b:cd:f5: 68:ea:97:4e:e7:03:07:30:48:36:d6:e6:56:a5:1d:34:d0:1a: bb:5b:69:e7:1e:d4:fa:a0:2f:34:cb:8b:df:9c:9f:1a:5b:b8: ba:33:fb:37:be:c9:11:76:4c:e9:f9:86:ba:32:61:e2:cb:a0: 59:5a:49:0a:e1:0d:19:51:be:66:df:c1:13:7c:3b:57:56:0e: 5a:06:76:ee:17:32:5b:dc:a7:3a:bb:c6:ef:5f:f9:05:28:f5: d4:a2:55:dd:ea:c9:87:cc:48:41:32:25:ac:36:f8:69:70:28: 7e:30:75:13:05:fa:f6:03:96:78:26:7b:8c:7d:b1:0c:f7:4e: 4c:0f:a3:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs56xDuuWJ481rp7QOghZfMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZWIzNTUzNDRmMzU1ZjJjNWYxYzZiMGJhOGMzMDljMTE0 M2M2YzcwHhcNMjUxMjIwMDQwMTA1WhcNMjUxMjIxMDQwMTA1WjAzMTEwLwYDVQQD Eyg0NDVmOWZlZmE2ZDVkMTQ4YTE0YzY4YWZlOTQ2OWRjYjVkOTk4NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiNuAPQ5xtB9/fnYcZ/Mno1kNXI7 p9zENJ4Rk0GrfEG1s2f6YkC7CCErsnjn23aJuLR0nH9A9OBVJ2ZR/aiQM5FS/SLS a8GnzMcyhOQha5k0BWAxeAXwj3h+wVfrPFKGot3KX+flDI9c+bF5kUEzTR9sDDp0 DJcBJgvrAOxeyW7dFzCAHSQcN4CWWuNRXigNHnydj+izBHqsNkviZqjObFJfTMyd rsz8s3ipIbBh+pu8NKF4gl0hl+W+6ujic2Nq9zMIVXnFc0md/RC8xuqNOUp1zouq jIJaVjjNV/MtVLFl43SV0kRqbq91hEpvwIPs/BEkCAQ9MNPqkB1AYUnQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERfn++m1dFIoUxor+lGnctdmYZ9MB8GA1UdIwQY MBaAFPbrNVNE81XyxfHGsLqMMJwRQ8bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2Et NDkzZGE5Y2M0YzBjLzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84MTBjZjEtY2Y0MS00Y2JiLWE1M2EtNDkzZGE5Y2M0YzBj LzEvOXVzMVUwVHpWZkxGOGNhd3Vvd3duQkZEeHNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmS1RjRO CJNEM+rIDpAO2zLAOwUlJcnPRZPHTjsD4C5FD1qrbrzIEptgI6zE3BulcFmiIGot g6tP5sY/0ChoU3P4rqVuZR6aA4JKt7bYKyi9C1med31IOdh4XPOJF/ZqMhDrxwqf LYHBSSmbGev0tINq+LYu0TlvdEt9G831aOqXTucDBzBINtbmVqUdNNAau1tp5x7U +qAvNMuL35yfGlu4ujP7N77JEXZM6fmGujJh4sugWVpJCuENGVG+Zt/BE3w7V1YO WgZ27hcyW9ynOrvG71/5BSj11KJV3erJh8xIQTIlrDb4aXAofjB1EwX69gOWeCZ7 jH2xDPdOTA+jxQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:49:44 2025 by rpki-client