This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json) Hash identifier: VCyVfip+FkqkhmpHxFLt5Ku5JtPrMeodgr8BLA7xyBE= Subject key identifier: 8A:AA:B2:0E:B1:14:C7:FD:E7:DA:35:4C:3A:79:84:86:A7:23:27:A1 Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Certificate serial: 019B262D75932119AF3B3C87F85A26020ABC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft Manifest number: 10E0 Signing time: Tue 16 Dec 2025 08:01:11 +0000 Manifest this update: Tue 16 Dec 2025 08:01:11 +0000 Manifest next update: Wed 17 Dec 2025 08:01:11 +0000 Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: RDXEznTlhgB0R4IALrLP7qUWEg6cjSTJ+deL4Hs7fm4=) 2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 08:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:75:93:21:19:af:3b:3c:87:f8:5a:26:02:0a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Validity Not Before: Dec 16 08:01:11 2025 GMT Not After : Dec 17 08:01:11 2025 GMT Subject: CN=8aaab20eb114c7fde7da354c3a798486a72327a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:e7:86:a4:ee:9f:ac:8f:08:06:d6:db:7c: 01:d3:d5:5f:ec:db:cd:37:1e:8d:cb:36:ce:7b:88: 17:8c:d5:94:7a:95:5a:91:c9:a5:db:3e:83:42:51: 37:53:2e:b3:e2:18:71:a2:25:be:17:58:2f:ae:0b: 5b:17:e8:7b:c6:88:59:09:88:46:1c:fc:24:fb:ec: 24:ad:ef:55:25:fb:e3:99:c8:11:df:96:6d:83:7e: 46:bb:4b:f1:52:53:78:b2:19:11:9d:4e:6c:f4:c3: d5:f5:ef:a3:8a:2f:0b:4d:43:1a:0b:1f:a7:bb:ee: 01:39:65:b3:91:70:24:44:3a:ea:64:74:14:dd:d8: 4c:52:35:2b:b6:3e:22:c5:58:23:e0:0d:7f:dd:6f: 15:63:b6:70:94:47:82:ad:11:c9:04:61:fa:fb:55: 03:65:ad:44:55:56:07:5c:b7:fe:e0:45:03:e3:72: 7d:51:65:76:94:9a:57:b6:dc:4f:d2:8f:b6:73:94: 1c:29:3a:8c:97:c8:62:de:00:30:2d:57:01:f1:e0: 10:8e:4b:c6:2e:0d:f1:3c:41:72:96:a4:0b:0f:0a: e1:64:1f:a0:79:7b:c7:58:1b:ab:5d:a2:3c:11:de: 9f:82:f5:65:bd:aa:bd:a2:9d:1a:c5:7c:2c:e7:f2: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AA:B2:0E:B1:14:C7:FD:E7:DA:35:4C:3A:79:84:86:A7:23:27:A1 X509v3 Authority Key Identifier: keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:d7:6f:ed:0b:91:1f:ba:08:fd:93:6c:b8:fd:3b:48:76:29: 27:b1:56:2d:a2:55:f7:b0:97:c5:e9:98:3d:2d:ec:87:3f:c3: 2e:31:11:6c:11:4a:86:d8:78:da:7c:d5:db:c7:a9:e7:d7:db: d8:08:7d:59:d8:f5:70:43:9d:f2:78:08:05:a4:51:52:b8:48: 62:8a:32:f5:0a:c2:08:28:76:80:2d:a9:f3:6b:52:0e:24:d9: 52:7e:90:fd:0d:ec:69:3a:d6:70:b3:bb:f0:cb:c3:16:9c:d6: c2:4d:e7:5d:45:27:5a:84:84:8d:d3:77:80:6a:b7:42:e1:5e: c3:7a:bb:16:23:53:72:14:e2:0c:98:73:60:e2:20:ab:d6:4b: b6:50:7a:ec:9f:0d:26:f9:7d:35:30:fa:a6:25:0a:7c:1c:01: 84:4a:f6:00:ea:62:51:0b:36:5e:38:3f:f3:fe:0e:96:fb:db: 55:e6:26:ac:c8:ca:95:df:36:77:02:c5:ea:14:d7:bb:23:81: d1:f6:01:26:65:fc:72:40:cb:87:ad:87:2c:24:d9:b2:71:8d: 76:68:be:59:f2:6b:5e:c6:25:7a:13:de:11:5f:17:8c:38:fe: 37:24:1d:74:7e:42:5d:f3:e0:ad:4a:69:dc:7b:8e:a1:8e:9d: b1:f9:0b:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLXWTIRmvOzyH+FomAgq8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1 MjlmNjYwHhcNMjUxMjE2MDgwMTExWhcNMjUxMjE3MDgwMTExWjAzMTEwLwYDVQQD Eyg4YWFhYjIwZWIxMTRjN2ZkZTdkYTM1NGMzYTc5ODQ4NmE3MjMyN2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJvnhqTun6yPCAbW23wB09Vf7NvN Nx6NyzbOe4gXjNWUepVakcml2z6DQlE3Uy6z4hhxoiW+F1gvrgtbF+h7xohZCYhG HPwk++wkre9VJfvjmcgR35Ztg35Gu0vxUlN4shkRnU5s9MPV9e+jii8LTUMaCx+n u+4BOWWzkXAkRDrqZHQU3dhMUjUrtj4ixVgj4A1/3W8VY7ZwlEeCrRHJBGH6+1UD Za1EVVYHXLf+4EUD43J9UWV2lJpXttxP0o+2c5QcKTqMl8hi3gAwLVcB8eAQjkvG Lg3xPEFylqQLDwrhZB+geXvHWBurXaI8Ed6fgvVlvaq9op0axXws5/KafQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqqsg6xFMf959o1TDp5hIanIyehMB8GA1UdIwQY MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt MWI0MTdkNWUxZmJkLzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtNdv7QuR H7oI/ZNsuP07SHYpJ7FWLaJV97CXxemYPS3shz/DLjERbBFKhth42nzV28ep59fb 2Ah9Wdj1cEOd8ngIBaRRUrhIYooy9QrCCCh2gC2p82tSDiTZUn6Q/Q3saTrWcLO7 8MvDFpzWwk3nXUUnWoSEjdN3gGq3QuFew3q7FiNTchTiDJhzYOIgq9ZLtlB67J8N Jvl9NTD6piUKfBwBhEr2AOpiUQs2Xjg/8/4OlvvbVeYmrMjKld82dwLF6hTXuyOB 0fYBJmX8ckDLh62HLCTZsnGNdmi+WfJrXsYlehPeEV8XjDj+NyQddH5CXfPgrUpp 3HuOoY6dsfkLFw== -----END CERTIFICATE-----Generated at Tue Dec 16 12:48:46 2025 by rpki-client