This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json) Hash identifier: t0UwTMc0vwagub29oYkKSAMN8qFQ2W4NfxGGwsT7j+g= Subject key identifier: 7F:EE:6C:F3:40:62:0B:62:2A:4B:EC:95:B3:F3:A6:C4:8A:05:7E:88 Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Certificate serial: 019B334475648DED22FBDF54924375086DE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 21:01:23 +0000 Manifest this update: Thu 18 Dec 2025 21:01:23 +0000 Manifest next update: Fri 19 Dec 2025 21:01:23 +0000 Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=) 2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: xOxi+qi75Xq9616ufH0oHhfoaSXbL3m+MMzUqKF4ZZM=) 3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:75:64:8d:ed:22:fb:df:54:92:43:75:08:6d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Validity Not Before: Dec 18 21:01:23 2025 GMT Not After : Dec 19 21:01:23 2025 GMT Subject: CN=7fee6cf340620b622a4bec95b3f3a6c48a057e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:61:e5:2b:f5:cc:3a:12:ca:1c:08:53:c9: 75:2b:52:31:18:21:5c:d8:ac:81:6b:02:21:6f:dd: 4f:87:29:43:64:5f:e5:3d:54:cd:08:85:0f:c9:cb: 40:8b:a8:69:4c:a4:1d:9a:d9:ed:56:34:10:13:36: b1:a0:d9:37:87:d3:e0:ae:20:22:d6:d6:cf:b9:9c: 8f:1e:34:f9:1d:1e:80:3d:3d:c6:39:07:e6:b5:96: f0:4c:70:e6:6f:31:54:7c:37:70:2b:1a:a3:74:eb: 8f:30:f1:09:71:6b:a6:4e:99:bb:e5:e8:4c:f7:c3: 91:4c:ab:95:fc:9f:e9:32:42:d0:93:7f:d1:88:81: 89:75:c0:38:0b:e4:12:e1:54:28:d1:24:2a:b7:f3: 53:26:06:1e:58:3c:f0:f1:37:a4:ab:9b:73:70:a8: 66:f1:c2:7e:af:e2:19:5e:ff:96:75:60:4b:09:bf: 9c:32:62:28:7c:a7:59:da:ff:18:b3:7a:c6:fb:0d: a0:d7:c7:80:17:c1:ce:a6:0a:66:77:bf:f6:4a:5a: 22:9a:d6:81:57:d1:7f:a0:32:2a:56:ff:9e:97:9a: 17:4b:99:78:be:7d:1a:bd:2a:15:8e:16:99:ed:35: fb:5f:45:a8:bb:a7:d8:7e:de:a5:82:00:0d:58:f6: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EE:6C:F3:40:62:0B:62:2A:4B:EC:95:B3:F3:A6:C4:8A:05:7E:88 X509v3 Authority Key Identifier: keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:9f:db:18:53:c8:0b:b5:54:0a:2f:ff:12:3b:66:51:79:40: 03:55:8d:6d:90:08:eb:25:da:ce:cc:2a:da:c2:cc:56:46:51: 80:d2:25:58:f5:d6:db:54:a4:00:b2:cf:ec:cc:07:6d:df:ea: 5e:30:87:ad:18:6a:83:af:67:d5:36:c3:a9:49:d8:30:0d:d1: fe:56:ab:26:37:58:0b:f3:74:ea:3a:0b:e2:fa:2b:d4:50:7e: 22:a9:11:74:fe:5d:7d:f2:e2:81:c7:3c:1e:85:0f:da:2e:c5: 3a:3d:ad:22:09:b5:92:f0:3c:8d:5d:4e:80:e6:82:d4:4e:94: 06:c0:ea:21:10:2a:7d:90:b5:7c:d7:86:ae:29:b9:ce:6d:d6: 16:94:31:f5:85:1f:1d:f4:f7:c5:47:b3:97:f3:8b:e4:9e:57: fe:ae:93:7d:38:a8:91:22:56:20:3d:b8:c7:2e:2a:9a:c7:2a: c0:20:a5:e5:83:7d:de:c2:33:ed:9f:be:dc:b9:68:68:d8:ce: 49:f1:a2:90:19:0e:3d:f8:5d:3c:f5:78:e4:5b:52:42:44:76: 2f:b8:4b:d6:6f:f3:4b:1c:32:ce:03:10:a1:d4:6c:1b:13:72: 5f:86:39:4d:a0:bd:ef:d9:e8:14:98:95:95:58:eb:c4:65:5d: 9a:d2:14:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRHVkje0i+99UkkN1CG3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1 M2E1ZTkwHhcNMjUxMjE4MjEwMTIzWhcNMjUxMjE5MjEwMTIzWjAzMTEwLwYDVQQD Eyg3ZmVlNmNmMzQwNjIwYjYyMmE0YmVjOTViM2YzYTZjNDhhMDU3ZTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxlh5Sv1zDoSyhwIU8l1K1IxGCFc 2KyBawIhb91PhylDZF/lPVTNCIUPyctAi6hpTKQdmtntVjQQEzaxoNk3h9PgriAi 1tbPuZyPHjT5HR6APT3GOQfmtZbwTHDmbzFUfDdwKxqjdOuPMPEJcWumTpm75ehM 98ORTKuV/J/pMkLQk3/RiIGJdcA4C+QS4VQo0SQqt/NTJgYeWDzw8Tekq5tzcKhm 8cJ+r+IZXv+WdWBLCb+cMmIofKdZ2v8Ys3rG+w2g18eAF8HOpgpmd7/2SloimtaB V9F/oDIqVv+el5oXS5l4vn0avSoVjhaZ7TX7X0Wou6fYft6lggANWPZ1+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/ubPNAYgtiKkvslbPzpsSKBX6IMB8GA1UdIwQY MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJ/bGFPI C7VUCi//EjtmUXlAA1WNbZAI6yXazswq2sLMVkZRgNIlWPXW21SkALLP7MwHbd/q XjCHrRhqg69n1TbDqUnYMA3R/larJjdYC/N06joL4vor1FB+IqkRdP5dffLigcc8 HoUP2i7FOj2tIgm1kvA8jV1OgOaC1E6UBsDqIRAqfZC1fNeGrim5zm3WFpQx9YUf HfT3xUezl/OL5J5X/q6TfTiokSJWID24xy4qmscqwCCl5YN93sIz7Z++3LloaNjO SfGikBkOPfhdPPV45FtSQkR2L7hL1m/zSxwyzgMQodRsGxNyX4Y5TaC979noFJiV lVjrxGVdmtIUNw== -----END CERTIFICATE-----Generated at Thu Dec 18 23:36:47 2025 by rpki-client