This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json) Hash identifier: ZPHmN7ZSmashHj5YGTbE4259NuGj+eESCAvxLY6scS0= Subject key identifier: 9F:17:7C:CE:E0:97:F5:F4:5B:17:9E:C8:E7:F4:02:52:1F:B9:13:9F Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Certificate serial: 019B0E933472916BE2BCA7396E08639973DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 18:01:26 +0000 Manifest this update: Thu 11 Dec 2025 18:01:26 +0000 Manifest next update: Fri 12 Dec 2025 18:01:26 +0000 Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=) 2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: Qgl2cQ6j0IvWW8YOJ2n1mfMTseG/amL0lPGdX7HdCGc=) 3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:34:72:91:6b:e2:bc:a7:39:6e:08:63:99:73:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Validity Not Before: Dec 11 18:01:26 2025 GMT Not After : Dec 12 18:01:26 2025 GMT Subject: CN=9f177ccee097f5f45b179ec8e7f402521fb9139f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cb:7d:9a:3e:93:00:f7:42:a4:68:55:0c:37: 22:c4:12:0c:04:03:ad:a6:e6:bf:e7:75:6e:6e:75: 83:3a:cb:c7:b4:2a:b0:13:a2:05:36:ac:03:70:51: 52:6b:71:eb:8e:32:c7:d4:34:7d:ec:f7:64:97:f9: a8:d5:be:be:de:71:80:a0:c5:e8:5f:c7:d0:c9:bc: f3:89:c4:51:1e:d3:ff:a2:f4:ab:07:1c:d2:92:83: d5:b3:c1:22:9f:97:b6:19:1c:b2:12:6a:88:80:19: 7f:6f:53:f1:86:29:27:7e:cf:7c:83:35:eb:56:bf: 94:a0:17:a9:a7:0a:c9:b4:08:71:1a:d5:d6:1f:32: f1:bd:81:6f:fa:ad:f5:83:2f:74:21:00:9c:9f:69: ef:c8:a9:54:36:a9:9f:cc:19:b0:67:e7:de:b1:dc: c6:a2:90:cf:1d:67:45:cb:4b:be:c6:b0:20:93:ac: 3a:6a:a4:f7:1c:99:7b:fb:ca:99:03:d1:93:94:36: 3f:b0:b7:10:b5:28:44:e6:2f:12:07:83:92:f6:29: e1:c5:f7:30:7f:6f:bf:0c:4a:f6:83:31:2d:82:91: e8:d9:2b:3d:59:18:a9:4c:e3:7f:6b:44:cc:5e:84: 24:eb:56:61:72:46:ad:2a:a0:86:a8:71:a2:df:cd: b3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:17:7C:CE:E0:97:F5:F4:5B:17:9E:C8:E7:F4:02:52:1F:B9:13:9F X509v3 Authority Key Identifier: keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:de:84:1e:36:12:82:da:67:e7:3f:fd:bc:26:79:ec:90:6f: ed:a6:a9:2c:24:86:fb:1c:b5:63:9f:fb:32:f2:21:bb:c8:60: 2b:4a:35:42:3c:c6:d3:70:b1:20:ed:57:d0:09:7b:7c:dd:ca: 7b:e1:fc:51:09:be:b0:d7:95:30:6c:db:d5:ad:9a:46:7b:29: 4f:61:ec:b6:d7:01:a5:d4:3b:a1:88:96:ad:fb:b3:82:ac:11: 33:86:1e:8c:44:92:3c:45:4f:bd:ac:cd:34:84:58:cf:17:2d: 70:54:65:1e:8c:d4:f0:ca:0e:db:aa:97:2e:d3:77:6d:1b:24: 84:eb:bf:09:d6:52:63:a4:7e:a0:3e:d3:53:09:2c:34:55:cb: 55:ac:d9:d5:dc:40:25:ca:59:59:b6:d7:a2:3a:49:2e:e3:00: 7a:b1:34:9e:7f:25:34:03:e3:ae:cd:3d:95:81:bb:2e:c1:3b: e7:2d:32:a4:ef:77:80:a4:3b:24:01:25:80:a1:fb:c5:f2:e0: 5e:93:15:15:87:e1:1c:f1:0e:77:74:a2:4f:d2:71:20:6c:7c: 24:a2:d3:8e:8c:95:ff:3e:9d:08:99:88:1a:8c:2e:77:95:7d: 2c:65:84:b7:ac:bb:5b:2c:5b:95:34:5e:eb:7d:e7:b3:5b:41: 7a:28:83:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOkzRykWvivKc5bghjmXPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1 M2E1ZTkwHhcNMjUxMjExMTgwMTI2WhcNMjUxMjEyMTgwMTI2WjAzMTEwLwYDVQQD Eyg5ZjE3N2NjZWUwOTdmNWY0NWIxNzllYzhlN2Y0MDI1MjFmYjkxMzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArst9mj6TAPdCpGhVDDcixBIMBAOt pua/53VubnWDOsvHtCqwE6IFNqwDcFFSa3HrjjLH1DR97Pdkl/mo1b6+3nGAoMXo X8fQybzzicRRHtP/ovSrBxzSkoPVs8Ein5e2GRyyEmqIgBl/b1Pxhiknfs98gzXr Vr+UoBeppwrJtAhxGtXWHzLxvYFv+q31gy90IQCcn2nvyKlUNqmfzBmwZ+fesdzG opDPHWdFy0u+xrAgk6w6aqT3HJl7+8qZA9GTlDY/sLcQtShE5i8SB4OS9inhxfcw f2+/DEr2gzEtgpHo2Ss9WRipTON/a0TMXoQk61ZhckatKqCGqHGi382z6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8XfM7gl/X0WxeeyOf0AlIfuROfMB8GA1UdIwQY MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv96EHjYS gtpn5z/9vCZ57JBv7aapLCSG+xy1Y5/7MvIhu8hgK0o1QjzG03CxIO1X0Al7fN3K e+H8UQm+sNeVMGzb1a2aRnspT2HsttcBpdQ7oYiWrfuzgqwRM4YejESSPEVPvazN NIRYzxctcFRlHozU8MoO26qXLtN3bRskhOu/CdZSY6R+oD7TUwksNFXLVazZ1dxA JcpZWbbXojpJLuMAerE0nn8lNAPjrs09lYG7LsE75y0ypO93gKQ7JAElgKH7xfLg XpMVFYfhHPEOd3SiT9JxIGx8JKLTjoyV/z6dCJmIGowud5V9LGWEt6y7WyxblTRe 633ns1tBeiiDUg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:09:10 2025 by rpki-client