This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json) Hash identifier: BW3Y5N4TgDE4wIbJCahHJs6GbryCUS9gnFhvuAV+B3I= Subject key identifier: 2A:0F:E2:79:77:EF:7C:66:27:C0:68:44:31:3A:48:B7:2E:74:55:3E Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14 Certificate serial: 019B10145715420B91E21C4378316D6957E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft Manifest number: 0F66 Signing time: Fri 12 Dec 2025 01:02:06 +0000 Manifest this update: Fri 12 Dec 2025 01:02:06 +0000 Manifest next update: Sat 13 Dec 2025 01:02:06 +0000 Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: EXByxfL5dhjYn8D1uEK9ef+FNl9wljV0o8/ZRrcNDsE=) 2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=) 3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:57:15:42:0b:91:e2:1c:43:78:31:6d:69:57:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14 Validity Not Before: Dec 12 01:02:06 2025 GMT Not After : Dec 13 01:02:06 2025 GMT Subject: CN=2a0fe27977ef7c6627c06844313a48b72e74553e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:eb:98:98:30:a5:c3:8b:db:7b:5c:0e:a6:51: 32:f0:db:72:c8:b8:48:4f:22:b1:8b:42:fb:b5:54: ca:20:24:7e:21:19:a7:c9:bd:5e:3e:e1:b8:6d:cb: e2:58:cb:a0:6c:1d:c9:c4:a1:8a:ea:a2:98:ae:e4: 35:f6:92:da:73:c8:70:a1:50:07:b2:74:05:1b:75: 78:b5:47:ce:7a:9c:4a:12:d3:fd:83:80:20:b3:bf: c8:0b:d2:d0:67:10:74:8f:d1:ef:97:73:9f:ab:fc: 7c:29:d1:f0:8c:0c:b6:85:55:15:45:aa:3a:6e:a4: e8:8c:ba:6d:cd:e5:25:42:94:4d:e1:89:72:74:62: 6e:a8:fd:a6:7d:3e:b3:22:f1:2c:92:9d:33:3c:e7: be:e3:dc:39:b1:1e:68:78:72:f4:b2:b1:2b:b6:bf: 4e:fc:9d:be:be:71:5d:f8:e8:ca:c1:78:17:b9:7e: d7:b1:04:d4:0b:89:77:2d:18:c8:49:ab:91:d4:90: bc:ac:3e:74:84:4d:af:9f:dc:50:d5:04:be:01:d9: c3:9f:b2:8b:9d:3c:3c:17:1b:56:e3:23:95:2d:9e: d7:8f:0c:56:c5:55:96:37:0a:8e:17:b9:0c:ea:f5: 7e:cb:fb:ed:8b:c5:ae:49:1e:e8:a2:ac:63:36:3c: 4e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0F:E2:79:77:EF:7C:66:27:C0:68:44:31:3A:48:B7:2E:74:55:3E X509v3 Authority Key Identifier: keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:08:65:a4:ed:95:00:8c:fd:6b:53:49:26:a8:23:89:98:56: db:04:d1:68:68:ff:2b:53:c6:e7:69:5d:da:ae:18:a9:ae:5b: 91:0d:36:df:64:d4:80:72:6f:ad:f9:0c:0b:fb:cb:08:aa:b3: 41:68:33:a2:fb:c3:c6:e7:74:4c:23:81:69:b3:a5:20:e7:9e: 64:e5:db:cf:12:56:c8:bd:9b:33:7a:bb:77:03:3b:18:ae:c5: ba:42:41:59:66:c4:fc:88:3e:11:00:bb:1c:4f:66:b6:4f:bf: 4b:12:df:24:eb:6c:dd:de:be:d6:70:ba:67:d7:c3:aa:ea:5c: b4:71:b1:c4:e5:da:33:29:9f:7a:cb:21:cc:5e:cb:f1:75:b3: 1b:e9:72:ae:0b:28:da:65:44:03:f1:f3:8d:5c:96:92:0f:0e: a7:4b:83:61:a7:47:29:b0:8f:ab:91:ab:05:95:73:27:4f:7e: 75:c8:e1:b0:bf:03:a5:01:7f:96:d5:31:24:4f:9e:25:c7:61: ca:4d:3c:d1:23:05:1d:66:9a:23:d3:d5:ee:14:9b:a2:9f:bc: 2d:57:44:d5:68:5e:b7:4d:00:7f:f5:47:de:fe:58:ba:1a:c4: a6:4a:3a:e3:94:2c:56:8c:ef:58:66:a5:37:15:b0:be:3d:e6: d7:aa:cc:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFFcVQguR4hxDeDFtaVfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy ODFmMTQwHhcNMjUxMjEyMDEwMjA2WhcNMjUxMjEzMDEwMjA2WjAzMTEwLwYDVQQD EygyYTBmZTI3OTc3ZWY3YzY2MjdjMDY4NDQzMTNhNDhiNzJlNzQ1NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OuYmDClw4vbe1wOplEy8NtyyLhI TyKxi0L7tVTKICR+IRmnyb1ePuG4bcviWMugbB3JxKGK6qKYruQ19pLac8hwoVAH snQFG3V4tUfOepxKEtP9g4Ags7/IC9LQZxB0j9Hvl3Ofq/x8KdHwjAy2hVUVRao6 bqTojLptzeUlQpRN4YlydGJuqP2mfT6zIvEskp0zPOe+49w5sR5oeHL0srErtr9O /J2+vnFd+OjKwXgXuX7XsQTUC4l3LRjISauR1JC8rD50hE2vn9xQ1QS+AdnDn7KL nTw8FxtW4yOVLZ7XjwxWxVWWNwqOF7kM6vV+y/vti8WuSR7ooqxjNjxOqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoP4nl373xmJ8BoRDE6SLcudFU+MB8GA1UdIwQY MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQhlpO2V AIz9a1NJJqgjiZhW2wTRaGj/K1PG52ld2q4Yqa5bkQ0232TUgHJvrfkMC/vLCKqz QWgzovvDxud0TCOBabOlIOeeZOXbzxJWyL2bM3q7dwM7GK7FukJBWWbE/Ig+EQC7 HE9mtk+/SxLfJOts3d6+1nC6Z9fDqupctHGxxOXaMymfesshzF7L8XWzG+lyrgso 2mVEA/HzjVyWkg8Op0uDYadHKbCPq5GrBZVzJ09+dcjhsL8DpQF/ltUxJE+eJcdh yk080SMFHWaaI9PV7hSbop+8LVdE1Whet00Af/VH3v5YuhrEpko645QsVozvWGal NxWwvj3m16rMqg== -----END CERTIFICATE-----Generated at Fri Dec 12 05:33:23 2025 by rpki-client