This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json) Hash identifier: zp8//SWe3VWF/rHONCRbC788tXvJJP42gCUeWM18Fhw= Subject key identifier: 31:9E:67:AD:3B:C1:58:44:01:A7:E8:43:9C:12:D0:FC:3E:A8:CF:A1 Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Certificate serial: 019B19BC38735ACA195BDF3E53ACB0903A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft Manifest number: 1775 Signing time: Sat 13 Dec 2025 22:02:03 +0000 Manifest this update: Sat 13 Dec 2025 22:02:03 +0000 Manifest next update: Sun 14 Dec 2025 22:02:03 +0000 Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: VGVV/7zVt2AoQw6pzhkVDtrkmOOzZ9ntDzXFhbVw9cQ=) 2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:38:73:5a:ca:19:5b:df:3e:53:ac:b0:90:3a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Validity Not Before: Dec 13 22:02:03 2025 GMT Not After : Dec 14 22:02:03 2025 GMT Subject: CN=319e67ad3bc1584401a7e8439c12d0fc3ea8cfa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:63:58:65:6e:3a:81:17:11:a8:be:b6:59:6a: 5c:93:a9:3b:5a:2a:62:bc:1b:ea:1b:d8:3b:b2:33: 88:75:6c:e4:71:85:e2:2c:a2:95:c5:44:41:45:0d: 76:8c:03:38:f8:bb:75:56:3c:19:d5:3d:56:be:13: e7:6b:5b:06:a8:fe:67:86:08:df:10:6c:61:fa:95: 1a:ab:8b:bd:1e:1d:87:e3:c8:34:4d:59:f6:79:8f: ec:c4:d2:6d:c0:84:cc:6f:5b:9d:97:c0:9f:8b:29: bf:2f:22:92:58:e5:d3:92:84:15:8f:1a:50:55:9b: 44:b1:e3:39:21:06:2c:f7:d7:28:48:b0:e6:18:68: ed:34:87:98:ed:ef:51:2d:16:3a:07:bc:36:42:32: c7:e7:a1:9b:21:7e:ce:df:bb:04:0c:60:a4:64:58: 07:20:de:f1:f8:81:53:6b:e0:4a:b6:c5:29:4d:00: 5d:ce:bb:62:fc:a8:95:81:ef:30:fd:e4:9c:70:fb: 84:60:22:b1:fc:ab:12:d1:a0:d6:f9:8e:74:c3:18: 85:1e:17:68:c0:ba:6d:3a:f0:7c:f3:60:d6:a9:61: 10:18:bc:8f:59:33:5d:b5:db:85:9a:e2:c5:fb:50: 67:4a:a2:87:6e:ee:b1:d6:3e:19:a4:9c:26:40:e5: f5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9E:67:AD:3B:C1:58:44:01:A7:E8:43:9C:12:D0:FC:3E:A8:CF:A1 X509v3 Authority Key Identifier: keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:e9:48:d3:5f:06:3c:85:17:87:a9:3b:86:c0:2d:3c:0d:51: 37:8d:bb:5d:2b:e0:50:0a:5b:28:1a:ef:c4:3b:9d:77:c0:67: 81:61:84:d5:87:1b:4b:0e:72:fa:1b:01:45:2b:28:3a:c4:96: 1e:21:04:63:9a:e4:be:44:0a:06:25:ad:c2:fd:ea:d8:ff:10: 0d:b0:e8:46:31:52:00:3a:af:0f:70:b5:0b:d4:97:f7:0d:82: d5:59:f1:f8:61:d0:75:ee:15:40:ea:d9:04:40:b2:17:97:43: 24:e8:85:87:3b:44:c8:fc:28:31:26:83:9b:50:3b:a7:76:3e: bb:a6:14:dd:81:2c:59:0d:58:b9:42:8f:b4:52:1e:a7:7b:1a: 29:a4:1b:5f:2c:49:0c:a1:a8:b8:84:8b:3f:e0:a4:b1:9f:0b: 9e:c6:25:04:f4:57:c4:13:a6:db:51:49:04:2b:1b:74:12:d8: 7b:59:ee:4e:42:2b:c9:fd:c9:ec:5a:6f:ce:7a:c3:fd:d4:b7: 1d:ef:95:f0:6a:6f:ef:df:41:81:46:6a:87:e3:35:96:ee:82: 91:01:d8:16:b2:c9:22:9b:b3:c9:c8:0f:ce:e9:fd:69:7f:45: 90:e6:e2:1c:ac:b3:b5:67:30:e5:fd:fd:4e:ab:b4:81:d2:2e: 36:51:87:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvDhzWsoZW98+U6ywkDphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjFjNTZkYWY3MDVmMTJlOTVkNDJmNDc3ZjhlMGEzZDg2 ZjM5OTYwHhcNMjUxMjEzMjIwMjAzWhcNMjUxMjE0MjIwMjAzWjAzMTEwLwYDVQQD EygzMTllNjdhZDNiYzE1ODQ0MDFhN2U4NDM5YzEyZDBmYzNlYThjZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWNYZW46gRcRqL62WWpck6k7Wipi vBvqG9g7sjOIdWzkcYXiLKKVxURBRQ12jAM4+Lt1VjwZ1T1WvhPna1sGqP5nhgjf EGxh+pUaq4u9Hh2H48g0TVn2eY/sxNJtwITMb1udl8Cfiym/LyKSWOXTkoQVjxpQ VZtEseM5IQYs99coSLDmGGjtNIeY7e9RLRY6B7w2QjLH56GbIX7O37sEDGCkZFgH IN7x+IFTa+BKtsUpTQBdzrti/KiVge8w/eSccPuEYCKx/KsS0aDW+Y50wxiFHhdo wLptOvB882DWqWEQGLyPWTNdtduFmuLF+1BnSqKHbu6x1j4ZpJwmQOX1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGeZ607wVhEAafoQ5wS0Pw+qM+hMB8GA1UdIwQY MBaAFPbxxW2vcF8S6V1C9Hf44KPYbzmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEt YmZhY2JiMWExNzdkLzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEtYmZhY2JiMWExNzdk LzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOlI018G PIUXh6k7hsAtPA1RN427XSvgUApbKBrvxDudd8BngWGE1YcbSw5y+hsBRSsoOsSW HiEEY5rkvkQKBiWtwv3q2P8QDbDoRjFSADqvD3C1C9SX9w2C1Vnx+GHQde4VQOrZ BECyF5dDJOiFhztEyPwoMSaDm1A7p3Y+u6YU3YEsWQ1YuUKPtFIep3saKaQbXyxJ DKGouISLP+CksZ8LnsYlBPRXxBOm21FJBCsbdBLYe1nuTkIryf3J7FpvznrD/dS3 He+V8Gpv799BgUZqh+M1lu6CkQHYFrLJIpuzycgPzun9aX9FkObiHKyztWcw5f39 Tqu0gdIuNlGH5A== -----END CERTIFICATE-----Generated at Sun Dec 14 03:25:04 2025 by rpki-client