This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: 4CAMGrNV58iZPSoSB0maLbCZ4S+4VKFTa180nPjeM34= Subject key identifier: 40:AD:18:72:FD:AF:B4:58:FF:42:54:A7:25:14:24:61:55:86:2F:0F Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019B0558F856FA939B605FC504304F106D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1781 Signing time: Tue 09 Dec 2025 23:01:15 +0000 Manifest this update: Tue 09 Dec 2025 23:01:15 +0000 Manifest next update: Wed 10 Dec 2025 23:01:15 +0000 Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=) 2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=) 3: YEabeKOKfuDoseD09i_AzpuQwDI.roa (hash: cPvPvvgVr6xheeyEqYOGlwuPA4n504eYtVm93wavUOs=) 4: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=) 5: rD9vHXlVEIB8M3cZw6Ig3zqOjSY.roa (hash: LqdT+kDN7EAKsUrhE7I32HrIwpzhpfN+fHExPsMZ/NQ=) 6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: i1ydMR4y5wX/Whp2sp9XoYZRxXoMr/Y0f2egT22xZkE=) 7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 23:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:58:f8:56:fa:93:9b:60:5f:c5:04:30:4f:10:6d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Dec 9 23:01:15 2025 GMT Not After : Dec 10 23:01:15 2025 GMT Subject: CN=40ad1872fdafb458ff4254a72514246155862f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:a4:2a:01:56:a5:85:3a:b7:46:c1:09:32: 5a:6c:df:cf:70:fe:74:4c:0e:b6:6b:0d:42:1d:88: ea:a2:c1:26:b2:4b:4d:25:ab:fd:33:ad:ed:f1:c2: 14:02:f0:e4:28:8b:c1:89:a9:83:08:3b:56:c5:d6: 79:28:18:06:3b:fd:f7:01:dd:fd:cc:b8:9a:39:1e: 9f:04:89:4b:32:9f:f0:90:03:60:70:2b:db:b7:b4: 6d:2c:59:b7:d9:08:8a:d7:6f:e5:a0:6b:b2:18:4e: 0e:c0:02:d8:46:e2:5c:41:a0:1e:09:64:4d:46:a6: 3c:db:4a:4a:29:5e:53:fe:a8:9e:e6:fd:84:e3:f7: 45:0a:ee:45:61:69:5b:37:67:53:31:f4:f5:8c:28: 15:83:0f:1e:60:f9:ca:71:6b:90:7d:2f:41:b3:b0: 1f:9d:4b:9d:0b:e8:54:97:97:1a:37:1e:d1:fa:c8: ee:2b:bf:78:4b:cb:ad:95:c4:6d:ee:f8:c9:a2:10: be:8d:1f:31:3f:62:11:18:1f:b9:35:45:a3:f4:a6: 68:c7:e0:86:e9:2e:a8:94:bc:82:69:6c:f1:4e:2e: e3:60:96:32:aa:0d:39:1c:e2:b5:04:1a:1e:fc:dd: 00:73:d9:cb:76:b4:1a:da:37:60:c0:8d:8e:2a:0d: b1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AD:18:72:FD:AF:B4:58:FF:42:54:A7:25:14:24:61:55:86:2F:0F X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:bb:fd:0f:75:50:39:fb:20:f4:3c:cf:dd:5a:4d:89:a2:a6: a5:fc:68:87:32:5e:a8:9b:5e:1e:85:b3:f9:0a:3f:0d:25:54: e5:24:f3:c3:90:cc:75:a9:b4:93:a3:58:83:48:a6:3d:97:16: 3a:2d:7a:5d:d8:3b:50:9e:c2:8f:71:d3:22:62:99:c9:75:24: da:9d:36:54:af:94:a8:30:ab:06:a8:6e:8b:ba:18:5c:fa:87: e7:b2:0c:de:8d:82:ea:1c:e9:2b:58:93:25:4c:a7:03:9a:9d: ed:f5:41:de:32:af:c7:87:a5:23:11:f4:f6:bb:a6:f1:34:0f: ce:2b:ad:38:49:cc:da:53:63:8d:1a:d4:f6:18:4c:10:29:f0: 06:26:9f:30:d1:83:5a:c8:e0:e9:6d:a6:8a:88:9c:2d:27:f8: 45:1c:63:17:1e:79:01:62:ba:3e:f7:a7:f0:cc:ce:cb:7e:1d: 09:ea:a4:b2:cf:8a:a5:35:c3:b7:b5:8b:c7:99:e3:e3:a5:e0: a8:3c:9b:0a:3d:28:6e:16:17:6a:ea:f8:e1:cf:8c:d9:3a:84: 33:e5:71:b0:fb:0d:cf:ae:0f:e7:4b:8c:6e:4f:ec:15:1f:f6: 98:8e:38:6e:9c:43:2e:a7:0f:a3:62:bc:51:f6:dc:c8:8a:cb: 1c:e7:e4:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFWPhW+pObYF/FBDBPEG1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjUxMjA5MjMwMTE1WhcNMjUxMjEwMjMwMTE1WjAzMTEwLwYDVQQD Eyg0MGFkMTg3MmZkYWZiNDU4ZmY0MjU0YTcyNTE0MjQ2MTU1ODYyZjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0ukKgFWpYU6t0bBCTJabN/PcP50 TA62aw1CHYjqosEmsktNJav9M63t8cIUAvDkKIvBiamDCDtWxdZ5KBgGO/33Ad39 zLiaOR6fBIlLMp/wkANgcCvbt7RtLFm32QiK12/loGuyGE4OwALYRuJcQaAeCWRN RqY820pKKV5T/qie5v2E4/dFCu5FYWlbN2dTMfT1jCgVgw8eYPnKcWuQfS9Bs7Af nUudC+hUl5caNx7R+sjuK794S8utlcRt7vjJohC+jR8xP2IRGB+5NUWj9KZox+CG 6S6olLyCaWzxTi7jYJYyqg05HOK1BBoe/N0Ac9nLdrQa2jdgwI2OKg2x8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECtGHL9r7RY/0JUpyUUJGFVhi8PMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbv9D3VQ Ofsg9DzP3VpNiaKmpfxohzJeqJteHoWz+Qo/DSVU5STzw5DMdam0k6NYg0imPZcW Oi16Xdg7UJ7Cj3HTImKZyXUk2p02VK+UqDCrBqhui7oYXPqH57IM3o2C6hzpK1iT JUynA5qd7fVB3jKvx4elIxH09rum8TQPziutOEnM2lNjjRrU9hhMECnwBiafMNGD Wsjg6W2mioicLSf4RRxjFx55AWK6Pven8MzOy34dCeqkss+KpTXDt7WLx5nj46Xg qDybCj0obhYXaur44c+M2TqEM+VxsPsNz64P50uMbk/sFR/2mI44bpxDLqcPo2K8 UfbcyIrLHOfkMg== -----END CERTIFICATE-----Generated at Wed Dec 10 04:18:53 2025 by rpki-client