This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft File: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json) Hash identifier: 2AJKrR95glAxuPzj1ZDOKK2UjSbE5Y/ACY3EDbpV6ts= Subject key identifier: 47:3D:3E:6F:AA:80:3D:0F:BD:BE:6A:66:D1:86:14:DB:5A:A8:23:56 Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 Certificate issuer: /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Certificate serial: 019B676830AB5B28A308E59843AA9D287DDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft Manifest number: 0689 Signing time: Mon 29 Dec 2025 00:00:40 +0000 Manifest this update: Mon 29 Dec 2025 00:00:40 +0000 Manifest next update: Tue 30 Dec 2025 00:00:40 +0000 Files and hashes: 1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: pzWfZV7kUuHMSjesvV1INE9KCnqDlI9VLMbthHBJF4E=) 2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:30:ab:5b:28:a3:08:e5:98:43:aa:9d:28:7d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Validity Not Before: Dec 29 00:00:40 2025 GMT Not After : Dec 30 00:00:40 2025 GMT Subject: CN=473d3e6faa803d0fbdbe6a66d18614db5aa82356 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:90:b6:e8:8c:b2:01:13:0f:21:c4:c6:0d: cd:50:85:85:97:65:f8:e5:7f:9e:8c:00:a6:ae:15: a1:79:94:fa:76:db:33:ee:74:f9:4c:3d:1e:05:c8: e3:fb:8e:c6:59:ae:ed:38:0e:32:44:a3:06:5c:2b: 37:6c:e0:29:76:64:4f:c8:79:e0:8b:7f:84:61:f4: 60:d3:ef:66:be:31:54:d7:8d:c2:4e:43:15:ee:32: 63:36:52:e9:8a:51:f4:08:44:31:44:48:46:e2:4a: 5f:92:6c:e7:82:4f:b8:3a:a5:1c:2c:43:39:b9:1f: ce:72:8a:fc:d4:62:0c:69:a8:63:8e:de:b0:f9:0d: 68:04:b2:9f:38:4e:fb:9c:5f:37:ef:ca:57:9f:55: d2:3a:db:97:e8:72:14:15:bb:23:ba:16:fb:23:09: 30:3e:e9:9c:22:ce:34:60:62:14:92:d5:ba:cf:70: 6e:0a:45:62:c0:f7:9b:85:e7:fe:46:8f:49:e2:cf: 31:41:f7:89:30:ac:c9:7c:58:08:4d:f8:c2:71:b7: 70:c8:18:c6:9b:bd:93:3d:37:a5:9e:e7:95:91:38: 6b:90:cb:8b:a7:8f:2a:79:e4:4e:b2:25:87:e3:75: 7e:97:e2:e3:92:c2:b2:67:6c:7e:06:91:d3:a8:5d: 6f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:3D:3E:6F:AA:80:3D:0F:BD:BE:6A:66:D1:86:14:DB:5A:A8:23:56 X509v3 Authority Key Identifier: keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f9:b6:04:94:07:15:b2:8d:31:0e:55:2a:3c:eb:f6:fe:54: cf:7f:b9:bd:3a:0e:24:fb:93:c7:ea:06:60:95:8f:d8:14:f8: 8d:36:ca:69:40:fa:64:60:aa:82:2b:e3:ff:92:8f:3c:b2:e6: 55:d5:8d:72:81:79:00:e9:03:85:b9:89:47:b0:f7:82:14:a8: 6f:8a:5b:70:fe:33:aa:b8:2c:96:56:de:8d:75:bf:1d:0d:61: 0e:33:eb:e9:3c:f7:0a:a8:8c:a3:90:b1:40:9e:57:45:79:cd: 65:c2:95:4f:a4:9b:77:ff:e8:b3:6a:f2:85:98:a5:39:77:d6: b7:58:d8:5b:c6:ae:a6:f5:49:4c:8e:14:99:4c:3e:1d:72:b7: 7e:1c:8b:40:ee:8e:af:35:fd:49:7c:1b:25:f1:c6:c0:cf:58: fd:af:26:95:df:e4:a8:4c:4f:de:27:3a:ba:9f:99:e4:8c:4d: a1:d1:3c:72:36:25:d5:54:07:9c:7a:68:aa:99:4d:af:67:6b: 6a:48:e5:41:88:56:85:a0:35:fe:1e:2d:c1:31:56:ed:b7:9d: e5:64:08:9f:0c:7d:ce:47:f3:66:59:60:b5:f3:74:7f:bf:05: 53:48:fb:fd:aa:13:7d:dd:f1:ce:6a:c9:ec:90:aa:1f:bb:9f: d7:d9:c9:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaDCrWyijCOWYQ6qdKH3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1 NmY4ZTcwHhcNMjUxMjI5MDAwMDQwWhcNMjUxMjMwMDAwMDQwWjAzMTEwLwYDVQQD Eyg0NzNkM2U2ZmFhODAzZDBmYmRiZTZhNjZkMTg2MTRkYjVhYTgyMzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLeQtuiMsgETDyHExg3NUIWFl2X4 5X+ejACmrhWheZT6dtsz7nT5TD0eBcjj+47GWa7tOA4yRKMGXCs3bOApdmRPyHng i3+EYfRg0+9mvjFU143CTkMV7jJjNlLpilH0CEQxREhG4kpfkmzngk+4OqUcLEM5 uR/Ocor81GIMaahjjt6w+Q1oBLKfOE77nF8378pXn1XSOtuX6HIUFbsjuhb7Iwkw PumcIs40YGIUktW6z3BuCkViwPebhef+Ro9J4s8xQfeJMKzJfFgITfjCcbdwyBjG m72TPTelnueVkThrkMuLp48qeeROsiWH43V+l+LjksKyZ2x+BpHTqF1vDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEc9Pm+qgD0Pvb5qZtGGFNtaqCNWMB8GA1UdIwQY MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4 LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/m2BJQH FbKNMQ5VKjzr9v5Uz3+5vToOJPuTx+oGYJWP2BT4jTbKaUD6ZGCqgivj/5KPPLLm VdWNcoF5AOkDhbmJR7D3ghSob4pbcP4zqrgsllbejXW/HQ1hDjPr6Tz3CqiMo5Cx QJ5XRXnNZcKVT6Sbd//os2ryhZilOXfWt1jYW8aupvVJTI4UmUw+HXK3fhyLQO6O rzX9SXwbJfHGwM9Y/a8mld/kqExP3ic6up+Z5IxNodE8cjYl1VQHnHpoqplNr2dr akjlQYhWhaA1/h4twTFW7bed5WQInwx9zkfzZllgtfN0f78FU0j7/aoTfd3xzmrJ 7JCqH7uf19nJQw== -----END CERTIFICATE-----Generated at Mon Dec 29 03:15:06 2025 by rpki-client