This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json) Hash identifier: eg4TyFdVNMfy27Wq7iYO0udNHfkhQkjj3XiRHagksw4= Subject key identifier: 72:9E:72:48:B0:5D:40:32:39:6C:35:BC:B7:34:6F:94:53:85:F8:A3 Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Certificate serial: 019B3C100D380E1FDB4B4E2967D62E6A3393 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 14:00:43 +0000 Manifest this update: Sat 20 Dec 2025 14:00:43 +0000 Manifest next update: Sun 21 Dec 2025 14:00:43 +0000 Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: Ejld8lfXvqoCS+Zt7G2PlVNYK4tHE7En8lEDnDEpbDM=) 2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:0d:38:0e:1f:db:4b:4e:29:67:d6:2e:6a:33:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Validity Not Before: Dec 20 14:00:43 2025 GMT Not After : Dec 21 14:00:43 2025 GMT Subject: CN=729e7248b05d4032396c35bcb7346f945385f8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:98:49:53:0c:ce:ba:a3:ad:9b:ac:2b:ba:35: 50:a6:81:bf:2e:82:88:b6:92:c9:f5:e1:33:d7:17: c9:77:c6:83:db:59:94:1a:b6:9f:48:bf:86:fa:95: aa:b5:6b:46:9c:c6:54:16:17:02:c2:b3:68:c6:bd: 4b:74:7f:94:8f:25:70:20:13:c5:48:be:07:df:8d: c8:f1:2c:3f:a0:38:1c:19:f7:b1:5d:0a:bf:52:37: 81:08:10:b6:f4:18:db:3a:98:6d:af:2b:33:b1:3b: e9:9e:30:40:04:4b:1a:3d:86:52:d4:1b:2c:73:8e: c2:f9:3e:b6:f1:5e:35:c6:f5:64:fb:c5:93:bd:19: bd:9a:c9:14:58:ad:d7:96:be:f1:7a:35:fe:50:9a: 6c:3a:9f:94:91:b0:83:23:8d:80:a5:14:b2:a4:48: 85:3c:ed:3a:0e:7b:dc:97:c9:5e:4a:32:d2:d9:44: 73:f2:c0:d2:7f:1b:c0:5c:35:9d:19:8d:91:11:d1: b6:13:0c:5b:d2:2e:f7:95:b1:40:1e:1c:86:e0:b9: bb:02:dc:b1:3c:1d:ee:13:e8:46:cb:5d:00:49:73: 00:4a:14:08:43:4e:ed:e1:a5:2e:19:5b:f9:f9:a7: 83:73:0a:7f:56:99:20:b0:6b:1c:4c:ac:1f:0e:50: fa:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9E:72:48:B0:5D:40:32:39:6C:35:BC:B7:34:6F:94:53:85:F8:A3 X509v3 Authority Key Identifier: keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:98:ce:87:0f:8b:7c:78:95:86:f3:20:eb:a9:b9:98:ca:ae: e2:b3:d5:02:63:4d:33:28:85:1e:eb:8a:c0:39:b5:7b:c3:a1: 2f:78:33:a1:c8:ce:c4:80:21:8e:76:85:f7:b6:cb:b5:09:03: fb:e4:ab:76:e1:d2:45:74:73:fd:53:c4:7e:07:79:e1:b0:69: 9b:51:e3:3c:c2:e3:dc:65:d6:60:3f:98:44:97:cc:90:81:a1: b4:a1:b6:db:b7:7e:ec:ca:e2:95:f7:cd:04:eb:c4:4b:8e:e3: 78:6d:ea:f4:5e:f7:9f:a4:5e:5d:01:8f:01:b5:ee:3a:fe:17: b4:89:1e:ba:ee:f0:d2:a3:d3:72:fb:2c:8b:a8:cc:1e:a1:a2: cc:c8:55:40:f9:77:26:0f:fb:b5:c0:c0:9b:dd:a4:26:17:f5: 6a:88:9a:bd:b7:33:fb:59:e2:8f:9b:9a:56:22:f6:97:cc:f6: 13:3f:1f:a7:7b:ed:fb:d5:e1:2a:55:38:a1:1f:ee:fb:b0:1a: 35:22:55:1b:88:6e:b0:b1:53:e6:1e:e0:a8:78:82:d9:0d:9e: d8:e5:95:5c:57:4b:cc:6e:d1:96:cb:6f:37:0c:87:d0:3c:da: 1e:b3:24:6c:d7:75:82:5e:cd:40:84:5d:16:0a:d0:2e:2e:10: c9:50:75:c3 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs8EA04Dh/bS04pZ9YuajOTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx YWEzNGYwHhcNMjUxMjIwMTQwMDQzWhcNMjUxMjIxMTQwMDQzWjAzMTEwLwYDVQQD Eyg3MjllNzI0OGIwNWQ0MDMyMzk2YzM1YmNiNzM0NmY5NDUzODVmOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5hJUwzOuqOtm6wrujVQpoG/LoKI tpLJ9eEz1xfJd8aD21mUGrafSL+G+pWqtWtGnMZUFhcCwrNoxr1LdH+UjyVwIBPF SL4H343I8Sw/oDgcGfexXQq/UjeBCBC29BjbOphtryszsTvpnjBABEsaPYZS1Bss c47C+T628V41xvVk+8WTvRm9mskUWK3Xlr7xejX+UJpsOp+UkbCDI42ApRSypEiF PO06Dnvcl8leSjLS2URz8sDSfxvAXDWdGY2REdG2Ewxb0i73lbFAHhyG4Lm7Atyx PB3uE+hGy10ASXMAShQIQ07t4aUuGVv5+aeDcwp/VpkgsGscTKwfDlD6UwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFHKeckiwXUAyOWw1vLc0b5RThfijMB8GA1UdIwQY MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw LWU2MzM3MDNmY2JlZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcxL2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNi ZWQvMS8xLWM5bTdYUW9vNTVqOE5KellEZjBNY1FhbzA4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5jO hw+LfHiVhvMg66m5mMqu4rPVAmNNMyiFHuuKwDm1e8OhL3gzocjOxIAhjnaF97bL tQkD++SrduHSRXRz/VPEfgd54bBpm1HjPMLj3GXWYD+YRJfMkIGhtKG227d+7Mri lffNBOvES47jeG3q9F73n6ReXQGPAbXuOv4XtIkeuu7w0qPTcvssi6jMHqGizMhV QPl3Jg/7tcDAm92kJhf1aoiavbcz+1nij5uaViL2l8z2Ez8fp3vt+9XhKlU4oR/u +7AaNSJVG4husLFT5h7gqHiC2Q2e2OWVXFdLzG7RlstvNwyH0DzaHrMkbNd1gl7N QIRdFgrQLi4QyVB1ww== -----END CERTIFICATE-----Generated at Sat Dec 20 18:15:45 2025 by rpki-client