This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json) Hash identifier: f2U1xE5R02ZlGEKIgGnisrFKs1JFNILxgoWkdd0AC/Y= Subject key identifier: 9F:BF:7C:F1:2C:DE:22:9A:B5:DF:94:AA:EC:B4:3C:FD:FB:20:D5:E2 Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af Certificate serial: 019B59084916C1E7C111196383E3B38EDC2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft Manifest number: 0227 Signing time: Fri 26 Dec 2025 05:01:13 +0000 Manifest this update: Fri 26 Dec 2025 05:01:13 +0000 Manifest next update: Sat 27 Dec 2025 05:01:13 +0000 Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=) 2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: dew+MEb6CzRPHYXatmnJioUzET4OrIlRbhImU4qWuCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:49:16:c1:e7:c1:11:19:63:83:e3:b3:8e:dc:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af Validity Not Before: Dec 26 05:01:13 2025 GMT Not After : Dec 27 05:01:13 2025 GMT Subject: CN=9fbf7cf12cde229ab5df94aaecb43cfdfb20d5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:29:d9:5b:86:c4:8c:c3:13:d2:b2:aa:2a:ba: 5a:5b:e1:44:e3:b6:a1:69:44:4e:8c:57:e5:af:1c: 75:e1:be:d8:05:8f:9a:00:88:52:ab:02:13:d6:d5: 01:a4:f9:5e:4b:cb:8a:4e:0d:8b:9e:55:24:20:c2: 0e:8a:2d:b5:19:7e:48:04:65:ec:52:b9:85:af:68: 95:00:42:b5:1c:82:46:94:08:06:99:0f:af:90:e9: 2b:00:97:e8:a2:02:72:50:75:2b:e3:da:88:b1:52: 08:87:fc:5d:4a:03:d6:95:df:5f:bf:bb:56:00:f1: 22:b6:2d:f3:a9:e0:e2:ba:8c:81:56:54:e1:15:17: 14:ae:6b:48:7d:dd:bc:92:5e:c3:fc:a1:2f:68:58: d1:0a:74:20:fa:8f:6c:5b:94:c1:b0:27:c1:e1:30: 86:02:24:54:ff:c9:a4:4f:8b:0f:39:0b:a6:ff:30: ec:15:87:2d:74:05:fe:5a:2a:b3:d8:b2:c4:77:da: b8:91:7e:79:eb:1c:20:c9:ea:f7:ab:b1:31:ec:0b: d5:d9:48:50:34:f6:84:c2:5b:4e:2e:e6:17:d7:a6: 0f:f7:62:71:25:82:c0:df:25:5a:ce:2a:38:e7:5f: ec:d1:db:5c:d8:ca:1f:9e:61:36:08:1a:ed:ae:41: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:7C:F1:2C:DE:22:9A:B5:DF:94:AA:EC:B4:3C:FD:FB:20:D5:E2 X509v3 Authority Key Identifier: keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:42:0f:64:57:0a:5c:b3:67:66:94:4f:84:80:17:0b:ea:f0: 19:9e:e0:59:21:0d:4a:0e:9b:11:c8:e1:1b:c6:d0:ce:4f:de: 43:13:bb:c6:b0:ad:ec:98:e5:40:44:02:e6:4d:97:13:39:40: cb:fb:03:bc:ee:5c:ec:11:df:6d:65:bf:6f:a2:06:50:68:13: c0:2b:a6:67:d9:8c:3a:33:36:b6:9a:da:7e:04:a1:78:ce:6e: f9:07:a3:77:fe:24:55:c8:87:28:3a:c0:64:2d:76:9d:0e:dc: b3:e3:c9:55:d4:eb:6b:2b:e3:a3:03:e0:e7:8f:35:d5:2f:1e: 04:c3:51:ed:36:82:dc:2c:11:bd:51:b8:85:c1:7d:cf:d2:b4: 4e:c3:ed:84:1c:1d:23:b5:b0:5f:3b:da:68:6a:ae:af:4f:21: bb:db:16:8a:1e:4d:b1:20:42:e1:6f:16:53:71:a0:88:53:72: f5:82:65:29:55:74:60:68:47:40:cb:c8:ba:e7:b7:38:92:4e: f8:ba:7b:84:a2:73:8e:88:54:f5:fb:52:d6:50:e6:9d:42:01: 39:51:8d:02:d6:03:72:7c:0d:b5:23:bb:4e:03:4c:d4:92:e4: 10:fc:f0:9c:4f:83:e1:ed:2f:41:a9:a3:38:83:51:96:ce:da: 9c:07:89:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCEkWwefBERljg+OzjtwrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDQ1ZTI2MDc5YzMxYzg1MjE2YjczMDBjZDhlNjMzMGQ0 M2Q1YWYwHhcNMjUxMjI2MDUwMTEzWhcNMjUxMjI3MDUwMTEzWjAzMTEwLwYDVQQD Eyg5ZmJmN2NmMTJjZGUyMjlhYjVkZjk0YWFlY2I0M2NmZGZiMjBkNWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsinZW4bEjMMT0rKqKrpaW+FE47ah aUROjFflrxx14b7YBY+aAIhSqwIT1tUBpPleS8uKTg2LnlUkIMIOii21GX5IBGXs UrmFr2iVAEK1HIJGlAgGmQ+vkOkrAJfoogJyUHUr49qIsVIIh/xdSgPWld9fv7tW APEiti3zqeDiuoyBVlThFRcUrmtIfd28kl7D/KEvaFjRCnQg+o9sW5TBsCfB4TCG AiRU/8mkT4sPOQum/zDsFYctdAX+Wiqz2LLEd9q4kX556xwgyer3q7Ex7AvV2UhQ NPaEwltOLuYX16YP92JxJYLA3yVazio451/s0dtc2MofnmE2CBrtrkF1TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+/fPEs3iKatd+Uquy0PP37INXiMB8GA1UdIwQY MBaAFJvUXiYHnDHIUha3MAzY5jMNQ9WvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUt ZGY5ZDVmYmRiYzE1LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUtZGY5ZDVmYmRiYzE1 LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEIPZFcK XLNnZpRPhIAXC+rwGZ7gWSENSg6bEcjhG8bQzk/eQxO7xrCt7JjlQEQC5k2XEzlA y/sDvO5c7BHfbWW/b6IGUGgTwCumZ9mMOjM2tprafgSheM5u+Qejd/4kVciHKDrA ZC12nQ7cs+PJVdTrayvjowPg54811S8eBMNR7TaC3CwRvVG4hcF9z9K0TsPthBwd I7WwXzvaaGqur08hu9sWih5NsSBC4W8WU3GgiFNy9YJlKVV0YGhHQMvIuue3OJJO +Lp7hKJzjohU9ftS1lDmnUIBOVGNAtYDcnwNtSO7TgNM1JLkEPzwnE+D4e0vQamj OINRls7anAeJEA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:05:54 2025 by rpki-client