This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft File: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft (raw, json) Hash identifier: wZBylu33q50OJMXw/GOcaTzbxGHEElE1NPvn7v1JicU= Subject key identifier: AE:2D:72:6A:64:D1:4A:79:7E:73:FB:01:6F:3C:0E:0F:AA:0D:E1:EB Authority key identifier: FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94 Certificate issuer: /CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94 Certificate serial: 019B0ECA08FDF0EFA4573B852F1D5892A8E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft Manifest number: 1701 Signing time: Thu 11 Dec 2025 19:01:20 +0000 Manifest this update: Thu 11 Dec 2025 19:01:20 +0000 Manifest next update: Fri 12 Dec 2025 19:01:20 +0000 Files and hashes: 1: GDYfoKKG3yFaIjJkJ3YCAK8hLqA.roa (hash: erb5aM2h7W5I1XqnWYG/lDx7/8zDPLRd0RbZw0dE/qs=) 2: _9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl (hash: vwNidUzm5TrcMjb7iKwVZe0LPQtum2lOxxPJPr7oyf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:ca:08:fd:f0:ef:a4:57:3b:85:2f:1d:58:92:a8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffd3c1742fc05a80a2dc6bb0ebe1030a9bbc8c94 Validity Not Before: Dec 11 19:01:20 2025 GMT Not After : Dec 12 19:01:20 2025 GMT Subject: CN=ae2d726a64d14a797e73fb016f3c0e0faa0de1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:df:e0:dd:79:4d:c0:85:17:c9:ae:e6:e1: f1:b4:d0:9d:e9:69:a5:bc:c9:01:06:87:68:a0:cc: cf:ef:78:91:4b:48:57:5f:07:0f:c5:5c:c9:b4:a0: 93:29:23:40:5f:c7:02:d5:3a:e1:31:b7:9f:ca:fd: 35:9d:65:d6:e7:9e:a7:f5:2c:1e:d8:fc:fe:72:b1: 06:5d:79:8f:36:58:5c:22:ed:30:34:d0:61:0b:d3: 9d:cc:94:03:f5:29:76:95:82:db:53:d6:fe:8f:79: 36:1f:19:80:d4:22:4a:a5:ff:35:85:36:ec:84:e3: df:92:de:af:00:f6:53:25:01:18:4c:44:96:81:74: 91:19:ba:dc:2b:e2:f1:cc:02:f3:85:59:fa:8c:c8: d0:78:42:7d:01:bb:52:d3:99:9b:3a:1f:95:d9:69: b9:b9:d7:c4:b1:a0:de:b3:9a:f4:c4:43:22:fa:ef: 1a:dc:e4:bb:15:a0:22:cd:1f:16:39:13:3d:0f:26: f0:f3:29:e7:40:41:6f:2d:a1:b0:3d:fe:50:8f:bf: 19:2a:99:2b:0c:59:30:14:cc:bc:a1:5e:8b:b4:c6: 8c:35:5e:e2:f6:ea:ab:a1:c8:31:6e:a8:12:73:12: 2a:b5:c6:bd:65:67:e3:92:be:7b:a6:22:bd:47:41: 1e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2D:72:6A:64:D1:4A:79:7E:73:FB:01:6F:3C:0E:0F:AA:0D:E1:EB X509v3 Authority Key Identifier: keyid:FF:D3:C1:74:2F:C0:5A:80:A2:DC:6B:B0:EB:E1:03:0A:9B:BC:8C:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/c33df9-edd5-463b-b052-0f0bc401e1e1/1/_9PBdC_AWoCi3Guw6-EDCpu8jJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b9:16:59:09:ca:50:28:15:9a:ea:af:8d:8f:05:86:93:39: 7f:03:ae:7d:6e:14:c3:ea:b1:68:8f:db:ac:7c:a8:4d:78:50: 46:1e:37:30:19:1f:d3:5e:0e:4b:8b:fc:43:53:95:f3:dc:c9: fa:1c:ab:1e:27:4f:d6:cf:da:ce:34:e0:a1:b6:4f:20:7c:26: 8f:d9:a1:8d:d4:c8:f9:e8:52:ae:ec:ed:33:cd:95:5d:db:4e: c4:45:cb:b8:3c:c5:55:ed:32:cd:f8:a0:a1:a0:d1:c9:a6:f8: 22:9e:b1:f5:d7:3d:88:c0:de:23:61:71:a5:37:13:c4:03:36: d1:05:b2:74:01:39:ad:5d:f0:d6:ce:9e:61:50:f5:9f:77:0d: 18:ef:18:48:b4:a8:a7:e9:ac:39:c7:6c:20:33:90:94:1b:8a: 50:5b:e2:48:38:d6:78:1a:89:25:62:93:7d:fe:cb:23:1e:21: ce:b6:57:00:66:e0:a8:d8:3c:6c:41:1a:d3:3e:57:71:f3:a1: 2f:e1:2e:cc:a4:77:d4:2d:c0:a8:8e:1e:f4:fb:24:5d:b9:04: 42:62:45:ca:1d:7f:6d:ab:36:03:51:c7:12:b2:02:a2:cd:3a: 23:88:ec:2e:6c:76:94:cb:4f:19:27:09:fe:a2:f8:03:2f:bd: 05:13:1c:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOygj98O+kVzuFLx1YkqjkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZDNjMTc0MmZjMDVhODBhMmRjNmJiMGViZTEwMzBhOWJi YzhjOTQwHhcNMjUxMjExMTkwMTIwWhcNMjUxMjEyMTkwMTIwWjAzMTEwLwYDVQQD EyhhZTJkNzI2YTY0ZDE0YTc5N2U3M2ZiMDE2ZjNjMGUwZmFhMGRlMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHTf4N15TcCFF8mu5uHxtNCd6Wml vMkBBodooMzP73iRS0hXXwcPxVzJtKCTKSNAX8cC1TrhMbefyv01nWXW556n9Swe 2Pz+crEGXXmPNlhcIu0wNNBhC9OdzJQD9Sl2lYLbU9b+j3k2HxmA1CJKpf81hTbs hOPfkt6vAPZTJQEYTESWgXSRGbrcK+LxzALzhVn6jMjQeEJ9AbtS05mbOh+V2Wm5 udfEsaDes5r0xEMi+u8a3OS7FaAizR8WORM9Dybw8ynnQEFvLaGwPf5Qj78ZKpkr DFkwFMy8oV6LtMaMNV7i9uqrocgxbqgScxIqtca9ZWfjkr57piK9R0EetwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4tcmpk0Up5fnP7AW88Dg+qDeHrMB8GA1UdIwQY MBaAFP/TwXQvwFqAotxrsOvhAwqbvIyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTIt MGYwYmM0MDFlMWUxLzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy9jMzNkZjktZWRkNS00NjNiLWIwNTItMGYwYmM0MDFlMWUx LzEvXzlQQmRDX0FXb0NpM0d1dzYtRURDcHU4akpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAerkWWQnK UCgVmuqvjY8FhpM5fwOufW4Uw+qxaI/brHyoTXhQRh43MBkf014OS4v8Q1OV89zJ +hyrHidP1s/azjTgobZPIHwmj9mhjdTI+ehSruztM82VXdtOxEXLuDzFVe0yzfig oaDRyab4Ip6x9dc9iMDeI2FxpTcTxAM20QWydAE5rV3w1s6eYVD1n3cNGO8YSLSo p+msOcdsIDOQlBuKUFviSDjWeBqJJWKTff7LIx4hzrZXAGbgqNg8bEEa0z5XcfOh L+EuzKR31C3AqI4e9PskXbkEQmJFyh1/bas2A1HHErICos06I4jsLmx2lMtPGScJ /qL4Ay+9BRMcNg== -----END CERTIFICATE-----Generated at Fri Dec 12 00:56:50 2025 by rpki-client