This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json) Hash identifier: CxjKKaKRH0JCSdEomEDViGTZAlzGCTR3CDlfYSKsk7U= Subject key identifier: F0:97:60:BF:11:A2:09:66:BD:68:CF:F2:EA:9B:B1:62:52:54:B5:3C Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Certificate serial: 019B3A222D0C8207F1BDA0A0E153D6D71450 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft Manifest number: 0D4D Signing time: Sat 20 Dec 2025 05:01:16 +0000 Manifest this update: Sat 20 Dec 2025 05:01:16 +0000 Manifest next update: Sun 21 Dec 2025 05:01:16 +0000 Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=) 2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: D3fNwnc1y+QtgcYAWMEQ9kzxdZ4KoRC0hb6iEAvcAz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:2d:0c:82:07:f1:bd:a0:a0:e1:53:d6:d7:14:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Validity Not Before: Dec 20 05:01:16 2025 GMT Not After : Dec 21 05:01:16 2025 GMT Subject: CN=f09760bf11a20966bd68cff2ea9bb1625254b53c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:8b:80:29:f5:92:67:8c:cd:94:17:68:67: 1c:fa:17:85:e3:f6:d8:20:64:a0:37:c4:a4:82:c3: 60:5a:a5:b0:92:09:6c:81:cc:88:ab:07:1b:4f:fb: 0b:be:f1:b3:aa:b1:eb:23:cf:b7:8e:a4:e1:9e:44: fc:24:7b:af:b8:77:96:0f:94:17:20:45:f0:de:98: 47:6b:62:87:64:39:48:8e:92:ef:32:5b:f6:12:44: 5e:d5:3b:f3:44:87:e8:dd:29:6c:38:90:fc:2f:ff: fb:ba:f4:94:20:1e:e3:34:1b:79:f4:f5:af:30:18: a9:c0:8b:88:57:d9:12:9e:b4:f1:86:82:16:04:09: e1:c7:1f:1a:73:b4:e8:c8:b3:50:03:b5:06:96:1c: 58:8e:16:2d:c4:87:8c:d9:9b:89:c1:fd:af:46:be: ef:40:b0:45:d2:20:3c:74:ff:7b:f0:17:23:84:a8: 2c:72:c1:07:64:ea:b6:62:3c:03:cd:c7:ed:14:8b: b1:7c:94:28:9f:71:a8:f8:cb:c9:30:59:54:00:f5: dd:46:c6:a1:ec:59:83:00:c1:ba:54:28:33:c4:0d: 34:6b:34:85:a4:19:c6:2f:0c:1e:ed:6e:0a:c8:5c: fd:6f:ac:be:86:96:12:cc:72:8d:31:1f:fe:68:7e: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:97:60:BF:11:A2:09:66:BD:68:CF:F2:EA:9B:B1:62:52:54:B5:3C X509v3 Authority Key Identifier: keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:a6:d9:76:93:56:e5:03:34:97:db:e0:ab:b7:e0:b1:57:21: f3:17:3b:1f:66:98:87:40:97:9a:d7:a1:59:81:22:af:cb:77: d9:69:8f:11:e0:fd:94:41:b4:ab:76:6a:69:61:a8:65:cc:e5: 90:23:89:25:7c:ce:63:61:76:25:5a:47:f0:40:16:e8:04:67: f6:78:3f:05:fc:6f:1e:32:f4:9e:46:f2:33:19:e2:12:0b:ec: 83:58:06:8a:c8:d4:55:95:69:35:3c:b1:d4:bc:a0:de:ea:2c: fa:43:7c:c1:65:9c:bd:9b:11:8b:02:51:cf:38:54:3c:39:b0: 53:48:74:6c:52:99:6a:a5:c9:5b:fd:8c:ad:99:47:09:1a:05: 46:6c:f5:12:dd:67:49:66:06:75:e9:0e:31:25:c8:41:c5:2f: ff:bd:66:fd:7f:07:b8:ab:12:ff:ce:7a:c0:44:96:0b:fe:90: 5d:89:05:fc:83:69:6a:ac:22:44:21:44:4a:e2:ec:30:28:6d: 85:b1:82:ed:42:0d:22:fb:dd:28:50:0f:92:1f:69:06:68:dd: 63:9d:96:b2:e3:1e:8c:be:16:80:68:98:c0:a4:1f:e4:a7:95: a2:78:61:4d:09:aa:b3:4d:17:45:17:85:98:8b:42:14:3f:91: be:98:92:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6Ii0MggfxvaCg4VPW1xRQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy MDY3MzQwHhcNMjUxMjIwMDUwMTE2WhcNMjUxMjIxMDUwMTE2WjAzMTEwLwYDVQQD EyhmMDk3NjBiZjExYTIwOTY2YmQ2OGNmZjJlYTliYjE2MjUyNTRiNTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWLgCn1kmeMzZQXaGcc+heF4/bY IGSgN8SkgsNgWqWwkglsgcyIqwcbT/sLvvGzqrHrI8+3jqThnkT8JHuvuHeWD5QX IEXw3phHa2KHZDlIjpLvMlv2EkRe1TvzRIfo3SlsOJD8L//7uvSUIB7jNBt59PWv MBipwIuIV9kSnrTxhoIWBAnhxx8ac7ToyLNQA7UGlhxYjhYtxIeM2ZuJwf2vRr7v QLBF0iA8dP978BcjhKgscsEHZOq2YjwDzcftFIuxfJQon3Go+MvJMFlUAPXdRsah 7FmDAMG6VCgzxA00azSFpBnGLwwe7W4KyFz9b6y+hpYSzHKNMR/+aH6vrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPCXYL8RoglmvWjP8uqbsWJSVLU8MB8GA1UdIwQY MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct NGI0ZjBmNmY3NTIyLzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsKbZdpNW 5QM0l9vgq7fgsVch8xc7H2aYh0CXmtehWYEir8t32WmPEeD9lEG0q3ZqaWGoZczl kCOJJXzOY2F2JVpH8EAW6ARn9ng/BfxvHjL0nkbyMxniEgvsg1gGisjUVZVpNTyx 1Lyg3uos+kN8wWWcvZsRiwJRzzhUPDmwU0h0bFKZaqXJW/2MrZlHCRoFRmz1Et1n SWYGdekOMSXIQcUv/71m/X8HuKsS/856wESWC/6QXYkF/INpaqwiRCFESuLsMCht hbGC7UINIvvdKFAPkh9pBmjdY52WsuMejL4WgGiYwKQf5KeVonhhTQmqs00XRReF mItCFD+RvpiS8w== -----END CERTIFICATE-----Generated at Sat Dec 20 07:35:42 2025 by rpki-client