This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json) Hash identifier: +Ld0M+Z4fNIrSJi4ackQAJGSqD8ofWWEjHmZoIXgplE= Subject key identifier: 8D:1E:58:3C:CD:45:4D:86:0A:56:50:71:A6:67:BD:A8:95:DF:74:2C Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71 Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571 Certificate serial: 019B1014040148ED95A457BBCD40F1B251F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft Manifest number: 0841 Signing time: Fri 12 Dec 2025 01:01:45 +0000 Manifest this update: Fri 12 Dec 2025 01:01:45 +0000 Manifest next update: Sat 13 Dec 2025 01:01:45 +0000 Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: foqfGURtMVdJfX0bNaUGItB8REpBSXgwnfAKU0Hwbq0=) 2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:04:01:48:ed:95:a4:57:bb:cd:40:f1:b2:51:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41180a7c51667ec3875e765f245f90938612571 Validity Not Before: Dec 12 01:01:45 2025 GMT Not After : Dec 13 01:01:45 2025 GMT Subject: CN=8d1e583ccd454d860a565071a667bda895df742c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:74:86:f7:cc:86:52:96:56:21:19:3e:25:e4: 34:5d:08:f3:f5:62:8d:90:1d:fb:fc:7e:7a:48:eb: a4:ea:28:c8:1a:bb:ab:61:89:cf:a1:ac:fd:65:8c: 01:fa:2f:6b:bf:34:48:54:10:cc:f6:77:de:32:37: 29:3c:01:e3:9e:c3:16:01:13:98:28:2a:79:cd:aa: 6e:74:47:6d:b5:62:34:a6:8c:22:96:b5:f3:fa:4d: f9:55:77:fa:dc:53:63:a0:b7:27:bc:62:68:31:3f: 57:5e:a9:1e:7c:3b:57:68:3b:83:c1:5c:fd:5e:9b: 07:f6:0d:db:60:1e:ef:66:c5:73:63:ab:5d:9f:f0: 8b:38:02:22:8e:8d:23:63:17:34:cb:b4:90:9f:b3: 3d:1a:c1:91:b2:01:81:c3:6f:0a:f9:44:26:cb:d9: 80:c5:58:0e:bc:dd:ae:25:e0:83:24:8e:77:d8:fa: ee:c9:c9:17:7d:2a:6e:66:08:d2:82:94:9f:6e:15: 8e:99:83:cd:d3:20:d5:10:1c:57:78:f1:07:9c:75: 4e:32:a4:f1:0f:64:71:9c:4e:49:6b:dc:10:04:e1: 26:e6:fd:aa:e0:b7:7d:8c:a1:db:74:9e:ce:fb:cc: 2e:41:cb:ce:4a:4d:73:1d:f6:be:92:21:5e:3a:c7: a1:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1E:58:3C:CD:45:4D:86:0A:56:50:71:A6:67:BD:A8:95:DF:74:2C X509v3 Authority Key Identifier: keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:96:4d:b7:57:5c:3a:f2:ba:ed:1b:06:73:e1:33:93:db:a1: 53:fb:6c:b8:fc:ac:3a:89:98:cc:4f:c8:13:bd:c1:7f:11:6e: 46:32:d5:9d:7e:13:2e:58:b0:45:f7:69:85:0b:4d:2e:90:53: 14:d4:6f:74:4a:29:c7:67:35:02:3f:e8:ec:3e:9d:81:0b:40: ef:a0:c6:28:e2:8f:25:de:9f:30:a0:bf:13:48:8c:90:92:8e: 09:41:8f:a1:5c:0b:5c:18:fb:91:3a:12:b6:d8:21:64:78:07: 7c:aa:3c:0e:1d:f7:fb:d2:85:69:6d:a5:fa:90:aa:1b:df:a9: b7:8f:8f:ef:fb:96:a4:90:02:37:7a:74:68:f7:5e:55:53:ed: 01:21:59:d6:f5:58:b7:25:af:4f:4b:0a:d1:87:89:36:0b:bd: e9:04:0d:83:64:cf:21:cc:a4:ef:17:9c:86:30:14:1c:27:a3: f3:fa:cf:80:82:08:2f:1f:60:9e:de:f4:07:db:9a:cd:9f:82: 9c:fb:76:26:93:e3:ec:53:a8:b5:ef:f3:4b:8e:2e:91:a4:87: dc:29:f7:84:23:d6:80:76:32:b6:b9:65:98:8c:a2:4c:9c:6e: db:b3:00:4f:1d:6c:06:3e:c7:eb:ee:8b:ad:c4:f0:aa:2f:2a: 3d:b6:32:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFAQBSO2VpFe7zUDxslHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTE4MGE3YzUxNjY3ZWMzODc1ZTc2NWYyNDVmOTA5Mzg2 MTI1NzEwHhcNMjUxMjEyMDEwMTQ1WhcNMjUxMjEzMDEwMTQ1WjAzMTEwLwYDVQQD Eyg4ZDFlNTgzY2NkNDU0ZDg2MGE1NjUwNzFhNjY3YmRhODk1ZGY3NDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HSG98yGUpZWIRk+JeQ0XQjz9WKN kB37/H56SOuk6ijIGrurYYnPoaz9ZYwB+i9rvzRIVBDM9nfeMjcpPAHjnsMWAROY KCp5zapudEdttWI0powilrXz+k35VXf63FNjoLcnvGJoMT9XXqkefDtXaDuDwVz9 XpsH9g3bYB7vZsVzY6tdn/CLOAIijo0jYxc0y7SQn7M9GsGRsgGBw28K+UQmy9mA xVgOvN2uJeCDJI532PruyckXfSpuZgjSgpSfbhWOmYPN0yDVEBxXePEHnHVOMqTx D2RxnE5Ja9wQBOEm5v2q4Ld9jKHbdJ7O+8wuQcvOSk1zHfa+kiFeOseh3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0eWDzNRU2GClZQcaZnvaiV33QsMB8GA1UdIwQY MBaAFPQRgKfFFmfsOHXnZfJF+Qk4YSVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUt OGYzMmQwMzE5NGIwLzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUtOGYzMmQwMzE5NGIw LzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI5ZNt1dc OvK67RsGc+Ezk9uhU/tsuPysOomYzE/IE73BfxFuRjLVnX4TLliwRfdphQtNLpBT FNRvdEopx2c1Aj/o7D6dgQtA76DGKOKPJd6fMKC/E0iMkJKOCUGPoVwLXBj7kToS ttghZHgHfKo8Dh33+9KFaW2l+pCqG9+pt4+P7/uWpJACN3p0aPdeVVPtASFZ1vVY tyWvT0sK0YeJNgu96QQNg2TPIcyk7xechjAUHCej8/rPgIIILx9gnt70B9uazZ+C nPt2JpPj7FOote/zS44ukaSH3Cn3hCPWgHYytrllmIyiTJxu27MATx1sBj7H6+6L rcTwqi8qPbYyxw== -----END CERTIFICATE-----Generated at Fri Dec 12 07:30:58 2025 by rpki-client