This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json) Hash identifier: 5VmgCy8YysLXQdFZHRxDdPHmnYiq25xzEPEcbuV5hpI= Subject key identifier: 88:36:4C:FD:A3:80:E0:22:E6:70:6A:C3:05:32:C1:81:5E:5E:15:62 Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a Certificate serial: 019B0E5C013A535A8C72168050C2571DFB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft Manifest number: 1217 Signing time: Thu 11 Dec 2025 17:01:09 +0000 Manifest this update: Thu 11 Dec 2025 17:01:09 +0000 Manifest next update: Fri 12 Dec 2025 17:01:09 +0000 Files and hashes: 1: 8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa (hash: twXscxBiA6A/cPdgQ7hNA9EiiSEcOyWKVNdA2W42KG4=) 2: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=) 3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: UnkYjyNTSSi2MihUmXWnkofS0T96JqNy5aR+Ddg9fls=) 4: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=) 5: UEQBycXO84xxZEefVNxr90yQeH0.roa (hash: TEj6JdNtANQj346QJ0SBfIpcEXL1H4ox6W/yWcLs2Y0=) 6: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5c:01:3a:53:5a:8c:72:16:80:50:c2:57:1d:fb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a Validity Not Before: Dec 11 17:01:09 2025 GMT Not After : Dec 12 17:01:09 2025 GMT Subject: CN=88364cfda380e022e6706ac30532c1815e5e1562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b5:8c:40:64:23:13:50:16:c2:69:e4:b8:7a: c9:38:72:e5:1d:a2:34:7f:9f:2e:9b:75:7e:6f:60: 70:16:b3:de:fa:b1:6c:7d:c2:9b:d5:fc:91:94:f5: 10:12:bb:a0:f1:ae:6d:e5:c4:13:64:fc:10:77:9b: f0:29:f3:6b:44:f8:d9:b5:59:63:19:01:0d:d9:6b: 74:2c:cb:c1:6c:5f:e0:66:70:0f:20:d1:8f:0b:c3: 2e:1e:ef:65:5b:34:e3:9f:cf:22:bb:dd:31:ea:91: 55:c9:b0:3b:d8:ea:5f:4d:fd:57:64:4d:78:28:ae: af:d0:9f:88:6d:91:96:38:50:86:d7:ab:95:f9:f0: c4:98:3f:b8:47:cc:f6:58:20:c5:c3:f0:31:73:19: a1:d5:2a:0b:d7:eb:ac:57:22:dd:02:a0:80:5b:f4: 27:a8:74:a2:52:f1:6e:19:9b:36:be:1d:dc:3b:14: 0c:74:2d:28:aa:57:45:00:27:7b:c5:05:5f:a7:9c: 2e:fa:f9:d1:89:a8:68:45:09:a8:d4:39:eb:ce:e6: 63:e4:fa:22:8f:6d:bb:e9:1a:d2:54:04:a1:1f:77: 17:4c:22:2c:5c:d5:d4:d8:a5:7d:66:65:c9:0b:bf: 77:bd:23:21:ac:43:cf:15:3a:9f:f1:21:0e:d6:8c: 3d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:36:4C:FD:A3:80:E0:22:E6:70:6A:C3:05:32:C1:81:5E:5E:15:62 X509v3 Authority Key Identifier: keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:36:67:13:3a:b2:8e:a9:82:6c:f7:41:39:17:f1:fd:21:bd: 0e:38:a0:a5:00:00:22:52:13:ec:64:42:72:63:c9:25:be:d2: 4f:0c:5d:a8:d7:39:95:51:9c:d7:a3:1c:07:c3:10:51:13:f3: 7c:a9:00:70:cc:fa:d2:0e:0e:a3:ea:3f:7d:19:f3:a6:3b:35: c7:94:a1:ad:93:91:5d:d3:bb:b8:e9:02:0a:5f:96:67:64:4b: 47:63:4e:72:e1:32:c7:e7:20:9f:ac:1c:c2:fe:65:bf:3f:bd: b8:74:da:15:90:95:56:df:a7:39:0b:79:02:c4:31:05:a7:4d: 06:e0:ce:ff:3c:e8:9b:fb:34:8a:46:6a:ce:5f:43:ca:86:f6: ae:b6:9e:b1:1b:2f:20:7c:e6:24:ce:84:bb:4f:ca:93:13:9d: c1:7d:95:f3:12:8a:d2:98:60:89:a9:be:9f:21:5a:04:87:13: 93:4f:fd:cb:22:84:eb:95:6d:69:8a:ac:5d:5d:c3:ab:96:0e: dc:6d:e4:e6:ed:1e:cd:70:ce:51:0a:94:fb:42:6e:5a:8e:f0: 02:03:d4:c5:b8:cf:b7:26:0d:46:3b:32:9f:c3:59:9a:ff:68: 92:78:92:c9:d5:ba:e2:b9:08:2e:e9:38:73:c6:e0:c0:bf:f3: 0c:87:37:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOXAE6U1qMchaAUMJXHftzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm ZTAwOWEwHhcNMjUxMjExMTcwMTA5WhcNMjUxMjEyMTcwMTA5WjAzMTEwLwYDVQQD Eyg4ODM2NGNmZGEzODBlMDIyZTY3MDZhYzMwNTMyYzE4MTVlNWUxNTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7WMQGQjE1AWwmnkuHrJOHLlHaI0 f58um3V+b2BwFrPe+rFsfcKb1fyRlPUQErug8a5t5cQTZPwQd5vwKfNrRPjZtVlj GQEN2Wt0LMvBbF/gZnAPINGPC8MuHu9lWzTjn88iu90x6pFVybA72OpfTf1XZE14 KK6v0J+IbZGWOFCG16uV+fDEmD+4R8z2WCDFw/Axcxmh1SoL1+usVyLdAqCAW/Qn qHSiUvFuGZs2vh3cOxQMdC0oqldFACd7xQVfp5wu+vnRiahoRQmo1DnrzuZj5Poi j2276RrSVAShH3cXTCIsXNXU2KV9ZmXJC793vSMhrEPPFTqf8SEO1ow9PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg2TP2jgOAi5nBqwwUywYFeXhViMB8GA1UdIwQY MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt ZWZhYWZmMGE5ODJmLzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDZnEzqy jqmCbPdBORfx/SG9DjigpQAAIlIT7GRCcmPJJb7STwxdqNc5lVGc16McB8MQURPz fKkAcMz60g4Oo+o/fRnzpjs1x5ShrZORXdO7uOkCCl+WZ2RLR2NOcuEyx+cgn6wc wv5lvz+9uHTaFZCVVt+nOQt5AsQxBadNBuDO/zzom/s0ikZqzl9Dyob2rraesRsv IHzmJM6Eu0/KkxOdwX2V8xKK0phgiam+nyFaBIcTk0/9yyKE65VtaYqsXV3Dq5YO 3G3k5u0ezXDOUQqU+0JuWo7wAgPUxbjPtyYNRjsyn8NZmv9okniSydW64rkILuk4 c8bgwL/zDIc3Eg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:39 2025 by rpki-client