This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json) Hash identifier: JfphUu73BqGL+tn+nEOCPrE/ufEW/5CwZKitDAq70PY= Subject key identifier: 6D:44:A1:D2:BA:83:05:3C:7F:51:68:B6:6B:5E:B3:CC:13:8C:79:96 Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53 Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853 Certificate serial: 019B22F58AC0C5B9BDA5557C89251B841E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft Manifest number: 14BF Signing time: Mon 15 Dec 2025 17:01:15 +0000 Manifest this update: Mon 15 Dec 2025 17:01:15 +0000 Manifest next update: Tue 16 Dec 2025 17:01:15 +0000 Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=) 2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: COT9DqSKptgsPdKYTyM8fqsUrxLHseZdpDIia7vJeN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f5:8a:c0:c5:b9:bd:a5:55:7c:89:25:1b:84:1e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853 Validity Not Before: Dec 15 17:01:15 2025 GMT Not After : Dec 16 17:01:15 2025 GMT Subject: CN=6d44a1d2ba83053c7f5168b66b5eb3cc138c7996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:94:07:bf:19:3f:7c:23:49:c5:75:59:65:1a: ae:ab:d5:ae:e7:e6:f4:a6:00:f2:8c:36:9b:57:1e: f2:3f:d7:de:6c:f0:2b:aa:9f:91:69:9a:a4:0e:91: b7:5e:68:c6:7c:43:50:08:49:03:af:5f:3d:ac:39: a7:ed:4b:9d:cc:0a:4a:69:94:bd:a1:a1:9f:f0:57: ee:32:d1:da:fe:de:28:31:26:10:84:b8:08:0c:0c: 09:3e:01:aa:a1:da:17:42:46:01:6c:01:f7:62:35: 90:af:fb:91:56:4e:a3:e5:d3:04:c0:80:35:0b:d1: f3:cc:8d:b4:5b:41:45:d2:71:a7:48:d4:f2:8d:a7: 87:49:5c:75:b6:ae:cf:ab:8b:44:cc:6a:2f:0d:c8: 86:c7:fd:54:90:c2:bd:ab:c3:31:98:6e:66:53:be: 7d:03:87:38:3b:4b:14:0b:f8:7a:c4:f7:99:29:78: 0b:80:31:6c:73:6e:47:ae:d7:29:b0:3a:80:47:af: c4:43:06:4d:81:ea:47:40:d7:09:8f:27:71:ff:88: 72:19:0d:0e:6a:d1:4f:2b:71:81:d7:0d:cc:63:85: 09:68:7c:97:d4:7d:bb:1b:62:fc:4c:9f:ac:aa:17: 7b:43:7b:e6:9a:82:c0:8d:85:1b:89:d9:88:b9:42: 68:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:44:A1:D2:BA:83:05:3C:7F:51:68:B6:6B:5E:B3:CC:13:8C:79:96 X509v3 Authority Key Identifier: keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:83:c7:42:dd:96:e7:03:bf:7a:7f:e8:fc:72:bc:4b:28:63: 43:e9:e6:1c:83:72:71:12:a9:f6:6d:35:2d:0f:5d:86:3f:08: 2c:47:e8:af:8a:c9:d9:0f:72:06:3c:ff:f3:8c:59:fc:c6:da: 9a:02:10:b6:ed:ec:51:99:41:9c:18:68:e4:0c:d9:4a:9c:7c: 92:8f:6a:09:b6:90:9a:bd:bc:05:0f:6d:51:e0:90:4f:ec:f2: 25:9c:a8:a3:18:04:08:44:8a:af:33:d2:ee:3b:7b:ba:aa:47: 40:0e:d2:cd:1c:33:0e:aa:75:ac:82:d7:69:de:eb:87:ec:f8: 74:a8:30:81:ab:09:ac:51:98:c7:56:e3:3f:f9:5f:0f:9f:70: 7b:a7:58:a2:86:ca:f2:2d:78:05:57:ef:07:fb:86:3f:33:f4: a4:99:19:95:34:1a:35:b9:a1:b2:1e:97:e1:ec:7a:46:5c:76: 47:8f:97:0b:de:20:40:0f:13:de:8b:65:44:48:f9:dc:c7:02: cd:7c:e2:ab:aa:22:19:e3:06:96:bb:c1:d8:ec:19:02:1e:dc: ea:75:61:73:60:21:59:90:27:43:cf:a1:f1:28:36:d7:f7:02: 60:9d:6e:22:f9:9d:fe:cf:5f:b7:99:f6:ee:0f:43:ce:21:59: 24:e2:f3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9YrAxbm9pVV8iSUbhB46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDAyNGFkZTVlNDgwMmMwYTJmNjFlNmY4MGY0ZDIyZGMx NTQ4NTMwHhcNMjUxMjE1MTcwMTE1WhcNMjUxMjE2MTcwMTE1WjAzMTEwLwYDVQQD Eyg2ZDQ0YTFkMmJhODMwNTNjN2Y1MTY4YjY2YjVlYjNjYzEzOGM3OTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpQHvxk/fCNJxXVZZRquq9Wu5+b0 pgDyjDabVx7yP9febPArqp+RaZqkDpG3XmjGfENQCEkDr189rDmn7UudzApKaZS9 oaGf8FfuMtHa/t4oMSYQhLgIDAwJPgGqodoXQkYBbAH3YjWQr/uRVk6j5dMEwIA1 C9HzzI20W0FF0nGnSNTyjaeHSVx1tq7Pq4tEzGovDciGx/1UkMK9q8MxmG5mU759 A4c4O0sUC/h6xPeZKXgLgDFsc25HrtcpsDqAR6/EQwZNgepHQNcJjydx/4hyGQ0O atFPK3GB1w3MY4UJaHyX1H27G2L8TJ+sqhd7Q3vmmoLAjYUbidmIuUJoQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1EodK6gwU8f1Fotmtes8wTjHmWMB8GA1UdIwQY MBaAFPRAJK3l5IAsCi9h5vgPTSLcFUhTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEt NjNjOWM4NGVjNzRmLzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEtNjNjOWM4NGVjNzRm LzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4PHQt2W 5wO/en/o/HK8SyhjQ+nmHINycRKp9m01LQ9dhj8ILEfor4rJ2Q9yBjz/84xZ/Mba mgIQtu3sUZlBnBho5AzZSpx8ko9qCbaQmr28BQ9tUeCQT+zyJZyooxgECESKrzPS 7jt7uqpHQA7SzRwzDqp1rILXad7rh+z4dKgwgasJrFGYx1bjP/lfD59we6dYoobK 8i14BVfvB/uGPzP0pJkZlTQaNbmhsh6X4ex6Rlx2R4+XC94gQA8T3otlREj53McC zXziq6oiGeMGlrvB2OwZAh7c6nVhc2AhWZAnQ8+h8Sg21/cCYJ1uIvmd/s9ft5n2 7g9DziFZJOLz5Q== -----END CERTIFICATE-----Generated at Mon Dec 15 19:56:09 2025 by rpki-client