This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft File: V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json) Hash identifier: txubSKYeKlmFvg21QLIPXLTKg10AsRtSfB+M4fGZ6RY= Subject key identifier: 9E:57:AE:5C:23:66:7F:22:5D:26:3B:03:30:06:8F:38:59:3E:AD:A1 Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34 Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234 Certificate serial: 019B40C8A5D4D66D83283AED5853F3E8A295 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft Manifest number: 025F Signing time: Sun 21 Dec 2025 12:00:50 +0000 Manifest this update: Sun 21 Dec 2025 12:00:50 +0000 Manifest next update: Mon 22 Dec 2025 12:00:50 +0000 Files and hashes: 1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=) 2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: Aos76GwwdgOPN+yXXHmTYejVavIS+Ud/XH5iQkrvy4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:a5:d4:d6:6d:83:28:3a:ed:58:53:f3:e8:a2:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234 Validity Not Before: Dec 21 12:00:50 2025 GMT Not After : Dec 22 12:00:50 2025 GMT Subject: CN=9e57ae5c23667f225d263b0330068f38593eada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3b:1d:c0:61:a7:de:36:2e:18:3d:b2:b9:f1: 54:c9:ae:95:0a:c4:95:e8:1a:a6:11:5d:b8:ac:1d: 2f:e0:b3:1f:76:24:cb:5e:ea:7e:1b:4f:86:11:f5: 55:64:2e:88:7e:6c:0c:28:7e:30:82:dc:22:30:7e: 9f:16:e9:bb:3f:b0:c0:57:d5:39:2d:77:e5:d9:79: 8d:03:36:5f:3f:d9:56:68:bd:76:52:2f:af:aa:47: 64:de:af:9b:9a:d4:3a:42:54:4e:a9:ef:3e:cf:81: 58:44:cd:01:da:6c:21:a2:c5:71:fa:03:db:75:c7: c0:ce:65:c7:e0:21:ac:52:fe:0b:4a:cd:a7:e9:42: 58:08:e0:88:40:61:ea:69:b5:2e:8f:e0:79:88:be: f5:29:c3:da:77:11:7b:70:c3:bd:b5:8a:e3:f8:58: 2c:a3:f5:21:53:bc:c0:f2:d1:92:93:8a:c7:5e:1d: b0:a5:95:b0:f4:a9:af:b3:95:11:26:ba:4c:c8:44: 23:ba:07:61:51:aa:d2:74:b4:0e:d8:8e:f9:e7:f9: bb:ce:8a:4f:0e:e8:28:14:72:f3:37:b9:16:b1:77: 05:74:bd:ce:42:ad:be:d8:3a:1b:b2:f0:c8:c6:d5: c7:94:7d:88:c4:a2:33:86:87:0f:c8:18:6d:6a:ac: 89:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:AE:5C:23:66:7F:22:5D:26:3B:03:30:06:8F:38:59:3E:AD:A1 X509v3 Authority Key Identifier: keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:79:5e:17:27:b0:91:f5:a2:64:b8:73:0d:97:a0:38:5e:fb: 57:8d:27:7f:a9:53:04:53:c6:7c:0a:14:a1:ad:78:86:02:1b: 16:ef:dd:f6:77:45:78:9a:ff:4c:0f:50:52:44:09:0b:88:cd: 4a:19:e9:01:9a:5f:3e:b8:3e:21:90:23:5e:c0:70:78:b0:46: 57:f4:ba:33:4f:9b:0c:ca:dd:57:ae:54:c8:ea:37:f3:02:2d: 9b:23:ee:9a:4c:5c:69:de:87:4e:a8:08:85:fd:4c:bf:3d:34: 9c:9d:cb:9e:4f:2c:a1:0c:62:9f:60:e4:bf:8e:7e:79:ae:c6: d2:cd:eb:6a:c3:7f:20:14:ce:78:51:30:fb:c7:1c:f7:65:06: a5:00:c7:f6:1d:69:54:39:b9:ac:d4:3a:a1:41:3f:51:cf:51: 30:1e:4e:f8:4d:d9:a8:a6:a5:53:b1:7d:a6:65:c3:26:22:49: 0c:96:04:3c:f6:93:c7:8c:c7:40:6c:7e:99:ca:e1:f3:a1:d6: e2:12:91:ff:de:81:a8:db:f5:f6:73:7a:bb:d5:17:9c:31:01: fa:c1:aa:88:3a:bf:61:e9:4b:19:d7:80:5f:a0:3f:9d:c1:b3: 65:82:c4:60:61:a9:84:5d:68:18:1f:45:7c:dd:ad:d6:ec:fc: d4:85:64:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyKXU1m2DKDrtWFPz6KKVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZGIxNDNjMTdmYjA1MTk0NDQyNmE3OWYyNDMzNGMyNWNk YmMyMzQwHhcNMjUxMjIxMTIwMDUwWhcNMjUxMjIyMTIwMDUwWjAzMTEwLwYDVQQD Eyg5ZTU3YWU1YzIzNjY3ZjIyNWQyNjNiMDMzMDA2OGYzODU5M2VhZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTsdwGGn3jYuGD2yufFUya6VCsSV 6BqmEV24rB0v4LMfdiTLXup+G0+GEfVVZC6IfmwMKH4wgtwiMH6fFum7P7DAV9U5 LXfl2XmNAzZfP9lWaL12Ui+vqkdk3q+bmtQ6QlROqe8+z4FYRM0B2mwhosVx+gPb dcfAzmXH4CGsUv4LSs2n6UJYCOCIQGHqabUuj+B5iL71KcPadxF7cMO9tYrj+Fgs o/UhU7zA8tGSk4rHXh2wpZWw9Kmvs5URJrpMyEQjugdhUarSdLQO2I755/m7zopP DugoFHLzN7kWsXcFdL3OQq2+2DobsvDIxtXHlH2IxKIzhocPyBhtaqyJpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5XrlwjZn8iXSY7AzAGjzhZPq2hMB8GA1UdIwQY MBaAFFfbFDwX+wUZREJqefJDNMJc28I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjIt YmRhNGY4ZWIxYWQ5LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjItYmRhNGY4ZWIxYWQ5 LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXleFyew kfWiZLhzDZegOF77V40nf6lTBFPGfAoUoa14hgIbFu/d9ndFeJr/TA9QUkQJC4jN ShnpAZpfPrg+IZAjXsBweLBGV/S6M0+bDMrdV65UyOo38wItmyPumkxcad6HTqgI hf1Mvz00nJ3Lnk8soQxin2Dkv45+ea7G0s3rasN/IBTOeFEw+8cc92UGpQDH9h1p VDm5rNQ6oUE/Uc9RMB5O+E3ZqKalU7F9pmXDJiJJDJYEPPaTx4zHQGx+mcrh86HW 4hKR/96BqNv19nN6u9UXnDEB+sGqiDq/YelLGdeAX6A/ncGzZYLEYGGphF1oGB9F fN2t1uz81IVk9A== -----END CERTIFICATE-----Generated at Sun Dec 21 21:16:48 2025 by rpki-client