This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft File: 9B_-fSl-5OHU0jM1qatKAIjAJdc.mft (raw, json) Hash identifier: 91XxXVAF3yqrUs8310zcpzay92etGElpRXT0dVoiI1o= Subject key identifier: 34:24:5C:1B:6A:35:A2:01:37:40:A1:1B:B1:EC:64:22:8C:B5:5D:1A Authority key identifier: F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7 Certificate issuer: /CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7 Certificate serial: 019B32D6E4E36D7E69443CEF519409DA684E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft Manifest number: 0D57 Signing time: Thu 18 Dec 2025 19:01:42 +0000 Manifest this update: Thu 18 Dec 2025 19:01:42 +0000 Manifest next update: Fri 19 Dec 2025 19:01:42 +0000 Files and hashes: 1: 9B_-fSl-5OHU0jM1qatKAIjAJdc.crl (hash: 9ygMW9WAFqDhIjYm+4Zh9CPLX5thSn9wWaNwt43m9cw=) 2: PRDF7uUUDEgvhpybsRj704dqk1M.roa (hash: 1hJ8QC4+sDAxjl4A67W+QBueyb9hgkEoDhfUwnkhNeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:e4:e3:6d:7e:69:44:3c:ef:51:94:09:da:68:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41ffe7d297ee4e1d4d23335a9ab4a0088c025d7 Validity Not Before: Dec 18 19:01:42 2025 GMT Not After : Dec 19 19:01:42 2025 GMT Subject: CN=34245c1b6a35a2013740a11bb1ec64228cb55d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:31:fb:db:bb:48:68:53:9a:d6:56:a1:b3: 27:c0:7a:e8:76:cd:18:92:48:48:31:ad:1a:4e:b4: 6f:79:51:c1:8e:a2:ac:c0:88:c7:92:67:df:9e:30: 45:c0:da:f9:55:8b:ce:22:17:a7:5e:dd:9b:6b:8d: 13:be:8a:9f:2d:97:e7:6a:8a:15:b1:33:93:76:89: ac:f7:ac:2c:03:95:c4:36:52:97:10:f0:80:88:75: 0f:41:82:f1:2b:a9:15:04:11:56:8a:4e:28:00:11: 13:c5:4c:8a:13:15:1e:3a:6a:62:1a:e2:d0:11:20: 9e:c8:06:2d:b8:5c:5d:34:d5:f1:d0:31:9b:79:a7: 56:a4:dd:8e:d9:8c:58:ac:b6:ec:7a:2c:53:65:e8: 00:ac:c5:ac:9c:dc:a9:08:ea:d0:fa:db:cd:bf:f0: 10:b2:f8:f1:3b:25:23:09:7f:c5:2f:d4:e6:e4:58: 64:84:b0:a9:56:e8:52:34:67:18:56:14:1a:e9:95: 36:d9:a4:17:d1:fe:60:8a:fb:fd:33:e7:51:4a:f1: 3e:0d:80:cb:bc:7e:99:e6:ee:7a:49:7b:7b:74:d5: ce:27:c4:a5:8e:7a:e0:91:75:c6:1d:89:05:e7:e1: 5a:7a:39:9a:ac:c1:d3:af:83:73:ea:27:b6:72:5b: 68:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:24:5C:1B:6A:35:A2:01:37:40:A1:1B:B1:EC:64:22:8C:B5:5D:1A X509v3 Authority Key Identifier: keyid:F4:1F:FE:7D:29:7E:E4:E1:D4:D2:33:35:A9:AB:4A:00:88:C0:25:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9B_-fSl-5OHU0jM1qatKAIjAJdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3103a1-bc58-444c-8231-43d8a6fd1f45/1/9B_-fSl-5OHU0jM1qatKAIjAJdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a3:40:de:7a:37:48:da:cb:af:ae:fa:f9:6d:a3:14:35:6a: df:5f:1f:32:4a:39:c2:86:39:00:db:47:04:6b:16:27:3a:5c: 95:71:18:79:19:ef:aa:20:da:e0:05:aa:70:0f:41:04:c8:7c: 08:5e:d2:b3:26:41:22:2b:0c:f7:b2:e3:51:bb:74:95:40:9f: 77:8b:78:14:ad:8d:6d:e7:49:55:e2:03:8b:78:aa:82:ab:91: 2a:74:be:65:a8:91:10:6d:26:39:4a:42:34:bc:50:35:93:45: af:7d:19:86:d6:5d:a0:84:77:99:89:6c:94:7c:73:a4:22:bd: 78:ff:9f:bf:23:d7:b8:37:c6:3d:6d:fd:3e:5d:62:05:d1:13: ea:b5:e4:a8:15:66:3b:2c:f8:b3:b4:6b:de:d0:9f:85:2d:07: df:84:48:9b:2d:00:43:19:39:27:b0:07:a0:d3:2d:32:1a:71: a6:e7:2f:b5:b2:70:c6:74:7d:04:c2:52:9b:6c:b1:eb:fe:17: 0d:f8:c4:82:4c:6f:4a:ae:19:d1:5a:e1:c3:30:af:2f:af:c1: 82:43:de:b7:75:b2:64:53:6a:41:4a:37:7b:50:f3:42:9f:2f: 8a:b8:4e:a5:32:9d:b3:c2:66:11:31:e6:30:d0:ff:68:25:9b: 55:a0:b4:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1uTjbX5pRDzvUZQJ2mhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MWZmZTdkMjk3ZWU0ZTFkNGQyMzMzNWE5YWI0YTAwODhj MDI1ZDcwHhcNMjUxMjE4MTkwMTQyWhcNMjUxMjE5MTkwMTQyWjAzMTEwLwYDVQQD EygzNDI0NWMxYjZhMzVhMjAxMzc0MGExMWJiMWVjNjQyMjhjYjU1ZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPsx+9u7SGhTmtZWobMnwHrods0Y kkhIMa0aTrRveVHBjqKswIjHkmffnjBFwNr5VYvOIhenXt2ba40TvoqfLZfnaooV sTOTdoms96wsA5XENlKXEPCAiHUPQYLxK6kVBBFWik4oABETxUyKExUeOmpiGuLQ ESCeyAYtuFxdNNXx0DGbeadWpN2O2YxYrLbseixTZegArMWsnNypCOrQ+tvNv/AQ svjxOyUjCX/FL9Tm5FhkhLCpVuhSNGcYVhQa6ZU22aQX0f5givv9M+dRSvE+DYDL vH6Z5u56SXt7dNXOJ8SljnrgkXXGHYkF5+FaejmarMHTr4Nz6ie2cltoDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQkXBtqNaIBN0ChG7HsZCKMtV0aMB8GA1UdIwQY MBaAFPQf/n0pfuTh1NIzNamrSgCIwCXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEt NDNkOGE2ZmQxZjQ1LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zMTAzYTEtYmM1OC00NDRjLTgyMzEtNDNkOGE2ZmQxZjQ1 LzEvOUJfLWZTbC01T0hVMGpNMXFhdEtBSWpBSmRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKNA3no3 SNrLr676+W2jFDVq318fMko5woY5ANtHBGsWJzpclXEYeRnvqiDa4AWqcA9BBMh8 CF7SsyZBIisM97LjUbt0lUCfd4t4FK2NbedJVeIDi3iqgquRKnS+ZaiREG0mOUpC NLxQNZNFr30ZhtZdoIR3mYlslHxzpCK9eP+fvyPXuDfGPW39Pl1iBdET6rXkqBVm Oyz4s7Rr3tCfhS0H34RImy0AQxk5J7AHoNMtMhpxpucvtbJwxnR9BMJSm2yx6/4X DfjEgkxvSq4Z0VrhwzCvL6/BgkPet3WyZFNqQUo3e1DzQp8virhOpTKds8JmETHm MND/aCWbVaC0QA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:00:05 2025 by rpki-client