This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft File: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json) Hash identifier: wj3+tOcZgJHmnpkXTNMdzUi9y1bfE/LTxetCVSAZ+QQ= Subject key identifier: 9E:6F:33:91:D4:CD:EB:39:94:AF:2A:12:7A:00:5A:F3:1D:F7:18:E3 Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 Certificate issuer: /CN=97da420008cfb9193499278ef558bd42d61c7f75 Certificate serial: 019B120186B46540D7C46775FBC463071C90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft Manifest number: 0CCC Signing time: Fri 12 Dec 2025 10:00:48 +0000 Manifest this update: Fri 12 Dec 2025 10:00:48 +0000 Manifest next update: Sat 13 Dec 2025 10:00:48 +0000 Files and hashes: 1: Lt0FJSjIL_wYzPK9Xck2UjuDtjE.roa (hash: +dB90Z/NoEK2sKATplyBvT745dtw32LCvl2j/FqLTfY=) 2: XCN5lwkGM58av9oqAJsgGCsHbJ4.roa (hash: 8aCR6L9MXmCNnfWofwqGUNu6pEk0OZanJ7hWSkVsigk=) 3: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: EXQzuZ9khrK8JMm4pjQ6TrSHrSdXE+Gj+WvkVjvH5EI=) 4: tYNk5ivLrJOQmND4t8YVO7XJjVM.roa (hash: 7BRKmsVp5QSVmk/qolkRNTnxiIc5l5yvcX18LVXR7ro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:86:b4:65:40:d7:c4:67:75:fb:c4:63:07:1c:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75 Validity Not Before: Dec 12 10:00:48 2025 GMT Not After : Dec 13 10:00:48 2025 GMT Subject: CN=9e6f3391d4cdeb3994af2a127a005af31df718e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:04:b8:d3:22:0d:52:99:f1:1a:f4:31:5d: ca:3e:58:70:95:7b:c4:23:bf:d7:47:db:39:34:dd: 40:b1:30:7b:8f:61:f0:e3:4a:89:62:e1:5f:8b:3e: 76:fb:b4:1b:a1:5c:bd:9a:b8:27:b6:27:7c:f2:72: c2:0f:0b:88:d9:47:7b:50:43:b6:63:6d:33:4e:07: f6:7b:f8:19:16:6c:4c:24:91:a8:6c:38:28:d6:c9: 7d:3b:6b:82:93:b7:df:2d:9c:4e:07:a7:9c:78:00: 45:ef:7b:42:56:5a:9b:41:aa:ac:8a:44:78:4b:a2: 33:30:52:87:09:03:1b:e4:ec:bf:3c:30:f9:04:23: cb:55:f2:5b:af:ff:45:fb:b2:85:2c:19:0b:ce:40: cf:80:4c:5e:4f:9a:6b:2f:cc:2e:96:92:95:5a:4d: 9e:92:dc:8d:9d:bd:da:13:db:2f:e7:fe:3b:54:9e: dd:56:f5:c2:d4:88:d7:5c:7e:2b:32:7d:8c:ba:82: 40:26:21:d9:46:1d:ef:46:72:cb:32:6a:42:b3:81: 8b:67:5a:27:18:18:9a:3e:3c:c2:5b:25:00:dd:cc: 67:3b:a1:06:26:b3:52:41:18:08:34:26:8b:a8:b7: 39:99:a1:d3:3c:28:b7:5f:94:19:8a:73:c7:59:8d: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6F:33:91:D4:CD:EB:39:94:AF:2A:12:7A:00:5A:F3:1D:F7:18:E3 X509v3 Authority Key Identifier: keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:65:83:79:ce:1b:05:8e:c8:cd:08:09:db:cd:b2:fb:0b:62: 71:d5:cb:3a:32:42:7d:57:e1:77:fe:fb:27:7d:c6:98:e4:b8: 6e:dc:70:7e:ee:4b:0f:71:b6:17:16:a2:bf:d4:05:b7:ef:f5: 7d:ab:03:b8:90:4e:e1:d3:aa:86:ed:8d:ce:a9:ec:78:e3:47: 6c:69:ca:b1:6e:97:7e:2a:48:cc:ef:08:28:5f:8b:18:75:63: 32:8d:92:3b:df:be:d4:36:0a:93:62:82:cb:2d:67:52:b3:cd: 39:73:ee:66:22:f2:84:75:ed:8a:a9:1d:69:ee:2b:25:fa:f8: 41:d3:57:0d:ea:de:9a:a8:1b:ff:15:3d:50:9e:0e:c2:c0:38: 6f:a5:66:c3:a5:8e:09:7d:e1:c0:a4:58:32:50:0f:e0:0f:d7: 4d:65:8c:5f:90:8f:6b:81:f6:bc:fe:48:a4:06:5a:58:9a:03: bc:70:54:07:f5:39:10:d0:65:1f:12:00:f0:b0:64:f2:b8:a3: c9:cd:f3:e5:fb:8f:f3:3f:9d:5e:6f:41:56:8e:7d:fd:01:f1: 75:18:93:62:25:04:36:22:62:9c:27:e1:54:5b:0a:fb:03:b0: 6e:c5:e9:04:7f:d2:0d:69:86:f3:f1:1b:44:ef:94:15:14:8c: 26:ab:44:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAYa0ZUDXxGd1+8RjBxyQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ZGE0MjAwMDhjZmI5MTkzNDk5Mjc4ZWY1NThiZDQyZDYx YzdmNzUwHhcNMjUxMjEyMTAwMDQ4WhcNMjUxMjEzMTAwMDQ4WjAzMTEwLwYDVQQD Eyg5ZTZmMzM5MWQ0Y2RlYjM5OTRhZjJhMTI3YTAwNWFmMzFkZjcxOGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wEuNMiDVKZ8Rr0MV3KPlhwlXvE I7/XR9s5NN1AsTB7j2Hw40qJYuFfiz52+7QboVy9mrgntid88nLCDwuI2Ud7UEO2 Y20zTgf2e/gZFmxMJJGobDgo1sl9O2uCk7ffLZxOB6eceABF73tCVlqbQaqsikR4 S6IzMFKHCQMb5Oy/PDD5BCPLVfJbr/9F+7KFLBkLzkDPgExeT5prL8wulpKVWk2e ktyNnb3aE9sv5/47VJ7dVvXC1IjXXH4rMn2MuoJAJiHZRh3vRnLLMmpCs4GLZ1on GBiaPjzCWyUA3cxnO6EGJrNSQRgINCaLqLc5maHTPCi3X5QZinPHWY0LiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5vM5HUzes5lK8qEnoAWvMd9xjjMB8GA1UdIwQY MBaAFJfaQgAIz7kZNJknjvVYvULWHH91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAt YTM4ZTFlY2E0ZmQ0LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi8xMzkwNDQtOWViYy00NTU5LWJhMTAtYTM4ZTFlY2E0ZmQ0 LzEvbDlwQ0FBalB1UmswbVNlTzlWaTlRdFljZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqGWDec4b BY7IzQgJ282y+wticdXLOjJCfVfhd/77J33GmOS4btxwfu5LD3G2Fxaiv9QFt+/1 fasDuJBO4dOqhu2NzqnseONHbGnKsW6XfipIzO8IKF+LGHVjMo2SO9++1DYKk2KC yy1nUrPNOXPuZiLyhHXtiqkdae4rJfr4QdNXDeremqgb/xU9UJ4OwsA4b6Vmw6WO CX3hwKRYMlAP4A/XTWWMX5CPa4H2vP5IpAZaWJoDvHBUB/U5ENBlHxIA8LBk8rij yc3z5fuP8z+dXm9BVo59/QHxdRiTYiUENiJinCfhVFsK+wOwbsXpBH/SDWmG8/Eb RO+UFRSMJqtEdw== -----END CERTIFICATE-----Generated at Fri Dec 12 19:28:40 2025 by rpki-client