This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft File: 9NwmxibFHF3vbyRm849VslApZC8.mft (raw, json) Hash identifier: t6mR8pAPnGdNT6PWykL2A9Cfteg5N6EPQ1jp7PKJ5jc= Subject key identifier: B8:1D:8B:4C:7B:D8:01:0D:88:B1:97:2D:8F:93:47:BB:FB:B0:A0:5A Authority key identifier: F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F Certificate issuer: /CN=f4dc26c626c51c5def6f2466f38f55b25029642f Certificate serial: 019B481525A46217425E2479DABD5ED122A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft Manifest number: 0FF9 Signing time: Mon 22 Dec 2025 22:01:44 +0000 Manifest this update: Mon 22 Dec 2025 22:01:44 +0000 Manifest next update: Tue 23 Dec 2025 22:01:44 +0000 Files and hashes: 1: 9NwmxibFHF3vbyRm849VslApZC8.crl (hash: rwn8knxeaOx0azr8IkDfrThGI8QMeHxN3jaZNcy2x44=) 2: XI2V1xAOtuCnHnEsCZ4HB4sk5c0.roa (hash: NGuYGkHyS6sZ+OmDpCbd7Xg31/u7/ppig2sfjfcm+Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 22:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:25:a4:62:17:42:5e:24:79:da:bd:5e:d1:22:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dc26c626c51c5def6f2466f38f55b25029642f Validity Not Before: Dec 22 22:01:44 2025 GMT Not After : Dec 23 22:01:44 2025 GMT Subject: CN=b81d8b4c7bd8010d88b1972d8f9347bbfbb0a05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e7:e3:a7:37:b5:31:f2:7a:25:4a:01:5b:90: 7a:b9:aa:bc:78:6d:5d:ad:3a:64:5b:51:6e:12:84: 6e:db:55:75:64:bc:e1:be:86:b2:e6:15:91:ac:4a: eb:ae:b3:a1:df:98:91:ad:a9:27:67:2b:b9:ea:70: c2:3a:e5:31:53:28:9d:da:1c:61:70:42:b6:2a:90: 3c:1a:19:22:af:3f:af:f1:e4:04:45:df:45:90:5d: dc:44:91:1a:ad:c6:b1:40:89:02:bd:c9:cc:9e:50: 9e:78:ae:d8:6d:32:4b:7a:73:b1:92:90:82:55:f5: 48:1b:87:73:49:1a:e9:68:5a:df:b8:8f:60:ef:58: c1:53:88:dd:b5:0b:54:ce:3d:67:18:e9:5b:6b:83: d0:d1:03:b6:76:1c:e8:c9:05:7f:8e:84:c6:63:ec: 24:62:31:66:85:4d:a2:3a:d0:a7:3f:e8:e3:e7:dd: 23:83:d1:b6:30:38:5e:19:cf:26:b1:76:1d:70:fa: b0:8e:bb:c9:3a:b0:f9:80:a6:4e:0b:b2:60:04:88: 60:a2:77:0e:73:1c:df:da:b9:df:f7:d9:52:5f:87: 98:06:1e:1d:d3:40:aa:77:89:98:b8:b9:c9:ef:99: 2d:a7:3e:78:90:22:80:73:2a:c3:de:d5:9c:69:d2: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:1D:8B:4C:7B:D8:01:0D:88:B1:97:2D:8F:93:47:BB:FB:B0:A0:5A X509v3 Authority Key Identifier: keyid:F4:DC:26:C6:26:C5:1C:5D:EF:6F:24:66:F3:8F:55:B2:50:29:64:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NwmxibFHF3vbyRm849VslApZC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0879d8-f216-45ab-bf87-23e1dadf106c/1/9NwmxibFHF3vbyRm849VslApZC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a5:30:92:c2:00:01:e5:5b:1f:49:ed:24:11:3d:7d:14:ee: 3c:87:09:f2:46:c9:09:dd:18:5d:e6:0c:1a:60:74:e2:a9:db: d9:95:10:63:7e:37:8d:de:a6:28:87:43:8a:21:9e:62:30:1b: 98:f7:cd:d5:4a:fc:fc:71:33:95:4c:45:63:fa:4a:33:e1:8e: fd:ac:ad:87:1f:7a:e8:dd:9d:16:5a:75:62:f0:40:d5:7a:63: 88:28:cb:7e:ce:6c:83:1b:99:63:0a:42:b6:0c:03:60:d9:56: 04:f5:28:f6:f1:f6:f1:55:78:da:ab:52:33:e5:3a:e0:57:33: 53:c5:9f:42:f5:09:1a:f3:f7:e1:55:a0:9e:c9:6b:16:70:aa: f0:1d:d1:ad:3f:a6:cf:bb:3e:20:50:af:9d:79:b0:27:d4:62: 7d:f0:7e:27:8f:59:48:cd:17:77:44:67:57:69:f3:ff:c4:60: 72:6f:b0:a3:31:e7:20:cd:19:11:fe:2d:e7:ae:f1:bf:ba:e3: d1:b1:39:14:89:33:03:70:cd:6d:ce:2d:36:8d:34:5b:fc:37: 58:02:94:d0:49:0c:82:d0:8f:08:bc:5f:32:df:68:bb:3c:97: 8f:d2:24:ae:de:7f:5a:94:23:ad:a1:5c:35:8c:24:04:2f:48: a2:ba:4f:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFSWkYhdCXiR52r1e0SKkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGMyNmM2MjZjNTFjNWRlZjZmMjQ2NmYzOGY1NWIyNTAy OTY0MmYwHhcNMjUxMjIyMjIwMTQ0WhcNMjUxMjIzMjIwMTQ0WjAzMTEwLwYDVQQD EyhiODFkOGI0YzdiZDgwMTBkODhiMTk3MmQ4ZjkzNDdiYmZiYjBhMDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+fjpze1MfJ6JUoBW5B6uaq8eG1d rTpkW1FuEoRu21V1ZLzhvoay5hWRrErrrrOh35iRraknZyu56nDCOuUxUyid2hxh cEK2KpA8Ghkirz+v8eQERd9FkF3cRJEarcaxQIkCvcnMnlCeeK7YbTJLenOxkpCC VfVIG4dzSRrpaFrfuI9g71jBU4jdtQtUzj1nGOlba4PQ0QO2dhzoyQV/joTGY+wk YjFmhU2iOtCnP+jj590jg9G2MDheGc8msXYdcPqwjrvJOrD5gKZOC7JgBIhgoncO cxzf2rnf99lSX4eYBh4d00Cqd4mYuLnJ75ktpz54kCKAcyrD3tWcadLbnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgdi0x72AENiLGXLY+TR7v7sKBaMB8GA1UdIwQY MBaAFPTcJsYmxRxd728kZvOPVbJQKWQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODct MjNlMWRhZGYxMDZjLzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wODc5ZDgtZjIxNi00NWFiLWJmODctMjNlMWRhZGYxMDZj LzEvOU53bXhpYkZIRjN2YnlSbTg0OVZzbEFwWkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaUwksIA AeVbH0ntJBE9fRTuPIcJ8kbJCd0YXeYMGmB04qnb2ZUQY343jd6mKIdDiiGeYjAb mPfN1Ur8/HEzlUxFY/pKM+GO/aythx966N2dFlp1YvBA1XpjiCjLfs5sgxuZYwpC tgwDYNlWBPUo9vH28VV42qtSM+U64FczU8WfQvUJGvP34VWgnslrFnCq8B3RrT+m z7s+IFCvnXmwJ9RiffB+J49ZSM0Xd0RnV2nz/8Rgcm+wozHnIM0ZEf4t567xv7rj 0bE5FIkzA3DNbc4tNo00W/w3WAKU0EkMgtCPCLxfMt9ouzyXj9Ikrt5/WpQjraFc NYwkBC9IorpPgw== -----END CERTIFICATE-----Generated at Tue Dec 23 06:37:40 2025 by rpki-client