This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft File: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft (raw, json) Hash identifier: Eh/LKOVpoDmhxwyLTf1X3H0W6pWACnlPERMq6szkSnM= Subject key identifier: C4:16:AF:26:E3:71:04:63:09:9F:46:D2:DB:85:29:54:2F:4C:91:8A Authority key identifier: 0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA Certificate issuer: /CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea Certificate serial: 019B0F375DD8418AC0CC0EB1BCBB3F0766AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft Manifest number: 0393 Signing time: Thu 11 Dec 2025 21:00:45 +0000 Manifest this update: Thu 11 Dec 2025 21:00:45 +0000 Manifest next update: Fri 12 Dec 2025 21:00:45 +0000 Files and hashes: 1: C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl (hash: +GLiVBG7mMc+XH8VgUDm6IrBiB/i/oUrQbri4/edZms=) 2: wD9ir4CCy4E7zOefD7Z-y5RvpRY.roa (hash: 7sn9k3wlZ/27RuueZ6o2qKtcwJI5H5fdnvFFf1ud6xU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:5d:d8:41:8a:c0:cc:0e:b1:bc:bb:3f:07:66:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bd64fe7f438782ec8afa9eef5487b5db80e4dea Validity Not Before: Dec 11 21:00:45 2025 GMT Not After : Dec 12 21:00:45 2025 GMT Subject: CN=c416af26e3710463099f46d2db8529542f4c918a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:cc:1c:f4:43:37:18:da:49:18:52:a3:7c: a8:6e:69:0b:06:98:d2:73:f4:4e:c7:fd:13:d3:8f: 06:9f:88:93:9a:2f:19:bb:fd:43:7a:7e:e4:46:68: 35:e1:3f:4a:58:c8:c2:c9:64:99:87:15:5a:68:bf: cd:94:8a:bf:21:0e:67:ef:a6:47:fc:a8:a1:c9:39: e0:9f:28:5d:a2:9e:1d:c6:2c:53:e6:17:b3:c0:1d: 59:9c:91:aa:3d:c3:4f:2c:30:73:79:49:ea:bc:8c: 16:3f:89:28:fe:a9:db:09:81:ac:64:72:7f:64:d8: 04:5a:f5:7c:63:af:d8:fc:d4:0c:c6:84:e4:3b:ed: 2e:d7:b4:43:8a:03:af:50:f2:80:53:11:2e:e5:49: e4:41:15:71:5d:d7:c9:52:c0:b3:d4:9a:80:fe:18: f4:f8:c4:fe:f1:20:b9:cf:b5:fe:ca:1c:0b:6f:e5: 01:ae:b6:3d:3d:76:25:6c:f5:ac:54:93:9e:63:20: 58:0a:48:5e:30:6a:ec:f3:96:d1:2b:73:a4:49:43: 8a:b8:5d:56:e3:92:52:e7:30:6f:61:1d:1c:e6:7d: ca:dd:95:e2:ff:9d:6c:78:64:86:c4:71:fc:c1:49: e2:03:97:ea:5a:dd:14:31:d1:e7:e6:4a:4c:a8:fb: 3f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:AF:26:E3:71:04:63:09:9F:46:D2:DB:85:29:54:2F:4C:91:8A X509v3 Authority Key Identifier: keyid:0B:D6:4F:E7:F4:38:78:2E:C8:AF:A9:EE:F5:48:7B:5D:B8:0E:4D:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d20c0e-6385-4ab7-b5ff-d15bdb886c6d/1/C9ZP5_Q4eC7Ir6nu9Uh7XbgOTeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:82:d3:64:6a:c9:61:ed:a5:ef:16:44:5d:95:39:bf:9c:49: fc:29:35:aa:ea:54:7e:09:53:d8:33:e3:22:cc:d4:29:e6:9d: 92:e7:1f:1f:30:1f:6e:2f:03:8d:64:3a:0d:67:4c:dd:f1:71: 53:a5:52:8d:b0:c9:5d:55:a7:0b:dd:98:fb:1b:af:13:e3:80: bf:78:07:fb:3f:ae:eb:8e:5d:91:84:3b:c9:f9:b4:21:06:52: a0:ef:a5:7c:d4:af:81:5b:49:cd:3d:47:61:a3:52:1f:50:b3: 8a:5d:da:cf:36:96:57:56:30:b9:25:c1:e8:93:69:60:81:e7: bc:77:b7:a0:c2:8a:7c:17:86:18:da:9d:84:35:4b:4e:d1:6e: fd:07:31:3d:22:dd:3c:8c:29:e1:18:ab:b2:aa:01:01:5b:8d: a5:f0:28:fb:71:a2:d7:e1:15:a6:c6:fb:95:8e:18:a8:cf:af: d2:6f:d3:cd:96:50:52:76:ef:ad:3f:de:fd:50:77:95:2b:91: 6f:3c:eb:f0:a8:40:c8:f4:b1:e0:98:dc:9e:5b:66:e6:e2:16: d5:4a:cf:b8:57:de:74:91:f9:c5:37:70:12:d6:00:aa:20:19: 14:83:70:51:a9:b5:63:e8:cb:3c:36:08:fa:be:bb:34:90:b6: 57:60:13:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN13YQYrAzA6xvLs/B2avMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZDY0ZmU3ZjQzODc4MmVjOGFmYTllZWY1NDg3YjVkYjgw ZTRkZWEwHhcNMjUxMjExMjEwMDQ1WhcNMjUxMjEyMjEwMDQ1WjAzMTEwLwYDVQQD EyhjNDE2YWYyNmUzNzEwNDYzMDk5ZjQ2ZDJkYjg1Mjk1NDJmNGM5MThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo63MHPRDNxjaSRhSo3yobmkLBpjS c/ROx/0T048Gn4iTmi8Zu/1Den7kRmg14T9KWMjCyWSZhxVaaL/NlIq/IQ5n76ZH /KihyTngnyhdop4dxixT5hezwB1ZnJGqPcNPLDBzeUnqvIwWP4ko/qnbCYGsZHJ/ ZNgEWvV8Y6/Y/NQMxoTkO+0u17RDigOvUPKAUxEu5UnkQRVxXdfJUsCz1JqA/hj0 +MT+8SC5z7X+yhwLb+UBrrY9PXYlbPWsVJOeYyBYCkheMGrs85bRK3OkSUOKuF1W 45JS5zBvYR0c5n3K3ZXi/51seGSGxHH8wUniA5fqWt0UMdHn5kpMqPs/iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQWrybjcQRjCZ9G0tuFKVQvTJGKMB8GA1UdIwQY MBaAFAvWT+f0OHguyK+p7vVIe124Dk3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYt ZDE1YmRiODg2YzZkLzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9kMjBjMGUtNjM4NS00YWI3LWI1ZmYtZDE1YmRiODg2YzZk LzEvQzlaUDVfUTRlQzdJcjZudTlVaDdYYmdPVGVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoLTZGrJ Ye2l7xZEXZU5v5xJ/Ck1qupUfglT2DPjIszUKeadkucfHzAfbi8DjWQ6DWdM3fFx U6VSjbDJXVWnC92Y+xuvE+OAv3gH+z+u645dkYQ7yfm0IQZSoO+lfNSvgVtJzT1H YaNSH1Czil3azzaWV1YwuSXB6JNpYIHnvHe3oMKKfBeGGNqdhDVLTtFu/QcxPSLd PIwp4RirsqoBAVuNpfAo+3Gi1+EVpsb7lY4YqM+v0m/TzZZQUnbvrT/e/VB3lSuR bzzr8KhAyPSx4Jjcnltm5uIW1UrPuFfedJH5xTdwEtYAqiAZFINwUam1Y+jLPDYI +r67NJC2V2ATaQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:59:57 2025 by rpki-client