This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft File: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json) Hash identifier: motAK5POtirgWt3a1fYkwKIu/VbT/C3gweY3oZTOorY= Subject key identifier: B6:EA:0B:4D:43:97:A8:98:E8:5F:98:66:17:0D:CB:E1:EA:0F:C8:DD Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B4738DABDA69698B9D642C6FEB4B4CE5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft Manifest number: 17B1 Signing time: Mon 22 Dec 2025 18:01:06 +0000 Manifest this update: Mon 22 Dec 2025 18:01:06 +0000 Manifest next update: Tue 23 Dec 2025 18:01:06 +0000 Files and hashes: 1: 3Y6q4SSOfKvMWqt7nkK6iJHZcFg.roa (hash: nQJrfkgs7cckEJG4TEbt+aYboyegrJmZ5zK0surmR+g=) 2: 5Bu_YG_RUdf11Gi9aWxt35RgAkg.roa (hash: OuFLQ19VvlkednlA1/7PaMFzyU9MEyhAzgW7jgfHrRQ=) 3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: RDGhlGeDwHIFOzWXUZ2ANjALrwq725Po508EPh6LjD0=) 4: HDz_F3hZa5r8NL-Agbpv0aIdYQo.roa (hash: 8B4QcGu+QViJQc3w5/m4TMovMHtzH0RK2AcezX0B9fU=) 5: Z4ff2msRKcb6YMtm9rlrjleZxQM.roa (hash: R/U2SPlro8qocLQcB9G60tY7YkY0sJXo2Wic6VrrpPw=) 6: aJGyBw7nv2EawjPo3wD_Y42gKSg.roa (hash: 7nd/5C3vLV4aF0pS8SU+HWw+oAfsq3HH2A9GvZHaOLo=) 7: ytVsYJEUm-gh8qZueY3uGM9VYCc.roa (hash: vsoERD1sts9niF8X7mt0u+HpNFQeD0eLoVfGJBvKlMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 18:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:38:da:bd:a6:96:98:b9:d6:42:c6:fe:b4:b4:ce:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Dec 22 18:01:06 2025 GMT Not After : Dec 23 18:01:06 2025 GMT Subject: CN=b6ea0b4d4397a898e85f9866170dcbe1ea0fc8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:80:af:4e:b5:fd:97:5b:27:e7:2e:8c:4d:7e: e9:41:e0:e4:3b:de:66:d6:97:fc:0b:7a:a1:e7:03: eb:38:02:9d:40:07:6e:de:5d:c2:71:f6:01:51:6a: 41:d6:52:4c:f6:80:ad:17:a9:83:c3:26:f0:bc:b6: 2d:87:33:1f:30:6d:59:d6:d2:68:c5:06:fa:38:71: be:64:60:10:62:5c:3e:29:34:35:eb:0b:b3:4e:18: aa:26:65:87:09:9d:02:a6:d0:51:10:30:36:3a:24: 59:62:be:7b:fe:99:a3:a5:27:7e:53:f5:f6:43:01: 31:f4:82:d2:66:c8:f6:bd:6f:c6:f5:3b:64:32:6b: 4d:e0:cb:dd:bd:77:7b:65:88:3a:d2:01:65:e4:a6: 82:b9:b4:a4:ba:f1:a7:e3:30:42:44:ee:29:c7:97: 15:e3:7b:29:cc:4f:19:0b:f2:cc:17:58:97:1f:14: 7b:82:1f:23:f9:dd:ac:6a:5d:36:4b:7b:60:c3:95: a7:e3:5e:9a:50:2c:a9:97:a1:34:84:59:81:76:fa: 6a:41:bc:30:18:0c:52:bf:13:67:2e:dd:c1:b9:42: 46:c9:bd:da:da:57:a1:fd:90:36:73:17:3a:93:5a: c1:5c:ba:19:af:54:74:96:fc:e1:90:c5:59:d5:c9: 98:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EA:0B:4D:43:97:A8:98:E8:5F:98:66:17:0D:CB:E1:EA:0F:C8:DD X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:43:a3:e4:cd:a9:c2:d7:c5:e8:02:88:e2:57:19:e8:f0:13: 09:bd:07:60:2b:72:51:8f:eb:96:18:83:c5:ad:53:33:34:f2: 68:29:6f:e1:93:9a:58:fe:43:a6:cc:92:34:4d:b5:13:c0:24: 21:dc:51:7e:bb:9a:82:4e:b3:25:e8:61:3c:91:a3:87:47:09: c8:69:88:8f:01:be:27:7b:b4:39:cf:35:1c:7e:70:e4:1c:7e: 8c:97:56:95:35:62:1e:02:50:c3:8f:88:82:6d:2d:68:3d:bd: a8:61:fb:ec:72:90:56:a5:72:4f:06:26:47:54:d1:1c:15:86: 42:b2:aa:eb:24:dd:99:55:3f:f1:21:98:2c:93:99:16:1d:a9: 22:4a:fe:81:fa:69:ca:55:c7:da:d2:9e:ea:d6:af:f8:c1:e2: 46:6f:63:cd:d3:4b:23:bd:d3:fb:23:6a:c7:18:bb:86:48:cf: e6:c3:77:97:fc:2c:3d:60:95:be:c6:3a:d4:6b:65:2c:2e:4e: ff:ed:f4:46:23:09:21:a2:dc:04:36:af:ff:1e:62:c4:a4:c1: 96:ce:9a:22:fb:22:90:d7:19:28:11:2a:cd:90:c6:d4:d9:58: ef:a7:f8:7a:cc:4b:0b:7f:34:4b:f5:0e:00:d6:b4:e2:8f:29: e6:a1:1a:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHONq9ppaYudZCxv60tM5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjUxMjIyMTgwMTA2WhcNMjUxMjIzMTgwMTA2WjAzMTEwLwYDVQQD EyhiNmVhMGI0ZDQzOTdhODk4ZTg1Zjk4NjYxNzBkY2JlMWVhMGZjOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzICvTrX9l1sn5y6MTX7pQeDkO95m 1pf8C3qh5wPrOAKdQAdu3l3CcfYBUWpB1lJM9oCtF6mDwybwvLYthzMfMG1Z1tJo xQb6OHG+ZGAQYlw+KTQ16wuzThiqJmWHCZ0CptBREDA2OiRZYr57/pmjpSd+U/X2 QwEx9ILSZsj2vW/G9TtkMmtN4MvdvXd7ZYg60gFl5KaCubSkuvGn4zBCRO4px5cV 43spzE8ZC/LMF1iXHxR7gh8j+d2sal02S3tgw5Wn416aUCypl6E0hFmBdvpqQbww GAxSvxNnLt3BuUJGyb3a2leh/ZA2cxc6k1rBXLoZr1R0lvzhkMVZ1cmYFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbqC01Dl6iY6F+YZhcNy+HqD8jdMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUOj5M2p wtfF6AKI4lcZ6PATCb0HYCtyUY/rlhiDxa1TMzTyaClv4ZOaWP5DpsySNE21E8Ak IdxRfruagk6zJehhPJGjh0cJyGmIjwG+J3u0Oc81HH5w5Bx+jJdWlTViHgJQw4+I gm0taD29qGH77HKQVqVyTwYmR1TRHBWGQrKq6yTdmVU/8SGYLJOZFh2pIkr+gfpp ylXH2tKe6tav+MHiRm9jzdNLI73T+yNqxxi7hkjP5sN3l/wsPWCVvsY61GtlLC5O /+30RiMJIaLcBDav/x5ixKTBls6aIvsikNcZKBEqzZDG1NlY76f4esxLC380S/UO ANa04o8p5qEaNA== -----END CERTIFICATE-----Generated at Tue Dec 23 04:08:11 2025 by rpki-client