This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft File: 309yD7vOaxVdc1fb5xJspWwevnU.mft (raw, json) Hash identifier: QTigkeTxVyb8BznW4ckCYPKOSWAbz7j/GGWn4jDLMnM= Subject key identifier: 72:8D:F0:89:23:31:1F:B2:E6:0B:BB:45:67:C1:5A:78:C4:1F:BD:37 Authority key identifier: DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75 Certificate issuer: /CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75 Certificate serial: 019B416D98F646D000E53FE9BE5A1560C385 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft Manifest number: 0333 Signing time: Sun 21 Dec 2025 15:01:00 +0000 Manifest this update: Sun 21 Dec 2025 15:01:00 +0000 Manifest next update: Mon 22 Dec 2025 15:01:00 +0000 Files and hashes: 1: 309yD7vOaxVdc1fb5xJspWwevnU.crl (hash: BIcGec3eKSor9UcvMSH2BHLZMhxJxypF0HDOdUZedDI=) 2: qjdo-2hELWfZ5X3xR6fmxm2tvRM.roa (hash: KdwciiToM5teWCqBbT0OWprvk5ot6XdBmfBuE2JH8Q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:98:f6:46:d0:00:e5:3f:e9:be:5a:15:60:c3:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df4f720fbbce6b155d7357dbe7126ca56c1ebe75 Validity Not Before: Dec 21 15:01:00 2025 GMT Not After : Dec 22 15:01:00 2025 GMT Subject: CN=728df08923311fb2e60bbb4567c15a78c41fbd37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2d:86:d6:04:1f:26:c5:7c:95:c0:e3:5f:c0: 44:dc:bf:5d:25:43:0f:a7:74:a0:03:91:1d:e7:a3: 61:a7:05:2d:b1:b6:f6:9d:db:18:02:ae:72:a7:9b: e3:a1:35:a8:58:99:91:c2:a8:d0:f4:81:cb:11:e6: 14:2e:8b:02:20:d1:b9:3d:2e:53:fa:23:fe:72:63: a9:50:b3:a8:18:dc:d4:4e:71:82:2f:7a:7e:27:51: 07:85:66:a1:97:4e:e2:53:c4:22:42:1c:67:02:f9: 29:c7:b6:77:4b:7c:e0:3c:b4:db:b8:8e:70:7e:9b: 3a:45:da:38:00:8c:90:fb:8a:66:6f:df:54:7f:a2: 79:62:b0:09:0c:12:31:ae:b5:83:1e:0b:43:71:59: 9a:72:f2:4f:6d:60:a0:e9:bd:a0:e5:c2:8d:60:4a: b3:a3:17:00:5d:de:3e:44:a6:cf:79:f6:45:3f:eb: 03:75:36:9d:68:f9:4e:63:19:7b:37:fb:70:8e:fe: 80:4c:00:f9:94:0c:d2:6d:de:c1:ba:59:5a:ca:fa: 1c:d8:64:c2:88:41:da:cf:43:fb:c5:2d:87:a7:13: 93:ed:7b:00:c8:3a:2b:19:c8:8f:24:6c:ce:30:4a: 2f:f6:ca:f5:d7:a7:8d:1b:09:b4:43:75:18:e7:11: a8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:8D:F0:89:23:31:1F:B2:E6:0B:BB:45:67:C1:5A:78:C4:1F:BD:37 X509v3 Authority Key Identifier: keyid:DF:4F:72:0F:BB:CE:6B:15:5D:73:57:DB:E7:12:6C:A5:6C:1E:BE:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/309yD7vOaxVdc1fb5xJspWwevnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/6fa51b-812e-4284-9d17-ad51ba216531/1/309yD7vOaxVdc1fb5xJspWwevnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:4c:cc:31:8d:6b:5e:23:2f:64:b9:40:46:25:2c:e0:2d:8c: c5:ec:54:59:f1:af:af:32:b1:76:73:ec:7c:7e:eb:17:a8:ac: 4c:86:a2:e1:34:a4:0d:99:68:3a:d5:1b:3e:2e:b6:ae:fb:a3: 7d:3e:96:2f:74:ac:a5:fe:5c:e7:7f:af:a8:45:3f:80:8e:f0: 3f:ed:68:aa:b9:7b:04:74:87:08:45:ca:83:ae:83:6c:f7:39: 4d:6d:56:20:d8:57:e7:0a:f4:76:7a:cc:f6:16:d0:be:df:d1: c4:a3:d0:ba:75:e1:e8:de:cc:e2:68:aa:99:41:8b:57:3d:e9: 16:c0:2e:0c:76:d3:79:aa:04:1d:c2:b1:2f:f2:21:ad:06:8b: aa:38:75:4a:29:c0:f9:f6:1c:f5:8c:87:6e:b8:1f:b1:e5:f4: 9b:4c:48:4c:6d:07:aa:34:a3:47:2d:28:b2:db:3c:98:20:71: 30:07:7e:7a:cb:22:6b:18:39:3f:8f:5f:dc:79:65:f0:2e:91: b1:09:d4:ff:29:68:ab:ae:00:db:3a:17:4a:59:70:0c:bc:0b: 10:06:8a:a0:d1:b0:e1:14:d1:cf:09:41:39:f5:48:7c:95:73: 33:cf:e1:64:11:85:19:b5:b6:ec:e7:c0:10:b8:48:fd:8b:31: 53:da:c0:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbZj2RtAA5T/pvloVYMOFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNGY3MjBmYmJjZTZiMTU1ZDczNTdkYmU3MTI2Y2E1NmMx ZWJlNzUwHhcNMjUxMjIxMTUwMTAwWhcNMjUxMjIyMTUwMTAwWjAzMTEwLwYDVQQD Eyg3MjhkZjA4OTIzMzExZmIyZTYwYmJiNDU2N2MxNWE3OGM0MWZiZDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy2G1gQfJsV8lcDjX8BE3L9dJUMP p3SgA5Ed56NhpwUtsbb2ndsYAq5yp5vjoTWoWJmRwqjQ9IHLEeYULosCING5PS5T +iP+cmOpULOoGNzUTnGCL3p+J1EHhWahl07iU8QiQhxnAvkpx7Z3S3zgPLTbuI5w fps6Rdo4AIyQ+4pmb99Uf6J5YrAJDBIxrrWDHgtDcVmacvJPbWCg6b2g5cKNYEqz oxcAXd4+RKbPefZFP+sDdTadaPlOYxl7N/twjv6ATAD5lAzSbd7Bullayvoc2GTC iEHaz0P7xS2HpxOT7XsAyDorGciPJGzOMEov9sr116eNGwm0Q3UY5xGokwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKN8IkjMR+y5gu7RWfBWnjEH703MB8GA1UdIwQY MBaAFN9Pcg+7zmsVXXNX2+cSbKVsHr51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzA5eUQ3dk9heFZkYzFmYjV4SnNwV3dldm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS82ZmE1MWItODEyZS00Mjg0LTlkMTct YWQ1MWJhMjE2NTMxLzEvMzA5eUQ3dk9heFZkYzFmYjV4SnNwV3dldm5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS82ZmE1MWItODEyZS00Mjg0LTlkMTctYWQ1MWJhMjE2NTMx LzEvMzA5eUQ3dk9heFZkYzFmYjV4SnNwV3dldm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUzMMY1r XiMvZLlARiUs4C2MxexUWfGvrzKxdnPsfH7rF6isTIai4TSkDZloOtUbPi62rvuj fT6WL3Sspf5c53+vqEU/gI7wP+1oqrl7BHSHCEXKg66DbPc5TW1WINhX5wr0dnrM 9hbQvt/RxKPQunXh6N7M4miqmUGLVz3pFsAuDHbTeaoEHcKxL/IhrQaLqjh1SinA +fYc9YyHbrgfseX0m0xITG0HqjSjRy0osts8mCBxMAd+essiaxg5P49f3Hll8C6R sQnU/yloq64A2zoXSllwDLwLEAaKoNGw4RTRzwlBOfVIfJVzM8/hZBGFGbW27OfA ELhI/YsxU9rAeA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:44:17 2025 by rpki-client