This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft File: ct9pdDDLtXxJoKGZMCTW0yn35WU.mft (raw, json) Hash identifier: M47n/Gn5N1tBTTMQ2WV6kSGz6usHfLZTjoHgDHJl+dw= Subject key identifier: A2:36:75:B9:58:5C:A4:BA:98:8E:3D:88:D9:8C:14:E5:5E:93:19:1E Authority key identifier: 72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65 Certificate issuer: /CN=72df697430cbb57c49a0a1993024d6d329f7e565 Certificate serial: 019B2399A5D3797225C549DB9F9A95E5694A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft Manifest number: 1227 Signing time: Mon 15 Dec 2025 20:00:30 +0000 Manifest this update: Mon 15 Dec 2025 20:00:30 +0000 Manifest next update: Tue 16 Dec 2025 20:00:30 +0000 Files and hashes: 1: ct9pdDDLtXxJoKGZMCTW0yn35WU.crl (hash: MXtodBb0ir4DLX+sguqYqswkPxX6F9K1lbKBk0H3hUI=) 2: hcuixNDtZTOahJr2Izkq1PkvB30.roa (hash: 0Y98rWR7z+ovo4LddJHUN4JqVyjOhGekgLOw4fEG1XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 20:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:a5:d3:79:72:25:c5:49:db:9f:9a:95:e5:69:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72df697430cbb57c49a0a1993024d6d329f7e565 Validity Not Before: Dec 15 20:00:30 2025 GMT Not After : Dec 16 20:00:30 2025 GMT Subject: CN=a23675b9585ca4ba988e3d88d98c14e55e93191e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4d:79:04:00:cd:c2:b6:78:1a:cc:33:8f:1e: 4b:3b:a3:81:e4:d1:88:94:c8:0f:11:32:e6:64:b3: 80:91:c5:7a:16:ca:a6:9c:a0:a6:e2:db:02:d3:f3: 45:7f:03:34:f3:f3:21:b1:04:2a:c1:a5:4b:a2:17: ce:c6:53:ac:51:b5:0a:94:50:ae:85:63:0c:c6:bb: 62:27:64:5f:eb:58:01:a2:34:67:5d:86:ab:b6:ee: d0:29:5a:1f:34:d8:ca:53:a7:6a:05:b2:e3:ed:5c: 38:0b:be:e0:8c:ab:88:4f:fc:2f:58:ea:3b:90:6d: 95:10:0d:79:e6:9c:c0:03:c8:52:89:02:8b:d0:98: 8d:0b:df:0b:2d:99:e1:09:de:b0:ab:03:af:bd:7b: 14:7a:c5:0e:f7:ba:57:e4:81:d3:5e:0a:e3:a1:15: 06:44:34:60:8f:e6:06:0c:37:47:1b:f3:30:50:30: c0:e2:ae:bf:f0:ba:d4:f9:bd:cf:1c:c1:98:e8:17: 31:ae:1a:92:9a:36:06:de:6f:d4:7f:fb:54:af:7c: 01:32:4e:1e:61:87:89:94:36:96:b1:92:ea:1f:fb: 2c:65:71:69:60:9b:77:3c:aa:e6:dd:a7:1f:ee:88: e1:6f:ad:07:8c:3d:2e:1a:48:a9:00:ca:c7:74:e0: 76:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:36:75:B9:58:5C:A4:BA:98:8E:3D:88:D9:8C:14:E5:5E:93:19:1E X509v3 Authority Key Identifier: keyid:72:DF:69:74:30:CB:B5:7C:49:A0:A1:99:30:24:D6:D3:29:F7:E5:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ct9pdDDLtXxJoKGZMCTW0yn35WU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f816d6-016a-4135-99e3-8c42bb2231ab/1/ct9pdDDLtXxJoKGZMCTW0yn35WU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:22:f1:b8:0a:5f:5a:43:56:61:ce:2c:2e:a0:f7:04:c7:37: aa:87:e5:ac:f5:dc:48:11:61:df:14:2c:52:0b:7f:e0:67:ec: 3e:89:cc:95:24:4d:54:b3:d1:82:e7:66:bc:a3:ae:06:45:2a: 82:63:e4:b9:b3:78:ae:d8:fc:12:c2:ea:de:8e:66:1d:1c:5d: 09:4e:51:93:8f:26:a4:b4:4f:5a:4e:ae:60:34:8e:0b:80:74: b1:c2:49:14:5b:d5:a8:1a:b1:0d:da:32:7a:57:e4:bb:58:75: 36:f1:2c:18:c7:7f:01:59:43:70:43:01:c9:97:45:84:69:57: 09:a8:12:7f:6d:64:26:e0:aa:76:2e:8e:b8:53:88:ec:4a:a7: 7f:8b:77:58:b9:7b:b9:80:ba:04:0d:66:13:2b:99:3e:19:47: cd:ad:8c:22:e5:4c:2f:c0:aa:cc:98:08:65:b0:4f:56:ce:cf: 2d:3b:e7:77:8c:fd:6f:eb:ee:78:5c:8d:8f:d5:34:33:ee:dc: 6a:74:a6:4d:a2:b2:6e:bb:eb:46:63:35:2b:47:e3:60:bb:4b: 61:99:be:27:21:bb:b0:dc:3e:9e:22:58:43:b6:d0:06:fe:af: 27:07:82:7e:7a:ad:d4:45:a9:6a:f6:ca:57:5b:50:4d:85:76: 32:7f:dc:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmaXTeXIlxUnbn5qV5WlKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZGY2OTc0MzBjYmI1N2M0OWEwYTE5OTMwMjRkNmQzMjlm N2U1NjUwHhcNMjUxMjE1MjAwMDMwWhcNMjUxMjE2MjAwMDMwWjAzMTEwLwYDVQQD EyhhMjM2NzViOTU4NWNhNGJhOTg4ZTNkODhkOThjMTRlNTVlOTMxOTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U15BADNwrZ4Gswzjx5LO6OB5NGI lMgPETLmZLOAkcV6FsqmnKCm4tsC0/NFfwM08/MhsQQqwaVLohfOxlOsUbUKlFCu hWMMxrtiJ2Rf61gBojRnXYartu7QKVofNNjKU6dqBbLj7Vw4C77gjKuIT/wvWOo7 kG2VEA155pzAA8hSiQKL0JiNC98LLZnhCd6wqwOvvXsUesUO97pX5IHTXgrjoRUG RDRgj+YGDDdHG/MwUDDA4q6/8LrU+b3PHMGY6BcxrhqSmjYG3m/Uf/tUr3wBMk4e YYeJlDaWsZLqH/ssZXFpYJt3PKrm3acf7ojhb60HjD0uGkipAMrHdOB2/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKI2dblYXKS6mI49iNmMFOVekxkeMB8GA1UdIwQY MBaAFHLfaXQwy7V8SaChmTAk1tMp9+VlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMt OGM0MmJiMjIzMWFiLzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9mODE2ZDYtMDE2YS00MTM1LTk5ZTMtOGM0MmJiMjIzMWFi LzEvY3Q5cGREREx0WHhKb0tHWk1DVFcweW4zNVdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANiLxuApf WkNWYc4sLqD3BMc3qoflrPXcSBFh3xQsUgt/4GfsPonMlSRNVLPRgudmvKOuBkUq gmPkubN4rtj8EsLq3o5mHRxdCU5Rk48mpLRPWk6uYDSOC4B0scJJFFvVqBqxDdoy elfku1h1NvEsGMd/AVlDcEMByZdFhGlXCagSf21kJuCqdi6OuFOI7Eqnf4t3WLl7 uYC6BA1mEyuZPhlHza2MIuVML8CqzJgIZbBPVs7PLTvnd4z9b+vueFyNj9U0M+7c anSmTaKybrvrRmM1K0fjYLtLYZm+JyG7sNw+niJYQ7bQBv6vJweCfnqt1EWpavbK V1tQTYV2Mn/cWA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:40:28 2025 by rpki-client