This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft File: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft (raw, json) Hash identifier: Kk9QVdhIvwtWmmJuSynFDJrN11ZLiBI3O+cVzQAUQ0c= Subject key identifier: F2:81:DD:F5:07:95:3F:19:1A:1F:EF:4F:1E:CE:1E:87:5F:62:AC:D7 Authority key identifier: 94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9 Certificate issuer: /CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9 Certificate serial: 019B21ABC3A3554B6394A6D6728E683D1DA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft Manifest number: 177F Signing time: Mon 15 Dec 2025 11:01:03 +0000 Manifest this update: Mon 15 Dec 2025 11:01:03 +0000 Manifest next update: Tue 16 Dec 2025 11:01:03 +0000 Files and hashes: 1: Aw8VCCK2oT1v-RRBTzm1Icy2wl0.roa (hash: XRXIYDE3PMP8HGRW9qlh0nIOPSOFPTF1lsWNuSlfpmY=) 2: P9x64-P6Zc5aUoIHika_YUJSpL4.roa (hash: wA4s5vuet/tgGLY4KlSltkNzg/nbmHYvEtESrfXIJ8U=) 3: i9LUKRMFfrn-zZJPck6ZTY7F8F4.roa (hash: vYGYhqvVpW6XCnxzEEe+vdIqrrsrJBwJSKWJ04MFhOg=) 4: lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl (hash: roUmlFf4E+JIY5FO4/m5SQonxxMgHDO9vBUYisFnn7o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:ab:c3:a3:55:4b:63:94:a6:d6:72:8e:68:3d:1d:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=942f565ed16d8c337a8c8ab3cdc572ef1150f5a9 Validity Not Before: Dec 15 11:01:03 2025 GMT Not After : Dec 16 11:01:03 2025 GMT Subject: CN=f281ddf507953f191a1fef4f1ece1e875f62acd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d4:37:d7:3d:36:9b:73:58:c4:35:12:79:b0: 97:e6:1a:68:72:98:fc:17:47:24:cf:5e:10:25:07: 7a:82:aa:d4:02:79:b3:bc:c8:6f:65:b3:a5:0d:78: 59:75:af:ef:75:83:d2:ac:18:e1:58:63:c9:14:41: dd:0b:2d:2c:25:cc:67:2a:fe:a3:7a:d7:91:de:40: 4b:e4:86:d5:59:50:55:12:90:64:e2:29:e2:c9:70: 14:21:65:21:0f:7f:96:fc:b1:0d:ba:79:1f:5c:83: 5d:ce:7a:15:06:d3:85:d1:24:db:bc:68:84:5f:33: 38:ce:27:3f:6c:28:26:3f:66:1f:9c:af:df:60:ab: 2d:41:8b:5f:c6:9f:36:fd:8e:97:78:ff:a3:a1:16: ba:b2:61:f2:7d:3c:c1:7a:54:6e:ba:2a:19:77:cb: 29:f8:26:d8:02:de:0d:f6:9a:bf:19:54:55:e6:dc: 68:74:c3:aa:4f:d2:d5:09:a2:6d:d1:3a:c9:8e:89: 80:38:f2:e8:08:10:0e:66:a0:e2:04:d4:24:9f:97: e1:7d:c1:92:85:de:88:b4:f2:dd:87:34:3f:8a:b6: 62:5d:16:fc:91:1f:b4:0e:c2:d0:f4:77:ed:a8:a8: ac:26:af:bd:e0:ed:d6:4c:b6:76:4b:39:a1:66:30: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:81:DD:F5:07:95:3F:19:1A:1F:EF:4F:1E:CE:1E:87:5F:62:AC:D7 X509v3 Authority Key Identifier: keyid:94:2F:56:5E:D1:6D:8C:33:7A:8C:8A:B3:CD:C5:72:EF:11:50:F5:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f1649-0c9d-405d-a134-66d253432f5f/1/lC9WXtFtjDN6jIqzzcVy7xFQ9ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:50:77:a6:74:f2:c0:99:bb:e1:89:9e:2f:28:eb:d2:02:88: 0c:69:4a:ab:1f:62:31:c4:06:0e:3f:2a:07:f0:ad:42:24:bc: a0:eb:bc:23:65:00:5d:69:5a:e7:5e:3d:5e:e7:58:7c:71:36: c9:4b:ee:55:f6:4d:46:e0:ec:61:56:99:73:24:5f:34:23:12: fb:d4:fa:91:fd:50:24:02:1c:78:3d:42:f1:bd:6a:b8:c6:8c: e3:6e:70:c6:33:ab:03:c1:9b:7e:63:fc:8c:70:04:92:87:51: ed:59:61:3d:ff:15:0a:9b:ae:5d:1b:be:bf:1c:ff:af:e1:72: b2:6b:33:a9:53:88:f4:7b:3c:79:41:1c:95:ed:a6:e6:32:bc: d2:45:a4:bb:c7:69:d2:bd:7e:c4:c6:1f:f8:ef:a0:db:f3:f9: 8b:73:5a:2f:f0:14:3d:97:b5:dd:e8:53:9b:57:32:18:c5:44: e3:53:40:e2:b7:18:ca:b6:bb:ea:03:ea:08:33:30:dc:dd:5c: 46:a4:f2:dd:b7:11:03:ab:bb:98:69:29:5a:48:60:96:1c:98: ef:fa:28:84:27:8d:f8:67:a2:da:57:26:da:15:2a:d7:1c:13: 1a:ee:9a:b7:ac:6a:0b:4f:87:5a:3e:c9:4d:25:13:7b:73:af: a7:cc:cc:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshq8OjVUtjlKbWco5oPR2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MmY1NjVlZDE2ZDhjMzM3YThjOGFiM2NkYzU3MmVmMTE1 MGY1YTkwHhcNMjUxMjE1MTEwMTAzWhcNMjUxMjE2MTEwMTAzWjAzMTEwLwYDVQQD EyhmMjgxZGRmNTA3OTUzZjE5MWExZmVmNGYxZWNlMWU4NzVmNjJhY2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNQ31z02m3NYxDUSebCX5hpocpj8 F0ckz14QJQd6gqrUAnmzvMhvZbOlDXhZda/vdYPSrBjhWGPJFEHdCy0sJcxnKv6j eteR3kBL5IbVWVBVEpBk4iniyXAUIWUhD3+W/LENunkfXINdznoVBtOF0STbvGiE XzM4zic/bCgmP2YfnK/fYKstQYtfxp82/Y6XeP+joRa6smHyfTzBelRuuioZd8sp +CbYAt4N9pq/GVRV5txodMOqT9LVCaJt0TrJjomAOPLoCBAOZqDiBNQkn5fhfcGS hd6ItPLdhzQ/irZiXRb8kR+0DsLQ9HftqKisJq+94O3WTLZ2SzmhZjA2owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKB3fUHlT8ZGh/vTx7OHodfYqzXMB8GA1UdIwQY MBaAFJQvVl7RbYwzeoyKs83Fcu8RUPWpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQt NjZkMjUzNDMyZjVmLzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83ZjE2NDktMGM5ZC00MDVkLWExMzQtNjZkMjUzNDMyZjVm LzEvbEM5V1h0RnRqRE42aklxenpjVnk3eEZROWFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVB3pnTy wJm74YmeLyjr0gKIDGlKqx9iMcQGDj8qB/CtQiS8oOu8I2UAXWla5149XudYfHE2 yUvuVfZNRuDsYVaZcyRfNCMS+9T6kf1QJAIceD1C8b1quMaM425wxjOrA8GbfmP8 jHAEkodR7VlhPf8VCpuuXRu+vxz/r+FysmszqVOI9Hs8eUEcle2m5jK80kWku8dp 0r1+xMYf+O+g2/P5i3NaL/AUPZe13ehTm1cyGMVE41NA4rcYyra76gPqCDMw3N1c RqTy3bcRA6u7mGkpWkhglhyY7/oohCeN+Gei2lcm2hUq1xwTGu6at6xqC0+HWj7J TSUTe3Ovp8zMiQ== -----END CERTIFICATE-----Generated at Mon Dec 15 15:02:19 2025 by rpki-client