This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: 5tNjI3a56blQiHr04jwz6UT3gXEArBZNJFIQ1AxPoA8= Subject key identifier: 96:9A:1A:B7:C2:27:C7:74:12:72:DC:8E:08:06:D0:EB:D8:4D:49:EA Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019B0F0067CB24477AE0F4B841085B2B4F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1804 Signing time: Thu 11 Dec 2025 20:00:43 +0000 Manifest this update: Thu 11 Dec 2025 20:00:43 +0000 Manifest next update: Fri 12 Dec 2025 20:00:43 +0000 Files and hashes: 1: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: x9IeoujP+JmTYZv1gt4f9U70Q8w2j/2j6tgbiXUX7uA=) 2: DSxMowOlSTC_MwVM7KlgQMPQNrE.roa (hash: nlhxWq37E/ratvBd5zCucB9L6gUR7nqV3LRV9tj9pbU=) 3: GnNRUTaHKbvwp7s1YiOty60yT_4.roa (hash: DPbHniq9Fo7ay7YRJ0huiIByC8Soz9pYUx8L6HOv9sQ=) 4: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=) 5: QNttCfsRuRLZvfJbkaOBCIPuwh0.roa (hash: JLiKXYuPVXcBLBoE9Kt2pa4tnI2ncSaE6qIZD2hxOms=) 6: eIGROqEP_UMAGqwd_UF27f4fmZI.roa (hash: PTOYqGwoLaRLkb7pZ9O+ROkYyxABiCDB4jwXpj+Fojw=) 7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=) 8: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=) 9: wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa (hash: BzCbGCRxMuWWL0WJXC3qLwx7jLDACyNbgAFEvlAin18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:67:cb:24:47:7a:e0:f4:b8:41:08:5b:2b:4f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Dec 11 20:00:43 2025 GMT Not After : Dec 12 20:00:43 2025 GMT Subject: CN=969a1ab7c227c7741272dc8e0806d0ebd84d49ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:74:de:b5:58:4d:7d:e1:6a:b5:00:a8:2c: 66:45:22:22:fc:72:a6:cd:82:b6:5d:9b:9c:e3:19: 89:83:e0:05:4c:71:c3:ac:91:80:93:2e:34:b0:3f: 07:03:ec:79:e6:ea:4b:6e:e5:be:33:ee:28:28:42: a7:47:25:a8:b8:ab:d3:76:52:4e:45:e8:62:9f:e0: 25:6d:49:de:6e:66:6b:7d:fd:c6:d8:24:d1:e5:83: 0c:02:62:00:33:cc:24:2f:de:86:08:49:46:07:5a: da:aa:d4:d7:3d:fb:a2:39:2e:04:f8:3f:71:78:4b: fe:d2:0b:f2:4d:30:75:fb:3b:74:2e:49:1c:56:af: e8:74:32:51:35:40:d4:30:80:e0:fd:16:1c:f7:f9: 3e:d0:49:96:31:81:66:36:df:10:d6:63:5b:59:70: be:69:5a:ec:70:6c:98:b4:b2:c7:2b:1e:95:12:07: f8:5d:a4:50:b2:4b:25:e7:dd:77:7a:c4:ad:1e:b9: fd:0c:5f:62:09:b2:05:70:2c:cb:dd:d1:2f:19:6d: bd:a6:0f:97:1e:37:c3:56:54:8c:b3:85:29:3b:bb: 85:3b:65:b2:56:a4:4f:36:2d:28:9a:c6:4c:6f:95: b1:eb:8b:f5:0d:1e:14:8b:85:ba:59:02:c2:e0:24: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:1A:B7:C2:27:C7:74:12:72:DC:8E:08:06:D0:EB:D8:4D:49:EA X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f3:e5:1c:fc:cc:ca:c4:e4:2c:de:20:c5:0e:2e:4b:4d:24: 01:d3:b5:6a:02:61:4c:34:cc:4e:b8:59:70:68:4e:c7:bf:75: 5f:07:a4:50:15:c9:ea:52:e4:f9:1c:a1:fe:35:13:26:f7:ec: e3:04:56:cb:8a:96:f9:76:20:d6:12:88:c1:37:30:b0:bc:6f: d8:21:a4:5f:d0:38:30:c4:a0:e0:a0:af:c8:04:ec:77:cb:a1: d3:d7:3a:0f:71:8d:50:b5:25:d0:a0:b6:59:87:ae:9a:93:a8: 46:6b:02:99:3e:e3:a2:9f:f5:80:36:69:94:7e:60:9f:35:6f: cc:0f:21:ca:79:a9:ae:46:eb:55:9d:80:8a:8e:96:2f:2c:c0: 1f:94:c1:da:0f:8b:76:af:7e:00:f5:92:db:8a:fd:09:fb:ae: b5:78:9c:10:9f:a5:9d:c9:a4:2f:0d:c7:fb:26:b1:06:35:96: af:60:5c:fc:2b:42:2f:6c:1e:fb:f2:42:a8:1d:d6:61:fb:74: 17:cf:82:f0:e2:b6:19:4b:0f:1c:37:c3:e9:e7:f3:98:2b:4f: ce:76:be:67:43:d2:37:a4:58:d4:23:a6:dc:8a:7b:02:7b:a1: 8d:ad:b0:bf:f8:32:43:b2:e5:ae:16:e9:62:2e:ee:76:34:d1: 67:65:49:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAGfLJEd64PS4QQhbK08MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUxMjExMjAwMDQzWhcNMjUxMjEyMjAwMDQzWjAzMTEwLwYDVQQD Eyg5NjlhMWFiN2MyMjdjNzc0MTI3MmRjOGUwODA2ZDBlYmQ4NGQ0OWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PV03rVYTX3harUAqCxmRSIi/HKm zYK2XZuc4xmJg+AFTHHDrJGAky40sD8HA+x55upLbuW+M+4oKEKnRyWouKvTdlJO Rehin+AlbUnebmZrff3G2CTR5YMMAmIAM8wkL96GCElGB1raqtTXPfuiOS4E+D9x eEv+0gvyTTB1+zt0LkkcVq/odDJRNUDUMIDg/RYc9/k+0EmWMYFmNt8Q1mNbWXC+ aVrscGyYtLLHKx6VEgf4XaRQsksl5913esStHrn9DF9iCbIFcCzL3dEvGW29pg+X HjfDVlSMs4UpO7uFO2WyVqRPNi0omsZMb5Wx64v1DR4Ui4W6WQLC4CSd/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaaGrfCJ8d0EnLcjggG0OvYTUnqMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvPlHPzM ysTkLN4gxQ4uS00kAdO1agJhTDTMTrhZcGhOx791XwekUBXJ6lLk+Ryh/jUTJvfs 4wRWy4qW+XYg1hKIwTcwsLxv2CGkX9A4MMSg4KCvyATsd8uh09c6D3GNULUl0KC2 WYeumpOoRmsCmT7jop/1gDZplH5gnzVvzA8hynmprkbrVZ2Aio6WLyzAH5TB2g+L dq9+APWS24r9CfuutXicEJ+lncmkLw3H+yaxBjWWr2Bc/CtCL2we+/JCqB3WYft0 F8+C8OK2GUsPHDfD6efzmCtPzna+Z0PSN6RY1COm3Ip7Anuhja2wv/gyQ7Llrhbp Yi7udjTRZ2VJwA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:13:30 2025 by rpki-client