This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json) Hash identifier: xrigrTB3TDI6a/9cD791/2D9hSgmlUjJJDd4MxHfSIw= Subject key identifier: F4:44:9A:27:FF:AF:95:E4:30:3B:FB:5D:68:68:94:B6:F5:0A:D3:B4 Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a Certificate serial: 019B0FA56110556E61F939F4AE9081E27D57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft Manifest number: 023B Signing time: Thu 11 Dec 2025 23:00:54 +0000 Manifest this update: Thu 11 Dec 2025 23:00:54 +0000 Manifest next update: Fri 12 Dec 2025 23:00:54 +0000 Files and hashes: 1: 59uDpaWEezIlndm7ImZL33KmY98.roa (hash: faf2z4pHl5bW71/IOumRXeUq2DneYTGbFv6mONAFUxg=) 2: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: xS+PNym1VeNDDjlTp5gA1jXNWLhNxQbnKUEDR38IoLI=) 3: FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa (hash: 888rexXxSPjA4V1QgAN4s9dCepxu8RrFKO0s2g6CYeM=) 4: U02yntsAPfPK9DKBsRhU3Tc1HoQ.roa (hash: Rh+ABlbykq4lEGUZu+XpvC7FjPWl1oXlv1c6u60nzNY=) 5: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=) 6: kEeDyUl01hTZEGFM3itOVXFr62M.roa (hash: FjPrfh53WoDMFf9Gz/XVlKYYZ1UhSfrDGs50b54qMv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:61:10:55:6e:61:f9:39:f4:ae:90:81:e2:7d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a Validity Not Before: Dec 11 23:00:54 2025 GMT Not After : Dec 12 23:00:54 2025 GMT Subject: CN=f4449a27ffaf95e4303bfb5d686894b6f50ad3b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:c4:60:1d:14:ba:91:65:20:56:fe:cb:ff: 56:ba:0a:ef:a6:98:bd:78:2e:6f:25:dc:3f:36:9a: de:b7:eb:9e:18:83:d5:01:0f:3c:e6:8c:3b:93:3a: bb:e5:98:0a:df:43:f5:7d:a9:27:76:99:3a:68:99: b5:7a:91:97:0b:64:f4:59:c3:96:97:67:43:41:1f: 87:0c:1a:5a:02:8d:ea:38:b5:3b:64:cd:b0:f9:2f: 16:d5:ca:3b:e9:ea:ff:53:ba:d4:a4:23:61:d8:09: c6:95:21:a8:47:91:3f:de:f0:cf:4f:97:f9:8a:f3: b7:e3:0d:25:b2:2f:12:c4:ab:30:7d:08:45:83:4b: 82:b0:39:96:5b:46:22:26:b4:b4:10:13:1e:3f:70: d5:31:b3:b0:cf:33:fd:00:b4:b2:fc:46:76:bf:90: 25:4a:5a:80:21:57:05:cc:ec:b6:33:20:77:7b:32: b7:5c:87:58:f6:2d:5a:58:42:ca:ac:cc:2e:52:d3: c5:ca:b0:db:3b:54:e7:bd:e7:1e:8d:84:1b:b7:9e: 68:42:67:18:55:20:cd:dc:00:91:30:58:6f:82:10: cb:d3:44:ea:eb:c0:43:8d:55:63:a3:41:94:b3:4e: d5:d9:cc:c9:73:b9:17:60:7e:a7:8f:7e:bf:37:c0: 9a:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:44:9A:27:FF:AF:95:E4:30:3B:FB:5D:68:68:94:B6:F5:0A:D3:B4 X509v3 Authority Key Identifier: keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:b8:3c:8b:79:21:e1:2a:f5:8b:0f:5d:6d:3b:1b:08:5f:99: ff:be:f6:7d:8e:8a:19:4a:93:51:d7:01:6d:cd:4f:8e:59:45: 49:e8:9b:c1:f2:12:10:13:62:9a:f0:9b:59:f1:c7:33:71:5c: 62:64:d9:a6:96:28:fb:81:65:c6:92:d7:2f:ad:78:1c:54:7c: d7:7f:98:26:cc:eb:79:07:43:6c:b1:ce:06:51:61:83:cd:76: 54:76:e8:d3:03:c2:fb:b2:48:14:a3:e3:1d:8e:f3:d9:3c:48: 0a:0d:dd:38:01:30:01:21:81:b9:0c:6e:65:59:e5:fd:b3:3d: 17:65:83:a6:fa:a7:b6:45:ad:c3:bb:82:6b:8a:16:4f:43:2b: 89:9d:39:31:a7:1a:b4:12:32:78:27:bf:47:bb:62:73:76:f5: a7:5b:ec:1a:d7:15:4a:69:30:cd:8c:63:7a:b5:57:a6:99:95: 9b:3d:9f:c5:78:5a:49:b2:28:38:4b:76:f8:60:61:19:63:21: 4f:00:e1:89:04:5d:57:bb:87:12:1d:6b:77:f8:34:1f:26:4f: 3a:98:55:47:9a:1d:8e:bb:dc:7b:f7:49:3d:0c:c0:5b:0b:8f: 8f:fc:70:87:60:7f:62:f0:0f:d6:a4:cc:7b:45:7d:91:22:a8: 5a:e1:cf:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpWEQVW5h+Tn0rpCB4n1XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1 NTk1M2EwHhcNMjUxMjExMjMwMDU0WhcNMjUxMjEyMjMwMDU0WjAzMTEwLwYDVQQD EyhmNDQ0OWEyN2ZmYWY5NWU0MzAzYmZiNWQ2ODY4OTRiNmY1MGFkM2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXjEYB0UupFlIFb+y/9Wugrvppi9 eC5vJdw/Npret+ueGIPVAQ885ow7kzq75ZgK30P1fakndpk6aJm1epGXC2T0WcOW l2dDQR+HDBpaAo3qOLU7ZM2w+S8W1co76er/U7rUpCNh2AnGlSGoR5E/3vDPT5f5 ivO34w0lsi8SxKswfQhFg0uCsDmWW0YiJrS0EBMeP3DVMbOwzzP9ALSy/EZ2v5Al SlqAIVcFzOy2MyB3ezK3XIdY9i1aWELKrMwuUtPFyrDbO1TnvecejYQbt55oQmcY VSDN3ACRMFhvghDL00Tq68BDjVVjo0GUs07V2czJc7kXYH6nj36/N8CaewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPREmif/r5XkMDv7XWholLb1CtO0MB8GA1UdIwQY MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt ZDY1NjE3YmQzYjRmLzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7g8i3kh 4Sr1iw9dbTsbCF+Z/772fY6KGUqTUdcBbc1PjllFSeibwfISEBNimvCbWfHHM3Fc YmTZppYo+4FlxpLXL614HFR813+YJszreQdDbLHOBlFhg812VHbo0wPC+7JIFKPj HY7z2TxICg3dOAEwASGBuQxuZVnl/bM9F2WDpvqntkWtw7uCa4oWT0MriZ05Maca tBIyeCe/R7tic3b1p1vsGtcVSmkwzYxjerVXppmVmz2fxXhaSbIoOEt2+GBhGWMh TwDhiQRdV7uHEh1rd/g0HyZPOphVR5odjrvce/dJPQzAWwuPj/xwh2B/YvAP1qTM e0V9kSKoWuHPgw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:33:31 2025 by rpki-client