This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json) Hash identifier: 8aaYqfgOWoJAk/8JAfwtEniAPwxB2g0aCoGMthQCx6c= Subject key identifier: 6F:CF:85:34:90:E5:B6:9F:75:3B:44:D6:A8:90:0D:99:CB:CE:9D:F1 Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Certificate serial: 019B2740E1D1B8E80F6D754F06D3D701F9B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft Manifest number: 0D45 Signing time: Tue 16 Dec 2025 13:02:01 +0000 Manifest this update: Tue 16 Dec 2025 13:02:01 +0000 Manifest next update: Wed 17 Dec 2025 13:02:01 +0000 Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: lVAcuTxV6MKI/I5FgE9Pfp4c6KyijiWtRUwYV1DryYo=) 2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:e1:d1:b8:e8:0f:6d:75:4f:06:d3:d7:01:f9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Validity Not Before: Dec 16 13:02:01 2025 GMT Not After : Dec 17 13:02:01 2025 GMT Subject: CN=6fcf853490e5b69f753b44d6a8900d99cbce9df1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:82:37:07:ca:9c:b3:b4:41:44:31:31:67:e3: 2a:52:3f:6e:9f:c1:b2:42:b5:ac:75:8f:18:3e:88: d3:f0:ac:3f:2a:d4:9d:d3:0f:0e:23:6d:4d:b6:c7: 69:36:35:42:d5:ed:ac:b2:ae:67:59:4e:e8:e3:cd: 2d:94:68:c7:f3:08:10:a0:2c:d2:0f:8a:a4:c7:b3: a4:dc:2b:e2:9b:76:31:c6:74:e5:3f:d1:e4:6a:ce: d6:cd:e9:c8:1a:e8:0e:0b:98:07:6f:ef:58:13:60: a2:d9:1a:ec:62:0a:e1:f2:81:ed:6f:88:a7:65:8c: 0d:c6:56:41:7e:34:10:32:07:ff:6a:77:76:fd:27: 1f:38:e0:8e:22:21:d6:70:32:54:de:9b:95:c3:6e: 48:ac:84:0b:af:2c:9f:43:27:97:6f:e7:00:79:b9: 10:08:79:c7:c1:79:bf:8e:ea:1e:ca:1d:db:d7:e8: 4f:ac:e6:cd:14:67:3b:e3:81:e5:aa:00:12:d5:9d: a6:66:32:0f:7f:c5:ff:8a:23:1d:9e:5c:c5:89:7e: af:3d:c1:74:a6:35:90:ac:6e:47:6b:0b:38:da:53: f0:c0:3b:ce:00:f2:c0:01:30:5b:ea:d8:3c:11:8d: 7d:c8:9c:53:dc:f7:79:af:23:62:8c:60:4d:6a:07: d0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CF:85:34:90:E5:B6:9F:75:3B:44:D6:A8:90:0D:99:CB:CE:9D:F1 X509v3 Authority Key Identifier: keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7a:b7:23:17:6d:e3:f8:d2:81:d8:86:c3:d4:8a:49:4d:5c: dc:21:77:60:d5:52:a9:dc:c1:29:3b:c8:ea:d1:c9:f4:cc:eb: 2e:62:11:1a:74:c3:4a:14:4f:1c:37:50:fe:ce:52:e7:a2:90: bb:e1:e4:bf:cf:26:27:e8:c1:0c:48:c0:11:d2:1e:23:5c:51: 6e:03:f4:25:1e:66:e2:03:df:97:fd:5e:45:50:d0:de:5c:da: ce:e9:d6:4a:f2:67:ff:19:e4:de:50:d7:41:12:20:3d:f9:bd: cc:73:0d:a6:31:e6:78:0d:ab:db:98:c4:7e:fe:4a:c2:b9:df: 83:d2:7d:db:5d:55:43:24:2f:d9:fe:5f:22:59:b1:ac:13:e4: ac:72:d4:88:39:b3:38:15:7c:ca:01:b6:25:f1:96:15:de:30: 32:d3:c3:b9:22:0c:ea:57:dd:b0:53:02:77:67:9a:5e:52:e0: 08:d2:b2:cc:c6:f1:5c:08:47:37:5e:c9:dd:24:d5:85:bf:f7: cf:80:93:26:34:61:8d:79:04:ae:a8:93:6a:50:77:ef:79:55: b6:a8:01:9d:df:4b:ac:7a:f1:6b:98:72:04:bf:03:e8:00:b5: a5:73:4d:0c:a7:04:e3:54:63:fb:fa:2f:c1:5b:b3:cb:49:01: d2:2f:b3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQOHRuOgPbXVPBtPXAfmzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj ZjlkMTIwHhcNMjUxMjE2MTMwMjAxWhcNMjUxMjE3MTMwMjAxWjAzMTEwLwYDVQQD Eyg2ZmNmODUzNDkwZTViNjlmNzUzYjQ0ZDZhODkwMGQ5OWNiY2U5ZGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34I3B8qcs7RBRDExZ+MqUj9un8Gy QrWsdY8YPojT8Kw/KtSd0w8OI21NtsdpNjVC1e2ssq5nWU7o480tlGjH8wgQoCzS D4qkx7Ok3Cvim3YxxnTlP9Hkas7WzenIGugOC5gHb+9YE2Ci2RrsYgrh8oHtb4in ZYwNxlZBfjQQMgf/and2/ScfOOCOIiHWcDJU3puVw25IrIQLryyfQyeXb+cAebkQ CHnHwXm/juoeyh3b1+hPrObNFGc744HlqgAS1Z2mZjIPf8X/iiMdnlzFiX6vPcF0 pjWQrG5Haws42lPwwDvOAPLAATBb6tg8EY19yJxT3Pd5ryNijGBNagfQnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/PhTSQ5bafdTtE1qiQDZnLzp3xMB8GA1UdIwQY MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXq3Ixdt 4/jSgdiGw9SKSU1c3CF3YNVSqdzBKTvI6tHJ9MzrLmIRGnTDShRPHDdQ/s5S56KQ u+Hkv88mJ+jBDEjAEdIeI1xRbgP0JR5m4gPfl/1eRVDQ3lzazunWSvJn/xnk3lDX QRIgPfm9zHMNpjHmeA2r25jEfv5Kwrnfg9J9211VQyQv2f5fIlmxrBPkrHLUiDmz OBV8ygG2JfGWFd4wMtPDuSIM6lfdsFMCd2eaXlLgCNKyzMbxXAhHN17J3STVhb/3 z4CTJjRhjXkErqiTalB373lVtqgBnd9LrHrxa5hyBL8D6AC1pXNNDKcE41Rj+/ov wVuzy0kB0i+zLw== -----END CERTIFICATE-----Generated at Tue Dec 16 20:08:12 2025 by rpki-client