This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json) Hash identifier: 4RsjEbuoPNyNka7jI1hyvBzxgMU6YTnJIJQZMBY9/wo= Subject key identifier: 66:14:C1:50:40:0C:01:E1:C2:F0:77:5A:15:7E:92:DC:69:8B:42:5C Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Certificate serial: 019B10EF49D1342B938CB8FE4C71A893E635 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft Manifest number: 0164 Signing time: Fri 12 Dec 2025 05:01:15 +0000 Manifest this update: Fri 12 Dec 2025 05:01:15 +0000 Manifest next update: Sat 13 Dec 2025 05:01:15 +0000 Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: I+kaBzJ5FXLA1gHGbi4aXYdK2P9Go4UkHYSI3oT6Crc=) 2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:49:d1:34:2b:93:8c:b8:fe:4c:71:a8:93:e6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Validity Not Before: Dec 12 05:01:15 2025 GMT Not After : Dec 13 05:01:15 2025 GMT Subject: CN=6614c150400c01e1c2f0775a157e92dc698b425c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b9:c2:11:24:52:6d:40:0a:bb:3a:81:0f:08: 9e:58:e6:c0:c4:cf:d6:ee:1e:85:8e:58:7f:91:3d: 09:79:c5:71:07:4c:56:b1:8a:55:7c:55:e4:78:a1: 41:60:5b:d6:ae:b9:4e:64:b5:47:45:0c:05:ac:c7: f2:09:fd:e8:c9:c8:e5:cd:a3:e1:59:7c:30:19:2a: bc:74:95:35:1e:e4:68:7a:db:87:93:f1:db:be:dc: 4e:93:f2:78:f7:93:b0:7e:00:7c:78:86:c5:1a:a6: a7:8a:0e:6c:d9:57:bf:70:15:67:f4:c4:44:0e:1c: a7:cb:a4:53:80:75:ef:65:55:79:26:8f:8e:26:b6: df:fd:dc:e2:f3:f2:f7:8a:3d:38:4a:32:60:e7:99: 89:07:a5:f4:cc:56:56:97:1b:6c:6e:7f:2f:19:56: fe:0c:f5:8b:63:72:8b:9c:ad:48:d3:81:0a:5a:3a: 00:ea:cd:66:86:b4:58:4e:51:34:47:9b:db:01:56: 10:59:67:b2:48:13:18:8e:c0:d1:2a:c9:61:d0:53: 60:a8:b5:95:0f:46:a9:7d:ae:69:73:0f:a6:6c:d7: e0:4d:18:72:00:43:60:5d:37:41:64:ee:41:ad:5a: d3:e8:ce:6c:26:5a:2d:45:9c:25:1a:a7:50:bc:91: 76:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:14:C1:50:40:0C:01:E1:C2:F0:77:5A:15:7E:92:DC:69:8B:42:5C X509v3 Authority Key Identifier: keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:36:e1:4d:57:c2:7b:e0:40:d7:2b:b5:70:64:f5:2d:32:46: 5b:15:21:a3:8f:c9:90:67:ea:40:20:81:d4:fa:72:fd:bf:26: 09:8b:03:c9:f0:24:98:98:c1:9f:ec:6b:aa:84:0b:c5:39:24: c2:f2:71:37:59:af:54:3d:e6:5f:50:ce:be:1e:21:cf:7d:14: 4c:d3:d0:02:f9:ed:18:0c:4f:f5:ef:7c:64:4b:52:e3:40:e8: 6e:43:63:68:97:d5:01:7f:97:47:f5:84:60:4e:44:28:68:19: 98:ea:96:df:39:c7:d6:b2:ac:54:25:c0:de:4d:61:14:78:55: 30:90:cb:96:9b:6c:1f:e3:93:2d:89:c9:0b:1f:f0:c8:06:f3: d9:84:e7:a8:f3:c2:6c:90:30:49:5f:37:32:7d:c5:65:af:30: 31:7e:0e:21:2b:29:9a:7a:c0:13:b2:67:49:d7:65:84:5b:06: 62:76:1a:0a:85:21:63:9a:9b:8f:03:24:94:bd:dd:e9:ce:71: 38:3b:59:4f:c0:16:08:9d:b8:b5:09:9a:4d:1c:bb:46:4d:da: 5a:17:40:aa:27:71:67:b0:69:62:9c:0e:16:6f:34:32:e5:ae: b7:2c:58:c1:90:ea:b1:4e:aa:a8:ea:7d:42:1f:dc:d1:21:36: 09:ec:d1:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ70nRNCuTjLj+THGok+Y1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTk4ODE4ODBjNmY5OTVjMjljMTc3YmVkMzNhMWE2ZTNk NGZiMzAwHhcNMjUxMjEyMDUwMTE1WhcNMjUxMjEzMDUwMTE1WjAzMTEwLwYDVQQD Eyg2NjE0YzE1MDQwMGMwMWUxYzJmMDc3NWExNTdlOTJkYzY5OGI0MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprnCESRSbUAKuzqBDwieWObAxM/W 7h6Fjlh/kT0JecVxB0xWsYpVfFXkeKFBYFvWrrlOZLVHRQwFrMfyCf3oycjlzaPh WXwwGSq8dJU1HuRoetuHk/HbvtxOk/J495OwfgB8eIbFGqanig5s2Ve/cBVn9MRE Dhyny6RTgHXvZVV5Jo+OJrbf/dzi8/L3ij04SjJg55mJB6X0zFZWlxtsbn8vGVb+ DPWLY3KLnK1I04EKWjoA6s1mhrRYTlE0R5vbAVYQWWeySBMYjsDRKslh0FNgqLWV D0apfa5pcw+mbNfgTRhyAENgXTdBZO5BrVrT6M5sJlotRZwlGqdQvJF27wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYUwVBADAHhwvB3WhV+ktxpi0JcMB8GA1UdIwQY MBaAFPSZiBiAxvmVwpwXe+0zoabj1PswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3Mjkt YjNhZjgzMDBhZGQzLzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3MjktYjNhZjgzMDBhZGQz LzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVjbhTVfC e+BA1yu1cGT1LTJGWxUho4/JkGfqQCCB1Ppy/b8mCYsDyfAkmJjBn+xrqoQLxTkk wvJxN1mvVD3mX1DOvh4hz30UTNPQAvntGAxP9e98ZEtS40DobkNjaJfVAX+XR/WE YE5EKGgZmOqW3znH1rKsVCXA3k1hFHhVMJDLlptsH+OTLYnJCx/wyAbz2YTnqPPC bJAwSV83Mn3FZa8wMX4OISspmnrAE7JnSddlhFsGYnYaCoUhY5qbjwMklL3d6c5x ODtZT8AWCJ24tQmaTRy7Rk3aWhdAqidxZ7BpYpwOFm80MuWutyxYwZDqsU6qqOp9 Qh/c0SE2CezRhA== -----END CERTIFICATE-----Generated at Fri Dec 12 11:58:02 2025 by rpki-client