This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json) Hash identifier: hcVdZth14/qirg4xRFQpnJQ2BLPUhzkW8yDzVP01xLU= Subject key identifier: A1:03:30:07:58:91:FF:F0:9D:A6:CC:D8:23:E6:22:F8:57:39:72:C2 Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Certificate serial: 019B5976FC02EB615054F3AC08E475F5E70C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 07:02:08 +0000 Manifest this update: Fri 26 Dec 2025 07:02:08 +0000 Manifest next update: Sat 27 Dec 2025 07:02:08 +0000 Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: yig8to3I1T30blt618QuvweLI0oiPWyBDqn9/99Yl+c=) 2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:fc:02:eb:61:50:54:f3:ac:08:e4:75:f5:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Validity Not Before: Dec 26 07:02:08 2025 GMT Not After : Dec 27 07:02:08 2025 GMT Subject: CN=a10330075891fff09da6ccd823e622f8573972c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ad:df:f4:e4:99:de:72:7f:3f:17:3a:8c:91: f3:5d:f2:ed:ae:e7:ef:f4:cb:47:f2:6d:b7:cb:b8: c1:b4:cf:32:3d:03:f3:9c:a3:a4:15:d4:d7:b2:ac: 37:b6:e3:bc:b2:d5:90:52:23:45:31:0c:3b:13:9f: b1:df:a1:15:6c:73:94:c9:56:99:0a:b7:3f:64:08: d0:4f:30:74:6a:79:ca:3f:ef:68:d5:08:ea:e6:e0: 50:ae:43:02:88:ca:5c:5e:00:ff:79:9e:18:28:59: 02:c8:bd:3a:14:13:8c:70:da:59:f6:f5:63:2e:0e: e1:da:de:22:4f:65:82:3d:db:73:cc:96:9a:d1:bd: 7c:6f:c2:4a:99:ec:22:6a:a9:50:24:b2:42:d8:64: c0:74:d2:5b:fe:f3:a7:46:7f:e5:8d:57:a6:40:aa: 0e:77:72:86:2d:15:b0:26:e1:04:64:41:07:94:d1: 19:1b:11:28:6c:81:c4:64:1c:e8:bd:b0:d5:ba:23: 52:02:58:ba:6d:23:ba:ee:98:08:79:a3:e4:6a:a6: 58:49:0f:76:d5:4e:35:12:0b:8f:7b:a5:46:49:ab: 74:41:5b:41:82:a6:d1:91:b4:41:ef:d9:70:22:3e: 31:17:56:8d:eb:cb:ac:1e:2a:f0:1f:e3:79:fc:69: d3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:03:30:07:58:91:FF:F0:9D:A6:CC:D8:23:E6:22:F8:57:39:72:C2 X509v3 Authority Key Identifier: keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6c:20:22:9c:de:91:43:22:26:cb:89:1a:bb:1a:eb:53:4c: 9f:c8:62:4b:4b:8c:35:62:3b:eb:a1:31:3c:73:0f:67:56:ef: c1:c6:6d:a7:e2:25:3d:67:67:b2:01:95:d4:2c:87:21:cd:f5: 2d:e8:15:f9:ff:c3:1e:e7:de:28:00:21:02:79:99:10:9f:57: 99:9d:c8:9c:21:60:72:a8:8a:59:a9:4c:e7:2d:08:b3:12:e9: 6e:f2:ad:75:83:dd:04:ab:ca:36:2b:e4:bb:e9:4a:c3:26:5d: 99:58:86:da:2c:ed:63:39:bf:10:1f:7c:33:11:48:69:09:d8: af:49:f8:ac:fb:ba:5a:ae:55:4b:c1:25:82:ad:3b:4a:de:ff: c6:ac:05:30:12:6c:38:09:29:c3:08:82:55:33:17:11:1f:a1: 2a:d3:5a:66:8f:1f:8a:17:9d:e6:9b:7d:01:67:22:c9:dc:9a: 35:1e:6b:d8:18:b2:31:a1:84:15:a8:ba:e7:ac:56:aa:30:29: b8:7c:1c:ea:84:b5:59:3b:44:91:b3:5f:dd:09:d0:db:17:42: 08:41:81:45:2f:2e:50:1c:b7:e5:40:0c:78:6a:d2:3b:ed:37: 6b:2b:56:54:94:38:a7:ac:40:a9:25:09:7a:e3:ce:f5:ac:98: 09:67:2a:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdvwC62FQVPOsCOR19ecMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3 NWUyZTcwHhcNMjUxMjI2MDcwMjA4WhcNMjUxMjI3MDcwMjA4WjAzMTEwLwYDVQQD EyhhMTAzMzAwNzU4OTFmZmYwOWRhNmNjZDgyM2U2MjJmODU3Mzk3MmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA263f9OSZ3nJ/Pxc6jJHzXfLtrufv 9MtH8m23y7jBtM8yPQPznKOkFdTXsqw3tuO8stWQUiNFMQw7E5+x36EVbHOUyVaZ Crc/ZAjQTzB0annKP+9o1Qjq5uBQrkMCiMpcXgD/eZ4YKFkCyL06FBOMcNpZ9vVj Lg7h2t4iT2WCPdtzzJaa0b18b8JKmewiaqlQJLJC2GTAdNJb/vOnRn/ljVemQKoO d3KGLRWwJuEEZEEHlNEZGxEobIHEZBzovbDVuiNSAli6bSO67pgIeaPkaqZYSQ92 1U41EguPe6VGSat0QVtBgqbRkbRB79lwIj4xF1aN68usHirwH+N5/GnT8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEDMAdYkf/wnabM2CPmIvhXOXLCMB8GA1UdIwQY MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0 LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2wgIpze kUMiJsuJGrsa61NMn8hiS0uMNWI766ExPHMPZ1bvwcZtp+IlPWdnsgGV1CyHIc31 LegV+f/DHufeKAAhAnmZEJ9XmZ3InCFgcqiKWalM5y0IsxLpbvKtdYPdBKvKNivk u+lKwyZdmViG2iztYzm/EB98MxFIaQnYr0n4rPu6Wq5VS8Elgq07St7/xqwFMBJs OAkpwwiCVTMXER+hKtNaZo8fihed5pt9AWciydyaNR5r2BiyMaGEFai656xWqjAp uHwc6oS1WTtEkbNf3QnQ2xdCCEGBRS8uUBy35UAMeGrSO+03aytWVJQ4p6xAqSUJ euPO9ayYCWcqNg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:23 2025 by rpki-client