This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json) Hash identifier: cgf4mYfXwXL0k3joojDtNVMXgRuPgITTCj1oYhIuAqk= Subject key identifier: D8:FC:F0:A5:3A:B6:DC:96:B0:42:51:54:27:5F:E9:0E:79:33:BF:5D Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019AEC3E33ECDE9280A6FDE40E62EE914828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft Manifest number: 177B Signing time: Fri 05 Dec 2025 02:01:30 +0000 Manifest this update: Fri 05 Dec 2025 02:01:30 +0000 Manifest next update: Sat 06 Dec 2025 02:01:30 +0000 Files and hashes: 1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=) 2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: gBPHMDQlrzJrfbnNWfjYTkQiBFMCtB/ZQVvbiQIXFNc=) 3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=) 4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=) 5: azUb986KPmjNBXNI1GEnnjHJfR8.roa (hash: 0Eh3zrlfIiIGJgQrMOsGTA9FYjfTizw8KSjWE+UgRQA=) 6: jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa (hash: KIeWObQIaCMxnHDPh3clv17Pl6xMfKd4hJmG5jzOw94=) 7: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ec:3e:33:ec:de:92:80:a6:fd:e4:0e:62:ee:91:48:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Dec 5 02:01:30 2025 GMT Not After : Dec 6 02:01:30 2025 GMT Subject: CN=d8fcf0a53ab6dc96b0425154275fe90e7933bf5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e6:09:94:6a:28:4c:31:45:12:5c:9f:0e:1f: ca:c2:01:cc:e3:2c:d4:f5:c3:30:41:50:b4:c0:bc: 0d:89:3d:fc:2f:b8:97:33:d7:b0:4e:5f:16:db:02: 4f:b2:e6:58:cf:73:99:42:7e:8d:a4:56:45:8a:4e: fe:8e:e4:8a:cd:bf:70:20:75:ab:c9:95:b5:ce:14: b8:61:61:84:68:17:78:86:53:04:d9:59:80:ed:e6: 45:20:5c:2b:d9:bc:bc:bb:49:5d:21:17:28:f9:26: 60:99:60:35:48:a3:d6:f1:c8:67:bb:02:7a:09:02: 70:ee:ff:6a:46:6a:95:45:bc:15:09:d0:56:18:1a: 36:83:35:3c:ad:4e:48:f7:3d:36:9c:d6:15:79:5f: 7c:97:11:49:f6:0d:74:22:d6:61:97:5c:c8:9a:89: 22:31:7b:3e:75:e3:0c:68:11:a4:b7:65:41:7b:42: f5:0d:cb:2b:55:ff:80:e2:14:1f:b6:21:71:13:19: 73:e2:ea:80:02:40:7c:be:03:1b:1c:ea:31:7c:96: 80:99:ac:3b:b7:9f:70:ee:36:97:e2:22:b7:a0:8f: 3b:3c:9b:a4:d5:18:c0:ab:77:e1:47:05:c6:e2:1e: f7:66:6c:53:7d:5f:a3:25:54:48:3f:d4:20:40:d2: dc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:FC:F0:A5:3A:B6:DC:96:B0:42:51:54:27:5F:E9:0E:79:33:BF:5D X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:89:6b:71:af:10:b0:c8:34:ce:02:df:dd:25:93:96:d6:b8: e8:df:95:4e:a6:72:29:cc:41:32:ca:6b:e5:ac:3e:e2:00:9a: 97:fc:68:e6:91:5e:8b:87:e1:fb:cc:14:30:3f:45:ab:9d:61: cc:f9:44:29:91:3b:2d:a2:81:3a:00:e4:12:fc:ef:d6:16:a1: c0:d8:bc:08:71:96:66:03:c2:18:f3:33:47:0a:06:f9:5b:9d: 5d:9d:42:0b:ea:ec:31:16:dd:93:7f:b1:9b:d5:dc:6f:2f:cf: ea:0f:37:d6:86:5f:5d:a2:fc:b9:f6:2e:8a:bb:e3:ce:b6:ac: 02:a7:b9:cc:74:ca:8e:07:57:e7:7e:a3:c9:c3:9e:ec:80:4a: 48:f3:5c:e8:41:7a:07:6a:cc:91:08:43:a8:ed:be:a3:47:13: 77:b3:7a:fa:00:f7:7d:67:7a:aa:f5:e8:c2:4a:d8:2c:ce:29: c6:79:7d:c6:2e:1b:30:b6:b3:df:13:0b:05:2c:20:c5:84:0f: f6:83:53:e5:02:9f:87:35:24:44:e6:16:da:44:1a:a6:4c:09: c3:19:6d:f8:3d:9e:3e:ff:94:62:16:77:3c:ea:83:25:6b:e1: cd:60:c7:98:6c:f1:dc:9e:fe:6a:2e:ea:d1:ad:00:a2:42:a2: 7d:b7:59:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrsPjPs3pKApv3kDmLukUgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjUxMjA1MDIwMTMwWhcNMjUxMjA2MDIwMTMwWjAzMTEwLwYDVQQD EyhkOGZjZjBhNTNhYjZkYzk2YjA0MjUxNTQyNzVmZTkwZTc5MzNiZjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreYJlGooTDFFElyfDh/KwgHM4yzU 9cMwQVC0wLwNiT38L7iXM9ewTl8W2wJPsuZYz3OZQn6NpFZFik7+juSKzb9wIHWr yZW1zhS4YWGEaBd4hlME2VmA7eZFIFwr2by8u0ldIRco+SZgmWA1SKPW8chnuwJ6 CQJw7v9qRmqVRbwVCdBWGBo2gzU8rU5I9z02nNYVeV98lxFJ9g10ItZhl1zImoki MXs+deMMaBGkt2VBe0L1DcsrVf+A4hQftiFxExlz4uqAAkB8vgMbHOoxfJaAmaw7 t59w7jaX4iK3oI87PJuk1RjAq3fhRwXG4h73ZmxTfV+jJVRIP9QgQNLcbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNj88KU6ttyWsEJRVCdf6Q55M79dMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACIlrca8Q sMg0zgLf3SWTlta46N+VTqZyKcxBMspr5aw+4gCal/xo5pFei4fh+8wUMD9Fq51h zPlEKZE7LaKBOgDkEvzv1hahwNi8CHGWZgPCGPMzRwoG+VudXZ1CC+rsMRbdk3+x m9Xcby/P6g831oZfXaL8ufYuirvjzrasAqe5zHTKjgdX536jycOe7IBKSPNc6EF6 B2rMkQhDqO2+o0cTd7N6+gD3fWd6qvXowkrYLM4pxnl9xi4bMLaz3xMLBSwgxYQP 9oNT5QKfhzUkROYW2kQapkwJwxlt+D2ePv+UYhZ3POqDJWvhzWDHmGzx3J7+ai7q 0a0AokKifbdZ+A== -----END CERTIFICATE-----Generated at Fri Dec 5 10:21:40 2025 by rpki-client