This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft File: 9q9DOXTfNztwq9drE-HHDHdfVUs.mft (raw, json) Hash identifier: JdyHxGjbsSgr+ogPL5Q0E9RP9xGxcc97t1ITaRpGEp8= Subject key identifier: 06:CF:34:D6:A7:67:38:AE:37:86:21:4D:76:37:C1:60:33:76:EA:FC Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019AF80AAC9ADFFB0EEC6E41FC16560E619C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft Manifest number: 100E Signing time: Sun 07 Dec 2025 09:00:40 +0000 Manifest this update: Sun 07 Dec 2025 09:00:40 +0000 Manifest next update: Mon 08 Dec 2025 09:00:40 +0000 Files and hashes: 1: 9q9DOXTfNztwq9drE-HHDHdfVUs.crl (hash: k60fuLEp8Kb/1rKJXkuvsOXdefgEBXY38sfmBX/iJJs=) 2: MxxFm3hbkft-1GhFxMXh9AZwp90.roa (hash: fxNqfARzwgS/GJj9ernsfnRvkF4mbJU9bpJBLq+JUCE=) 3: OgfaLtcN47_jRbSC1TbWFNVrSGk.roa (hash: 1QttzxVpK/4f2/7JnHs5PiUNVSm7jyjABPskgMBu9IE=) 4: _bGsSSMstzf2q_LubP-csbqxhNg.roa (hash: KMgGbIz1P/9G61GIbLdFV7NxEjqVGQK+W6TDII40h3g=) 5: aOXNfm-NO-KlQl5YZNKVtZ5bhOo.roa (hash: L8Misdhx5xAox75OjaF8NgUWeaFmxKnlcJzrdLvj4xI=) 6: ln91rSDLIuySyhaiNIQohHN_rXE.roa (hash: hm4nRwrnHBjEnQ14Rt4Ba09TbGWl8E21T94hpJTsxi8=) 7: p2r1MJJ3Oy-nwOU8hC08FCPMxok.roa (hash: M3hna7xqnHn+GiTD3IGoGKrG6+pnJIU/e56DclpOCKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:ac:9a:df:fb:0e:ec:6e:41:fc:16:56:0e:61:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Dec 7 09:00:40 2025 GMT Not After : Dec 8 09:00:40 2025 GMT Subject: CN=06cf34d6a76738ae3786214d7637c1603376eafc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:89:f6:75:ab:75:fb:46:9b:5a:76:09:89: ce:a8:bd:89:2f:5d:02:b0:8f:ca:20:1e:c6:95:ee: 4d:e3:37:a2:23:a3:ce:46:4d:4d:ea:b1:1c:ef:38: 51:b0:c6:f5:10:d4:46:15:95:a3:5e:d3:f8:08:03: 46:24:08:90:4a:ab:83:8f:af:f5:4c:40:07:d4:2f: f4:0f:38:03:6c:7c:5d:9b:f8:5c:c9:d5:f5:92:fb: 32:d9:7f:f2:ac:7b:44:fb:51:f3:5c:81:34:c5:92: df:5a:1c:39:c9:c4:56:16:05:df:3b:05:84:49:dc: 24:53:fc:81:30:89:c6:61:c5:17:2e:32:22:53:c2: fd:fa:39:77:2e:20:71:bc:39:1f:57:ce:26:b4:e1: 27:9b:51:ba:f0:00:58:4c:5b:ed:81:11:f3:42:80: da:93:87:33:3c:b1:24:2e:3f:e6:cf:25:76:fb:68: de:02:97:35:51:77:4d:9b:2a:56:20:84:4a:0a:c3: e3:83:82:66:2c:53:b8:2b:6e:a1:ca:0b:c2:ee:70: 65:7c:53:fc:dc:d5:7d:1c:6e:78:1d:ef:b5:5f:29: 5e:89:df:bc:1b:cd:91:ef:86:16:97:d9:c0:64:6e: 87:de:ca:9a:03:c8:9d:0a:11:33:ba:63:22:5e:14: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CF:34:D6:A7:67:38:AE:37:86:21:4D:76:37:C1:60:33:76:EA:FC X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:94:c5:f2:4c:a8:44:2e:78:82:88:bb:b3:63:59:ca:2e:73: b7:ef:41:e7:be:bc:d6:76:94:54:1e:c7:83:7f:4f:de:0e:23: 42:68:bf:3b:db:88:8e:25:3a:59:1d:43:4c:6b:d1:ed:07:c2: 98:9e:62:9d:13:31:53:0d:56:67:4c:fb:66:4a:b0:b2:97:02: 4a:33:62:5f:f9:a2:b9:00:87:b6:cf:2e:83:bf:d2:85:4a:55: 7d:60:49:b2:49:83:ae:3e:85:45:5d:f5:96:ad:fe:ec:fb:a9: 57:09:63:ee:25:e2:cc:2d:88:be:7d:f5:03:53:bb:d2:10:50: ce:4c:27:57:09:62:ac:b4:dd:13:a2:0a:2b:68:72:bd:20:b4: 32:e4:3d:81:c9:1a:e6:a6:c5:ac:4a:41:1f:ff:74:50:77:5e: 65:46:7f:48:5d:7e:0d:ca:65:3c:2a:85:9e:a8:1a:e1:2a:3e: ea:60:78:cc:d9:bf:4b:50:95:a0:9a:0e:e6:6a:57:c9:42:f2: 61:1b:3c:76:45:70:07:72:5e:3e:52:2b:1e:2f:85:f7:06:30: 1b:54:20:ef:f4:3c:7a:45:39:a7:1a:db:3b:cc:5a:4d:ff:75: 2f:22:b6:16:88:85:79:88:33:9c:ee:2c:ef:35:87:62:fb:b8: e5:15:f3:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4Cqya3/sO7G5B/BZWDmGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjUxMjA3MDkwMDQwWhcNMjUxMjA4MDkwMDQwWjAzMTEwLwYDVQQD EygwNmNmMzRkNmE3NjczOGFlMzc4NjIxNGQ3NjM3YzE2MDMzNzZlYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVGJ9nWrdftGm1p2CYnOqL2JL10C sI/KIB7Gle5N4zeiI6PORk1N6rEc7zhRsMb1ENRGFZWjXtP4CANGJAiQSquDj6/1 TEAH1C/0DzgDbHxdm/hcydX1kvsy2X/yrHtE+1HzXIE0xZLfWhw5ycRWFgXfOwWE SdwkU/yBMInGYcUXLjIiU8L9+jl3LiBxvDkfV84mtOEnm1G68ABYTFvtgRHzQoDa k4czPLEkLj/mzyV2+2jeApc1UXdNmypWIIRKCsPjg4JmLFO4K26hygvC7nBlfFP8 3NV9HG54He+1Xyleid+8G82R74YWl9nAZG6H3sqaA8idChEzumMiXhQUSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbPNNanZziuN4YhTXY3wWAzdur8MB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJTF8kyo RC54goi7s2NZyi5zt+9B57681naUVB7Hg39P3g4jQmi/O9uIjiU6WR1DTGvR7QfC mJ5inRMxUw1WZ0z7ZkqwspcCSjNiX/miuQCHts8ug7/ShUpVfWBJskmDrj6FRV31 lq3+7PupVwlj7iXizC2Ivn31A1O70hBQzkwnVwlirLTdE6IKK2hyvSC0MuQ9gcka 5qbFrEpBH/90UHdeZUZ/SF1+DcplPCqFnqga4So+6mB4zNm/S1CVoJoO5mpXyULy YRs8dkVwB3JePlIrHi+F9wYwG1Qg7/Q8ekU5pxrbO8xaTf91LyK2FoiFeYgznO4s 7zWHYvu45RXzUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:31 2025 by rpki-client