This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json) Hash identifier: 4SsT3bvZvmv6zfLDPni0xwlzI8yG5Pp4lmo2SrWtmN4= Subject key identifier: B7:AC:82:66:6D:E6:0E:F3:F0:B6:6A:1C:AE:B0:F6:0F:52:94:19:21 Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019B1ACD846C6C870EEC6E57FF68938663C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft Manifest number: 1362 Signing time: Sun 14 Dec 2025 03:00:34 +0000 Manifest this update: Sun 14 Dec 2025 03:00:34 +0000 Manifest next update: Mon 15 Dec 2025 03:00:34 +0000 Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: CE/RH/ARM9nHKBPKM0ECoUAyc2B+QSnBsOAFmZup4UQ=) 2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:84:6c:6c:87:0e:ec:6e:57:ff:68:93:86:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Dec 14 03:00:34 2025 GMT Not After : Dec 15 03:00:34 2025 GMT Subject: CN=b7ac82666de60ef3f0b66a1caeb0f60f52941921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2d:f8:fd:a1:e3:7c:b7:32:75:c8:c2:e7:c2: a5:df:92:74:ac:93:90:90:a1:29:1b:80:c4:53:95: b6:cf:6a:5c:7b:6b:44:62:4a:95:3f:42:a2:2d:e5: 74:a1:86:23:4c:11:59:fd:3b:9b:2c:ba:eb:1d:75: c4:61:35:81:e1:a5:19:ca:7d:a4:40:5d:2c:b4:e8: 67:ee:84:43:ea:d9:c8:87:db:20:a0:ae:c0:84:b8: 20:81:e4:5b:7d:7c:22:ec:bc:0e:12:2f:a8:f5:a8: 50:17:3a:c3:98:12:b0:62:69:26:27:60:3f:5b:5a: 4c:3b:e3:75:32:bc:11:75:f9:7b:a5:42:f3:e9:da: eb:70:ff:cd:89:c9:20:1a:89:f6:68:6e:39:cd:d5: d0:d6:51:e7:cb:3b:65:b6:b6:08:37:78:67:f6:f6: ce:35:6e:f0:aa:6c:89:a8:a7:df:9e:74:ca:26:98: 30:80:71:e3:82:f9:2b:18:2c:53:03:15:f3:cd:25: 53:b7:6d:3e:5c:aa:11:de:86:0e:70:ee:27:b9:7c: fb:49:b3:cf:8c:5e:fd:79:00:b7:76:19:f0:70:c1: bf:2e:12:0b:a1:6c:a6:4f:a7:7f:e6:e2:8a:51:77: 30:57:48:6c:5f:43:1b:d5:98:e7:be:c0:6c:64:0d: 51:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:AC:82:66:6D:E6:0E:F3:F0:B6:6A:1C:AE:B0:F6:0F:52:94:19:21 X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bd:32:73:2f:61:cc:a2:e0:a8:98:8a:3f:46:ab:78:17:48: 60:37:bd:02:36:c6:d6:a5:a9:35:9d:de:68:65:16:2b:f3:fc: 36:a2:d6:1b:a9:ff:11:7b:fe:8f:04:01:15:2c:46:68:2e:af: 57:d9:b2:7c:48:a0:43:46:c7:40:2d:db:3a:61:ab:43:0c:23: 12:f1:c5:05:f7:77:bd:82:a3:4f:1d:0a:e7:cc:9b:ce:22:ce: 5a:e2:9f:9d:da:81:28:30:ab:00:91:5e:1e:8c:f6:28:db:6a: c5:b6:24:55:a2:df:d9:a2:f7:d7:2d:2d:ac:56:c4:fb:31:65: 5e:4b:b5:75:ae:b5:25:c7:fe:3f:60:b0:11:df:42:2e:4b:29: b5:4a:6c:10:10:e7:94:d5:f5:60:2b:9e:c4:10:b6:36:95:5e: ea:89:95:c0:ec:87:00:01:49:b5:5e:42:cf:25:3d:bf:f0:dd: be:f4:28:e8:eb:70:20:12:6b:b6:fe:d1:1e:1b:b8:2a:64:de: 07:cc:7e:7f:b4:2f:5d:94:7a:5d:cd:34:e3:c2:74:d3:41:50: a8:f7:9d:16:eb:dc:6f:25:d6:91:95:44:3c:70:82:07:49:3d: b6:2d:61:9e:e7:22:ec:00:83:3d:b0:67:83:b2:fb:8e:6f:4f: 29:21:e3:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazYRsbIcO7G5X/2iThmPAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjUxMjE0MDMwMDM0WhcNMjUxMjE1MDMwMDM0WjAzMTEwLwYDVQQD EyhiN2FjODI2NjZkZTYwZWYzZjBiNjZhMWNhZWIwZjYwZjUyOTQxOTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyC34/aHjfLcydcjC58Kl35J0rJOQ kKEpG4DEU5W2z2pce2tEYkqVP0KiLeV0oYYjTBFZ/TubLLrrHXXEYTWB4aUZyn2k QF0stOhn7oRD6tnIh9sgoK7AhLgggeRbfXwi7LwOEi+o9ahQFzrDmBKwYmkmJ2A/ W1pMO+N1MrwRdfl7pULz6drrcP/NickgGon2aG45zdXQ1lHnyztltrYIN3hn9vbO NW7wqmyJqKffnnTKJpgwgHHjgvkrGCxTAxXzzSVTt20+XKoR3oYOcO4nuXz7SbPP jF79eQC3dhnwcMG/LhILoWymT6d/5uKKUXcwV0hsX0Mb1ZjnvsBsZA1RGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLesgmZt5g7z8LZqHK6w9g9SlBkhMB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe70ycy9h zKLgqJiKP0areBdIYDe9AjbG1qWpNZ3eaGUWK/P8NqLWG6n/EXv+jwQBFSxGaC6v V9myfEigQ0bHQC3bOmGrQwwjEvHFBfd3vYKjTx0K58ybziLOWuKfndqBKDCrAJFe Hoz2KNtqxbYkVaLf2aL31y0trFbE+zFlXku1da61Jcf+P2CwEd9CLksptUpsEBDn lNX1YCuexBC2NpVe6omVwOyHAAFJtV5CzyU9v/DdvvQo6OtwIBJrtv7RHhu4KmTe B8x+f7QvXZR6Xc0048J000FQqPedFuvcbyXWkZVEPHCCB0k9ti1hnuci7ACDPbBn g7L7jm9PKSHjfw== -----END CERTIFICATE-----Generated at Sun Dec 14 05:34:37 2025 by rpki-client