This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft File: 9b9MGPes3uTH81jdS65egAmF5ww.mft (raw, json) Hash identifier: +Zu6ulnS3aq6GgaieenFq72O/DufXfgb1rWr7dKtlHo= Subject key identifier: AB:D5:3D:36:0A:F0:6C:99:BE:3E:75:E3:21:D5:F1:CE:45:DF:EC:47 Authority key identifier: F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C Certificate issuer: /CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c Certificate serial: 019B597695A6478639098A4776E2695ACE29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft Manifest number: 07FE Signing time: Fri 26 Dec 2025 07:01:42 +0000 Manifest this update: Fri 26 Dec 2025 07:01:42 +0000 Manifest next update: Sat 27 Dec 2025 07:01:42 +0000 Files and hashes: 1: 9b9MGPes3uTH81jdS65egAmF5ww.crl (hash: TqhwQvr7RnA7S5JgV9mIv+ActDFsTsbcgz6yQxIKmsE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:95:a6:47:86:39:09:8a:47:76:e2:69:5a:ce:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5bf4c18f7acdee4c7f358dd4bae5e800985e70c Validity Not Before: Dec 26 07:01:42 2025 GMT Not After : Dec 27 07:01:42 2025 GMT Subject: CN=abd53d360af06c99be3e75e321d5f1ce45dfec47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:90:b0:90:47:18:11:fb:21:18:a2:5f:fc:da: 43:d6:0f:0f:3a:88:f1:33:ba:95:ab:36:21:ef:f0: 20:77:43:c4:d4:24:89:c3:16:9c:c9:a8:0b:09:46: 8f:15:81:a7:4d:6c:34:e7:ff:f4:81:41:58:fd:95: 03:84:d9:a4:38:28:5b:a8:93:7a:4f:35:3b:0c:7d: 27:a6:b3:13:b3:28:17:72:69:a1:3b:ee:9e:49:42: 28:81:78:6c:7c:47:54:f1:92:52:cc:65:b9:fd:52: fb:bb:6f:90:71:95:5b:71:7a:f6:0a:86:b2:87:44: f1:50:ba:04:a4:7f:62:02:77:81:99:5b:f2:75:08: ba:17:90:a4:a4:c7:41:9d:1d:c1:8b:05:bb:fd:dc: e6:0f:76:c8:d1:98:af:15:b2:6c:c8:2c:79:83:e4: fb:bf:5c:b2:7d:c1:f8:58:3a:56:37:91:07:56:0a: 3f:09:de:eb:62:25:4d:91:4d:f8:54:1e:32:60:2c: 96:34:c0:42:2e:29:28:4a:59:e1:77:10:66:f2:97: 3b:38:7a:e2:98:70:4b:d6:25:32:a3:51:28:ff:f0: 16:23:3d:dc:80:e0:80:b3:32:45:ec:74:b0:61:01: 64:10:19:2a:74:fd:db:4e:bc:8f:bb:9a:ab:98:a4: da:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:3D:36:0A:F0:6C:99:BE:3E:75:E3:21:D5:F1:CE:45:DF:EC:47 X509v3 Authority Key Identifier: keyid:F5:BF:4C:18:F7:AC:DE:E4:C7:F3:58:DD:4B:AE:5E:80:09:85:E7:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b9MGPes3uTH81jdS65egAmF5ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/f0350a-5d66-4970-9a4c-d2abd3a91c90/1/9b9MGPes3uTH81jdS65egAmF5ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:95:e0:6d:c7:e1:8e:d2:a8:5f:da:a2:53:63:55:03:7d:5f: 87:b3:50:68:67:5b:74:25:6f:99:5a:55:3c:04:cf:db:19:cd: 2b:db:b6:f2:28:13:41:03:fb:21:77:d6:ef:bf:83:11:91:28: 76:4a:ea:d5:04:16:92:ef:70:52:7d:07:f7:dd:93:a6:2a:d3: d2:f3:5a:36:df:84:c2:53:f0:05:59:ff:93:7b:53:40:2b:78: bd:d5:30:61:7a:cd:bd:b8:91:fe:c0:c4:d3:9e:f0:80:25:42: e3:83:58:cf:e1:08:1c:1c:56:1e:ea:fc:62:e0:cc:80:f4:a2: 1f:1b:98:dd:1c:39:d9:84:5e:a2:6a:85:7c:64:1e:95:0e:aa: 79:49:2a:ab:ee:f0:74:15:42:f0:82:de:9a:14:f1:b9:50:b3: 34:54:1f:15:0f:ac:bb:03:21:e6:c6:75:2f:b6:96:4d:85:b8: 4e:52:a1:79:bb:22:ec:40:37:12:5c:59:ef:c6:87:92:1f:54: 98:45:1d:3b:3f:f9:73:4d:6f:d8:d8:7d:ea:4b:1d:65:bb:94: 0a:6f:b2:1d:17:ee:69:68:4d:63:0c:86:b0:94:90:af:5f:84: be:19:be:22:13:67:75:fe:3b:64:08:de:c1:cb:40:b3:6d:9d: 89:00:06:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdpWmR4Y5CYpHduJpWs4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YmY0YzE4ZjdhY2RlZTRjN2YzNThkZDRiYWU1ZTgwMDk4 NWU3MGMwHhcNMjUxMjI2MDcwMTQyWhcNMjUxMjI3MDcwMTQyWjAzMTEwLwYDVQQD EyhhYmQ1M2QzNjBhZjA2Yzk5YmUzZTc1ZTMyMWQ1ZjFjZTQ1ZGZlYzQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJCwkEcYEfshGKJf/NpD1g8POojx M7qVqzYh7/Agd0PE1CSJwxacyagLCUaPFYGnTWw05//0gUFY/ZUDhNmkOChbqJN6 TzU7DH0nprMTsygXcmmhO+6eSUIogXhsfEdU8ZJSzGW5/VL7u2+QcZVbcXr2Coay h0TxULoEpH9iAneBmVvydQi6F5CkpMdBnR3BiwW7/dzmD3bI0ZivFbJsyCx5g+T7 v1yyfcH4WDpWN5EHVgo/Cd7rYiVNkU34VB4yYCyWNMBCLikoSlnhdxBm8pc7OHri mHBL1iUyo1Eo//AWIz3cgOCAszJF7HSwYQFkEBkqdP3bTryPu5qrmKTa+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvVPTYK8GyZvj514yHV8c5F3+xHMB8GA1UdIwQY MBaAFPW/TBj3rN7kx/NY3UuuXoAJhecMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMt ZDJhYmQzYTkxYzkwLzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mMDM1MGEtNWQ2Ni00OTcwLTlhNGMtZDJhYmQzYTkxYzkw LzEvOWI5TUdQZXMzdVRIODFqZFM2NWVnQW1GNXd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepXgbcfh jtKoX9qiU2NVA31fh7NQaGdbdCVvmVpVPATP2xnNK9u28igTQQP7IXfW77+DEZEo dkrq1QQWku9wUn0H992TpirT0vNaNt+EwlPwBVn/k3tTQCt4vdUwYXrNvbiR/sDE 057wgCVC44NYz+EIHBxWHur8YuDMgPSiHxuY3Rw52YReomqFfGQelQ6qeUkqq+7w dBVC8ILemhTxuVCzNFQfFQ+suwMh5sZ1L7aWTYW4TlKhebsi7EA3ElxZ78aHkh9U mEUdOz/5c01v2Nh96ksdZbuUCm+yHRfuaWhNYwyGsJSQr1+Evhm+IhNndf47ZAje wctAs22diQAGyw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:06:25 2025 by rpki-client