This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json) Hash identifier: HRY5PKVJT/TLISsTP8C5bqsferJ4s1wwwUVe2a4FHQQ= Subject key identifier: 8E:2D:F6:37:95:73:7D:07:56:75:D0:2A:DD:A1:6A:EA:8B:BD:27:BF Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Certificate serial: 019B36B32042573A723B00830840BA8A9B5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 13:01:07 +0000 Manifest this update: Fri 19 Dec 2025 13:01:07 +0000 Manifest next update: Sat 20 Dec 2025 13:01:07 +0000 Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=) 2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=) 3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=) 4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: I2seHnbKNP5FOsoZSRF49uHsq2GUABFfcbOtG3VoISA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:20:42:57:3a:72:3b:00:83:08:40:ba:8a:9b:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Validity Not Before: Dec 19 13:01:07 2025 GMT Not After : Dec 20 13:01:07 2025 GMT Subject: CN=8e2df63795737d075675d02adda16aea8bbd27bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b4:a7:c1:79:97:c0:a0:d7:46:37:e5:a2:a6: 98:de:b3:37:6e:de:02:cd:c9:6b:68:ab:31:d3:29: 2c:d9:ba:1b:e2:72:de:ae:3b:82:7c:9f:5f:22:16: 0d:4b:46:21:cf:98:d8:c2:10:37:21:c0:fe:c0:0f: 97:3a:6e:da:f7:fc:6c:de:d8:2b:d6:d1:c5:54:a1: 55:83:6c:99:89:4b:1e:ea:50:08:77:87:a4:7f:0e: 67:f2:71:8f:85:fd:f7:06:50:54:1d:f4:22:7b:50: 9e:26:21:49:a9:0d:ba:2c:12:23:12:f4:c5:20:da: 59:0e:49:1a:36:be:21:99:43:bd:dc:f0:d2:3f:91: 58:1e:ab:a5:82:24:96:cc:a2:fc:a8:75:08:ab:96: 8a:cd:77:fc:44:e6:3a:a6:14:85:8a:a8:bf:cd:c2: 1a:25:0d:b9:a3:d4:94:21:37:d7:3d:c9:61:d2:69: 58:46:a8:52:a2:0e:af:50:37:a2:03:d0:a7:18:33: b7:dc:3f:b3:d3:12:bf:b8:51:61:90:eb:a0:0b:d2: 19:01:04:e9:8d:5b:3c:c6:02:31:26:c4:cb:60:68: 39:9c:bd:4d:a8:b2:24:d2:3d:d0:f4:62:cb:59:93: c6:f9:f6:8a:ef:f5:d6:a0:df:1f:1b:14:8a:0e:ca: 0c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:2D:F6:37:95:73:7D:07:56:75:D0:2A:DD:A1:6A:EA:8B:BD:27:BF X509v3 Authority Key Identifier: keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9c:fe:41:c6:76:c2:a0:e8:73:ad:93:30:24:64:cf:f9:76: 84:91:e4:e1:47:93:4e:25:2b:c2:9a:0d:d0:fb:bb:92:5a:89: 8e:1d:ca:12:ab:d1:a2:32:8b:5a:b1:3e:8c:4d:b4:71:75:a6: a4:67:bd:0b:50:95:d7:6e:15:f9:c4:15:2d:60:fe:4d:51:c5: 0b:41:61:79:1d:53:f6:3a:c2:13:c5:7d:8b:b0:a0:7b:75:13: c5:d3:cf:78:ef:74:07:a8:be:b8:c3:ac:7d:12:57:ff:e9:c6: e3:95:b0:b0:a7:66:8a:d0:cf:a4:b8:db:5d:a1:ed:d1:d7:6b: 6c:4a:e8:34:5f:f2:b7:4d:45:66:da:05:a0:69:40:83:13:71: 35:83:88:de:80:ee:fe:6a:a1:d2:81:d8:cd:04:da:37:aa:d7: 4f:43:78:34:f2:ad:d0:23:3e:20:06:9c:95:6d:75:5b:1d:04: 8f:17:3c:7e:68:b1:60:59:d5:4f:c7:65:80:8f:44:f0:d7:de: 0a:03:57:73:74:eb:40:51:5e:da:f2:29:4a:75:7a:c0:a2:d6: 94:94:e1:8c:cc:e0:4a:aa:c5:7b:7d:4e:67:91:9e:f4:16:d9: da:52:86:1c:bb:47:62:3c:5e:4e:8b:f8:64:82:29:f2:67:8d: 9e:3b:bb:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2syBCVzpyOwCDCEC6iptbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm NmM3M2IwHhcNMjUxMjE5MTMwMTA3WhcNMjUxMjIwMTMwMTA3WjAzMTEwLwYDVQQD Eyg4ZTJkZjYzNzk1NzM3ZDA3NTY3NWQwMmFkZGExNmFlYThiYmQyN2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7SnwXmXwKDXRjfloqaY3rM3bt4C zclraKsx0yks2bob4nLerjuCfJ9fIhYNS0Yhz5jYwhA3IcD+wA+XOm7a9/xs3tgr 1tHFVKFVg2yZiUse6lAId4ekfw5n8nGPhf33BlBUHfQie1CeJiFJqQ26LBIjEvTF INpZDkkaNr4hmUO93PDSP5FYHqulgiSWzKL8qHUIq5aKzXf8ROY6phSFiqi/zcIa JQ25o9SUITfXPclh0mlYRqhSog6vUDeiA9CnGDO33D+z0xK/uFFhkOugC9IZAQTp jVs8xgIxJsTLYGg5nL1NqLIk0j3Q9GLLWZPG+faK7/XWoN8fGxSKDsoM3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4t9jeVc30HVnXQKt2hauqLvSe/MB8GA1UdIwQY MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5z+QcZ2 wqDoc62TMCRkz/l2hJHk4UeTTiUrwpoN0Pu7klqJjh3KEqvRojKLWrE+jE20cXWm pGe9C1CV124V+cQVLWD+TVHFC0FheR1T9jrCE8V9i7Cge3UTxdPPeO90B6i+uMOs fRJX/+nG45WwsKdmitDPpLjbXaHt0ddrbEroNF/yt01FZtoFoGlAgxNxNYOI3oDu /mqh0oHYzQTaN6rXT0N4NPKt0CM+IAaclW11Wx0Ejxc8fmixYFnVT8dlgI9E8Nfe CgNXc3TrQFFe2vIpSnV6wKLWlJThjMzgSqrFe31OZ5Ge9BbZ2lKGHLtHYjxeTov4 ZIIp8meNnju7gw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:16 2025 by rpki-client