This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft File: 1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json) Hash identifier: GwvwJFaGvrsSnFky6IA1/HX2kjuX5YkO201wfQnWIak= Subject key identifier: 27:F5:6B:02:F4:D0:D8:A3:FA:17:EA:BC:06:B4:67:DB:69:B9:70:AD Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2 Certificate issuer: /CN=f95f5a35738c3229e2f4394500c322c8275a97a2 Certificate serial: 019B0E92573354AD108D93FCBBD3D538EC60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft Manifest number: 14A5 Signing time: Thu 11 Dec 2025 18:00:30 +0000 Manifest this update: Thu 11 Dec 2025 18:00:30 +0000 Manifest next update: Fri 12 Dec 2025 18:00:30 +0000 Files and hashes: 1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: 9yF4yMtHybbF359otu2iu9L+zj4v1KNSlXADI5ngz0o=) 2: k_l8rtQi2P6fa9dQhkQ5j5jaCYE.roa (hash: sMo/6l6OJgyWFVqU8cFbnDYPktbERaDpmId+0GVplIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:92:57:33:54:ad:10:8d:93:fc:bb:d3:d5:38:ec:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2 Validity Not Before: Dec 11 18:00:30 2025 GMT Not After : Dec 12 18:00:30 2025 GMT Subject: CN=27f56b02f4d0d8a3fa17eabc06b467db69b970ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:72:2a:33:20:99:43:5f:48:37:27:61:1b: 89:9e:49:4c:1f:c7:e2:f3:8f:51:c8:33:63:0e:b3: 7b:d2:dd:6b:7b:09:74:61:c5:33:68:ab:19:15:ad: 68:96:65:ad:6e:20:ea:33:bb:b3:39:6d:46:14:56: 27:15:1b:58:32:7d:9b:1f:fc:de:33:3e:3c:ac:a6: 76:f5:50:4b:0c:5c:2a:a8:40:f0:77:5d:ed:86:20: fe:2c:04:eb:3a:1e:dd:09:d1:f3:53:57:78:49:7e: 87:75:f9:28:df:d7:08:b1:98:ee:ab:73:1e:ba:2e: c4:0c:d8:40:ba:87:d7:79:7c:7f:4b:e3:7c:2a:b9: 3f:21:39:b9:46:62:18:05:3a:67:f4:fd:02:13:b7: 27:a6:9b:e0:f6:a5:32:36:47:fe:af:b2:7f:70:fd: 94:4f:1a:d4:ed:f4:a7:2e:48:0c:00:6a:b8:69:91: f3:94:ef:9d:6c:92:95:2e:6b:9e:47:fc:a1:cb:73: 9e:4c:89:f9:0f:b9:4e:5b:53:8b:81:fa:3b:de:5d: f4:e5:2f:b2:19:96:48:c6:f2:c2:15:bf:66:3a:f7: a0:e5:46:cb:0e:c7:43:b2:b6:f7:5f:1d:64:1c:c0: 46:98:0a:cf:1e:08:ae:ce:8b:2c:34:a6:8d:4e:6f: 1b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F5:6B:02:F4:D0:D8:A3:FA:17:EA:BC:06:B4:67:DB:69:B9:70:AD X509v3 Authority Key Identifier: keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a6:d0:0f:4e:ad:01:a3:13:3a:1b:c3:e8:ab:03:45:3f:94: 43:cd:e5:d2:e0:77:27:d4:83:3d:c8:02:3a:82:31:a2:da:7e: b7:cc:91:1e:cb:ef:71:57:93:aa:23:a8:a4:c4:da:5b:40:8b: c9:47:26:17:31:92:80:3f:d6:df:7f:5e:d3:61:9e:5e:17:79: d8:05:2b:5f:37:cc:2e:66:f2:31:d5:f2:cf:91:22:c4:27:43: c7:df:97:10:03:21:81:0d:15:08:e3:38:0c:d4:6c:2c:13:61: 5a:0d:d7:34:59:9a:90:81:d6:b6:df:eb:2b:95:24:79:8c:d5: 89:7c:2e:11:56:8d:64:3e:2c:9a:fc:29:c3:fc:f2:f3:f8:51: c2:26:46:93:84:07:e3:58:41:f2:d4:0d:65:ad:6d:03:8f:eb: 8b:ea:47:d8:9d:7d:89:00:d4:a9:36:b7:95:67:6b:72:c5:a4: cd:07:75:99:11:47:a4:ef:29:b8:c0:b2:49:a3:19:08:c6:70: de:44:cc:42:af:c3:ff:b2:18:43:07:0e:37:66:f5:a9:8e:11: 43:41:20:31:cc:06:50:7b:ee:26:f1:10:ef:64:77:ac:8e:77: 6c:3e:48:ac:ee:75:97:51:95:fe:e7:1a:ad:dc:d5:2b:d2:9b: 4b:c1:47:ab -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZsOklczVK0QjZP8u9PVOOxgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1 YTk3YTIwHhcNMjUxMjExMTgwMDMwWhcNMjUxMjEyMTgwMDMwWjAzMTEwLwYDVQQD EygyN2Y1NmIwMmY0ZDBkOGEzZmExN2VhYmMwNmI0NjdkYjY5Yjk3MGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb9yKjMgmUNfSDcnYRuJnklMH8fi 849RyDNjDrN70t1rewl0YcUzaKsZFa1olmWtbiDqM7uzOW1GFFYnFRtYMn2bH/ze Mz48rKZ29VBLDFwqqEDwd13thiD+LATrOh7dCdHzU1d4SX6Hdfko39cIsZjuq3Me ui7EDNhAuofXeXx/S+N8Krk/ITm5RmIYBTpn9P0CE7cnppvg9qUyNkf+r7J/cP2U TxrU7fSnLkgMAGq4aZHzlO+dbJKVLmueR/yhy3OeTIn5D7lOW1OLgfo73l305S+y GZZIxvLCFb9mOveg5UbLDsdDsrb3Xx1kHMBGmArPHgiuzossNKaNTm8bNQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCf1awL00Nij+hfqvAa0Z9tpuXCtMB8GA1UdIwQY MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4 LWExMGI3Y2M5OGJjOC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2QxL2Q0OWMyMS1kZWFkLTRkYzQtOTQ3OC1hMTBiN2NjOThi YzgvMS8xLVY5YU5YT01NaW5pOURsRkFNTWl5Q2RhbDZJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATabQ D06tAaMTOhvD6KsDRT+UQ83l0uB3J9SDPcgCOoIxotp+t8yRHsvvcVeTqiOopMTa W0CLyUcmFzGSgD/W339e02GeXhd52AUrXzfMLmbyMdXyz5EixCdDx9+XEAMhgQ0V COM4DNRsLBNhWg3XNFmakIHWtt/rK5UkeYzViXwuEVaNZD4smvwpw/zy8/hRwiZG k4QH41hB8tQNZa1tA4/ri+pH2J19iQDUqTa3lWdrcsWkzQd1mRFHpO8puMCySaMZ CMZw3kTMQq/D/7IYQwcON2b1qY4RQ0EgMcwGUHvuJvEQ72R3rI53bD5IrO51l1GV /ucardzVK9KbS8FHqw== -----END CERTIFICATE-----Generated at Thu Dec 11 23:25:30 2025 by rpki-client