This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft File: 9p8HIQsohLT-pQe94id5WyZAYu0.mft (raw, json) Hash identifier: X9eBtrQb+jBPL4p7p4COH1Z2gHZXPfiGoztyq/BmdDA= Subject key identifier: DB:E0:9B:99:E0:60:A2:EC:79:84:B6:1B:7C:CA:64:9A:EE:76:F2:42 Authority key identifier: F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED Certificate issuer: /CN=f69f07210b2884b4fea507bde227795b264062ed Certificate serial: 019B38D80A207A705D234B69E333C3F64291 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft Manifest number: 0491 Signing time: Fri 19 Dec 2025 23:00:41 +0000 Manifest this update: Fri 19 Dec 2025 23:00:41 +0000 Manifest next update: Sat 20 Dec 2025 23:00:41 +0000 Files and hashes: 1: 9p8HIQsohLT-pQe94id5WyZAYu0.crl (hash: ezQO/2jfd2rSImExXeOUPx1EqcypKsGt88Y+P46NGD0=) 2: jYwiLy6C8PrH1zmVRebb5xoCcHg.roa (hash: B/91TwKxBsOKKHQE6s1Ydkjq/nj0hd3T+71Ppy1e7kI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:0a:20:7a:70:5d:23:4b:69:e3:33:c3:f6:42:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f07210b2884b4fea507bde227795b264062ed Validity Not Before: Dec 19 23:00:41 2025 GMT Not After : Dec 20 23:00:41 2025 GMT Subject: CN=dbe09b99e060a2ec7984b61b7cca649aee76f242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6f:55:c9:a7:62:e2:cf:30:0b:19:94:75:15: be:28:75:90:5b:52:cb:47:5c:f7:5a:e0:6a:5a:4f: 67:6d:a9:23:60:ab:0b:f9:3f:8b:da:d2:24:58:1f: ab:14:bb:a0:3f:3b:a7:bd:7a:b5:e9:cf:c1:68:00: 68:77:51:f8:e9:f6:73:88:71:f2:24:bd:42:d6:98: 88:9a:fd:11:67:dd:0f:76:55:f5:77:3d:7b:ec:7f: 79:92:b6:15:a5:65:37:e7:32:55:b3:28:77:67:97: 58:38:04:10:85:28:2c:be:52:43:07:6a:cc:0e:5f: 02:a9:98:37:8b:04:c9:42:8e:65:ca:ca:ac:30:4e: bd:ba:06:90:9f:16:05:e0:e5:85:aa:49:84:ce:7e: 3c:b2:93:fe:5c:61:bc:e5:bc:15:65:14:78:15:c6: 3e:94:99:a2:c1:e7:2a:df:25:8f:38:86:54:7c:2d: 83:37:e6:0a:ba:c5:3b:db:e9:66:35:29:b7:e8:f2: 5a:28:02:e1:98:dc:d4:85:39:4f:1b:e4:35:37:02: a6:16:7a:1e:fc:9f:58:fe:56:5a:ed:db:21:f7:a6: 33:8f:39:4e:f1:df:b6:2c:e3:d5:12:48:af:24:53: ba:f2:15:e7:72:5e:bc:75:ce:c5:92:3f:58:7e:2a: 6e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E0:9B:99:E0:60:A2:EC:79:84:B6:1B:7C:CA:64:9A:EE:76:F2:42 X509v3 Authority Key Identifier: keyid:F6:9F:07:21:0B:28:84:B4:FE:A5:07:BD:E2:27:79:5B:26:40:62:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p8HIQsohLT-pQe94id5WyZAYu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6bf528-bd34-40ee-b0dc-45f60f414ff7/1/9p8HIQsohLT-pQe94id5WyZAYu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f5:fc:6c:6d:7e:f7:9e:f2:e5:6d:11:11:e7:30:02:2b:28:03: 24:4b:dd:c0:c0:12:40:a1:20:d6:23:7c:aa:61:7c:24:2d:f3: bd:cf:bd:1f:e3:8f:24:7e:a0:04:11:79:f5:89:44:70:9c:94: ce:fa:54:3e:52:da:68:9b:6d:06:db:a2:b6:19:44:44:7f:73: 65:15:80:99:71:aa:32:3b:71:a5:f5:5d:09:1e:0b:6d:93:c3: ba:89:b7:3b:70:95:ae:65:95:a8:f5:ae:e3:25:30:a4:48:bc: 9b:1f:5b:fc:40:96:dc:7e:f5:df:2c:bb:9b:be:7f:55:f0:03: 44:ef:51:a6:da:0b:22:6b:e4:f8:e3:e8:2a:ef:a2:a5:b5:40: 69:9b:bd:0b:6c:d7:77:36:f6:10:5e:98:6c:88:74:33:aa:c8: 02:23:c3:a7:ff:22:06:a4:e3:67:b5:07:0f:08:34:35:8e:12: 4d:81:cb:95:d5:4b:e9:50:fc:89:d0:bc:15:88:32:17:dd:b6: 7d:55:26:65:1b:93:35:43:86:1c:e3:9f:c5:ed:04:e8:28:3c: e9:0a:bc:05:d6:50:62:d1:0f:00:6f:26:76:8f:90:30:3c:ef: 14:95:61:3d:67:01:d7:1c:7e:0a:6f:62:51:ac:43:54:23:f3: 2b:75:8e:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42AogenBdI0tp4zPD9kKRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWYwNzIxMGIyODg0YjRmZWE1MDdiZGUyMjc3OTViMjY0 MDYyZWQwHhcNMjUxMjE5MjMwMDQxWhcNMjUxMjIwMjMwMDQxWjAzMTEwLwYDVQQD EyhkYmUwOWI5OWUwNjBhMmVjNzk4NGI2MWI3Y2NhNjQ5YWVlNzZmMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW9Vyadi4s8wCxmUdRW+KHWQW1LL R1z3WuBqWk9nbakjYKsL+T+L2tIkWB+rFLugPzunvXq16c/BaABod1H46fZziHHy JL1C1piImv0RZ90PdlX1dz177H95krYVpWU35zJVsyh3Z5dYOAQQhSgsvlJDB2rM Dl8CqZg3iwTJQo5lysqsME69ugaQnxYF4OWFqkmEzn48spP+XGG85bwVZRR4FcY+ lJmiwecq3yWPOIZUfC2DN+YKusU72+lmNSm36PJaKALhmNzUhTlPG+Q1NwKmFnoe /J9Y/lZa7dsh96YzjzlO8d+2LOPVEkivJFO68hXncl68dc7Fkj9YfipuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvgm5ngYKLseYS2G3zKZJrudvJCMB8GA1UdIwQY MBaAFPafByELKIS0/qUHveIneVsmQGLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMt NDVmNjBmNDE0ZmY3LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS82YmY1MjgtYmQzNC00MGVlLWIwZGMtNDVmNjBmNDE0ZmY3 LzEvOXA4SElRc29oTFQtcFFlOTRpZDVXeVpBWXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA9fxsbX73 nvLlbRER5zACKygDJEvdwMASQKEg1iN8qmF8JC3zvc+9H+OPJH6gBBF59YlEcJyU zvpUPlLaaJttBtuithlERH9zZRWAmXGqMjtxpfVdCR4LbZPDuom3O3CVrmWVqPWu 4yUwpEi8mx9b/ECW3H713yy7m75/VfADRO9RptoLImvk+OPoKu+ipbVAaZu9C2zX dzb2EF6YbIh0M6rIAiPDp/8iBqTjZ7UHDwg0NY4STYHLldVL6VD8idC8FYgyF922 fVUmZRuTNUOGHOOfxe0E6Cg86Qq8BdZQYtEPAG8mdo+QMDzvFJVhPWcB1xx+Cm9i UaxDVCPzK3WOkg== -----END CERTIFICATE-----Generated at Sat Dec 20 07:34:21 2025 by rpki-client