This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json) Hash identifier: 9rF1XOikHF36KKBGJIexxKFIIlAYnMbAxp1BFQNINFU= Subject key identifier: 57:E3:22:83:31:B0:5B:97:CA:9F:11:31:FB:68:A2:9B:E8:75:C3:7B Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Certificate serial: 019B32D5DD02A91B66741A1F4F7C3DF7B764 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft Manifest number: 1713 Signing time: Thu 18 Dec 2025 19:00:35 +0000 Manifest this update: Thu 18 Dec 2025 19:00:35 +0000 Manifest next update: Fri 19 Dec 2025 19:00:35 +0000 Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: AM2rKadlD8Bt5ZU9Vbp7C6AQ6mLyX1Kcm3SCjvQhygw=) 2: xsMFnUirGLrsIHVnOE89k-g_TNQ.roa (hash: +kCjATrNGMNDq1U+j1qAO+cqX9M0j46A6h5U99mLaHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:dd:02:a9:1b:66:74:1a:1f:4f:7c:3d:f7:b7:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Validity Not Before: Dec 18 19:00:35 2025 GMT Not After : Dec 19 19:00:35 2025 GMT Subject: CN=57e3228331b05b97ca9f1131fb68a29be875c37b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f0:27:c1:13:aa:d1:83:a8:80:5d:de:ca:b0: f0:12:b7:ac:ba:10:70:59:52:e8:83:da:87:bb:ec: 9f:43:e6:ca:b5:e7:1a:87:32:65:71:2f:18:00:7d: 34:48:d7:59:c2:aa:4e:c3:b7:1e:b7:0a:45:f6:12: d5:a1:13:04:23:7b:01:38:5d:a3:e9:bb:fe:a9:82: 02:e4:76:4d:ac:48:64:ed:72:3d:94:dd:0f:8c:53: de:20:2e:87:42:c2:c8:fb:9b:cc:a3:f9:4a:33:c1: 69:00:a1:ef:41:00:b1:21:9c:d9:61:cc:87:3b:0a: f4:67:41:ff:cb:2f:f8:d4:f2:b1:00:0d:eb:e1:32: 44:f9:a5:d6:f1:f8:0c:43:3d:37:b4:7c:4a:0d:ee: dc:21:9d:f9:ac:1d:56:af:91:9e:db:db:da:3a:29: ca:8e:d7:74:5c:e0:37:8a:91:92:85:fb:cf:04:6f: 29:1a:a1:d2:21:03:c9:c1:35:25:00:04:d4:62:dc: 9d:66:3c:14:a9:44:bd:17:d5:c3:fb:b5:e0:00:9a: 3c:ba:e4:fa:c2:7a:05:3f:54:ea:34:04:f8:63:ae: e0:5e:86:1e:97:48:a9:d7:65:57:65:0d:80:34:67: 66:39:a2:ac:7b:e2:4c:ad:c9:5d:b0:37:cb:e2:69: 86:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:22:83:31:B0:5B:97:CA:9F:11:31:FB:68:A2:9B:E8:75:C3:7B X509v3 Authority Key Identifier: keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:c3:51:bf:4d:23:c0:f3:d0:b5:c1:62:cf:37:b3:38:c5:8e: ce:76:f5:21:24:5f:3c:04:a3:c9:08:f5:e8:ce:b1:93:c3:74: 50:86:53:21:eb:ff:c0:98:71:56:34:a3:17:5a:1f:f8:92:1f: 72:1e:1a:02:b8:78:22:9a:6e:6a:c4:3d:e5:27:34:37:13:7b: 5e:d7:3c:b2:bf:ce:b2:c5:da:17:4f:58:b6:20:7b:51:d2:80: 81:71:1e:e1:95:f7:83:21:3d:8a:2d:8d:08:b5:81:37:9e:f0: ae:3b:94:50:d9:91:3d:0d:fc:e5:74:2c:d8:46:05:fc:79:00: 60:72:fc:8e:5a:04:cc:a5:70:54:bd:d2:7d:b5:f9:1b:6a:1a: 57:2c:b5:3b:f3:76:07:a4:f6:6f:74:6b:e7:27:76:40:f6:0c: 80:2c:ec:7d:d9:ad:5c:1d:29:5c:98:ca:f1:bc:e3:38:16:f4: f2:f8:bd:2e:e7:05:84:da:9b:f8:89:3a:9d:a3:f0:be:55:3a: 91:14:b6:ad:e2:d7:a1:d7:9c:29:5d:2b:3a:c0:77:24:99:bc: 7a:b0:4a:f5:bf:e4:11:70:35:94:c7:d6:0b:c5:a2:fe:08:30: c3:91:5e:11:c0:c6:63:ee:c1:5d:08:7d:af:aa:b8:32:76:a3: fa:b9:86:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1d0CqRtmdBofT3w997dkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx NzkyM2EwHhcNMjUxMjE4MTkwMDM1WhcNMjUxMjE5MTkwMDM1WjAzMTEwLwYDVQQD Eyg1N2UzMjI4MzMxYjA1Yjk3Y2E5ZjExMzFmYjY4YTI5YmU4NzVjMzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPAnwROq0YOogF3eyrDwEresuhBw WVLog9qHu+yfQ+bKtecahzJlcS8YAH00SNdZwqpOw7cetwpF9hLVoRMEI3sBOF2j 6bv+qYIC5HZNrEhk7XI9lN0PjFPeIC6HQsLI+5vMo/lKM8FpAKHvQQCxIZzZYcyH Owr0Z0H/yy/41PKxAA3r4TJE+aXW8fgMQz03tHxKDe7cIZ35rB1Wr5Ge29vaOinK jtd0XOA3ipGShfvPBG8pGqHSIQPJwTUlAATUYtydZjwUqUS9F9XD+7XgAJo8uuT6 wnoFP1TqNAT4Y67gXoYel0ip12VXZQ2ANGdmOaKse+JMrcldsDfL4mmGrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfjIoMxsFuXyp8RMftoopvodcN7MB8GA1UdIwQY MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5 LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlMNRv00j wPPQtcFizzezOMWOznb1ISRfPASjyQj16M6xk8N0UIZTIev/wJhxVjSjF1of+JIf ch4aArh4IppuasQ95Sc0NxN7Xtc8sr/OssXaF09YtiB7UdKAgXEe4ZX3gyE9ii2N CLWBN57wrjuUUNmRPQ385XQs2EYF/HkAYHL8jloEzKVwVL3SfbX5G2oaVyy1O/N2 B6T2b3Rr5yd2QPYMgCzsfdmtXB0pXJjK8bzjOBb08vi9LucFhNqb+Ik6naPwvlU6 kRS2reLXodecKV0rOsB3JJm8erBK9b/kEXA1lMfWC8Wi/ggww5FeEcDGY+7BXQh9 r6q4Mnaj+rmGMA== -----END CERTIFICATE-----Generated at Fri Dec 19 02:31:06 2025 by rpki-client