This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft File: iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json) Hash identifier: BNzc8G9gDM8jtyXJHshw9RV5CH6RrKf6tvlzgR+fKlY= Subject key identifier: DC:3F:56:C2:A8:ED:26:81:2E:A8:2A:48:9F:42:2D:55:03:6A:2A:49 Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db Certificate serial: 019B0D8078C95E938353EDEF6CD2ABAFF4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft Manifest number: 01B9 Signing time: Thu 11 Dec 2025 13:01:21 +0000 Manifest this update: Thu 11 Dec 2025 13:01:21 +0000 Manifest next update: Fri 12 Dec 2025 13:01:21 +0000 Files and hashes: 1: YkbGKc-LGqIQZMDerpDN8XDOTbw.roa (hash: RY+DUa9ZajYzyfuzC6xFjBj7ICr29ESsVlrxpHdgeWw=) 2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: uJAlYeK9/ZvLdbUFMNkSY9ccwArkttr3509LGB9Dlko=) 3: zGrKv0NNYS_xjhh1uLNHNu5c_wY.roa (hash: OEzd69K7Il75QSQW6UQvA0dRBfsE2azJdJL9XybJ68I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:80:78:c9:5e:93:83:53:ed:ef:6c:d2:ab:af:f4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db Validity Not Before: Dec 11 13:01:21 2025 GMT Not After : Dec 12 13:01:21 2025 GMT Subject: CN=dc3f56c2a8ed26812ea82a489f422d55036a2a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:6e:21:e9:51:86:5a:3f:a0:96:40:26:50: 2f:8e:19:69:6e:10:0d:a8:f9:60:e4:39:91:5f:83: 40:83:11:08:5b:85:5f:11:10:a2:e9:5c:d8:e0:0a: fd:7f:6e:2e:c1:2a:d4:79:90:cc:1f:0f:94:58:d1: f1:4c:14:a8:10:43:4d:37:c9:8a:da:70:6a:7b:05: 8b:8b:3e:ac:af:8a:d1:b6:9d:1a:a6:46:1d:63:6e: d5:4b:0b:2b:ef:33:03:18:33:52:a0:39:c8:3f:4f: 82:85:85:38:f4:75:b9:2a:82:9d:f7:29:52:e6:d9: c7:c0:0d:f3:3e:7c:e2:e5:f6:02:77:59:32:f8:d4: 8b:08:ae:4e:39:1d:cf:02:1d:28:fb:07:47:dc:27: f8:7d:0a:91:9e:89:24:69:ae:5f:aa:bc:1a:cb:05: 99:5b:19:77:16:0d:ce:1a:69:95:d3:70:92:14:de: 04:2f:78:a5:e2:98:d7:b9:02:fe:6d:4e:0d:38:7f: 14:1b:fa:39:b4:46:3f:a1:7d:bc:6a:09:f6:9f:aa: bd:81:e7:96:2d:33:bd:de:28:61:fd:6a:97:eb:1d: 86:16:d3:1f:7b:d1:82:1f:08:46:69:ba:fd:d7:47: 9f:97:a1:f8:98:95:89:1c:a3:f3:9c:57:fe:f5:84: d2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:3F:56:C2:A8:ED:26:81:2E:A8:2A:48:9F:42:2D:55:03:6A:2A:49 X509v3 Authority Key Identifier: keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:79:52:35:f2:91:3a:cb:7e:41:6f:c9:bb:1e:49:63:73:eb: d0:12:4a:d5:03:56:53:f0:e2:02:aa:58:01:ab:c2:92:dc:94: 45:bb:ef:e3:b2:2b:b2:7e:46:9c:a9:f1:0a:de:e4:7f:12:c9: 01:33:cb:6e:79:7f:49:3d:d0:06:b3:ba:8b:0f:8c:37:81:ac: 6e:61:3c:11:6e:54:68:a4:b0:c7:5e:df:2f:1f:d6:4e:d8:bb: ee:36:b7:7c:c1:2b:40:ea:81:1f:99:4a:8e:b7:28:d4:9b:a7: ce:24:22:6b:de:ed:59:ee:fb:29:95:d4:29:c2:6c:b1:68:c4: c9:1e:f1:ab:56:28:16:67:e2:e5:ad:38:1b:6e:fc:19:74:39: 38:23:a8:d3:3f:3c:de:ee:87:0a:17:95:b1:49:8e:80:2b:55: 41:9f:b8:25:d2:2f:dd:58:5f:81:43:c0:8b:96:f5:a5:8b:39: 4d:d9:fb:eb:73:8d:1d:e2:f7:72:f8:12:44:dc:20:c0:d4:5a: b6:cd:1e:28:68:a0:52:ef:69:17:0a:af:0e:d3:0d:85:ce:70: 0e:75:e3:ee:05:1b:e1:d7:d6:dc:4f:9b:aa:22:12:61:ba:c8: a1:d0:89:24:05:ed:88:b7:ad:bd:cd:d8:ea:8e:0c:28:53:9b: 3b:b8:9d:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNgHjJXpODU+3vbNKrr/TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4M2Y3MjYwNjUwMDI2Yjk3M2ExOGE3ZjNlOTk1OGQzMjFl Y2UxZGIwHhcNMjUxMjExMTMwMTIxWhcNMjUxMjEyMTMwMTIxWjAzMTEwLwYDVQQD EyhkYzNmNTZjMmE4ZWQyNjgxMmVhODJhNDg5ZjQyMmQ1NTAzNmEyYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb5uIelRhlo/oJZAJlAvjhlpbhAN qPlg5DmRX4NAgxEIW4VfERCi6VzY4Ar9f24uwSrUeZDMHw+UWNHxTBSoEENNN8mK 2nBqewWLiz6sr4rRtp0apkYdY27VSwsr7zMDGDNSoDnIP0+ChYU49HW5KoKd9ylS 5tnHwA3zPnzi5fYCd1ky+NSLCK5OOR3PAh0o+wdH3Cf4fQqRnokkaa5fqrwaywWZ Wxl3Fg3OGmmV03CSFN4EL3il4pjXuQL+bU4NOH8UG/o5tEY/oX28agn2n6q9geeW LTO93ihh/WqX6x2GFtMfe9GCHwhGabr910efl6H4mJWJHKPznFf+9YTSsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNw/VsKo7SaBLqgqSJ9CLVUDaipJMB8GA1UdIwQY MBaAFIg/cmBlACa5c6GKfz6ZWNMh7OHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDkt YzA5ZmYxNmZjMzRiLzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8xMWQ0ZTctZTk3OC00MDM3LWFiMDktYzA5ZmYxNmZjMzRi LzEvaUQ5eVlHVUFKcmx6b1lwX1BwbFkweUhzNGRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnlSNfKR Ost+QW/Jux5JY3Pr0BJK1QNWU/DiAqpYAavCktyURbvv47Irsn5GnKnxCt7kfxLJ ATPLbnl/ST3QBrO6iw+MN4GsbmE8EW5UaKSwx17fLx/WTti77ja3fMErQOqBH5lK jrco1JunziQia97tWe77KZXUKcJssWjEyR7xq1YoFmfi5a04G278GXQ5OCOo0z88 3u6HCheVsUmOgCtVQZ+4JdIv3VhfgUPAi5b1pYs5Tdn763ONHeL3cvgSRNwgwNRa ts0eKGigUu9pFwqvDtMNhc5wDnXj7gUb4dfW3E+bqiISYbrIodCJJAXtiLetvc3Y 6o4MKFObO7idqw== -----END CERTIFICATE-----Generated at Thu Dec 11 19:19:49 2025 by rpki-client