This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json) Hash identifier: jGan3Oa0dKfVxcIOBJ19Nc1vxFyOkpYrFsFPokXXECg= Subject key identifier: 47:AB:DD:CB:55:EF:48:50:06:81:CB:DA:AB:A9:BF:A4:B0:F7:7E:7D Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Certificate serial: 019B3D22D6D5D6EDE33795381258F46A019E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:00:51 +0000 Manifest this update: Sat 20 Dec 2025 19:00:51 +0000 Manifest next update: Sun 21 Dec 2025 19:00:51 +0000 Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: f+/zTKoUNEqaqC9pE/ZeXbz4tyJamY44W5GsfEtQDzI=) 2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:d6:d5:d6:ed:e3:37:95:38:12:58:f4:6a:01:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Validity Not Before: Dec 20 19:00:51 2025 GMT Not After : Dec 21 19:00:51 2025 GMT Subject: CN=47abddcb55ef48500681cbdaaba9bfa4b0f77e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:80:f5:f6:7d:fc:e0:f7:c4:31:1a:31:d5:eb: 0a:3a:02:04:9d:43:17:5c:6b:ea:62:bf:da:f3:a0: e3:d7:e8:fa:8c:64:6c:45:80:d7:c7:11:d8:88:c1: f6:98:8e:35:1a:38:8a:ea:76:f1:c3:13:9c:4d:26: 88:ce:84:ef:ba:07:46:7c:42:e5:d7:5a:e2:ad:71: ee:a6:d6:c6:27:73:64:f2:b4:d6:83:ee:7c:16:d0: 7b:31:3b:57:6b:1f:ae:45:1f:41:3d:ea:5d:b3:93: 97:f0:13:4d:99:1a:68:91:e1:44:22:50:4c:08:c8: 6d:6d:03:ef:15:bc:8e:03:72:43:27:e7:c9:03:bf: 28:ca:ce:28:d5:7f:6f:9c:9e:36:be:91:d5:a1:8d: 1d:fd:eb:56:d0:78:30:a1:46:c5:fc:e8:63:d9:31: ec:e9:76:a2:05:a7:93:01:86:19:a5:f7:bf:2c:0c: 6b:ac:a4:71:8b:c2:8b:da:ac:9d:84:c2:35:de:82: 66:04:18:fb:22:25:70:e3:cb:b9:d1:dc:77:98:24: 88:d4:76:81:31:f1:49:16:22:a2:b5:05:72:ff:c5: ce:f5:eb:75:9b:64:45:6a:6c:d7:bd:da:e4:a7:b5: 15:ca:35:af:f1:c4:24:e6:01:85:5a:5e:0c:2f:2a: 49:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AB:DD:CB:55:EF:48:50:06:81:CB:DA:AB:A9:BF:A4:B0:F7:7E:7D X509v3 Authority Key Identifier: keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:dc:b5:a1:06:b7:37:eb:d3:b7:22:92:da:3e:c4:9e:60:9b: 88:55:d2:d3:1c:98:ef:e5:94:1d:49:5b:61:47:e2:33:17:f3: 33:fa:09:d5:fb:bb:fc:3f:6c:8c:8f:57:0f:13:0c:d3:33:82: e9:f8:3a:d3:ef:5d:65:dc:1d:31:9c:89:f9:00:74:f9:de:13: d6:bf:d6:75:90:3b:72:5b:4c:c2:1f:f2:b6:82:ac:89:da:4a: 5d:8d:2b:90:c2:d7:51:cc:8c:09:cc:40:27:b7:8b:d6:79:db: d2:e6:6d:80:9f:ba:d9:8d:43:ba:d3:0a:1a:3b:b9:21:03:0b: 9c:60:26:07:8f:2e:7e:da:dd:c7:92:3d:5a:8d:19:ad:94:15: 42:5f:11:e5:f2:56:d7:ad:27:a9:89:8f:c5:a5:71:89:9a:b9: f0:39:5f:86:3c:40:e0:eb:5f:9a:07:39:25:e4:ec:47:17:2d: 88:1c:fe:b9:de:15:40:88:14:24:3b:6a:ba:19:9c:47:29:67: 52:3f:49:26:37:9b:bd:76:26:a9:58:eb:e2:a0:7a:91:e2:3e: e8:e3:e8:3d:84:21:0f:9f:94:73:b1:34:8f:89:85:c1:0b:52: 8c:82:3e:dd:65:65:b8:97:db:61:9d:c8:98:14:06:da:80:55: 28:1a:58:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9ItbV1u3jN5U4Elj0agGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm OGVjNmUwHhcNMjUxMjIwMTkwMDUxWhcNMjUxMjIxMTkwMDUxWjAzMTEwLwYDVQQD Eyg0N2FiZGRjYjU1ZWY0ODUwMDY4MWNiZGFhYmE5YmZhNGIwZjc3ZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4D19n384PfEMRox1esKOgIEnUMX XGvqYr/a86Dj1+j6jGRsRYDXxxHYiMH2mI41GjiK6nbxwxOcTSaIzoTvugdGfELl 11rirXHuptbGJ3Nk8rTWg+58FtB7MTtXax+uRR9BPepds5OX8BNNmRpokeFEIlBM CMhtbQPvFbyOA3JDJ+fJA78oys4o1X9vnJ42vpHVoY0d/etW0HgwoUbF/Ohj2THs 6XaiBaeTAYYZpfe/LAxrrKRxi8KL2qydhMI13oJmBBj7IiVw48u50dx3mCSI1HaB MfFJFiKitQVy/8XO9et1m2RFamzXvdrkp7UVyjWv8cQk5gGFWl4MLypJnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEer3ctV70hQBoHL2qupv6Sw9359MB8GA1UdIwQY MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdy1oQa3 N+vTtyKS2j7EnmCbiFXS0xyY7+WUHUlbYUfiMxfzM/oJ1fu7/D9sjI9XDxMM0zOC 6fg60+9dZdwdMZyJ+QB0+d4T1r/WdZA7cltMwh/ytoKsidpKXY0rkMLXUcyMCcxA J7eL1nnb0uZtgJ+62Y1DutMKGju5IQMLnGAmB48uftrdx5I9Wo0ZrZQVQl8R5fJW 160nqYmPxaVxiZq58DlfhjxA4Otfmgc5JeTsRxctiBz+ud4VQIgUJDtquhmcRyln Uj9JJjebvXYmqVjr4qB6keI+6OPoPYQhD5+Uc7E0j4mFwQtSjII+3WVluJfbYZ3I mBQG2oBVKBpYmw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:58:05 2025 by rpki-client