This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft File: 9fDwfKCmtMssFZ6QRZdFA64ohYE.mft (raw, json) Hash identifier: dOjSBiyGNGKUBYWFsG5MtmbOh48KGSE1Tnf2ITTzCCI= Subject key identifier: B0:37:E1:E4:FE:5D:6A:51:5D:64:E3:23:E4:99:48:2A:87:A8:3E:6C Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019B1049EF5947D55976D185A58106C0115B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft Manifest number: D8 Signing time: Fri 12 Dec 2025 02:00:39 +0000 Manifest this update: Fri 12 Dec 2025 02:00:39 +0000 Manifest next update: Sat 13 Dec 2025 02:00:39 +0000 Files and hashes: 1: 9fDwfKCmtMssFZ6QRZdFA64ohYE.crl (hash: DaYhvTG+B4FmysjZchV6qx6TtF7Il1Z/bdw9v56otxw=) 2: _TKV-DpdXmei2SR3rrnjoUIFNqQ.roa (hash: R5raBHMEiNG8zclHwaLQB17jXPqQeZzFe9QNn7MrSYM=) 3: c25XUVb4Bk3AvdWuVyNrTQybFGc.roa (hash: j4cV2DVaLOTZm+S8euSjn/Ih9FV1aHPND9PujtBd3s0=) 4: q764NZ2C5xrpkP8LBsmdVe7f1dw.roa (hash: sLViIw17i8ukMTeK1rHQJp904qo/JWVcyaL9gru+PTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:49:ef:59:47:d5:59:76:d1:85:a5:81:06:c0:11:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Dec 12 02:00:39 2025 GMT Not After : Dec 13 02:00:39 2025 GMT Subject: CN=b037e1e4fe5d6a515d64e323e499482a87a83e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:98:b8:1e:3d:fa:4b:07:c6:04:df:cd:fe: bf:8a:7d:35:40:df:6a:21:0f:4c:07:58:5a:fe:9b: 12:e6:23:aa:49:26:4c:4a:3c:d1:38:df:81:22:6f: 90:05:49:a0:47:19:50:fb:07:16:00:6b:51:98:a5: 00:cc:81:81:bf:de:9b:1b:74:dc:40:a9:dc:29:de: 9c:0a:f3:68:77:7e:23:55:b9:1b:fb:a1:35:8c:f5: ed:fb:c5:43:ad:84:70:5c:f1:1f:26:ba:d3:cd:09: da:58:15:eb:00:42:20:b1:6f:93:53:c5:28:94:07: ef:8f:75:39:b6:e5:13:97:df:74:6a:90:5b:d3:7c: 91:77:f9:ac:74:5f:e0:a8:25:97:b9:bd:31:c9:e4: 93:46:c2:fb:a2:87:b4:0d:0e:15:06:21:fd:e9:f8: 83:44:4c:eb:80:1c:c4:0b:59:c2:54:da:ad:97:8b: 1a:cd:7e:dd:f2:6a:e2:ef:9a:74:20:61:64:69:72: f2:e5:db:23:14:46:f7:88:53:82:7d:6b:b0:3a:3e: fe:5b:7f:75:7a:ff:78:d6:75:38:70:9c:a8:44:4e: 32:65:07:db:17:f4:e8:74:e8:3b:c9:8e:ef:6c:d1: a4:e0:08:2b:f6:c4:45:fe:cc:0c:f9:af:51:9f:24: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:E1:E4:FE:5D:6A:51:5D:64:E3:23:E4:99:48:2A:87:A8:3E:6C X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:75:6e:67:8d:a3:48:68:de:dc:84:10:30:67:e3:6f:24:67: e4:57:fe:b9:70:3d:3c:a9:a1:ff:4d:40:00:31:bf:27:57:b5: 7b:ef:8d:a8:09:36:3e:99:9c:2e:29:9b:87:50:77:9a:d1:cc: e1:b8:49:42:46:a3:84:d1:3c:f7:82:4b:c7:4d:1a:f6:25:b9: 66:74:01:2b:77:7f:da:5e:c5:c6:9b:97:fb:35:0f:03:63:93: e8:eb:6d:23:2a:13:3b:79:5f:d5:4d:1a:12:2d:ae:bd:22:73: df:30:7b:28:b7:35:c6:7c:d6:ec:8a:37:0d:11:79:4e:0d:66: 14:40:d4:70:05:5b:34:17:1d:2a:88:f9:e8:95:02:4f:35:9e: 54:8b:6a:93:96:cc:f0:79:f3:49:4b:93:58:8c:19:49:fc:1b: 3c:ce:8b:95:5f:e3:9b:45:98:7a:1d:83:6d:5e:d1:21:a9:48: 9c:d2:d3:68:c9:52:47:1c:38:12:ac:f3:08:0d:cf:de:e3:18: b0:86:22:52:ba:83:8e:c1:9d:43:6f:8a:33:a1:53:c4:1f:4f: 76:fc:1b:6b:9b:17:47:b6:f5:2a:00:fb:a2:b8:44:e9:41:4c: 14:0a:31:3b:2e:85:95:26:2c:94:04:f4:d7:01:21:3c:31:af: 45:58:5f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQSe9ZR9VZdtGFpYEGwBFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjUxMjEyMDIwMDM5WhcNMjUxMjEzMDIwMDM5WjAzMTEwLwYDVQQD EyhiMDM3ZTFlNGZlNWQ2YTUxNWQ2NGUzMjNlNDk5NDgyYTg3YTgzZTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmCYuB49+ksHxgTfzf6/in01QN9q IQ9MB1ha/psS5iOqSSZMSjzRON+BIm+QBUmgRxlQ+wcWAGtRmKUAzIGBv96bG3Tc QKncKd6cCvNod34jVbkb+6E1jPXt+8VDrYRwXPEfJrrTzQnaWBXrAEIgsW+TU8Uo lAfvj3U5tuUTl990apBb03yRd/msdF/gqCWXub0xyeSTRsL7ooe0DQ4VBiH96fiD REzrgBzEC1nCVNqtl4sazX7d8mri75p0IGFkaXLy5dsjFEb3iFOCfWuwOj7+W391 ev941nU4cJyoRE4yZQfbF/TodOg7yY7vbNGk4Agr9sRF/swM+a9RnyRgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLA34eT+XWpRXWTjI+SZSCqHqD5sMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonVuZ42j SGje3IQQMGfjbyRn5Ff+uXA9PKmh/01AADG/J1e1e++NqAk2PpmcLimbh1B3mtHM 4bhJQkajhNE894JLx00a9iW5ZnQBK3d/2l7FxpuX+zUPA2OT6OttIyoTO3lf1U0a Ei2uvSJz3zB7KLc1xnzW7Io3DRF5Tg1mFEDUcAVbNBcdKoj56JUCTzWeVItqk5bM 8HnzSUuTWIwZSfwbPM6LlV/jm0WYeh2DbV7RIalInNLTaMlSRxw4EqzzCA3P3uMY sIYiUrqDjsGdQ2+KM6FTxB9Pdvwba5sXR7b1KgD7orhE6UFMFAoxOy6FlSYslAT0 1wEhPDGvRVhfmg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:20:10 2025 by rpki-client