This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: ywbbej1PniwwigFf9q6F2ako3TM8VBvYqbKCK6qRDao= Subject key identifier: D8:35:69:B1:34:06:02:C2:C4:B5:75:57:80:35:BE:94:EA:6F:A5:82 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019B353228FA94632CF9AB984E4FBDDE5017 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 0146 Signing time: Fri 19 Dec 2025 06:00:38 +0000 Manifest this update: Fri 19 Dec 2025 06:00:38 +0000 Manifest next update: Sat 20 Dec 2025 06:00:38 +0000 Files and hashes: 1: 4pRecLSQ-xIl4IPEZzRcqIax3-I.roa (hash: H+a8jrfauVXAPTlOBPXoA0IxSm3rMjg8mh86PIxmueU=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: zUBsVfSU58k3o26z0Wotr0tX8MYxw8QITjxdbeY1KkM=) 3: HS9PpWT4FCSSstlIOFCaEuTYhZA.roa (hash: dTpJ+Vqey+wyIsJCiKM1TfllRZ7B3eMpNoAigDi5hoo=) 4: JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa (hash: Wl0WwrfiuzHjyAyUMW+l+iPzUUYZzp7CP7Vher9u5s8=) 5: TDs3SCHkSwxi2Xb9E5-5lxldSWA.roa (hash: UmMaqKmCtjb0oErlYVHbczcMBZ32+2r0z5hmDOfKCCM=) 6: V6wlyE81nOSUZZNevO5fwFq_yuI.roa (hash: BJWgiCN26bDpqIeJaukxrOIxIn7K1eaqwr8a29JJlYg=) 7: Y6E3ztUNuP-EkxZVJnP3QMV8f34.roa (hash: 5ZMvfHfzXA3N5iMX/egkwzxlZHE1t5ELeXRMtB3b6GA=) 8: g_xhFlxALcLse_-Oj4PBePBZJnY.roa (hash: ZZWn8HGPLGkcu+1b7mxcw+bmNtXcMX/Z/tSj0BCyotA=) 9: kRIa94MWYWrUOVwjc9XA73SAMOA.roa (hash: CLFC01EOAmxOj0g9Emkl9wa15kGO2yyt+4qXoqbGCJI=) 10: wMrCQWEm2lPKU1aAl1mFhi-JWnE.roa (hash: hT7L1jOf2Ub3XumgetpA4h0Ys4xPjaNTHFtmr8cP4hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:28:fa:94:63:2c:f9:ab:98:4e:4f:bd:de:50:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Dec 19 06:00:38 2025 GMT Not After : Dec 20 06:00:38 2025 GMT Subject: CN=d83569b1340602c2c4b575578035be94ea6fa582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:61:2e:e5:a3:ed:e3:16:71:46:17:16:6b:56: 37:68:04:05:f6:33:fc:ce:25:d9:7a:02:4c:69:8d: 82:5c:19:c8:6b:98:fe:69:ae:62:85:25:6a:08:3d: c7:b5:ca:0a:e9:68:a2:51:43:13:9c:1d:43:a3:f5: 2f:66:e7:90:85:ba:30:45:83:f8:81:36:fa:f3:1f: 6b:be:e5:f5:50:d1:4d:18:47:8d:cc:5d:4e:be:1e: 49:9c:4c:8b:fd:30:9a:aa:c6:f0:26:89:98:77:81: 31:60:2e:98:36:dc:20:67:e9:33:cd:21:94:8a:c4: ce:30:3d:d9:a5:6f:1d:6c:b8:e5:5d:5a:a3:5a:9b: 4f:99:66:8e:22:c5:cc:88:3e:68:fd:19:8c:26:88: e4:b5:24:44:11:77:df:be:3e:64:83:93:c1:f7:94: bd:49:81:9f:a4:50:f1:a7:cc:5d:bc:9d:70:df:2e: e4:e0:01:5a:a1:f9:b8:4b:a7:f3:30:e4:95:fb:af: c1:37:07:8f:98:f8:8a:c2:31:e3:2a:45:7b:83:a5: e3:53:e7:bf:5d:89:4e:21:1b:f4:bd:2a:c6:c5:71: 85:72:c0:fd:e9:4d:7b:6e:ac:a0:f0:20:1e:8b:8b: fe:57:08:59:14:b8:19:5a:68:54:e2:61:36:94:d0: c2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:35:69:B1:34:06:02:C2:C4:B5:75:57:80:35:BE:94:EA:6F:A5:82 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ba:17:39:bb:68:4c:9e:b8:04:11:b3:20:0b:35:0a:1f:c1: 63:c0:02:4f:e1:c6:18:6e:c9:30:67:cb:32:93:c7:a0:3d:20: d7:1a:5c:e6:1c:a7:a8:5b:43:8c:d1:71:2a:20:ff:aa:c4:45: 5e:87:0d:6c:f9:47:8f:44:91:d7:c3:98:83:8b:77:e5:d6:f0: a2:5c:34:f8:9f:c6:a8:81:47:33:0f:3b:81:0b:ef:50:75:b5: 85:a5:8f:32:91:b9:6b:9b:7e:bc:52:ec:f0:1a:e4:dd:94:7b: d6:51:5b:69:ff:3a:7b:2a:07:7c:e3:1f:07:72:e2:7d:38:ec: c6:1a:0d:f8:20:c5:24:a7:1d:13:0e:a4:24:55:ce:76:f2:69: fd:d7:86:ea:11:b6:40:eb:82:ec:86:4c:66:d4:ae:77:ad:0c: b8:e3:f6:42:9f:bd:99:80:b6:8e:da:f1:fa:ce:f6:95:85:7d: f4:58:f9:32:45:c2:a2:8a:a4:64:ec:bd:d3:17:2d:93:71:2f: 89:c4:d7:c9:84:63:14:70:a3:a8:08:be:47:76:80:01:fd:bf: 00:2f:2e:06:4b:83:a1:89:8e:a5:70:03:06:21:f6:9c:cb:f1: d7:12:ae:f3:c0:b5:49:3e:33:a4:3a:b3:fd:84:64:ac:2a:78: 98:7e:47:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mij6lGMs+auYTk+93lAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjUxMjE5MDYwMDM4WhcNMjUxMjIwMDYwMDM4WjAzMTEwLwYDVQQD EyhkODM1NjliMTM0MDYwMmMyYzRiNTc1NTc4MDM1YmU5NGVhNmZhNTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWEu5aPt4xZxRhcWa1Y3aAQF9jP8 ziXZegJMaY2CXBnIa5j+aa5ihSVqCD3HtcoK6WiiUUMTnB1Do/UvZueQhbowRYP4 gTb68x9rvuX1UNFNGEeNzF1Ovh5JnEyL/TCaqsbwJomYd4ExYC6YNtwgZ+kzzSGU isTOMD3ZpW8dbLjlXVqjWptPmWaOIsXMiD5o/RmMJojktSREEXffvj5kg5PB95S9 SYGfpFDxp8xdvJ1w3y7k4AFaofm4S6fzMOSV+6/BNwePmPiKwjHjKkV7g6XjU+e/ XYlOIRv0vSrGxXGFcsD96U17bqyg8CAei4v+VwhZFLgZWmhU4mE2lNDCJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNg1abE0BgLCxLV1V4A1vpTqb6WCMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMroXObto TJ64BBGzIAs1Ch/BY8ACT+HGGG7JMGfLMpPHoD0g1xpc5hynqFtDjNFxKiD/qsRF XocNbPlHj0SR18OYg4t35dbwolw0+J/GqIFHMw87gQvvUHW1haWPMpG5a5t+vFLs 8Brk3ZR71lFbaf86eyoHfOMfB3LifTjsxhoN+CDFJKcdEw6kJFXOdvJp/deG6hG2 QOuC7IZMZtSud60MuOP2Qp+9mYC2jtrx+s72lYV99Fj5MkXCooqkZOy90xctk3Ev icTXyYRjFHCjqAi+R3aAAf2/AC8uBkuDoYmOpXADBiH2nMvx1xKu88C1ST4zpDqz /YRkrCp4mH5How== -----END CERTIFICATE-----Generated at Fri Dec 19 13:36:08 2025 by rpki-client