This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft File: 9TNT82jdgBzWECIy36HOpp3Yy2w.mft (raw, json) Hash identifier: +4tsIUkQJqdseZaR1UCXIo1cPHqXVCUI/JDuAffWirA= Subject key identifier: 83:F9:F4:11:5C:CF:40:DD:12:2E:50:17:8B:EB:5A:F5:D5:8C:BE:DF Authority key identifier: F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C Certificate issuer: /CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c Certificate serial: 019B1BE07F08D2CEE3BCA25726766C492CFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 08:00:55 +0000 Manifest this update: Sun 14 Dec 2025 08:00:55 +0000 Manifest next update: Mon 15 Dec 2025 08:00:55 +0000 Files and hashes: 1: 9TNT82jdgBzWECIy36HOpp3Yy2w.crl (hash: NEBwcgZaHPE3pzryW9t8eV9mXQP6WOFlGiYXVkSxJAM=) 2: KPjydIOJaGq7MrGDIyks0pG8OMc.roa (hash: EbMrbtdHkpWfjQpY4PIBNTo9mg3b+j3TofouOP6XhE4=) 3: j-eMIttscanFAqtICoI80Cr1JzI.roa (hash: 9wKinY0pxocac6rpiGpVi4F+dA87gof09Z9RuDhbY0A=) 4: kza4BzO7mzHg574_1Eicw1sryow.roa (hash: T/X2stycZnJ66mhbGAsW7v/HLZ/en6oPqkycFGz/g/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:7f:08:d2:ce:e3:bc:a2:57:26:76:6c:49:2c:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53353f368dd801cd6102232dfa1cea69dd8cb6c Validity Not Before: Dec 14 08:00:55 2025 GMT Not After : Dec 15 08:00:55 2025 GMT Subject: CN=83f9f4115ccf40dd122e50178beb5af5d58cbedf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:03:70:80:48:65:1a:f2:f8:da:90:f5:0c:55: 0a:64:fb:77:a4:5b:55:7c:41:ad:72:2a:42:c4:99: b9:76:ea:94:a9:02:8e:8c:18:5e:2a:d1:e5:9b:1d: f2:bb:86:40:5c:98:ae:d0:9b:b8:54:b3:58:20:32: 00:0b:b7:58:4d:d3:43:63:72:38:75:b4:46:4e:44: 40:ce:ad:11:3a:73:2b:c0:e1:d2:8b:d1:ee:c2:62: f7:10:32:e3:6b:2b:98:e2:ed:be:49:e9:ef:1a:a6: e2:c6:5f:3f:e5:f2:e2:0c:ae:07:e0:ec:44:d2:1e: 43:b3:ac:f5:fd:11:49:c0:dd:87:40:7b:1b:d7:f0: 8a:d8:41:48:d3:04:c4:9f:6d:a6:0d:58:10:da:60: ca:94:cb:5f:0d:94:1a:5c:b3:9d:c3:b8:c3:90:6a: f0:63:d0:a7:a4:3e:7e:21:0e:33:32:68:b9:e7:b9: 42:e5:13:a9:2b:fc:f8:6d:9b:45:e7:95:ff:37:f0: 3c:88:7f:32:a7:e1:20:e4:aa:05:d2:59:fb:0f:ae: 5b:b6:c1:92:c7:8d:d6:8d:e5:2c:06:eb:e8:84:cf: 7a:7b:0e:14:37:f6:1a:b9:6f:b7:89:d3:d6:25:24: 6c:88:b8:80:43:d3:f0:6a:e1:20:2e:35:80:2f:ea: 79:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F9:F4:11:5C:CF:40:DD:12:2E:50:17:8B:EB:5A:F5:D5:8C:BE:DF X509v3 Authority Key Identifier: keyid:F5:33:53:F3:68:DD:80:1C:D6:10:22:32:DF:A1:CE:A6:9D:D8:CB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TNT82jdgBzWECIy36HOpp3Yy2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b8097a-4eed-463b-b65a-0ec7ecb25030/1/9TNT82jdgBzWECIy36HOpp3Yy2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d7:40:46:71:6a:9e:3e:b1:ca:d5:a9:96:1b:4f:36:2a:c6: de:5d:2b:59:96:69:d0:4e:dd:8d:80:b0:d4:27:33:51:44:ba: 41:5b:5b:bf:f1:a2:69:9a:ea:57:fb:01:b6:ae:76:e9:a9:0d: 3b:c1:83:a7:21:2e:86:7f:6f:f2:83:74:ea:58:d4:0a:15:fd: 15:af:98:53:37:ee:df:1a:fa:0a:ba:ca:bf:53:bf:6e:32:bd: 8e:ef:de:e9:52:ef:5e:fd:aa:75:69:98:1e:52:9f:97:02:c1: d1:15:d5:7d:c3:a4:c7:0f:54:44:c8:3b:06:d7:19:fb:f3:4d: 79:5b:c4:11:b4:bb:a1:bd:4c:53:f1:b5:39:12:2e:41:40:f1: 3b:d4:08:6f:1a:b9:4a:40:8d:b3:88:9c:98:a3:a3:51:63:ec: e4:33:ca:2d:5c:fc:76:b0:ba:a2:11:89:63:aa:5a:78:80:e1: fc:2d:93:29:94:88:e8:25:17:87:a5:cd:dd:63:ad:ce:61:9b: dd:61:d2:a6:07:74:ff:e3:13:5b:62:2d:aa:68:8b:5c:52:df: 4e:59:a2:e1:f8:c2:0d:db:15:e1:b6:f6:e0:1c:aa:9a:7d:dd: 8e:47:e5:47:0b:5b:08:1f:2d:e2:9a:8c:65:27:2b:d0:d1:a1: 5a:a6:a5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4H8I0s7jvKJXJnZsSSz+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzM1M2YzNjhkZDgwMWNkNjEwMjIzMmRmYTFjZWE2OWRk OGNiNmMwHhcNMjUxMjE0MDgwMDU1WhcNMjUxMjE1MDgwMDU1WjAzMTEwLwYDVQQD Eyg4M2Y5ZjQxMTVjY2Y0MGRkMTIyZTUwMTc4YmViNWFmNWQ1OGNiZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoANwgEhlGvL42pD1DFUKZPt3pFtV fEGtcipCxJm5duqUqQKOjBheKtHlmx3yu4ZAXJiu0Ju4VLNYIDIAC7dYTdNDY3I4 dbRGTkRAzq0ROnMrwOHSi9HuwmL3EDLjayuY4u2+SenvGqbixl8/5fLiDK4H4OxE 0h5Ds6z1/RFJwN2HQHsb1/CK2EFI0wTEn22mDVgQ2mDKlMtfDZQaXLOdw7jDkGrw Y9CnpD5+IQ4zMmi557lC5ROpK/z4bZtF55X/N/A8iH8yp+Eg5KoF0ln7D65btsGS x43WjeUsBuvohM96ew4UN/YauW+3idPWJSRsiLiAQ9PwauEgLjWAL+p5fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIP59BFcz0DdEi5QF4vrWvXVjL7fMB8GA1UdIwQY MBaAFPUzU/No3YAc1hAiMt+hzqad2MtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEt MGVjN2VjYjI1MDMwLzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9iODA5N2EtNGVlZC00NjNiLWI2NWEtMGVjN2VjYjI1MDMw LzEvOVROVDgyamRnQnpXRUNJeTM2SE9wcDNZeTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9dARnFq nj6xytWplhtPNirG3l0rWZZp0E7djYCw1CczUUS6QVtbv/GiaZrqV/sBtq526akN O8GDpyEuhn9v8oN06ljUChX9Fa+YUzfu3xr6CrrKv1O/bjK9ju/e6VLvXv2qdWmY HlKflwLB0RXVfcOkxw9URMg7BtcZ+/NNeVvEEbS7ob1MU/G1ORIuQUDxO9QIbxq5 SkCNs4icmKOjUWPs5DPKLVz8drC6ohGJY6paeIDh/C2TKZSI6CUXh6XN3WOtzmGb 3WHSpgd0/+MTW2ItqmiLXFLfTlmi4fjCDdsV4bb24Byqmn3djkflRwtbCB8t4pqM ZScr0NGhWqaleA== -----END CERTIFICATE-----Generated at Sun Dec 14 11:47:47 2025 by rpki-client