This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json) Hash identifier: f9IpciDowqi3PyYAoo/dYFC4WVNhkeD7cqd6a5yVi+M= Subject key identifier: 7D:05:A8:D7:04:2C:E2:A5:AE:26:DF:75:FE:C0:A9:85:49:38:4A:DA Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Certificate serial: 019B3268348DEF456D0EA660A6456F3213CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft Manifest number: 0BFD Signing time: Thu 18 Dec 2025 17:00:48 +0000 Manifest this update: Thu 18 Dec 2025 17:00:48 +0000 Manifest next update: Fri 19 Dec 2025 17:00:48 +0000 Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: IQKgpMJaUwtt2dbrGw+ifm8LIsG05C12BX5J1GHdhVM=) 2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=) 3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:34:8d:ef:45:6d:0e:a6:60:a6:45:6f:32:13:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Validity Not Before: Dec 18 17:00:48 2025 GMT Not After : Dec 19 17:00:48 2025 GMT Subject: CN=7d05a8d7042ce2a5ae26df75fec0a98549384ada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:df:a8:aa:e4:c2:06:09:37:35:6a:fb:fa:bc: 9e:bb:d5:e5:a8:81:f9:ed:4e:2e:bf:65:7c:61:de: dd:fb:06:53:8d:e8:a7:bb:54:1a:f5:49:df:4c:22: f8:ca:6b:9c:4b:ed:62:66:22:74:22:73:12:29:47: 2f:8d:3b:71:ad:55:f6:13:8a:6a:9a:79:e9:b5:09: 20:19:b0:89:13:46:69:7d:c7:ef:81:ff:c7:56:aa: 5a:dc:b2:a8:fe:25:40:62:91:57:6f:18:75:51:1d: fa:a7:c7:f6:0f:89:0f:8a:e9:03:50:9a:01:1a:e8: 53:a5:bc:db:0b:00:cc:d6:8f:fc:6b:dc:12:e1:2d: a0:9e:dd:00:63:11:27:25:52:7e:a3:6f:41:62:31: 43:fb:e1:0a:a0:1d:ef:93:74:6a:5c:55:6c:a1:d9: ac:62:6e:42:1f:e0:6f:5e:c1:21:87:a9:e9:72:ad: bc:fc:bb:83:13:ad:e7:b1:ed:7a:c9:92:22:c1:54: 69:38:1f:e2:14:2e:81:39:cb:61:b0:7a:35:5d:0b: d0:6c:d2:fc:7b:a1:f2:eb:b7:2d:e3:c9:3e:8e:f0: fd:6f:43:65:eb:f4:90:d9:f0:80:46:c8:08:ad:4a: ef:24:2f:9d:22:2a:53:c5:9c:19:40:29:3b:94:1a: 52:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:05:A8:D7:04:2C:E2:A5:AE:26:DF:75:FE:C0:A9:85:49:38:4A:DA X509v3 Authority Key Identifier: keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:08:81:ec:33:af:70:98:eb:85:73:b2:4a:c4:10:0e:6c:46: 42:8a:3a:91:ba:8c:f9:3c:ca:44:f7:15:28:56:0a:14:02:ba: 76:7e:3d:d7:94:12:0f:ac:a5:47:d4:58:ef:c3:dc:41:36:14: c3:f9:3e:f9:2e:1b:0b:d5:8b:11:55:d6:c1:26:8f:00:d3:bb: 92:6d:9a:89:a1:85:cc:c5:a5:0a:0f:61:63:7a:56:04:72:b2: 11:79:d7:eb:2e:46:fe:85:b3:cb:02:a4:26:ee:fd:45:b5:4e: 65:c5:6b:24:f8:b1:ed:21:e2:cf:d7:fc:7d:5d:b6:e5:b8:55: 54:21:9e:de:1a:bc:97:56:83:d8:e5:55:b3:d5:5b:d2:6e:cb: 6f:ab:fb:73:a8:50:8c:45:b0:95:52:bf:ac:89:bb:82:bb:15: 0a:f5:69:17:5b:cd:83:59:1f:54:a6:4c:48:cc:ad:ea:df:80: 90:aa:01:25:d7:43:f9:d8:7d:ad:f6:5f:97:60:7b:f4:a4:27: aa:a7:7b:c2:6d:49:96:73:47:d1:65:0b:83:42:b4:ca:15:a2: e2:55:9d:0b:c9:b1:af:b9:13:e1:eb:97:3f:38:b6:dc:27:40: ea:2f:23:f8:46:f5:95:4f:0f:d8:96:8f:9e:38:5b:d4:7a:0e: 38:00:96:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaDSN70VtDqZgpkVvMhPPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk ZDliMjgwHhcNMjUxMjE4MTcwMDQ4WhcNMjUxMjE5MTcwMDQ4WjAzMTEwLwYDVQQD Eyg3ZDA1YThkNzA0MmNlMmE1YWUyNmRmNzVmZWMwYTk4NTQ5Mzg0YWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9+oquTCBgk3NWr7+ryeu9XlqIH5 7U4uv2V8Yd7d+wZTjeinu1Qa9UnfTCL4ymucS+1iZiJ0InMSKUcvjTtxrVX2E4pq mnnptQkgGbCJE0Zpfcfvgf/HVqpa3LKo/iVAYpFXbxh1UR36p8f2D4kPiukDUJoB GuhTpbzbCwDM1o/8a9wS4S2gnt0AYxEnJVJ+o29BYjFD++EKoB3vk3RqXFVsodms Ym5CH+BvXsEhh6npcq28/LuDE63nse16yZIiwVRpOB/iFC6BOcthsHo1XQvQbNL8 e6Hy67ct48k+jvD9b0Nl6/SQ2fCARsgIrUrvJC+dIipTxZwZQCk7lBpSJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0FqNcELOKlribfdf7AqYVJOEraMB8GA1UdIwQY MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt OGQ0OTg4MjdmNDVjLzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwiB7DOv cJjrhXOySsQQDmxGQoo6kbqM+TzKRPcVKFYKFAK6dn4915QSD6ylR9RY78PcQTYU w/k++S4bC9WLEVXWwSaPANO7km2aiaGFzMWlCg9hY3pWBHKyEXnX6y5G/oWzywKk Ju79RbVOZcVrJPix7SHiz9f8fV225bhVVCGe3hq8l1aD2OVVs9Vb0m7Lb6v7c6hQ jEWwlVK/rIm7grsVCvVpF1vNg1kfVKZMSMyt6t+AkKoBJddD+dh9rfZfl2B79KQn qqd7wm1JlnNH0WULg0K0yhWi4lWdC8mxr7kT4euXPzi23CdA6i8j+Eb1lU8P2JaP njhb1HoOOACWNw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:54:43 2025 by rpki-client