This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json) Hash identifier: 91hTfwx+H//991wVDS1YmjrhsrjVddLH7cXYc4hE3cQ= Subject key identifier: AA:6A:0B:5C:2F:B6:63:EE:DD:4D:F5:1B:72:74:F4:B1:57:8F:1B:46 Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Certificate serial: 019B047D2D839258E4CA512E0461CDF5D25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft Manifest number: 070E Signing time: Tue 09 Dec 2025 19:01:11 +0000 Manifest this update: Tue 09 Dec 2025 19:01:11 +0000 Manifest next update: Wed 10 Dec 2025 19:01:11 +0000 Files and hashes: 1: JPk8qHaA0VqJJwM_cRiEk2hiNN4.roa (hash: UcrJOHgb+5M2bbcwOpZ1qAySq77AEN4vifocol3LdDU=) 2: MaON6tltdE_nNRyafDLxcoztK6E.roa (hash: Sb8QCt7PRXcCVTxqpNcJ/gxYw3sApRrWPJqKe86QFYM=) 3: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=) 4: SWZ731YmHf9GvH8Lkc-8awFctFs.roa (hash: YMn4x1FGAr61bxn/Z7AB4iuUFTZ6bShjnEOsfqmAjsc=) 5: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=) 6: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: 5Yu6m3KzZYsD864a7xTU+LbvQ7fodNOL7B5aQbTQipY=) 7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=) 8: pADzcECo2Yf0nO80duEMuDGh3X8.roa (hash: /D3kHt6hhWjXdSU0si9ABN/nIQHXorfwBvY2dwdWWD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 10 Dec 2025 16:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:7d:2d:83:92:58:e4:ca:51:2e:04:61:cd:f5:d2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Validity Not Before: Dec 9 19:01:11 2025 GMT Not After : Dec 10 19:01:11 2025 GMT Subject: CN=aa6a0b5c2fb663eedd4df51b7274f4b1578f1b46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:dd:9b:3a:5f:98:22:c4:e7:16:97:55:90:32: a1:de:c6:17:a5:b1:49:e6:34:4c:6a:35:d5:16:06: 22:45:85:1c:f7:45:2e:48:c1:86:13:f2:d4:4e:ce: 4f:2d:9e:6d:d4:3d:7a:c5:6f:36:e5:4d:77:0f:d7: a2:87:6b:ba:98:a4:c5:f5:15:a8:e3:eb:cd:18:48: fa:57:5c:45:bd:d0:57:48:ba:49:c6:7b:35:7c:61: ca:05:ba:81:25:0d:d9:b6:24:94:37:04:a6:26:03: ca:99:c9:4e:d9:63:b9:d7:f9:53:86:b4:34:5b:45: 69:ba:c5:2f:a7:67:bd:12:6f:d2:5c:28:62:df:6d: a9:a0:eb:1c:56:07:91:21:a5:c1:cc:80:8a:ce:d8: 2d:87:7e:ce:2d:89:f1:4d:b9:4e:e0:3f:86:2d:96: 8f:06:69:68:e3:7d:b7:af:b7:da:8c:34:f2:13:77: bb:26:44:6f:22:d3:b9:0e:fa:7c:e0:01:ed:d0:74: 2c:ae:2a:5b:46:7f:9d:fd:2a:dd:d0:f5:7b:9f:14: 70:90:d4:f6:95:c7:0f:90:55:70:bd:55:7a:e4:d8: 11:37:88:e5:e1:9a:4d:2f:14:d5:1b:a1:69:8f:12: bd:31:52:f6:bb:31:b8:41:55:1b:b5:ea:e1:9b:c1: 73:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6A:0B:5C:2F:B6:63:EE:DD:4D:F5:1B:72:74:F4:B1:57:8F:1B:46 X509v3 Authority Key Identifier: keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:21:76:8c:bc:f7:d2:b4:aa:46:95:08:3e:f7:7f:0f:17:a5: d9:7e:d9:ca:a1:40:04:b4:17:a1:08:54:51:da:3e:fd:16:8a: 91:ab:fb:41:18:de:d9:da:26:4f:d9:c7:a9:39:3d:ad:d7:7a: 52:3d:44:9e:fc:d7:da:56:15:ba:00:08:73:c8:94:0b:5b:62: cb:b2:24:b0:5e:25:d2:6e:4e:47:fa:bf:af:17:8e:9d:dc:c4: 8e:f6:b2:50:c9:67:cd:9c:28:d0:08:7e:4d:9f:1e:69:ea:7a: 30:32:38:7f:82:45:5a:22:b0:92:41:6e:6e:14:e8:a6:a9:a1: 7c:f6:45:ac:23:58:3f:45:e6:5c:a7:c3:28:8c:ed:b9:01:92: 3f:cc:0a:9a:c2:4e:52:80:80:b4:d9:fc:20:97:50:e4:2b:19: e0:60:b0:d5:d1:ca:84:ec:39:26:54:03:46:9b:3c:e1:b6:a3: 42:ae:e1:07:58:59:75:79:b6:ec:0a:0b:9e:c3:ac:a1:6d:59: 61:42:2f:ee:33:2d:b2:e4:8e:64:55:39:1b:b3:1e:50:27:be: 57:7b:9a:55:84:11:10:79:b5:1c:7c:4a:3b:04:cb:c3:b3:a7: 0f:f9:22:b1:ff:44:3d:b4:71:c6:91:ab:18:08:79:15:a4:18: 4d:d7:3d:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsEfS2DkljkylEuBGHN9dJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw ZTY5MWQwHhcNMjUxMjA5MTkwMTExWhcNMjUxMjEwMTkwMTExWjAzMTEwLwYDVQQD EyhhYTZhMGI1YzJmYjY2M2VlZGQ0ZGY1MWI3Mjc0ZjRiMTU3OGYxYjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN2bOl+YIsTnFpdVkDKh3sYXpbFJ 5jRMajXVFgYiRYUc90UuSMGGE/LUTs5PLZ5t1D16xW825U13D9eih2u6mKTF9RWo 4+vNGEj6V1xFvdBXSLpJxns1fGHKBbqBJQ3ZtiSUNwSmJgPKmclO2WO51/lThrQ0 W0VpusUvp2e9Em/SXChi322poOscVgeRIaXBzICKztgth37OLYnxTblO4D+GLZaP Bmlo4323r7fajDTyE3e7JkRvItO5Dvp84AHt0HQsripbRn+d/Srd0PV7nxRwkNT2 lccPkFVwvVV65NgRN4jl4ZpNLxTVG6FpjxK9MVL2uzG4QVUbterhm8FzDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKpqC1wvtmPu3U31G3J09LFXjxtGMB8GA1UdIwQY MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZiF2jLz3 0rSqRpUIPvd/Dxel2X7ZyqFABLQXoQhUUdo+/RaKkav7QRje2domT9nHqTk9rdd6 Uj1EnvzX2lYVugAIc8iUC1tiy7IksF4l0m5OR/q/rxeOndzEjvayUMlnzZwo0Ah+ TZ8eaep6MDI4f4JFWiKwkkFubhTopqmhfPZFrCNYP0XmXKfDKIztuQGSP8wKmsJO UoCAtNn8IJdQ5CsZ4GCw1dHKhOw5JlQDRps84bajQq7hB1hZdXm27AoLnsOsoW1Z YUIv7jMtsuSOZFU5G7MeUCe+V3uaVYQREHm1HHxKOwTLw7OnD/kisf9EPbRxxpGr GAh5FaQYTdc92Q== -----END CERTIFICATE-----Generated at Tue Dec 9 21:52:34 2025 by rpki-client