This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft File: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft (raw, json) Hash identifier: qg6p9MLMhuMeNxUrPY8ue8gWlMNt6EJOjWMkUNxFS9g= Subject key identifier: 23:A6:C1:F4:72:17:04:69:7B:E8:8A:DA:EC:F5:FA:FA:D8:DD:5B:6A Authority key identifier: A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C Certificate issuer: /CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c Certificate serial: 019B38D8B775FEC5E77888B059CF8A40CF27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft Manifest number: 1787 Signing time: Fri 19 Dec 2025 23:01:25 +0000 Manifest this update: Fri 19 Dec 2025 23:01:25 +0000 Manifest next update: Sat 20 Dec 2025 23:01:25 +0000 Files and hashes: 1: d9zp6AZxGUIdUrJzz8idXxXqkvw.roa (hash: FfoXAw9lK5hBRkyqnfyBrRUYHwvSIXzUheL45ZXlndI=) 2: pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl (hash: mlY+9MKdTG/sqkmLalBFQw8I65bY+2qdYPgTC0LhJqE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:b7:75:fe:c5:e7:78:88:b0:59:cf:8a:40:cf:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a52f6524085fa10e8c098ac2b5828a1f88c6913c Validity Not Before: Dec 19 23:01:25 2025 GMT Not After : Dec 20 23:01:25 2025 GMT Subject: CN=23a6c1f4721704697be88adaecf5fafad8dd5b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:69:7f:68:0a:7d:4a:77:90:e2:31:3c:5b:dd: f0:f1:8f:7d:c2:06:2d:1b:21:f8:3d:45:f5:2d:8e: c2:8a:3a:52:26:81:41:50:c4:30:e1:7b:cd:54:f2: 57:8c:9c:26:75:ee:52:ec:1d:a0:d3:45:ff:3e:11: 91:8e:99:94:29:f7:16:e7:a0:e5:6c:cb:ef:03:61: 35:04:46:0f:24:53:b1:3d:c9:9c:46:3d:6a:0e:c1: b1:2f:3c:46:98:cc:3b:aa:69:bb:0f:fe:52:f4:f8: e7:19:7d:2a:06:52:77:8a:0a:88:93:e0:a2:d9:45: 1f:00:5a:5a:3e:74:d4:ae:e9:81:f1:23:32:90:48: 7c:14:43:0e:82:84:0c:8a:80:55:73:ad:b4:52:91: 8f:71:18:b4:f4:b0:7e:85:ef:8e:00:b3:03:5d:e4: fa:11:ea:6f:5d:29:6e:9e:dd:53:f5:4c:b4:c0:c3: 67:78:85:3c:e8:33:20:db:0a:a2:ce:f3:05:8f:14: 29:03:e8:db:e1:88:d8:cd:c1:1f:56:59:f0:f4:99: e2:c9:fa:6e:a3:54:5a:44:02:96:91:67:ae:4a:01: 39:f4:a7:ac:c6:34:39:63:89:47:50:6f:c3:31:cd: f9:5a:9b:91:7b:d0:d8:7b:f2:6e:96:6f:4f:74:76: 1e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A6:C1:F4:72:17:04:69:7B:E8:8A:DA:EC:F5:FA:FA:D8:DD:5B:6A X509v3 Authority Key Identifier: keyid:A5:2F:65:24:08:5F:A1:0E:8C:09:8A:C2:B5:82:8A:1F:88:C6:91:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0e4506-174f-440a-a31c-bfff5142053f/1/pS9lJAhfoQ6MCYrCtYKKH4jGkTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:60:49:ee:8d:5c:21:0c:fc:e2:5f:24:bd:71:f7:5d:ea:cb: 6c:02:4f:aa:a6:31:16:78:fa:45:b8:00:29:80:f1:b7:ff:ad: 91:04:42:de:d6:fa:cd:d1:8d:76:d6:d5:39:0b:49:28:d0:af: 4a:94:d5:18:16:54:68:f9:d5:c9:a4:ad:fa:e4:1f:a4:f9:d3: c3:05:fd:8b:58:6e:c2:c5:16:a3:13:9f:b5:55:8f:5f:66:e0: ac:ea:64:d8:eb:20:c6:92:54:23:96:f5:02:25:26:5f:ca:ab: 60:55:af:1e:2c:b6:bb:7e:ba:09:ae:41:c5:bf:13:ad:30:02: af:68:0b:3f:54:f2:32:69:50:72:e0:6e:0b:f9:3c:d4:3f:9d: f9:9e:c1:c0:18:15:ca:6a:b6:73:de:25:a1:c0:fc:3d:39:b4: a3:be:84:62:35:2b:9f:d4:d4:ae:9d:7e:22:13:3a:39:45:39: ce:ea:d3:14:58:ed:ae:4e:20:70:74:f7:01:8d:55:91:04:ef: 1a:48:64:35:67:e0:89:38:51:39:c8:68:e8:6b:e8:5e:dc:aa: 18:b9:1e:a0:f5:b0:82:e7:5e:13:1b:fb:aa:e6:bf:74:98:26: 44:82:b4:6f:d1:2c:6a:99:82:fc:01:cb:96:c2:08:59:b7:4f: ba:58:7a:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42Ld1/sXneIiwWc+KQM8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MmY2NTI0MDg1ZmExMGU4YzA5OGFjMmI1ODI4YTFmODhj NjkxM2MwHhcNMjUxMjE5MjMwMTI1WhcNMjUxMjIwMjMwMTI1WjAzMTEwLwYDVQQD EygyM2E2YzFmNDcyMTcwNDY5N2JlODhhZGFlY2Y1ZmFmYWQ4ZGQ1YjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12l/aAp9SneQ4jE8W93w8Y99wgYt GyH4PUX1LY7CijpSJoFBUMQw4XvNVPJXjJwmde5S7B2g00X/PhGRjpmUKfcW56Dl bMvvA2E1BEYPJFOxPcmcRj1qDsGxLzxGmMw7qmm7D/5S9PjnGX0qBlJ3igqIk+Ci 2UUfAFpaPnTUrumB8SMykEh8FEMOgoQMioBVc620UpGPcRi09LB+he+OALMDXeT6 EepvXSlunt1T9Uy0wMNneIU86DMg2wqizvMFjxQpA+jb4YjYzcEfVlnw9Jniyfpu o1RaRAKWkWeuSgE59KesxjQ5Y4lHUG/DMc35WpuRe9DYe/Julm9PdHYe/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOmwfRyFwRpe+iK2uz1+vrY3VtqMB8GA1UdIwQY MBaAFKUvZSQIX6EOjAmKwrWCih+IxpE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMt YmZmZjUxNDIwNTNmLzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8wZTQ1MDYtMTc0Zi00NDBhLWEzMWMtYmZmZjUxNDIwNTNm LzEvcFM5bEpBaGZvUTZNQ1lyQ3RZS0tINGpHa1R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGBJ7o1c IQz84l8kvXH3XerLbAJPqqYxFnj6RbgAKYDxt/+tkQRC3tb6zdGNdtbVOQtJKNCv SpTVGBZUaPnVyaSt+uQfpPnTwwX9i1huwsUWoxOftVWPX2bgrOpk2OsgxpJUI5b1 AiUmX8qrYFWvHiy2u366Ca5Bxb8TrTACr2gLP1TyMmlQcuBuC/k81D+d+Z7BwBgV ymq2c94locD8PTm0o76EYjUrn9TUrp1+IhM6OUU5zurTFFjtrk4gcHT3AY1VkQTv GkhkNWfgiThROcho6GvoXtyqGLkeoPWwgudeExv7qua/dJgmRIK0b9EsapmC/AHL lsIIWbdPulh64w== -----END CERTIFICATE-----Generated at Sat Dec 20 01:54:21 2025 by rpki-client