This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json) Hash identifier: EBjBeIzFcMhxHEfFOMazSHyOD9OfVzQ0fX4hkExYX04= Subject key identifier: 79:A8:28:1D:DB:3A:B0:02:99:C1:43:1D:45:00:3B:91:D8:D6:F0:5E Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Certificate serial: 019B5A51E1670A3CFAFC19AE7B3C271185DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft Manifest number: 1797 Signing time: Fri 26 Dec 2025 11:01:14 +0000 Manifest this update: Fri 26 Dec 2025 11:01:14 +0000 Manifest next update: Sat 27 Dec 2025 11:01:14 +0000 Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: k5cwmOTFxaxqKWbPMkubuyTi7EkcJBzYfen3W8f4aH8=) 2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:e1:67:0a:3c:fa:fc:19:ae:7b:3c:27:11:85:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Validity Not Before: Dec 26 11:01:14 2025 GMT Not After : Dec 27 11:01:14 2025 GMT Subject: CN=79a8281ddb3ab00299c1431d45003b91d8d6f05e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:d1:22:e2:4b:c3:47:12:73:34:9a:72:c6: f3:34:37:c5:3f:f7:0a:d8:13:27:0f:85:bd:67:a0: 27:b6:2d:bf:05:6c:df:a1:d7:20:1a:78:e0:94:16: c0:1f:ca:ee:b7:8d:56:c6:d2:a2:c9:b5:03:88:16: d9:69:0c:6f:16:7d:eb:90:3b:23:5a:e7:92:eb:aa: 3d:2b:0d:e2:15:0f:b4:b8:be:6f:88:1c:cb:a1:76: 2e:1b:43:12:4a:31:29:0f:71:2c:fc:27:ee:68:c6: 74:52:9f:42:c3:2c:52:64:04:f5:03:cf:bf:19:34: 70:e3:c0:8d:72:a6:15:bd:85:46:2c:f2:9c:f0:3e: 88:1c:45:70:81:fd:eb:f1:a7:67:7f:0f:a8:f0:a8: 0b:b4:8e:71:ad:68:c3:31:66:3d:da:77:64:73:40: db:48:07:75:42:88:10:9d:8f:c2:fd:e2:86:2f:5f: 9e:6f:bd:a4:59:75:b3:d0:c9:00:f5:fc:1a:1f:4d: b2:b9:24:17:c6:ee:6d:87:1a:af:90:96:62:2b:99: 91:eb:30:06:17:dd:98:28:33:08:e4:ca:31:9b:23: 4a:ac:51:8d:66:7d:fe:61:4f:91:02:b2:5d:28:16: 36:b7:79:b4:a1:b3:41:db:6a:29:35:8c:e9:d8:00: 32:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A8:28:1D:DB:3A:B0:02:99:C1:43:1D:45:00:3B:91:D8:D6:F0:5E X509v3 Authority Key Identifier: keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:5d:f3:4f:7a:31:4c:2a:e2:94:42:fa:5d:74:8f:b2:47:12: 97:8e:71:bf:dd:ab:16:39:df:50:c7:c0:dc:43:b5:71:4b:90: 14:11:c0:25:8e:b0:9d:d3:8e:d6:d1:71:dd:2b:d9:c7:8d:7a: a0:02:fb:7f:ae:ee:48:51:3d:4c:af:43:49:20:00:14:c6:5a: 8d:34:70:e5:e3:41:96:07:b5:d0:b0:35:fe:1d:83:3f:4d:4d: b0:fd:e6:62:0a:d3:cc:c3:25:67:77:84:c7:67:09:1c:ec:61: e7:04:b2:1b:76:bf:c9:5c:97:ca:98:c6:91:b7:ec:e3:14:c6: b8:82:7d:80:86:06:18:88:ab:ef:b9:c2:20:68:60:a0:02:d2: c1:3d:a1:90:aa:9c:5f:ef:d2:95:94:d3:80:fe:63:9c:97:2a: 2c:c4:bf:41:d9:5a:bb:1f:bd:2b:4f:3b:84:10:fb:83:b2:96: 85:ba:f1:11:f1:5e:0e:7a:37:32:ca:a1:b0:f5:bf:49:71:f4: fb:45:b6:4f:a8:5b:55:5b:98:84:0f:30:a2:4f:1f:a1:72:e8: e2:7a:1d:13:96:0f:96:0b:89:f3:2a:12:2c:9e:dc:fc:5f:ab: c7:b3:2b:57:ee:14:29:45:ce:a2:15:62:e7:3b:af:7c:03:c5: 48:5d:ae:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUeFnCjz6/BmuezwnEYXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh MWE1OWQwHhcNMjUxMjI2MTEwMTE0WhcNMjUxMjI3MTEwMTE0WjAzMTEwLwYDVQQD Eyg3OWE4MjgxZGRiM2FiMDAyOTljMTQzMWQ0NTAwM2I5MWQ4ZDZmMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww3RIuJLw0cSczSacsbzNDfFP/cK 2BMnD4W9Z6Anti2/BWzfodcgGnjglBbAH8rut41WxtKiybUDiBbZaQxvFn3rkDsj WueS66o9Kw3iFQ+0uL5viBzLoXYuG0MSSjEpD3Es/CfuaMZ0Up9CwyxSZAT1A8+/ GTRw48CNcqYVvYVGLPKc8D6IHEVwgf3r8adnfw+o8KgLtI5xrWjDMWY92ndkc0Db SAd1QogQnY/C/eKGL1+eb72kWXWz0MkA9fwaH02yuSQXxu5thxqvkJZiK5mR6zAG F92YKDMI5MoxmyNKrFGNZn3+YU+RArJdKBY2t3m0obNB22opNYzp2AAy0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmoKB3bOrACmcFDHUUAO5HY1vBeMB8GA1UdIwQY MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0 LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF3zT3ox TCrilEL6XXSPskcSl45xv92rFjnfUMfA3EO1cUuQFBHAJY6wndOO1tFx3SvZx416 oAL7f67uSFE9TK9DSSAAFMZajTRw5eNBlge10LA1/h2DP01NsP3mYgrTzMMlZ3eE x2cJHOxh5wSyG3a/yVyXypjGkbfs4xTGuIJ9gIYGGIir77nCIGhgoALSwT2hkKqc X+/SlZTTgP5jnJcqLMS/Qdlaux+9K087hBD7g7KWhbrxEfFeDno3MsqhsPW/SXH0 +0W2T6hbVVuYhA8wok8foXLo4nodE5YPlguJ8yoSLJ7c/F+rx7MrV+4UKUXOohVi 5zuvfAPFSF2uHA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:14 2025 by rpki-client