This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json) Hash identifier: TyaYhHqrTbffHEEB6Ri1mGjnDRTIeE+fQBT9GUsrMs4= Subject key identifier: 88:1A:53:1F:02:F8:45:DA:2B:A2:73:AF:16:91:22:6F:35:46:50:0D Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47 Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247 Certificate serial: 019B5A88477D03DE3A27276213CD7AB15DDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft Manifest number: 1799 Signing time: Fri 26 Dec 2025 12:00:39 +0000 Manifest this update: Fri 26 Dec 2025 12:00:39 +0000 Manifest next update: Sat 27 Dec 2025 12:00:39 +0000 Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: NB2lnMyC5kyejwrKDmTrhnvYWYG0p9yzfc+vrGiF+Lk=) 2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:47:7d:03:de:3a:27:27:62:13:cd:7a:b1:5d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247 Validity Not Before: Dec 26 12:00:39 2025 GMT Not After : Dec 27 12:00:39 2025 GMT Subject: CN=881a531f02f845da2ba273af1691226f3546500d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fc:b0:81:7a:ff:d4:2d:56:f5:2d:d9:93:ee: a7:64:6b:15:2d:02:fc:a6:a1:55:cd:b3:11:f0:80: 65:b1:b4:c0:39:b9:85:9e:79:a5:17:c3:a1:a6:da: b0:d4:4b:63:23:5a:9e:66:bc:1c:12:4b:2a:3f:84: 28:53:36:8b:6f:3a:9c:d9:05:87:32:43:e6:8d:9c: c6:89:39:b6:c2:15:b0:bd:4e:56:e5:25:aa:44:f8: 7e:4b:25:33:d7:e5:df:57:29:cc:5f:4e:a4:9e:73: a7:ea:51:1e:5e:b9:c6:00:ba:74:3f:00:24:17:30: 7a:16:36:b1:45:c7:be:9a:79:a1:3d:0d:4b:d6:14: ee:6f:0f:0b:1d:1e:20:eb:19:25:75:b0:74:ed:ef: f6:17:68:cf:1a:11:a0:dd:5a:d9:76:b0:f1:42:4c: ef:a4:ef:b5:4f:ef:1e:4b:79:cd:64:9b:3d:c4:9a: 46:8c:20:42:9f:a9:70:dd:d7:7b:20:44:79:63:b0: 11:26:99:3d:d0:a8:50:31:52:8c:c5:91:ee:be:08: a6:74:3b:34:76:81:cb:15:4e:63:c8:0b:b8:b8:15: b1:c2:e5:00:78:e4:15:54:8b:e2:e9:da:87:58:22: 07:d9:ef:fe:db:82:93:5b:e1:20:89:7d:ad:5d:f8: 56:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1A:53:1F:02:F8:45:DA:2B:A2:73:AF:16:91:22:6F:35:46:50:0D X509v3 Authority Key Identifier: keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:53:fd:d8:aa:a1:91:fa:be:ab:ba:94:14:29:62:08:37:8a: 80:86:7a:1a:d6:d4:d6:a6:67:af:98:14:e0:91:89:95:1d:05: 4f:b8:e4:a9:6f:60:c4:1b:4d:99:39:aa:6c:72:90:8a:9c:5b: 59:ad:28:d4:42:72:38:46:b7:a3:af:95:d5:56:5c:d9:bb:94: 92:6c:fb:0b:be:b3:9d:a9:91:5d:02:fc:fb:ee:7a:86:f7:22: 2b:e2:e0:25:8a:fd:d4:59:8e:d1:e4:51:82:8b:c1:d6:13:43: f7:da:42:3b:21:18:7b:b2:e3:58:22:ec:7d:76:34:fc:bf:64: bd:9f:4d:b4:f2:cd:b0:5d:9d:33:a6:f6:3a:d3:13:f3:81:c3: 7d:aa:4f:d3:a4:3a:b9:a1:e1:cd:b6:19:c5:02:3a:88:28:24: fd:b2:12:74:b2:88:a4:50:67:61:cf:5b:71:e4:58:c8:7e:54: ed:f9:90:4e:b0:9a:49:44:23:cd:bb:88:ef:92:b2:36:53:05: f3:2d:68:8c:a0:00:90:d6:53:fe:fd:48:b9:d0:3d:37:36:5f: 0b:ea:58:dc:85:c4:43:2f:37:05:75:be:12:47:24:40:4a:a8: 68:0e:f1:df:7b:70:b5:5f:48:0c:99:5e:64:c1:11:5c:79:8f: c7:55:da:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEd9A946JydiE816sV3cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0 YjAyNDcwHhcNMjUxMjI2MTIwMDM5WhcNMjUxMjI3MTIwMDM5WjAzMTEwLwYDVQQD Eyg4ODFhNTMxZjAyZjg0NWRhMmJhMjczYWYxNjkxMjI2ZjM1NDY1MDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvywgXr/1C1W9S3Zk+6nZGsVLQL8 pqFVzbMR8IBlsbTAObmFnnmlF8Ohptqw1EtjI1qeZrwcEksqP4QoUzaLbzqc2QWH MkPmjZzGiTm2whWwvU5W5SWqRPh+SyUz1+XfVynMX06knnOn6lEeXrnGALp0PwAk FzB6FjaxRce+mnmhPQ1L1hTubw8LHR4g6xkldbB07e/2F2jPGhGg3VrZdrDxQkzv pO+1T+8eS3nNZJs9xJpGjCBCn6lw3dd7IER5Y7ARJpk90KhQMVKMxZHuvgimdDs0 doHLFU5jyAu4uBWxwuUAeOQVVIvi6dqHWCIH2e/+24KTW+EgiX2tXfhW2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgaUx8C+EXaK6JzrxaRIm81RlANMB8GA1UdIwQY MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFP92Kqh kfq+q7qUFCliCDeKgIZ6GtbU1qZnr5gU4JGJlR0FT7jkqW9gxBtNmTmqbHKQipxb Wa0o1EJyOEa3o6+V1VZc2buUkmz7C76znamRXQL8++56hvciK+LgJYr91FmO0eRR govB1hND99pCOyEYe7LjWCLsfXY0/L9kvZ9NtPLNsF2dM6b2OtMT84HDfapP06Q6 uaHhzbYZxQI6iCgk/bISdLKIpFBnYc9bceRYyH5U7fmQTrCaSUQjzbuI75KyNlMF 8y1ojKAAkNZT/v1IudA9NzZfC+pY3IXEQy83BXW+EkckQEqoaA7x33twtV9IDJle ZMERXHmPx1Xa9Q== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:24 2025 by rpki-client