This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft File: 9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json) Hash identifier: O88lwlKM75LjpBY88xGwWdBp11nSwMOcRha4Pma/F64= Subject key identifier: 0F:93:59:36:BE:F9:5E:7A:89:35:CD:8E:3A:90:3E:81:A7:BC:F5:14 Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Certificate serial: 019B25529284455FC472F1894CEB9400440B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft Manifest number: 17BE Signing time: Tue 16 Dec 2025 04:02:06 +0000 Manifest this update: Tue 16 Dec 2025 04:02:06 +0000 Manifest next update: Wed 17 Dec 2025 04:02:06 +0000 Files and hashes: 1: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: 8oZM6T7FDKjIUhKSMkc7tl0J4+LUi+d8gmcL4WQ9GUA=) 2: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (hash: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=) 3: PcLN4OCrAYo7gp9-LrNRS28FuGA.roa (hash: 4PVTYuLNKNpIeRdCU1ysaHpHPoiG6A7KV2YGI8bMc1w=) 4: Rowc--7buNg_Ew_zrmynFHimxmQ.roa (hash: tRqjTRWW7K8WV4ruLRwNapxECkPe5ofBmkCYh5TfGtI=) 5: dHl1LQzEJUpKi2KNatIsOTvown8.roa (hash: iN9UZITbk8Ct82GnunVun5xdzK17nQf8SgPjAvRak5s=) 6: yWWoay0ayleQau0Xgx1nrUGIKj0.roa (hash: 5Hs7Smq+GKOGNzQZoeccE5rQAWaXTAj4CCluIzt4Tck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:92:84:45:5f:c4:72:f1:89:4c:eb:94:00:44:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Validity Not Before: Dec 16 04:02:06 2025 GMT Not After : Dec 17 04:02:06 2025 GMT Subject: CN=0f935936bef95e7a8935cd8e3a903e81a7bcf514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:98:40:56:25:50:7c:40:e5:b6:af:56:a0:ff: 49:ba:4c:fd:36:30:fe:d4:42:fc:b1:45:98:d9:d0: b5:bd:37:ea:4f:a4:07:23:b8:2a:63:8d:34:c0:61: 74:81:ad:43:91:d4:81:51:64:c9:c1:2b:aa:73:50: e1:55:92:99:24:0c:0c:e2:9e:f2:27:9e:26:bc:83: d9:f6:98:04:85:5f:38:d6:c3:67:46:74:78:46:dd: 73:5c:c7:ef:ed:81:ef:e9:3e:54:0a:5f:7d:c1:ae: 8f:d4:dd:4d:64:f9:80:75:90:e6:25:e9:37:8d:72: 2f:b9:c6:56:7e:93:48:ed:37:b6:7f:d0:3a:85:8f: a2:7e:5e:6a:e8:77:19:d0:b2:3b:04:65:04:f3:3a: 2a:47:99:09:47:d3:71:14:5a:a8:06:db:f9:9c:fd: 7e:c6:39:17:52:31:30:8f:3b:c8:05:86:d2:e5:b2: b8:69:81:65:ef:bd:03:40:99:07:95:3d:23:c1:34: 7d:60:5d:57:52:a3:15:b3:e6:96:08:52:87:14:27: 01:22:12:69:c9:6d:e1:55:8b:25:4b:f5:03:83:ce: 0e:c6:81:58:4a:83:91:dd:5c:51:65:cc:9f:f6:cb: 88:c2:94:06:d6:22:45:11:4c:b4:97:1b:8e:9a:7f: 73:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:93:59:36:BE:F9:5E:7A:89:35:CD:8E:3A:90:3E:81:A7:BC:F5:14 X509v3 Authority Key Identifier: keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b5:94:72:ba:6a:f2:10:d7:a9:16:29:52:91:9e:27:84:cd: 4a:41:b6:42:17:c7:64:89:47:4b:20:c3:77:41:26:0d:9d:69: 62:98:e5:32:0f:59:0e:b3:74:8d:ea:60:9e:c1:2d:95:4e:54: 70:41:08:64:bb:05:b2:40:de:8f:74:e6:4b:52:d1:6c:61:c3: 6e:19:ce:83:bc:b4:33:90:77:b6:c0:97:9c:86:53:3e:8c:59: 5e:48:14:98:cc:99:f1:db:71:f1:3e:8b:d4:2d:e6:bc:c4:b0: e4:cf:19:34:37:eb:01:ad:1b:db:37:46:fb:7d:12:bc:5b:54: a9:13:b0:f2:d3:bd:39:ac:a2:d7:e6:9c:b3:77:42:a7:31:1c: 95:11:d1:ec:58:d4:86:df:90:34:32:68:31:10:4a:bc:86:62: 1a:47:a6:4f:7b:0d:fc:1e:b8:16:16:2d:12:6c:7a:33:8d:fa: 7d:c3:cf:5f:e8:69:64:52:8d:e1:01:af:37:80:68:f1:63:e5: 86:a4:e8:f4:28:7d:24:6b:13:2e:be:07:09:4e:ce:c3:3a:cb: e1:6a:a6:05:39:8a:16:53:b7:59:61:34:0f:59:11:25:ad:a1: 57:8d:c5:9f:5e:23:c0:d5:ab:bf:38:3b:de:53:1e:ae:03:5c: 9e:2f:68:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUpKERV/EcvGJTOuUAEQLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw N2VjMDIwHhcNMjUxMjE2MDQwMjA2WhcNMjUxMjE3MDQwMjA2WjAzMTEwLwYDVQQD EygwZjkzNTkzNmJlZjk1ZTdhODkzNWNkOGUzYTkwM2U4MWE3YmNmNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJhAViVQfEDltq9WoP9Jukz9NjD+ 1EL8sUWY2dC1vTfqT6QHI7gqY400wGF0ga1DkdSBUWTJwSuqc1DhVZKZJAwM4p7y J54mvIPZ9pgEhV841sNnRnR4Rt1zXMfv7YHv6T5UCl99wa6P1N1NZPmAdZDmJek3 jXIvucZWfpNI7Te2f9A6hY+ifl5q6HcZ0LI7BGUE8zoqR5kJR9NxFFqoBtv5nP1+ xjkXUjEwjzvIBYbS5bK4aYFl770DQJkHlT0jwTR9YF1XUqMVs+aWCFKHFCcBIhJp yW3hVYslS/UDg84OxoFYSoOR3VxRZcyf9suIwpQG1iJFEUy0lxuOmn9zRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+TWTa++V56iTXNjjqQPoGnvPUUMB8GA1UdIwQY MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt MWJiMTdhOGIyNmZlLzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrWUcrpq 8hDXqRYpUpGeJ4TNSkG2QhfHZIlHSyDDd0EmDZ1pYpjlMg9ZDrN0jepgnsEtlU5U cEEIZLsFskDej3TmS1LRbGHDbhnOg7y0M5B3tsCXnIZTPoxZXkgUmMyZ8dtx8T6L 1C3mvMSw5M8ZNDfrAa0b2zdG+30SvFtUqROw8tO9Oayi1+acs3dCpzEclRHR7FjU ht+QNDJoMRBKvIZiGkemT3sN/B64FhYtEmx6M436fcPPX+hpZFKN4QGvN4Bo8WPl hqTo9Ch9JGsTLr4HCU7OwzrL4WqmBTmKFlO3WWE0D1kRJa2hV43Fn14jwNWrvzg7 3lMergNcni9oAw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:29:06 2025 by rpki-client