This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft File: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft (raw, json) Hash identifier: zdGyoUmeXPDl5x+Y+Xp+8wlCSTW0m695GZx/T8DAp7o= Subject key identifier: 16:44:AC:EF:83:65:D0:5F:4F:16:07:5B:A0:DC:23:A7:C4:CC:1B:B8 Authority key identifier: F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2 Certificate issuer: /CN=f71b99831d44b0bf7c00c50977f60b1844349cf2 Certificate serial: 019B59E3ECD8CF1127DDAA1184B6F1B29428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft Manifest number: 0E78 Signing time: Fri 26 Dec 2025 09:01:08 +0000 Manifest this update: Fri 26 Dec 2025 09:01:08 +0000 Manifest next update: Sat 27 Dec 2025 09:01:08 +0000 Files and hashes: 1: 9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl (hash: 7FMiMyWgqqUjs7V1I/ALqGOC3e3L04jcqgkU02PVSUw=) 2: lTwG7fexEhfG1KlVMWVQwuwbbtc.roa (hash: bfD7+ofvPCOaA8CmUpbLhJtSVYv9giSBukJUfQkg6wo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:ec:d8:cf:11:27:dd:aa:11:84:b6:f1:b2:94:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71b99831d44b0bf7c00c50977f60b1844349cf2 Validity Not Before: Dec 26 09:01:08 2025 GMT Not After : Dec 27 09:01:08 2025 GMT Subject: CN=1644acef8365d05f4f16075ba0dc23a7c4cc1bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:eb:a5:b8:71:ce:53:b7:43:9b:3d:0d:4d:aa: b0:55:24:a9:fa:af:51:e0:de:e0:36:cc:39:94:bb: d8:d0:bc:36:85:c5:82:18:fd:ad:98:14:df:fa:42: 13:8f:13:c1:d2:cd:b6:12:d6:b5:1c:4d:c3:9e:c6: 86:d3:d7:a5:b3:3f:85:d7:c2:8e:12:a0:10:4e:bf: d2:71:f2:b2:82:23:ec:40:68:e2:10:7c:c0:ad:1b: ef:15:06:94:07:a4:bc:5b:d6:4c:45:d7:61:f6:76: 1d:d9:7c:bf:ff:72:50:23:fd:ed:88:17:ae:95:86: ab:f7:cb:f0:1d:a4:00:b5:84:9d:37:92:61:76:c9: 55:2e:be:ee:d2:90:92:7d:bd:94:18:22:be:75:51: 1f:e8:56:2a:10:4b:63:4d:39:f2:2f:ca:af:61:ab: 85:eb:58:90:03:2d:19:cc:5f:e3:ee:b5:c6:ca:dd: b2:e9:2e:cb:42:b1:59:12:ed:9a:1e:4e:db:d3:c3: dc:ae:3c:1c:c4:e5:08:b4:b9:3e:ee:0b:bd:fa:84: f0:31:c2:c7:b8:44:e8:fc:a1:83:b1:e0:80:e2:b3: 2d:df:64:49:a7:8d:10:51:28:28:f4:2b:62:8b:03: 8d:c9:49:e9:98:f3:24:50:46:71:50:be:be:d3:ca: b6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:44:AC:EF:83:65:D0:5F:4F:16:07:5B:A0:DC:23:A7:C4:CC:1B:B8 X509v3 Authority Key Identifier: keyid:F7:1B:99:83:1D:44:B0:BF:7C:00:C5:09:77:F6:0B:18:44:34:9C:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xuZgx1EsL98AMUJd_YLGEQ0nPI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6e6175-635a-4cc6-94ed-0dcf45a5af3d/1/9xuZgx1EsL98AMUJd_YLGEQ0nPI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a6:ec:64:0f:60:ba:22:9b:08:a2:4b:b2:3e:b0:7a:68:1d: 7f:a2:cd:c1:4c:e0:8a:98:93:1f:7c:9f:e4:20:8a:7f:f8:05: ca:d9:69:c4:89:98:db:4b:f2:95:fc:c6:8e:12:1d:88:53:38: 3a:9b:b7:84:2b:52:db:a2:59:6c:89:47:c9:81:16:30:1b:99: 45:4b:d7:14:53:1e:48:9f:d2:8d:d3:a2:bf:21:f2:57:25:8d: 85:93:3b:12:e7:81:dc:a9:16:39:be:d1:4a:76:ab:f1:24:39: f2:a0:c1:6a:7c:0b:10:72:fc:5d:9b:a8:d4:e0:e8:cc:29:15: 6a:20:19:28:85:07:05:d3:79:1f:b1:47:f2:2b:75:86:7a:e3: 4a:cc:46:41:d3:a3:d4:38:8d:fa:f9:15:42:d0:98:c6:22:82: df:1a:89:4e:fe:86:05:71:fe:15:aa:d0:ff:d1:b6:6a:4e:06: 2e:3c:3b:74:4e:57:58:08:13:12:45:0e:d0:44:b5:61:f3:57: e6:d1:77:42:26:48:96:b6:e0:7c:0a:1f:b6:4b:b9:b6:ee:3e: 50:77:0e:d0:92:98:9c:5f:4d:f5:4f:69:c3:af:f0:7b:1d:8a: d6:18:ab:df:42:6e:38:7f:16:a0:9c:38:ea:24:82:35:96:63: 38:db:a7:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ4+zYzxEn3aoRhLbxspQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWI5OTgzMWQ0NGIwYmY3YzAwYzUwOTc3ZjYwYjE4NDQz NDljZjIwHhcNMjUxMjI2MDkwMTA4WhcNMjUxMjI3MDkwMTA4WjAzMTEwLwYDVQQD EygxNjQ0YWNlZjgzNjVkMDVmNGYxNjA3NWJhMGRjMjNhN2M0Y2MxYmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOuluHHOU7dDmz0NTaqwVSSp+q9R 4N7gNsw5lLvY0Lw2hcWCGP2tmBTf+kITjxPB0s22Eta1HE3DnsaG09elsz+F18KO EqAQTr/ScfKygiPsQGjiEHzArRvvFQaUB6S8W9ZMRddh9nYd2Xy//3JQI/3tiBeu lYar98vwHaQAtYSdN5JhdslVLr7u0pCSfb2UGCK+dVEf6FYqEEtjTTnyL8qvYauF 61iQAy0ZzF/j7rXGyt2y6S7LQrFZEu2aHk7b08PcrjwcxOUItLk+7gu9+oTwMcLH uETo/KGDseCA4rMt32RJp40QUSgo9CtiiwONyUnpmPMkUEZxUL6+08q2UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZErO+DZdBfTxYHW6DcI6fEzBu4MB8GA1UdIwQY MBaAFPcbmYMdRLC/fADFCXf2CxhENJzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQt MGRjZjQ1YTVhZjNkLzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC82ZTYxNzUtNjM1YS00Y2M2LTk0ZWQtMGRjZjQ1YTVhZjNk LzEvOXh1Wmd4MUVzTDk4QU1VSmRfWUxHRVEwblBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqbsZA9g uiKbCKJLsj6wemgdf6LNwUzgipiTH3yf5CCKf/gFytlpxImY20vylfzGjhIdiFM4 Opu3hCtS26JZbIlHyYEWMBuZRUvXFFMeSJ/SjdOivyHyVyWNhZM7EueB3KkWOb7R Snar8SQ58qDBanwLEHL8XZuo1ODozCkVaiAZKIUHBdN5H7FH8it1hnrjSsxGQdOj 1DiN+vkVQtCYxiKC3xqJTv6GBXH+FarQ/9G2ak4GLjw7dE5XWAgTEkUO0ES1YfNX 5tF3QiZIlrbgfAoftku5tu4+UHcO0JKYnF9N9U9pw6/wex2K1hir30JuOH8WoJw4 6iSCNZZjONunCQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:56:19 2025 by rpki-client