This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json) Hash identifier: zfjI0aAkR1aMi7czjRCYnvDWoe1OGDZlyNPRug526ug= Subject key identifier: EE:50:75:22:EA:96:D7:8B:5E:A2:8C:6E:76:57:12:19:95:B3:CA:AC Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624 Certificate serial: 019B38335B0B56D2714F62133DD4C3630245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft Manifest number: 06FD Signing time: Fri 19 Dec 2025 20:00:48 +0000 Manifest this update: Fri 19 Dec 2025 20:00:48 +0000 Manifest next update: Sat 20 Dec 2025 20:00:48 +0000 Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=) 2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: XuFEgMRoDk7FSobeS66pmMAvNQe9VpiK2VJuwRAjAQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:5b:0b:56:d2:71:4f:62:13:3d:d4:c3:63:02:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624 Validity Not Before: Dec 19 20:00:48 2025 GMT Not After : Dec 20 20:00:48 2025 GMT Subject: CN=ee507522ea96d78b5ea28c6e7657121995b3caac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1d:cc:24:b8:05:c0:aa:db:12:d8:aa:a9:40: f3:72:01:23:c0:06:87:71:67:10:83:03:0a:ae:4a: 4c:54:a1:92:0c:d2:78:cf:7e:87:94:e3:76:83:70: 87:bb:57:52:fd:c2:b3:f1:3f:23:5b:b9:a3:7e:bb: 54:1e:36:96:45:30:dc:31:c5:20:f2:94:d7:62:a7: 4e:a1:11:d4:12:28:bb:f0:d2:4f:c7:06:d9:e9:8f: fc:bb:49:e3:9a:e1:1e:8c:1c:b7:15:ba:ba:84:8f: e2:15:b1:4f:26:19:ae:a9:41:0b:c8:61:35:f5:5b: e9:bb:cc:82:eb:ab:00:2e:b9:c8:37:ad:5d:f7:d5: 2f:a1:4e:22:50:72:3c:9d:1a:ec:ba:5d:72:9f:79: c2:54:64:16:e3:d2:70:8a:71:bc:a5:dd:7d:16:d1: 91:7a:81:44:ca:ae:f6:24:2d:c4:d9:28:ae:44:6b: 43:3f:5d:04:6a:08:9a:38:0c:ea:10:17:20:e3:ab: b0:c1:15:c6:10:e2:ba:36:dd:a3:f9:75:61:16:d1: 2a:46:a8:9a:f9:38:35:60:a6:4f:44:46:14:60:0f: 5f:f6:a1:ce:e6:ef:90:cd:59:88:39:cd:72:d1:cd: bf:e3:8f:e3:d9:1a:3d:68:d5:b3:d9:39:df:37:cd: 1f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:50:75:22:EA:96:D7:8B:5E:A2:8C:6E:76:57:12:19:95:B3:CA:AC X509v3 Authority Key Identifier: keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:d1:dd:d1:dc:cc:5e:bb:06:5c:b3:3e:18:3f:19:a9:e7:43: 0d:15:be:84:33:e2:83:3e:58:bd:e9:48:5b:2e:5b:42:cc:ea: fd:d5:69:81:39:69:21:2b:1c:c6:26:18:8c:7a:2b:df:b9:c8: 55:44:7f:fa:b5:a8:74:3c:ce:d6:fb:63:b1:c3:55:2d:e6:e3: e8:cc:dc:dd:69:db:2a:db:0d:98:84:14:5d:42:3a:84:03:ca: 43:c3:09:aa:59:60:71:ae:10:b0:ad:24:18:15:d2:13:07:22: 1e:47:64:fe:a8:94:06:e9:48:77:1f:ea:0d:75:1d:8b:f5:ac: 1d:4e:16:82:28:72:30:ba:6a:89:1d:56:2c:15:df:1c:85:56: 1a:73:f2:20:b4:20:b9:48:e1:9a:90:cc:85:0a:b0:97:71:cb: e7:75:88:fd:aa:ee:36:6a:5c:34:f0:07:ad:37:f5:60:bc:04: 12:43:ac:93:b6:d7:e0:5c:f9:56:88:ae:f1:6a:de:54:f5:e8: 97:6d:d9:10:d7:b6:ec:9a:17:44:d9:19:98:d5:60:6a:b5:3b: ed:19:2a:f5:33:e6:4d:90:df:c5:51:5b:97:30:55:65:8b:58: 78:57:17:ed:96:a2:00:55:5f:d8:42:94:ce:01:f5:70:ab:96: 1b:d7:20:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M1sLVtJxT2ITPdTDYwJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjIwN2VmODAyNDI0NGJiYjRhMDEwNmFmMTkyNzAxNTBj OWY2MjQwHhcNMjUxMjE5MjAwMDQ4WhcNMjUxMjIwMjAwMDQ4WjAzMTEwLwYDVQQD EyhlZTUwNzUyMmVhOTZkNzhiNWVhMjhjNmU3NjU3MTIxOTk1YjNjYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR3MJLgFwKrbEtiqqUDzcgEjwAaH cWcQgwMKrkpMVKGSDNJ4z36HlON2g3CHu1dS/cKz8T8jW7mjfrtUHjaWRTDcMcUg 8pTXYqdOoRHUEii78NJPxwbZ6Y/8u0njmuEejBy3Fbq6hI/iFbFPJhmuqUELyGE1 9Vvpu8yC66sALrnIN61d99UvoU4iUHI8nRrsul1yn3nCVGQW49JwinG8pd19FtGR eoFEyq72JC3E2SiuRGtDP10EagiaOAzqEBcg46uwwRXGEOK6Nt2j+XVhFtEqRqia +Tg1YKZPREYUYA9f9qHO5u+QzVmIOc1y0c2/44/j2Ro9aNWz2TnfN80fQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5QdSLqlteLXqKMbnZXEhmVs8qsMB8GA1UdIwQY MBaAFPSyB++AJCRLu0oBBq8ZJwFQyfYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2Mt MzVlMDY5MzQ4ZWIzLzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2MtMzVlMDY5MzQ4ZWIz LzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9Hd0dzM XrsGXLM+GD8ZqedDDRW+hDPigz5YvelIWy5bQszq/dVpgTlpISscxiYYjHor37nI VUR/+rWodDzO1vtjscNVLebj6Mzc3WnbKtsNmIQUXUI6hAPKQ8MJqllgca4QsK0k GBXSEwciHkdk/qiUBulIdx/qDXUdi/WsHU4WgihyMLpqiR1WLBXfHIVWGnPyILQg uUjhmpDMhQqwl3HL53WI/aruNmpcNPAHrTf1YLwEEkOsk7bX4Fz5Voiu8WreVPXo l23ZENe27JoXRNkZmNVgarU77Rkq9TPmTZDfxVFblzBVZYtYeFcX7ZaiAFVf2EKU zgH1cKuWG9cgaA== -----END CERTIFICATE-----Generated at Sat Dec 20 00:15:05 2025 by rpki-client