This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json) Hash identifier: T3RFIzk1i1S7ddgMBBWZBwah5u4+T3+53oAMfdEYTYA= Subject key identifier: AC:99:71:BF:39:9F:CF:AC:D0:BE:F1:3F:20:69:CA:28:AC:A2:A0:2D Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Certificate serial: 019B5ABF1E8BB9FE57AF91EDC530A828BC5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 13:00:33 +0000 Manifest this update: Fri 26 Dec 2025 13:00:33 +0000 Manifest next update: Sat 27 Dec 2025 13:00:33 +0000 Files and hashes: 1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=) 2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=) 3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: 5bBO7hZd6MEUu4N6WSQPLmBtqmiKEl2KSCH1T8qRkEE=) 4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:1e:8b:b9:fe:57:af:91:ed:c5:30:a8:28:bc:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Validity Not Before: Dec 26 13:00:33 2025 GMT Not After : Dec 27 13:00:33 2025 GMT Subject: CN=ac9971bf399fcfacd0bef13f2069ca28aca2a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:9d:d1:de:03:6a:36:09:1d:05:d2:2d:4f: 0a:23:99:45:bc:64:a5:19:2e:39:82:62:88:81:b2: 99:8d:37:61:f4:17:c1:d0:54:ee:1e:eb:a3:87:b2: eb:53:9d:32:6f:b6:25:be:94:15:7c:43:77:e7:a2: 1f:e8:29:87:6a:62:2c:7a:2c:2a:c4:f4:52:1a:0e: 7d:40:a1:a6:6a:bc:7a:73:c6:a0:2a:bb:95:22:b1: ce:4b:48:06:33:03:d9:cb:fe:84:4c:de:2a:82:72: e4:a0:26:bd:26:c0:32:f2:e3:7b:3f:3a:8e:33:b9: e4:52:af:9b:54:95:e7:0c:a5:24:1a:1a:5d:da:5b: 7c:52:70:c3:0e:97:74:6d:0d:1d:a0:42:a5:b5:94: ab:15:89:dc:2e:e1:b6:42:04:31:a4:eb:07:c5:b3: c2:e0:44:fb:d2:e0:93:67:db:94:70:b7:9a:f4:a3: 88:2c:44:ff:ff:c1:79:69:a5:c9:60:cd:ab:1f:ca: 32:33:cb:5a:d0:82:8a:b5:a2:42:e2:76:75:54:6a: 22:2e:97:e5:73:c0:22:8e:31:03:d9:4a:de:50:b3: 43:9e:42:1f:6b:fe:44:90:14:3b:9d:af:1d:d9:91: 41:87:ea:25:f6:fe:1e:4f:3a:26:07:0f:eb:6b:ed: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:99:71:BF:39:9F:CF:AC:D0:BE:F1:3F:20:69:CA:28:AC:A2:A0:2D X509v3 Authority Key Identifier: keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:91:c1:a5:3c:b4:fd:4f:3f:54:26:ac:c4:e0:2d:74:2d:89: 31:bd:1f:ab:68:e4:4c:f7:cf:82:d6:ae:d3:2b:46:62:4d:fc: 8a:2f:c4:17:a1:1a:50:a8:e5:65:c8:df:38:da:a6:f3:97:48: 1c:89:81:5d:fb:1d:63:14:a7:fb:4b:da:a3:07:22:2c:19:e1: f5:ab:5f:3d:52:3c:b7:e1:45:65:09:a0:33:57:02:76:2b:65: 45:e2:99:5f:ca:a4:7f:95:f8:20:ef:35:9b:7d:1f:d1:13:b8: 5e:99:49:32:ad:52:b2:a7:49:95:f0:e2:f4:dc:e5:04:71:48: b9:55:a2:42:3f:19:8c:b2:ae:7c:f7:77:61:98:ae:80:74:30: 42:f4:3f:bd:88:0b:14:f2:be:58:92:4d:75:14:da:a2:2e:46: 1c:47:6d:c1:cb:93:d4:df:66:3b:1c:e8:7d:40:52:e3:9c:09: 5c:27:d3:c8:5b:e7:76:a8:12:21:38:bf:c8:e2:83:40:3b:e6: 5f:97:57:b0:5c:36:9c:4a:94:d7:72:56:65:39:43:14:21:b7: 68:1b:ac:8a:59:5e:e1:74:d4:60:22:8f:cd:d9:23:b0:ec:3e: 56:ac:64:39:af:bf:e5:41:8f:0d:38:5c:5f:25:41:e8:e8:22: 98:a8:9c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavx6Luf5Xr5HtxTCoKLxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZGUzNDZiNTgwNTMyN2JiYzlkZjVlNDliMTZjOTk3ZWEz YTEyNTQwHhcNMjUxMjI2MTMwMDMzWhcNMjUxMjI3MTMwMDMzWjAzMTEwLwYDVQQD EyhhYzk5NzFiZjM5OWZjZmFjZDBiZWYxM2YyMDY5Y2EyOGFjYTJhMDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaqd0d4DajYJHQXSLU8KI5lFvGSl GS45gmKIgbKZjTdh9BfB0FTuHuujh7LrU50yb7YlvpQVfEN356If6CmHamIseiwq xPRSGg59QKGmarx6c8agKruVIrHOS0gGMwPZy/6ETN4qgnLkoCa9JsAy8uN7PzqO M7nkUq+bVJXnDKUkGhpd2lt8UnDDDpd0bQ0doEKltZSrFYncLuG2QgQxpOsHxbPC 4ET70uCTZ9uUcLea9KOILET//8F5aaXJYM2rH8oyM8ta0IKKtaJC4nZ1VGoiLpfl c8AijjED2UreULNDnkIfa/5EkBQ7na8d2ZFBh+ol9v4eTzomBw/ra+3zjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyZcb85n8+s0L7xPyBpyiisoqAtMB8GA1UdIwQY MBaAFPbeNGtYBTJ7vJ315JsWyZfqOhJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUt NzNhYjg1NjRiOWNhLzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUtNzNhYjg1NjRiOWNh LzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZHBpTy0 /U8/VCasxOAtdC2JMb0fq2jkTPfPgtau0ytGYk38ii/EF6EaUKjlZcjfONqm85dI HImBXfsdYxSn+0vaowciLBnh9atfPVI8t+FFZQmgM1cCditlReKZX8qkf5X4IO81 m30f0RO4XplJMq1SsqdJlfDi9NzlBHFIuVWiQj8ZjLKufPd3YZiugHQwQvQ/vYgL FPK+WJJNdRTaoi5GHEdtwcuT1N9mOxzofUBS45wJXCfTyFvndqgSITi/yOKDQDvm X5dXsFw2nEqU13JWZTlDFCG3aBusille4XTUYCKPzdkjsOw+VqxkOa+/5UGPDThc XyVB6OgimKicQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:48 2025 by rpki-client