This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft File: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft (raw, json) Hash identifier: GjDjdP0xNMF5aZvROc9F7jf2ajtfp7cHFuT0stnDGR8= Subject key identifier: 0D:A6:95:A0:44:A0:9D:92:37:9F:51:E9:A0:F9:F9:3B:70:4D:8C:23 Authority key identifier: BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 Certificate issuer: /CN=bbd351b274fc23a42728303638a0d62b606401b4 Certificate serial: 019B59AC773B3387ED803BAF423642F0987F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 08:00:33 +0000 Manifest this update: Fri 26 Dec 2025 08:00:33 +0000 Manifest next update: Sat 27 Dec 2025 08:00:33 +0000 Files and hashes: 1: 5g1tjgsfll7LK-waAj9bTQ2h-3c.roa (hash: 8D1n33aMnmCgAozOd2zA5z3xSs5pmebBm8HLBHCuK3k=) 2: LH7w3vOlTcRmJHq2EtyJwGzFlEE.roa (hash: BdRuTFIKBfgw0BiPV5lECgqiOEd6ZtJOGCfbNoIAYBE=) 3: Q6nJt5OyB3yAAOcFFRG5qOehAok.roa (hash: KO9C76YDm/Okx701iaZdKEGFLB0y+hfe45N6CADpuPc=) 4: mSE5jFaDyQq229roQ5L8OUwLYf8.roa (hash: 9syYjhG++XjU5LLyMYmj6GtRt7K4tV+VTMTyeR8mVrI=) 5: mrSrlKE7xCslqlPTXvwVWDdiqIY.roa (hash: p/QlzvPV8hfJGKn1J+54dIx9OQB/pBF0YHBs+kQo1HM=) 6: u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl (hash: tRA7VZgdjapsN0KLUTcdTXhsGmJD0bUv1HCD1UiHnH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:77:3b:33:87:ed:80:3b:af:42:36:42:f0:98:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd351b274fc23a42728303638a0d62b606401b4 Validity Not Before: Dec 26 08:00:33 2025 GMT Not After : Dec 27 08:00:33 2025 GMT Subject: CN=0da695a044a09d92379f51e9a0f9f93b704d8c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:a9:f5:0c:e4:87:30:ca:4a:44:6d:d8:d3: 5b:3e:04:cc:b3:cc:dd:87:35:89:28:88:cd:8a:af: cc:8a:48:fc:47:d3:9c:9e:3c:51:42:7f:44:f0:49: b7:97:00:d0:9f:fc:87:f8:2f:60:3b:a0:c4:1e:e0: 9c:05:0a:2a:2b:0e:61:6b:44:52:af:09:55:f7:aa: 2f:a9:31:6f:54:50:4c:ce:5a:da:f8:c0:01:bc:8d: 07:de:52:91:7b:35:a9:0c:ef:7a:81:d4:0d:be:97: de:97:c2:c9:75:f0:f4:42:c9:b0:d0:ad:c8:b4:1a: 64:51:0f:d0:90:cb:c6:17:51:f2:62:05:cb:6b:f8: b6:2c:b0:eb:7a:3f:b9:ca:91:da:49:fc:64:37:e0: cc:ca:92:89:b9:c4:f9:52:8f:00:24:59:32:c0:57: 75:47:c7:7c:cc:2a:45:e0:8f:f4:bb:d2:91:42:80: 91:94:f9:a8:6b:5b:34:3f:bf:c4:5b:63:70:80:df: 7f:d1:8a:e5:db:d8:93:d4:9e:38:22:d0:06:62:ed: 13:6f:72:52:ea:68:1f:71:e9:df:c1:ca:17:a2:57: ff:fe:52:f8:3b:cb:56:ad:de:67:98:4b:4e:0c:c6: 7b:61:e8:dc:34:4c:2a:b5:47:8e:bc:a6:b1:4a:60: c6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A6:95:A0:44:A0:9D:92:37:9F:51:E9:A0:F9:F9:3B:70:4D:8C:23 X509v3 Authority Key Identifier: keyid:BB:D3:51:B2:74:FC:23:A4:27:28:30:36:38:A0:D6:2B:60:64:01:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1f90a-2bad-41b4-b1a6-46b3028a03b0/1/u9NRsnT8I6QnKDA2OKDWK2BkAbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:fd:13:ab:48:d4:23:3a:7b:55:7a:5f:61:fa:a3:69:f5:72: 37:d8:37:a0:10:17:7c:12:34:4b:cc:ef:84:86:52:13:ca:c5: a1:93:41:e9:5f:e4:78:5f:06:83:6e:e3:15:3c:21:5b:49:44: 3d:66:46:23:34:f0:a1:89:38:a6:c8:6e:8b:8e:54:bf:77:e8: 91:c6:bf:5a:6f:bf:7b:eb:f8:95:c1:53:51:c1:7b:f6:01:d1: 11:ae:af:cb:1f:db:fa:e7:d4:53:3e:bf:49:61:78:79:a8:4c: 41:bd:01:74:58:c2:27:27:d3:43:1b:3f:48:d0:7e:28:9a:79: 60:d1:20:40:28:75:d2:20:91:c7:56:16:30:26:3d:16:49:5c: 26:e5:6b:69:e6:ee:af:8f:f7:4b:8d:53:08:df:eb:0e:5a:2b: 54:01:9a:80:d7:5f:d9:bc:25:f4:a3:bd:2c:06:d4:aa:f8:2b: f9:76:f9:bc:59:4c:01:7e:c8:99:34:ef:97:a2:94:ef:26:c5: 30:2b:ce:93:24:34:93:3c:f0:6d:60:79:0d:5e:06:70:88:7f: b5:e5:ba:41:c9:02:92:cb:0b:d1:3b:6f:d3:be:13:b9:bb:06: 0d:f8:19:84:64:a9:60:f5:bd:1b:b8:8e:71:50:98:5f:b0:47: 1d:72:a9:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrHc7M4ftgDuvQjZC8Jh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDM1MWIyNzRmYzIzYTQyNzI4MzAzNjM4YTBkNjJiNjA2 NDAxYjQwHhcNMjUxMjI2MDgwMDMzWhcNMjUxMjI3MDgwMDMzWjAzMTEwLwYDVQQD EygwZGE2OTVhMDQ0YTA5ZDkyMzc5ZjUxZTlhMGY5ZjkzYjcwNGQ4YzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdOp9QzkhzDKSkRt2NNbPgTMs8zd hzWJKIjNiq/Mikj8R9OcnjxRQn9E8Em3lwDQn/yH+C9gO6DEHuCcBQoqKw5ha0RS rwlV96ovqTFvVFBMzlra+MABvI0H3lKRezWpDO96gdQNvpfel8LJdfD0Qsmw0K3I tBpkUQ/QkMvGF1HyYgXLa/i2LLDrej+5ypHaSfxkN+DMypKJucT5Uo8AJFkywFd1 R8d8zCpF4I/0u9KRQoCRlPmoa1s0P7/EW2NwgN9/0Yrl29iT1J44ItAGYu0Tb3JS 6mgfcenfwcoXolf//lL4O8tWrd5nmEtODMZ7YejcNEwqtUeOvKaxSmDGjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2mlaBEoJ2SN59R6aD5+TtwTYwjMB8GA1UdIwQY MBaAFLvTUbJ0/COkJygwNjig1itgZAG0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYt NDZiMzAyOGEwM2IwLzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jMWY5MGEtMmJhZC00MWI0LWIxYTYtNDZiMzAyOGEwM2Iw LzEvdTlOUnNuVDhJNlFuS0RBMk9LRFdLMkJrQWJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjv0Tq0jU Izp7VXpfYfqjafVyN9g3oBAXfBI0S8zvhIZSE8rFoZNB6V/keF8Gg27jFTwhW0lE PWZGIzTwoYk4pshui45Uv3fokca/Wm+/e+v4lcFTUcF79gHREa6vyx/b+ufUUz6/ SWF4eahMQb0BdFjCJyfTQxs/SNB+KJp5YNEgQCh10iCRx1YWMCY9FklcJuVraebu r4/3S41TCN/rDlorVAGagNdf2bwl9KO9LAbUqvgr+Xb5vFlMAX7ImTTvl6KU7ybF MCvOkyQ0kzzwbWB5DV4GcIh/teW6QckCkssL0Ttv074TubsGDfgZhGSpYPW9G7iO cVCYX7BHHXKp2g== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:04 2025 by rpki-client