This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json) Hash identifier: a16WBk8N0sAyJy7IJe3rQk/atx07cpPgFCEK7LN2Lxg= Subject key identifier: AD:D2:04:58:0D:47:4E:2E:EE:94:F3:0D:D4:30:78:41:4F:58:50:3D Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Certificate serial: 019B33B1CC0D0E62F9D18120B98BB9BA0012 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft Manifest number: 152A Signing time: Thu 18 Dec 2025 23:00:48 +0000 Manifest this update: Thu 18 Dec 2025 23:00:48 +0000 Manifest next update: Fri 19 Dec 2025 23:00:48 +0000 Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=) 2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: U4itRFINFzgEGRpE85bJWGUDpUcDnqUU7SBt5ePRFRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b1:cc:0d:0e:62:f9:d1:81:20:b9:8b:b9:ba:00:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Validity Not Before: Dec 18 23:00:48 2025 GMT Not After : Dec 19 23:00:48 2025 GMT Subject: CN=add204580d474e2eee94f30dd43078414f58503d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:44:69:69:bf:dd:2c:56:05:40:97:2e:0c:e1: e3:52:6b:fd:5b:7a:83:37:04:31:1b:50:08:e4:1a: c8:36:c9:49:af:47:cb:9e:65:0e:29:ab:92:13:86: 15:c9:9f:c9:88:74:eb:f3:0b:5a:1a:ff:8c:3d:7c: df:db:4d:e4:3b:59:00:65:37:bc:68:45:1f:97:06: 3d:57:ff:4b:56:df:39:4d:85:5f:d1:77:25:36:23: ed:ad:ff:28:d5:b4:58:68:99:f9:1d:19:46:c0:94: 0e:3a:b4:38:a1:5f:17:ac:d4:4d:61:e9:9f:1e:0f: e6:b4:e8:a4:ba:a2:ea:5b:19:57:b1:c8:ca:8b:9a: 24:49:17:69:dd:70:47:b5:a5:93:07:f6:c7:49:ef: 72:fe:ea:31:dc:86:38:84:35:69:6d:71:8d:dc:7e: d8:aa:28:6f:17:ed:a8:34:14:83:f9:d0:8d:6c:8b: 32:4c:d7:9c:5e:3b:40:db:34:8f:51:f9:ec:04:8b: 3e:c5:98:3d:85:de:d3:c6:f2:c7:50:eb:33:91:0a: df:9f:30:6f:78:cf:1c:0e:6c:26:7a:f9:2b:59:c7: b6:0c:44:c9:de:7c:56:8c:c2:f9:d7:30:b8:a6:b1: 28:e2:a1:05:06:e6:29:d1:0a:4d:d7:a5:75:89:4c: 7d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D2:04:58:0D:47:4E:2E:EE:94:F3:0D:D4:30:78:41:4F:58:50:3D X509v3 Authority Key Identifier: keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:35:ad:6f:0e:3a:89:df:a8:93:84:a3:cd:75:e7:a2:48:0f: 58:09:58:98:68:d8:84:c9:d2:5b:81:d5:b4:41:1c:7b:60:0a: 39:d1:72:00:f0:2e:c9:71:db:16:7a:07:7d:eb:72:67:5e:a8: 1b:37:80:13:3a:0a:ed:da:4e:6f:82:b6:d3:d5:8d:7d:3f:e7: e0:10:60:71:44:fa:cf:98:50:c2:83:64:62:17:b5:3c:49:0f: 0a:d8:83:a8:f2:48:43:a7:f8:a5:c0:23:51:2d:34:78:62:4b: 49:89:66:f2:10:2d:9f:81:0c:9a:e6:8a:72:13:79:de:7b:6e: b4:0f:cd:c3:73:41:32:2f:77:ce:e7:bd:b7:93:9b:60:93:bf: 9f:4b:e4:1b:cf:4b:b0:60:44:4b:fe:28:82:43:be:f1:c5:42: 62:34:c8:30:70:dc:e7:e1:e0:4a:8b:4b:71:5d:d2:a4:c3:04: b3:f0:07:af:0d:63:70:31:c0:7b:cd:c9:0d:2e:11:5c:2e:18: 24:25:d4:e3:67:f1:e1:5d:3e:a4:79:ae:48:96:a8:04:72:f5: 7e:40:9e:84:5a:48:40:5f:ea:7d:1f:11:62:f5:e2:75:e9:48: 78:72:02:ed:02:64:bd:c7:fb:bd:f2:4a:40:81:bb:78:b5:41: b9:2b:00:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszscwNDmL50YEguYu5ugASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDZjODYwMzQyY2M3OTljMjgwNzRmNjk5NzY4YThlY2Jk YWE1MmUwHhcNMjUxMjE4MjMwMDQ4WhcNMjUxMjE5MjMwMDQ4WjAzMTEwLwYDVQQD EyhhZGQyMDQ1ODBkNDc0ZTJlZWU5NGYzMGRkNDMwNzg0MTRmNTg1MDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkRpab/dLFYFQJcuDOHjUmv9W3qD NwQxG1AI5BrINslJr0fLnmUOKauSE4YVyZ/JiHTr8wtaGv+MPXzf203kO1kAZTe8 aEUflwY9V/9LVt85TYVf0XclNiPtrf8o1bRYaJn5HRlGwJQOOrQ4oV8XrNRNYemf Hg/mtOikuqLqWxlXscjKi5okSRdp3XBHtaWTB/bHSe9y/uox3IY4hDVpbXGN3H7Y qihvF+2oNBSD+dCNbIsyTNecXjtA2zSPUfnsBIs+xZg9hd7TxvLHUOszkQrfnzBv eM8cDmwmevkrWce2DETJ3nxWjML51zC4prEo4qEFBuYp0QpN16V1iUx94QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3SBFgNR04u7pTzDdQweEFPWFA9MB8GA1UdIwQY MBaAFJvWyGA0LMeZwoB09pl2io7L2qUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMt NDJlM2VmNGY4YjkxLzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMtNDJlM2VmNGY4Yjkx LzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDWtbw46 id+ok4SjzXXnokgPWAlYmGjYhMnSW4HVtEEce2AKOdFyAPAuyXHbFnoHfetyZ16o GzeAEzoK7dpOb4K209WNfT/n4BBgcUT6z5hQwoNkYhe1PEkPCtiDqPJIQ6f4pcAj US00eGJLSYlm8hAtn4EMmuaKchN53ntutA/Nw3NBMi93zue9t5ObYJO/n0vkG89L sGBES/4ogkO+8cVCYjTIMHDc5+HgSotLcV3SpMMEs/AHrw1jcDHAe83JDS4RXC4Y JCXU42fx4V0+pHmuSJaoBHL1fkCehFpIQF/qfR8RYvXidelIeHIC7QJkvcf7vfJK QIG7eLVBuSsAWQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:49:12 2025 by rpki-client