This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json) Hash identifier: bJ6ZlsfmmnCXg25HSxzTHOy3Z8fnuTCljnz+v526/5E= Subject key identifier: 4E:1F:5E:FC:FE:BC:ED:E5:7B:2E:EC:56:98:28:C4:9E:EE:A5:5C:60 Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Certificate serial: 019B5A1A9BF60B20D168D8D7046068DE7E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft Manifest number: 17A3 Signing time: Fri 26 Dec 2025 10:00:51 +0000 Manifest this update: Fri 26 Dec 2025 10:00:51 +0000 Manifest next update: Sat 27 Dec 2025 10:00:51 +0000 Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: 6cLh11Vsgw8Tp2LHi9jvbIcF1NsRsPTKi75JXw3PLcY=) 2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:9b:f6:0b:20:d1:68:d8:d7:04:60:68:de:7e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Validity Not Before: Dec 26 10:00:51 2025 GMT Not After : Dec 27 10:00:51 2025 GMT Subject: CN=4e1f5efcfebcede57b2eec569828c49eeea55c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:fe:fc:4f:82:8f:50:26:4c:ac:1e:b2:5c: ff:c4:3d:77:b9:f8:9e:bf:11:78:b7:26:f0:e2:c6: f3:6e:42:fd:f9:82:88:71:fa:53:b4:75:ab:4d:65: 91:d2:58:c6:27:2d:98:00:0e:e2:e4:b5:e8:21:09: 5c:60:2c:1a:cc:31:0f:44:81:8f:f9:76:df:5a:7a: ae:e8:59:4e:72:5f:18:d8:ac:1e:84:f9:19:07:09: 4e:0e:bb:98:cd:ac:dd:78:09:f2:0f:52:a9:9a:6d: 75:7e:53:3d:b5:d8:5e:ad:55:06:d9:06:df:1f:74: 6b:ee:9b:f8:57:46:16:1f:4b:5b:93:6b:db:e7:44: 61:5c:a3:12:ee:0e:18:02:5d:b3:cd:19:d0:85:b1: 86:ae:56:dd:88:c7:52:9d:08:6c:53:ff:d4:e4:59: 83:0b:8a:1b:39:3d:62:71:31:5d:8f:d8:b0:37:59: 99:09:47:76:40:9a:ca:7f:ae:cb:75:06:a1:7b:47: 24:e3:c0:6c:12:91:b2:96:14:a3:91:0c:bc:60:ba: 37:b1:07:a8:1e:e0:32:69:ae:33:cc:0a:13:66:69: a2:79:77:f6:c6:1f:87:ff:10:d4:42:da:db:92:ef: ca:01:03:c3:f5:4a:7f:52:46:80:fa:96:4c:b8:b4: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1F:5E:FC:FE:BC:ED:E5:7B:2E:EC:56:98:28:C4:9E:EE:A5:5C:60 X509v3 Authority Key Identifier: keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ac:9a:17:03:48:9e:0b:af:32:a2:fe:57:e9:5b:95:d9:3e: c6:98:2b:74:75:59:a1:aa:8a:41:6f:3a:64:fa:0b:8b:16:e9: f8:c1:0d:64:72:06:1b:ec:b0:1e:7e:53:5f:ba:aa:0b:f5:c3: d8:36:48:ce:35:c2:8f:0e:d8:c4:4a:32:5c:29:cd:a2:59:4e: 60:78:51:b3:bc:b1:ef:2b:6d:b6:f3:5d:cc:1e:90:a0:32:38: 97:ac:17:38:5e:72:04:2b:fd:6c:ab:f0:d0:4b:5a:46:d5:4e: 1e:4e:48:e6:d0:4a:b3:ba:5a:9e:b8:00:b6:0b:8d:ce:a7:90: e0:a0:57:2f:da:fc:9b:07:51:a5:3d:ef:59:a4:64:87:41:01: 6e:b4:b5:9e:68:63:96:bb:a5:a8:57:b2:47:ce:fe:a7:f0:d2: d4:5e:f2:96:d3:15:c9:e1:e2:5f:a1:4c:09:4c:be:3b:11:76: 4c:70:ed:26:8e:10:d0:5a:d5:25:25:64:0a:3d:05:37:aa:1b: f2:8e:d8:b8:15:a0:1d:58:d5:5c:60:61:53:b9:d1:9e:27:8c: e8:30:8f:2e:4e:a4:92:53:6f:5d:9a:73:92:f6:0c:9b:8e:a3: de:9e:21:19:fe:0e:fe:53:15:cf:30:ee:89:60:a9:a4:90:f7: 3c:84:22:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGpv2CyDRaNjXBGBo3n6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz YzJhOWYwHhcNMjUxMjI2MTAwMDUxWhcNMjUxMjI3MTAwMDUxWjAzMTEwLwYDVQQD Eyg0ZTFmNWVmY2ZlYmNlZGU1N2IyZWVjNTY5ODI4YzQ5ZWVlYTU1YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurn+/E+Cj1AmTKweslz/xD13ufie vxF4tybw4sbzbkL9+YKIcfpTtHWrTWWR0ljGJy2YAA7i5LXoIQlcYCwazDEPRIGP +XbfWnqu6FlOcl8Y2KwehPkZBwlODruYzazdeAnyD1Kpmm11flM9tdherVUG2Qbf H3Rr7pv4V0YWH0tbk2vb50RhXKMS7g4YAl2zzRnQhbGGrlbdiMdSnQhsU//U5FmD C4obOT1icTFdj9iwN1mZCUd2QJrKf67LdQahe0ck48BsEpGylhSjkQy8YLo3sQeo HuAyaa4zzAoTZmmieXf2xh+H/xDUQtrbku/KAQPD9Up/UkaA+pZMuLTqfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4fXvz+vO3ley7sVpgoxJ7upVxgMB8GA1UdIwQY MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt Y2ZlMmE5NjU3YzI2LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2 LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEayaFwNI nguvMqL+V+lbldk+xpgrdHVZoaqKQW86ZPoLixbp+MENZHIGG+ywHn5TX7qqC/XD 2DZIzjXCjw7YxEoyXCnNollOYHhRs7yx7ytttvNdzB6QoDI4l6wXOF5yBCv9bKvw 0EtaRtVOHk5I5tBKs7panrgAtguNzqeQ4KBXL9r8mwdRpT3vWaRkh0EBbrS1nmhj lrulqFeyR87+p/DS1F7yltMVyeHiX6FMCUy+OxF2THDtJo4Q0FrVJSVkCj0FN6ob 8o7YuBWgHVjVXGBhU7nRnieM6DCPLk6kklNvXZpzkvYMm46j3p4hGf4O/lMVzzDu iWCppJD3PIQiaw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:51 2025 by rpki-client