This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json) Hash identifier: 5dWWFY1c+n6OP6sGH8SN9xVioEn2lbzwof1SPvOeYuo= Subject key identifier: 4D:A6:2D:B1:FC:2B:8B:14:16:86:D1:8A:1F:26:21:5B:04:33:58:9D Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Certificate serial: 019B2399B67F166A49585F633C343417E979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft Manifest number: 0CAD Signing time: Mon 15 Dec 2025 20:00:34 +0000 Manifest this update: Mon 15 Dec 2025 20:00:34 +0000 Manifest next update: Tue 16 Dec 2025 20:00:34 +0000 Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: +LD2z7RPF0x17hIQ62hzN56zRfAkA7CcXwXVt4NaTD0=) 2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:99:b6:7f:16:6a:49:58:5f:63:3c:34:34:17:e9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Validity Not Before: Dec 15 20:00:34 2025 GMT Not After : Dec 16 20:00:34 2025 GMT Subject: CN=4da62db1fc2b8b141686d18a1f26215b0433589d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1a:2c:6f:fb:ed:31:1f:de:cd:85:31:a2:87: 24:e0:62:95:f3:0f:46:f2:e0:56:ba:e7:5e:97:92: 89:3d:d9:f6:2a:45:f0:89:68:84:4a:7a:7f:d7:33: 74:df:cd:44:b7:0c:4f:9d:1e:4c:e7:db:5e:d6:48: 48:dd:e4:a9:39:97:06:6c:53:24:03:78:7b:fd:de: 28:e3:00:3d:9f:42:43:cc:69:50:3f:f5:b9:6e:2f: 70:6f:04:29:1d:45:29:44:ba:a2:85:60:f0:61:39: b5:2d:1e:be:4b:6e:af:38:f9:c5:83:cc:4a:ae:e9: 0b:ba:b6:f0:58:af:73:01:3a:19:ca:a8:83:8f:e5: 4d:37:21:16:4e:39:5d:70:eb:61:bc:5e:2d:e1:bf: 9f:65:99:1e:37:d8:79:3b:bc:19:32:df:af:14:57: d0:d2:ff:9f:96:21:64:76:f2:66:24:d1:f8:d4:fa: a6:31:65:5d:7d:14:af:05:40:32:c1:67:9c:28:94: dc:56:af:a0:51:8d:9b:51:f8:f7:ed:20:f0:64:63: d3:95:eb:ad:b4:d7:36:d5:04:39:ee:3f:55:65:33: 81:1c:61:df:85:b4:d4:11:a5:4e:81:c6:ab:dd:b0: 5b:00:3e:3b:34:0f:80:dd:c4:10:9c:87:fa:c6:ca: 60:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A6:2D:B1:FC:2B:8B:14:16:86:D1:8A:1F:26:21:5B:04:33:58:9D X509v3 Authority Key Identifier: keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:3a:f2:e8:85:bb:78:cf:30:38:3d:b2:3a:52:92:b0:0b:fe: a8:0f:0f:fd:e8:40:06:b3:a9:63:48:a0:a0:65:d8:13:2a:7c: 9d:f1:a1:f0:20:f4:eb:58:91:65:9d:e5:14:58:ab:c9:d9:0e: 38:14:cf:8d:29:36:69:57:45:18:f6:89:9a:75:57:ef:25:d7: e3:3d:79:ac:25:8b:89:e9:04:a7:e7:07:85:32:b4:7d:fd:6b: 39:10:2b:6f:c8:d8:a0:77:48:13:1b:1c:16:db:ab:fb:cb:7b: 2e:9a:34:91:5d:85:30:68:09:5e:a7:a3:b6:4a:e5:45:3b:45: 16:fb:5c:7b:c9:0c:e0:a0:c8:1d:18:b0:2e:33:d7:e8:8f:05: 21:a9:7d:7c:8b:da:ee:a9:b2:c6:6a:6a:f4:c9:74:c2:04:2b: 88:c3:90:a1:90:32:74:6b:46:9f:a3:ee:6e:c0:7f:b6:2c:56: 95:f7:0c:8f:4f:74:02:8a:ce:be:8e:88:af:41:c4:8f:17:86: a7:b1:cb:a7:57:0c:7a:27:5a:27:d4:75:dc:6b:c2:42:c6:73: b0:25:d6:be:d7:5b:a0:41:09:2b:5e:f2:33:af:3f:aa:a4:0d: 55:22:16:61:51:1f:90:4a:8a:91:05:be:0e:21:5f:d6:94:57: a4:03:fb:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjmbZ/FmpJWF9jPDQ0F+l5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky NzkyNGIwHhcNMjUxMjE1MjAwMDM0WhcNMjUxMjE2MjAwMDM0WjAzMTEwLwYDVQQD Eyg0ZGE2MmRiMWZjMmI4YjE0MTY4NmQxOGExZjI2MjE1YjA0MzM1ODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRosb/vtMR/ezYUxoock4GKV8w9G 8uBWuudel5KJPdn2KkXwiWiESnp/1zN0381EtwxPnR5M59te1khI3eSpOZcGbFMk A3h7/d4o4wA9n0JDzGlQP/W5bi9wbwQpHUUpRLqihWDwYTm1LR6+S26vOPnFg8xK rukLurbwWK9zAToZyqiDj+VNNyEWTjldcOthvF4t4b+fZZkeN9h5O7wZMt+vFFfQ 0v+fliFkdvJmJNH41PqmMWVdfRSvBUAywWecKJTcVq+gUY2bUfj37SDwZGPTleut tNc21QQ57j9VZTOBHGHfhbTUEaVOgcar3bBbAD47NA+A3cQQnIf6xspgqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2mLbH8K4sUFobRih8mIVsEM1idMB8GA1UdIwQY MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2 LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTry6IW7 eM8wOD2yOlKSsAv+qA8P/ehABrOpY0igoGXYEyp8nfGh8CD061iRZZ3lFFirydkO OBTPjSk2aVdFGPaJmnVX7yXX4z15rCWLiekEp+cHhTK0ff1rORArb8jYoHdIExsc Ftur+8t7Lpo0kV2FMGgJXqejtkrlRTtFFvtce8kM4KDIHRiwLjPX6I8FIal9fIva 7qmyxmpq9Ml0wgQriMOQoZAydGtGn6PubsB/tixWlfcMj090AorOvo6Ir0HEjxeG p7HLp1cMeidaJ9R13GvCQsZzsCXWvtdboEEJK17yM68/qqQNVSIWYVEfkEqKkQW+ DiFf1pRXpAP7hA== -----END CERTIFICATE-----Generated at Mon Dec 15 21:56:03 2025 by rpki-client