This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json) Hash identifier: PgjCUQn13aVt0ETclqtFFtLu94lwdvJ/lbYZanvjUUw= Subject key identifier: D3:6F:21:AF:D5:50:6D:1E:3C:76:A0:48:4F:9E:F6:2D:2C:B5:94:79 Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Certificate serial: 019B3B6B68E196192D4E5E57C926219BC730 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft Manifest number: 07FA Signing time: Sat 20 Dec 2025 11:00:53 +0000 Manifest this update: Sat 20 Dec 2025 11:00:53 +0000 Manifest next update: Sun 21 Dec 2025 11:00:53 +0000 Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: uCAobzg+oG0YT7Cvq1zSj1rql7TV3b6bOU8jNiUQA/Q=) 2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:68:e1:96:19:2d:4e:5e:57:c9:26:21:9b:c7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Validity Not Before: Dec 20 11:00:53 2025 GMT Not After : Dec 21 11:00:53 2025 GMT Subject: CN=d36f21afd5506d1e3c76a0484f9ef62d2cb59479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:88:72:a1:1f:db:08:05:8d:ee:92:ec:53: 74:82:96:ce:5c:b6:b0:c3:0c:92:c9:4e:b8:a9:0a: a4:0f:ec:18:6e:a2:e5:be:ea:24:2b:a7:f6:7a:dd: 3b:5f:ef:cd:8a:9c:82:ec:0f:22:cf:2e:fc:61:07: 9c:f7:be:7f:5b:b2:19:a4:1f:02:d0:ae:01:29:1f: 90:e0:7a:6e:f0:b6:85:10:bd:69:90:b8:16:7a:76: 55:80:4b:13:65:98:35:85:97:d2:5a:bc:42:b9:f8: 14:ad:53:33:8e:6b:fe:b3:92:76:1d:f5:5f:4f:89: 46:86:57:23:0b:fd:f4:a5:10:c0:bf:2e:df:19:63: 3d:f3:8c:8a:3b:dd:9f:06:20:46:21:1f:d3:ae:f2: d3:a6:5f:f5:ca:7a:76:2d:16:a0:ff:9f:42:2a:b8: 88:86:90:de:02:ad:12:97:37:29:c6:41:0e:dd:c3: 11:98:7f:b0:8e:e5:e7:43:b0:e3:99:71:48:5d:d3: 8a:e9:85:e7:e0:12:3d:c9:39:d3:36:aa:da:ef:3f: 4c:9b:17:1f:01:cd:b5:db:e5:1d:99:bb:8a:03:e0: 3f:f6:a4:52:c5:b3:72:f4:6d:24:03:77:5a:93:8a: 55:90:f5:00:db:99:94:e5:6b:55:e2:92:e5:3d:fa: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:6F:21:AF:D5:50:6D:1E:3C:76:A0:48:4F:9E:F6:2D:2C:B5:94:79 X509v3 Authority Key Identifier: keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:22:fa:57:c6:43:ea:4e:b9:e7:ae:16:7e:a7:d8:9b:c5:33: a0:6c:d6:ed:50:f6:d3:47:fb:ac:55:c8:f3:fd:10:a6:be:97: 19:2d:49:91:3a:e8:cc:1c:88:31:45:82:45:6c:26:29:ad:05: a1:77:a8:70:46:42:15:95:9f:e4:29:ec:39:a7:aa:da:d1:1f: 7d:3f:4a:49:0a:7e:81:22:65:ac:76:f9:4b:47:40:e7:43:76: 45:40:58:7d:0b:44:40:80:b3:cd:4d:b1:5a:b6:82:75:d3:c1: 31:45:a2:6f:10:a6:97:16:ca:64:64:47:fa:7d:15:69:ce:48: d2:f8:60:08:63:9d:d9:9e:f4:4f:b2:5f:83:42:3e:d6:b0:d1: 3d:7b:25:f0:5b:34:2e:25:36:d9:2a:25:d0:a0:3e:6c:7c:07: 1c:61:fa:b5:98:35:e4:73:26:b2:7f:9a:a8:14:bc:56:15:c6: f0:37:f1:e3:4f:be:d8:83:d8:d4:f1:ba:14:b4:6c:0e:97:26: 1e:55:fa:75:bf:51:98:29:58:cd:c9:9a:de:ee:0b:f5:4d:49: d0:bb:52:da:33:3a:9b:d2:d4:50:29:17:e1:c2:04:5f:81:f9: 77:22:31:64:33:e5:1f:ea:2a:32:a3:f0:97:a8:41:a8:10:84: 7a:7e:cb:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2jhlhktTl5XySYhm8cwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGFiMzJkZmQ2ZTViYzY5OWU3YmYzNmU4MTgyOThkYzdm YmIyNDYwHhcNMjUxMjIwMTEwMDUzWhcNMjUxMjIxMTEwMDUzWjAzMTEwLwYDVQQD EyhkMzZmMjFhZmQ1NTA2ZDFlM2M3NmEwNDg0ZjllZjYyZDJjYjU5NDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVqIcqEf2wgFje6S7FN0gpbOXLaw wwySyU64qQqkD+wYbqLlvuokK6f2et07X+/NipyC7A8izy78YQec975/W7IZpB8C 0K4BKR+Q4Hpu8LaFEL1pkLgWenZVgEsTZZg1hZfSWrxCufgUrVMzjmv+s5J2HfVf T4lGhlcjC/30pRDAvy7fGWM984yKO92fBiBGIR/TrvLTpl/1ynp2LRag/59CKriI hpDeAq0SlzcpxkEO3cMRmH+wjuXnQ7DjmXFIXdOK6YXn4BI9yTnTNqra7z9Mmxcf Ac212+UdmbuKA+A/9qRSxbNy9G0kA3dak4pVkPUA25mU5WtV4pLlPfrpWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNvIa/VUG0ePHagSE+e9i0stZR5MB8GA1UdIwQY MBaAFG/asy39blvGmee/NugYKY3H+7JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQt ZjFlNTVmNTM3Yzg3LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQtZjFlNTVmNTM3Yzg3 LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiL6V8ZD 6k65564WfqfYm8UzoGzW7VD200f7rFXI8/0Qpr6XGS1JkTrozByIMUWCRWwmKa0F oXeocEZCFZWf5CnsOaeq2tEffT9KSQp+gSJlrHb5S0dA50N2RUBYfQtEQICzzU2x WraCddPBMUWibxCmlxbKZGRH+n0Vac5I0vhgCGOd2Z70T7Jfg0I+1rDRPXsl8Fs0 LiU22Sol0KA+bHwHHGH6tZg15HMmsn+aqBS8VhXG8Dfx40++2IPY1PG6FLRsDpcm HlX6db9RmClYzcma3u4L9U1J0LtS2jM6m9LUUCkX4cIEX4H5dyIxZDPlH+oqMqPw l6hBqBCEen7LwA== -----END CERTIFICATE-----Generated at Sat Dec 20 14:00:05 2025 by rpki-client