This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json) Hash identifier: kyXIluX/Av7hKkfA70aU10C72bB/MmKTltlpZ15aEAs= Subject key identifier: A6:AA:C9:9C:D0:41:2E:76:D7:58:47:BE:C7:64:A5:19:81:33:9C:4E Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Certificate serial: 019B4701F8EC3719FD92E4213772F41F84EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft Manifest number: 0800 Signing time: Mon 22 Dec 2025 17:01:10 +0000 Manifest this update: Mon 22 Dec 2025 17:01:10 +0000 Manifest next update: Tue 23 Dec 2025 17:01:10 +0000 Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: k8dryqxtsjrkSOjlLGqgX2tcuuyelX+xDl64knCfTOg=) 2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:f8:ec:37:19:fd:92:e4:21:37:72:f4:1f:84:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246 Validity Not Before: Dec 22 17:01:10 2025 GMT Not After : Dec 23 17:01:10 2025 GMT Subject: CN=a6aac99cd0412e76d75847bec764a51981339c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7d:c1:65:d0:c5:2f:9f:33:f6:1b:4f:a1:62: 98:dd:85:e4:f3:75:17:e1:9f:42:a3:73:cf:43:54: 06:2c:28:81:42:c6:67:33:71:d9:9d:76:6c:39:93: 59:af:ca:24:c6:1a:03:6b:fa:e0:f9:0e:7e:68:1b: cc:ff:15:2e:9e:1f:2b:0f:7d:4a:e0:fd:bd:da:7f: 3c:13:7b:64:a1:26:be:9b:10:d5:5a:ec:81:3c:0f: 4b:e4:0e:75:5a:3f:e6:49:36:9f:6f:33:0c:f0:60: 95:63:42:77:3b:7e:4f:f0:8f:67:d2:a0:89:de:82: 7a:cf:76:59:e4:96:5f:a4:ad:52:21:22:82:23:48: 85:ef:aa:bd:ad:27:7f:40:00:74:cf:48:d9:e4:6d: 53:5f:a1:f6:af:a1:84:24:46:4b:c6:fc:7c:b6:e5: dd:ca:c7:51:ea:a4:12:31:66:2f:c5:39:6c:86:38: bd:aa:92:2c:94:8b:da:14:33:c8:1c:86:e0:0e:d8: 78:f1:28:35:84:4d:2d:5d:05:55:be:19:c4:86:02: 9f:8d:0e:bf:e8:f2:27:1a:e2:cb:5f:e6:11:bd:b9: 1a:8b:c8:ff:6f:2c:4c:35:ea:3c:a5:d0:1c:5a:a6: 87:b8:b5:7a:69:59:39:a4:06:8b:a2:e5:07:26:3e: 41:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AA:C9:9C:D0:41:2E:76:D7:58:47:BE:C7:64:A5:19:81:33:9C:4E X509v3 Authority Key Identifier: keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:0a:fe:57:f5:22:79:1d:48:6a:98:a3:80:2c:8c:87:73: aa:75:12:ef:07:c8:6d:53:9d:46:c7:a1:d5:b9:fb:70:a8:af: 38:0a:a4:83:06:05:94:27:64:c3:00:f6:61:dc:ed:fa:a9:ce: 4c:cb:6b:0f:5c:5b:61:7a:f3:2f:6e:e4:20:81:21:98:05:82: ab:29:3c:52:68:b8:40:19:d9:3b:e0:c1:cc:9a:c4:61:42:ab: 3b:d3:7e:fc:f2:bf:4b:86:ca:ff:2d:aa:26:12:70:1d:82:fa: 9d:92:b1:47:6b:bc:1f:fc:4c:c0:ff:e0:df:e8:6d:11:8d:fb: 79:c3:bc:81:67:bd:fb:d3:f1:e6:94:6f:0a:9c:11:8c:a3:3c: 6f:9a:fd:25:a9:ad:e3:27:fa:49:97:70:9e:b9:20:67:41:af: d5:a4:a5:af:14:e0:17:96:c8:65:d6:8a:b3:67:72:27:b8:5b: 61:69:89:2c:39:1d:7f:ef:d6:b3:d9:91:ea:9b:ea:d8:4b:92: d3:1b:3a:9f:76:ac:7d:67:e8:31:fe:15:29:c4:fe:52:46:40: 68:0c:fb:dc:d1:56:41:fc:9b:e0:02:72:49:26:89:d1:68:6b: db:7a:18:79:42:b2:74:94:dd:54:05:e8:84:27:85:57:d0:7e: 98:21:eb:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAfjsNxn9kuQhN3L0H4TsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGFiMzJkZmQ2ZTViYzY5OWU3YmYzNmU4MTgyOThkYzdm YmIyNDYwHhcNMjUxMjIyMTcwMTEwWhcNMjUxMjIzMTcwMTEwWjAzMTEwLwYDVQQD EyhhNmFhYzk5Y2QwNDEyZTc2ZDc1ODQ3YmVjNzY0YTUxOTgxMzM5YzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H3BZdDFL58z9htPoWKY3YXk83UX 4Z9Co3PPQ1QGLCiBQsZnM3HZnXZsOZNZr8okxhoDa/rg+Q5+aBvM/xUunh8rD31K 4P292n88E3tkoSa+mxDVWuyBPA9L5A51Wj/mSTafbzMM8GCVY0J3O35P8I9n0qCJ 3oJ6z3ZZ5JZfpK1SISKCI0iF76q9rSd/QAB0z0jZ5G1TX6H2r6GEJEZLxvx8tuXd ysdR6qQSMWYvxTlshji9qpIslIvaFDPIHIbgDth48Sg1hE0tXQVVvhnEhgKfjQ6/ 6PInGuLLX+YRvbkai8j/byxMNeo8pdAcWqaHuLV6aVk5pAaLouUHJj5B2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaqyZzQQS5211hHvsdkpRmBM5xOMB8GA1UdIwQY MBaAFG/asy39blvGmee/NugYKY3H+7JGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQt ZjFlNTVmNTM3Yzg3LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC84MjJkYzQtNzhlOC00ODAxLWI3MzQtZjFlNTVmNTM3Yzg3 LzEvYjlxekxmMXVXOGFaNTc4MjZCZ3BqY2Y3c2tZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSoK/lf1 InkdSGqYo4AsjIdzqnUS7wfIbVOdRseh1bn7cKivOAqkgwYFlCdkwwD2Ydzt+qnO TMtrD1xbYXrzL27kIIEhmAWCqyk8Umi4QBnZO+DBzJrEYUKrO9N+/PK/S4bK/y2q JhJwHYL6nZKxR2u8H/xMwP/g3+htEY37ecO8gWe9+9Px5pRvCpwRjKM8b5r9Jamt 4yf6SZdwnrkgZ0Gv1aSlrxTgF5bIZdaKs2dyJ7hbYWmJLDkdf+/Ws9mR6pvq2EuS 0xs6n3asfWfoMf4VKcT+UkZAaAz73NFWQfyb4AJySSaJ0Whr23oYeUKydJTdVAXo hCeFV9B+mCHrkg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:23:05 2025 by rpki-client