This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json) Hash identifier: jjCLNBJujs8pS3RMQWM4gI9E0xOgX1h4vDE2QF2LPXk= Subject key identifier: 19:9A:67:E4:F1:C8:8E:0E:B5:32:35:83:AB:5C:C1:09:14:09:E9:E7 Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Certificate serial: 019B08FE482FB29985680FB7434306C27FDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft Manifest number: 176B Signing time: Wed 10 Dec 2025 16:00:40 +0000 Manifest this update: Wed 10 Dec 2025 16:00:40 +0000 Manifest next update: Thu 11 Dec 2025 16:00:40 +0000 Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=) 2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: Ta9j4r/gXL/Rws5ZppSwgLDIwu0z7rjx+B6RFLsvS3A=) 3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:fe:48:2f:b2:99:85:68:0f:b7:43:43:06:c2:7f:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Validity Not Before: Dec 10 16:00:40 2025 GMT Not After : Dec 11 16:00:40 2025 GMT Subject: CN=199a67e4f1c88e0eb5323583ab5cc1091409e9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:43:1b:54:a2:28:1f:92:54:21:65:a6:2d:d3: 1b:a1:8d:b6:7c:cd:19:9e:68:91:d6:5b:49:d8:c4: 7b:06:7d:b7:b6:fd:f0:71:86:f9:d5:c5:9e:fd:11: 3e:a8:da:ba:56:27:a4:bc:5c:b1:7e:b5:b0:88:a6: 77:db:1d:73:80:5e:c0:d3:8a:b4:c9:60:9d:cf:5c: 81:56:0b:36:b1:66:5f:c6:e7:2c:a6:1b:68:f4:a5: 6a:36:02:58:55:54:bd:36:9d:bb:ec:a4:b5:20:32: f8:f5:9e:e7:59:f2:52:94:18:5c:de:58:fb:43:48: 7b:78:db:6a:9d:79:a5:12:00:8a:c6:66:10:e1:76: 09:99:04:9a:96:2e:f9:41:05:06:56:ce:af:51:ea: cd:b1:bc:1e:d1:48:27:5a:7b:47:87:a0:42:96:1f: c0:89:3c:fc:b8:61:cd:de:13:ef:3d:dd:ea:ee:1b: 17:16:3c:31:f9:29:21:d5:27:4a:88:8e:fc:4f:94: 47:30:68:b4:2d:13:21:e7:62:16:1d:d4:8b:36:ec: 12:2c:49:10:1e:66:b5:cb:56:3b:0c:de:39:09:a0: 12:c6:35:62:37:2f:3f:f6:d5:9e:5d:4c:1d:de:7e: 52:6f:81:98:68:49:56:8f:29:fc:a1:b9:a3:86:46: 5f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:9A:67:E4:F1:C8:8E:0E:B5:32:35:83:AB:5C:C1:09:14:09:E9:E7 X509v3 Authority Key Identifier: keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:73:25:00:78:26:33:2d:3d:82:17:33:67:6c:2c:5c:83:43: ea:dc:1f:2c:cd:06:0e:af:86:65:89:15:c3:e2:8b:43:2c:ce: 5c:ce:5c:4e:29:43:cb:d2:31:e3:94:4d:25:d7:b9:e4:87:8f: 2f:ee:63:ab:e2:04:e9:ac:91:b8:fb:80:52:3c:1b:a4:4a:b5: fe:17:e3:e5:e7:b9:1d:a1:8e:58:28:09:8d:a4:2e:17:91:cb: 5f:70:86:43:fc:58:a6:ed:ff:41:a1:9c:b6:cf:5c:5c:6f:6c: 44:ab:f9:e4:aa:f7:a9:76:a5:51:19:43:54:aa:34:06:dc:6a: 7c:cb:13:d6:36:bb:f7:46:21:6b:bf:ff:8f:aa:31:16:90:84: 79:f0:8a:4c:48:e9:56:bf:d3:51:97:19:d8:58:69:ef:cd:30: 45:1a:ec:30:7c:7b:02:f0:36:1d:3c:30:24:04:9b:8b:21:47: 0d:40:03:7c:2a:9c:c2:1d:ef:98:70:77:35:66:bd:59:19:45: 0f:9e:7b:af:ac:2c:f9:51:7e:73:79:b8:35:b1:27:f9:26:ce: f3:c1:ff:95:4b:38:e4:ad:bb:31:f2:c8:cf:dd:ec:4f:90:57: 27:41:26:1d:da:1a:32:32:bf:00:06:8b:c9:45:83:45:7c:a8: 44:80:00:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsI/kgvspmFaA+3Q0MGwn/bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj YzU2ZWMwHhcNMjUxMjEwMTYwMDQwWhcNMjUxMjExMTYwMDQwWjAzMTEwLwYDVQQD EygxOTlhNjdlNGYxYzg4ZTBlYjUzMjM1ODNhYjVjYzEwOTE0MDllOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUMbVKIoH5JUIWWmLdMboY22fM0Z nmiR1ltJ2MR7Bn23tv3wcYb51cWe/RE+qNq6ViekvFyxfrWwiKZ32x1zgF7A04q0 yWCdz1yBVgs2sWZfxucsphto9KVqNgJYVVS9Np277KS1IDL49Z7nWfJSlBhc3lj7 Q0h7eNtqnXmlEgCKxmYQ4XYJmQSali75QQUGVs6vUerNsbwe0UgnWntHh6BClh/A iTz8uGHN3hPvPd3q7hsXFjwx+Skh1SdKiI78T5RHMGi0LRMh52IWHdSLNuwSLEkQ Hma1y1Y7DN45CaASxjViNy8/9tWeXUwd3n5Sb4GYaElWjyn8obmjhkZfWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmaZ+TxyI4OtTI1g6tcwQkUCennMB8GA1UdIwQY MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3MlAHgm My09ghczZ2wsXIND6twfLM0GDq+GZYkVw+KLQyzOXM5cTilDy9Ix45RNJde55IeP L+5jq+IE6ayRuPuAUjwbpEq1/hfj5ee5HaGOWCgJjaQuF5HLX3CGQ/xYpu3/QaGc ts9cXG9sRKv55Kr3qXalURlDVKo0BtxqfMsT1ja790Yha7//j6oxFpCEefCKTEjp Vr/TUZcZ2Fhp780wRRrsMHx7AvA2HTwwJASbiyFHDUADfCqcwh3vmHB3NWa9WRlF D557r6ws+VF+c3m4NbEn+SbO88H/lUs45K27MfLIz93sT5BXJ0EmHdoaMjK/AAaL yUWDRXyoRIAAOA== -----END CERTIFICATE-----Generated at Wed Dec 10 19:28:51 2025 by rpki-client