This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json) Hash identifier: DDKkvSF4yEmSuQ+WI1OpvCfoVQyDe7YnVH8nvJqFCUA= Subject key identifier: BF:09:31:9F:99:8B:B7:CA:DF:4F:84:62:1C:C4:EF:2F:D9:AA:7A:44 Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93 Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593 Certificate serial: 019B3A901174D091FD6E9CEA06EF9BF9B9E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft Manifest number: 0BD1 Signing time: Sat 20 Dec 2025 07:01:18 +0000 Manifest this update: Sat 20 Dec 2025 07:01:18 +0000 Manifest next update: Sun 21 Dec 2025 07:01:18 +0000 Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: +kEZNrwHRNNKAtHBuGFzTjbslY7eLypz0L8TPE21le4=) 2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:11:74:d0:91:fd:6e:9c:ea:06:ef:9b:f9:b9:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593 Validity Not Before: Dec 20 07:01:18 2025 GMT Not After : Dec 21 07:01:18 2025 GMT Subject: CN=bf09319f998bb7cadf4f84621cc4ef2fd9aa7a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d7:09:db:99:43:fa:72:b8:28:48:c6:59:c6: b8:9c:0d:c2:f4:cf:88:5a:3d:db:27:60:9d:d4:dd: 37:1f:c8:7b:b6:ba:87:5a:32:a4:df:7b:b9:ad:d8: 41:2f:3e:2f:2b:50:71:ba:ef:13:4b:a1:e0:6c:df: 59:bd:1a:f5:45:54:af:1c:ff:7a:17:f1:7d:5f:43: 30:7a:a5:2e:8e:84:62:f6:b1:25:84:0b:b6:09:9e: d6:8d:49:f0:7b:a6:32:2d:94:7a:c4:f0:d7:d1:ea: f9:1e:69:43:1b:fd:ec:86:90:85:f8:e6:32:d7:a9: 41:bd:be:95:fc:4b:47:6a:d7:9e:c3:a6:fe:9b:9d: 41:d6:ae:14:57:dc:d3:43:d0:da:14:82:5a:ab:54: 44:fe:a2:21:51:aa:f0:5e:80:1c:5e:c4:04:97:82: 5c:6a:41:ce:f1:f7:9f:1d:a2:f8:1a:8b:c9:83:09: 5f:79:77:9e:b1:fc:27:d2:7c:59:16:b3:c0:bf:1f: 9a:95:2d:3b:16:89:15:b3:29:70:94:29:1c:f7:4e: 9d:42:f8:5f:c7:72:6f:a0:bc:23:b8:e9:eb:e5:be: 20:4c:58:66:11:7a:08:5e:c1:ba:96:0f:31:8f:a9: a0:48:f6:d2:66:99:ec:0b:ff:16:3a:01:03:fb:9f: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:09:31:9F:99:8B:B7:CA:DF:4F:84:62:1C:C4:EF:2F:D9:AA:7A:44 X509v3 Authority Key Identifier: keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ad:92:2b:cc:53:ba:82:18:97:79:0e:6b:6d:19:0b:3f:67: 50:ba:66:c3:2a:37:ac:d2:28:5d:a8:28:a1:55:d4:13:d9:0d: ec:bd:7a:3f:2a:39:44:93:cd:92:b0:d4:cf:69:3e:bc:25:8d: 16:31:5f:94:46:a7:1e:34:8b:28:ea:62:07:ab:2e:bb:05:5c: 58:f4:30:d0:b5:4f:bd:27:b4:d7:a8:76:51:c6:68:66:38:9d: ab:d8:3c:5a:14:71:d1:b0:91:1a:20:a9:c3:f7:bc:1d:21:6d: c8:22:25:b8:61:30:5f:79:66:6b:87:8b:51:8d:58:76:53:d9: d0:11:3e:f4:ac:4c:e0:f6:c1:12:1d:67:ce:11:a2:ce:39:e7: 1e:6e:67:49:2a:1b:f2:36:07:75:65:5d:15:6d:33:06:ed:bb: 2a:05:c7:6a:3f:3a:66:83:d2:a6:cc:68:c2:a4:3d:b0:e6:a7: 72:e8:8b:5a:f8:02:d8:fa:e0:a7:a3:f4:e0:a3:09:87:66:1d: 91:4b:9b:76:b9:db:1c:37:a9:fa:8f:b9:2a:59:df:54:2f:03: c4:1f:32:26:25:bd:e7:c8:9e:bb:de:b6:73:7b:be:76:1c:e8: 24:bf:30:8d:55:b3:78:53:19:7a:dd:47:21:f1:00:43:00:a4: 1b:60:58:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kBF00JH9bpzqBu+b+bnoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmFjMmMyMWIyZGJjODEyZGQyNWQxY2I3OWMzZmJhNTQx OWU1OTMwHhcNMjUxMjIwMDcwMTE4WhcNMjUxMjIxMDcwMTE4WjAzMTEwLwYDVQQD EyhiZjA5MzE5Zjk5OGJiN2NhZGY0Zjg0NjIxY2M0ZWYyZmQ5YWE3YTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9cJ25lD+nK4KEjGWca4nA3C9M+I Wj3bJ2Cd1N03H8h7trqHWjKk33u5rdhBLz4vK1Bxuu8TS6HgbN9ZvRr1RVSvHP96 F/F9X0MweqUujoRi9rElhAu2CZ7WjUnwe6YyLZR6xPDX0er5HmlDG/3shpCF+OYy 16lBvb6V/EtHateew6b+m51B1q4UV9zTQ9DaFIJaq1RE/qIhUarwXoAcXsQEl4Jc akHO8fefHaL4GovJgwlfeXeesfwn0nxZFrPAvx+alS07FokVsylwlCkc906dQvhf x3JvoLwjuOnr5b4gTFhmEXoIXsG6lg8xj6mgSPbSZpnsC/8WOgED+5/viwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL8JMZ+Zi7fK30+EYhzE7y/ZqnpEMB8GA1UdIwQY MBaAFPf6wsIbLbyBLdJdHLecP7pUGeWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2Mt ZmZhZDRmYjBhNzEzLzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2MtZmZhZDRmYjBhNzEz LzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO62SK8xT uoIYl3kOa20ZCz9nULpmwyo3rNIoXagooVXUE9kN7L16Pyo5RJPNkrDUz2k+vCWN FjFflEanHjSLKOpiB6suuwVcWPQw0LVPvSe016h2UcZoZjidq9g8WhRx0bCRGiCp w/e8HSFtyCIluGEwX3lma4eLUY1YdlPZ0BE+9KxM4PbBEh1nzhGizjnnHm5nSSob 8jYHdWVdFW0zBu27KgXHaj86ZoPSpsxowqQ9sOancuiLWvgC2Prgp6P04KMJh2Yd kUubdrnbHDep+o+5KlnfVC8DxB8yJiW958ieu962c3u+dhzoJL8wjVWzeFMZet1H IfEAQwCkG2BYjA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:03 2025 by rpki-client