This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json) Hash identifier: f09jtt7yMlzO3i6AvEL/qlGpiAbYErAaVYkiqvO8nm0= Subject key identifier: 58:D6:5F:09:5E:85:71:D8:C8:FF:E3:39:EA:92:3C:F5:EE:9C:1E:F5 Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Certificate serial: 019B5A5180C3F440CE17AD5F47F9E79D81E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft Manifest number: 03EB Signing time: Fri 26 Dec 2025 11:00:49 +0000 Manifest this update: Fri 26 Dec 2025 11:00:49 +0000 Manifest next update: Sat 27 Dec 2025 11:00:49 +0000 Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: dzijqUvE0CYQoM2ossLlnzwBhls5C/LeIoq9Iy1sjw4=) 2: QYL-bJP18_uE1vIYufetQA8LNBw.roa (hash: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=) 3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=) 4: mfVSR44fIY6bkhiOSueC1ITxv6w.roa (hash: xZqOi81DoSglCV29EBbiUSqFQDxJr7C1mJvYXhv2Pug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:80:c3:f4:40:ce:17:ad:5f:47:f9:e7:9d:81:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Validity Not Before: Dec 26 11:00:49 2025 GMT Not After : Dec 27 11:00:49 2025 GMT Subject: CN=58d65f095e8571d8c8ffe339ea923cf5ee9c1ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:72:e5:bb:a2:70:75:71:dd:d8:65:c9:a1:77: fe:95:7b:54:85:cd:73:ce:64:9c:5f:74:65:61:98: 64:cd:da:d1:c8:9a:59:b4:92:bf:20:57:57:e8:21: d8:39:b6:12:f2:5a:a9:5e:b8:2e:0c:50:7f:21:81: 3a:bb:88:59:d9:67:6d:5d:19:38:b6:b3:e4:e8:03: 4d:81:9f:39:b6:ca:00:6b:ba:a9:47:32:e0:4b:4c: fc:85:f7:fe:3f:a7:6e:7b:58:af:07:f9:c5:14:96: 78:db:6f:b8:52:cc:ca:63:ba:2a:43:da:e2:d5:ff: 43:3e:0a:12:87:81:20:0e:a5:05:ba:52:bb:05:2d: 45:61:55:18:de:ae:bc:53:5a:c0:a9:28:73:90:7a: 19:71:65:c5:c8:e5:b1:6f:4c:18:63:4a:e5:b7:de: bf:93:9f:3e:03:c9:e5:65:0e:01:8a:c3:b2:3b:81: 22:22:b9:23:8d:33:94:bd:22:a9:96:9a:91:89:62: d8:70:c5:6e:93:d1:57:32:31:8e:27:61:0b:6c:84: ed:c9:8a:6c:e6:d9:a5:2b:5a:f6:88:e2:a2:69:4a: c0:f9:c4:3b:08:dc:7c:70:0c:50:3c:78:f5:b5:2e: 3f:af:8c:c4:ac:cd:a7:0e:bc:ab:40:35:92:78:58: 0f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D6:5F:09:5E:85:71:D8:C8:FF:E3:39:EA:92:3C:F5:EE:9C:1E:F5 X509v3 Authority Key Identifier: keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5b:1d:fd:52:a9:4a:96:69:45:2a:0b:76:60:9a:d0:b6:e5: a5:49:04:af:7f:a8:a3:99:af:e6:7c:d2:b7:86:37:50:d7:bd: 20:28:8b:17:8e:d0:c3:ac:f7:ca:6f:21:96:e0:f8:57:56:be: d7:ae:b1:50:0c:b3:fa:9c:55:6f:de:c7:93:75:7c:26:0e:4c: 10:43:ca:26:73:80:a8:09:1f:6e:f1:01:df:b8:05:fe:76:9c: f2:e5:4b:57:4d:8e:0f:78:d4:8b:78:31:9d:17:3b:54:c6:6a: 4f:b0:0f:30:fb:9e:5f:9e:e1:f0:a2:3f:f0:9a:72:99:0c:bd: c7:89:bf:ae:8e:3a:d9:e3:a1:de:72:8f:a2:4e:07:1d:c7:47: 35:b6:47:f5:3c:70:8f:84:54:9c:a5:86:30:fe:cb:b0:e3:cc: bb:46:b5:ae:f9:bb:af:4f:1b:31:af:17:28:54:e1:a4:75:47: 64:d8:9f:87:4b:02:a6:67:04:9a:e4:dc:48:15:f2:61:3f:a4: 71:06:2b:1f:a2:e6:19:89:83:28:4b:bb:c0:6b:9f:6f:d2:34: ed:ef:16:02:41:12:0f:ea:cd:a5:65:1a:cf:0e:0b:a9:63:37: 83:8f:ba:42:a1:f7:a8:cc:64:fa:ae:5b:d2:e4:44:b2:a9:15: 4c:47:d4:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYDD9EDOF61fR/nnnYHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2 OTUzMmEwHhcNMjUxMjI2MTEwMDQ5WhcNMjUxMjI3MTEwMDQ5WjAzMTEwLwYDVQQD Eyg1OGQ2NWYwOTVlODU3MWQ4YzhmZmUzMzllYTkyM2NmNWVlOWMxZWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHLlu6JwdXHd2GXJoXf+lXtUhc1z zmScX3RlYZhkzdrRyJpZtJK/IFdX6CHYObYS8lqpXrguDFB/IYE6u4hZ2WdtXRk4 trPk6ANNgZ85tsoAa7qpRzLgS0z8hff+P6due1ivB/nFFJZ422+4UszKY7oqQ9ri 1f9DPgoSh4EgDqUFulK7BS1FYVUY3q68U1rAqShzkHoZcWXFyOWxb0wYY0rlt96/ k58+A8nlZQ4BisOyO4EiIrkjjTOUvSKplpqRiWLYcMVuk9FXMjGOJ2ELbITtyYps 5tmlK1r2iOKiaUrA+cQ7CNx8cAxQPHj1tS4/r4zErM2nDryrQDWSeFgP4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjWXwlehXHYyP/jOeqSPPXunB71MB8GA1UdIwQY MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt MmJjMWFlM2RiZGJlLzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARVsd/VKp SpZpRSoLdmCa0LblpUkEr3+oo5mv5nzSt4Y3UNe9ICiLF47Qw6z3ym8hluD4V1a+ 166xUAyz+pxVb97Hk3V8Jg5MEEPKJnOAqAkfbvEB37gF/nac8uVLV02OD3jUi3gx nRc7VMZqT7APMPueX57h8KI/8JpymQy9x4m/ro462eOh3nKPok4HHcdHNbZH9Txw j4RUnKWGMP7LsOPMu0a1rvm7r08bMa8XKFThpHVHZNifh0sCpmcEmuTcSBXyYT+k cQYrH6LmGYmDKEu7wGufb9I07e8WAkESD+rNpWUazw4LqWM3g4+6QqH3qMxk+q5b 0uREsqkVTEfUag== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:27 2025 by rpki-client