This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json) Hash identifier: r/LAYz+sFgN+7mnzzCmHpmjCTKGbH/k54bccZCExeGw= Subject key identifier: 43:C8:4A:F3:C8:FD:1F:89:0A:D4:64:2B:0F:83:97:43:17:DE:5A:1A Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Certificate serial: 019B3BA20E050D537E504072B36CBD1A0244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft Manifest number: 0BB1 Signing time: Sat 20 Dec 2025 12:00:34 +0000 Manifest this update: Sat 20 Dec 2025 12:00:34 +0000 Manifest next update: Sun 21 Dec 2025 12:00:34 +0000 Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=) 2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: LnzaVs5t5UlpRNeT5hE6Ki49NcMxJS/8oTJ/sJmo50U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:0e:05:0d:53:7e:50:40:72:b3:6c:bd:1a:02:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Validity Not Before: Dec 20 12:00:34 2025 GMT Not After : Dec 21 12:00:34 2025 GMT Subject: CN=43c84af3c8fd1f890ad4642b0f83974317de5a1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:b0:63:cc:38:a3:82:0e:51:61:49:1d:24: 87:2d:05:81:53:c9:6b:45:31:14:05:0b:ec:7f:a9: 0e:16:8c:cf:f7:e7:6c:3f:57:ec:13:48:52:4d:9f: 3e:cf:be:07:27:95:79:35:d6:6a:3d:f0:76:31:07: e5:85:39:12:ad:c6:41:07:5b:7d:0a:87:41:2a:a9: 54:49:bd:0f:49:7d:0d:b9:db:bb:9b:97:d8:38:a6: 53:68:de:87:17:f9:62:ad:b7:40:56:95:2d:6d:75: dd:ab:88:cc:f4:82:8b:a5:f9:e7:6c:35:7b:4b:b3: 9e:de:e5:ec:df:69:99:71:58:7e:81:6f:1b:04:c3: ec:1b:3d:45:af:ba:c2:b2:4c:8d:54:bc:d3:e5:38: d6:e4:63:0a:65:6d:76:b8:b9:0e:17:6c:e1:3a:d3: b8:b4:2a:32:40:89:a2:fc:aa:b8:87:89:49:72:3e: 42:a6:87:e0:02:f5:da:d2:9d:7b:07:44:74:f5:5e: 3e:c2:6b:71:77:6a:cb:23:4b:ff:a6:52:c3:c5:7a: 9a:79:e7:51:9d:db:7c:c5:18:45:f8:82:3c:cf:68: c9:9a:1e:4f:af:78:95:63:46:2d:0d:ab:f7:f6:c9: 48:39:24:94:66:31:6a:15:d8:b9:bb:66:a8:05:20: 86:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C8:4A:F3:C8:FD:1F:89:0A:D4:64:2B:0F:83:97:43:17:DE:5A:1A X509v3 Authority Key Identifier: keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:90:7f:7b:d2:13:35:23:0d:bb:da:df:e1:01:26:07:04:5e: 2b:cf:ca:47:f3:7a:4a:26:60:2e:27:02:b1:e5:78:96:3e:ce: f0:f8:bd:3a:55:f0:f7:7d:59:ca:e1:3d:68:31:04:d7:68:ac: 8d:bf:52:64:01:35:c9:99:7e:34:3e:19:fe:98:f1:71:2f:3f: b1:5d:6e:6a:83:07:da:a6:d4:74:7c:eb:c9:6e:9b:c1:ab:05: 38:44:7d:70:65:35:9f:02:20:05:68:5a:c3:b5:38:83:5f:cf: f7:56:14:ac:ee:ec:23:9b:da:0b:11:00:9a:15:b8:a6:4b:2a: 6e:a5:51:9d:33:0d:72:97:11:3f:b1:2d:cc:aa:af:a9:b2:d0: fe:d8:0c:82:73:c4:6f:fb:66:d0:9f:39:86:53:10:0f:48:25: 17:40:b5:a2:35:c5:9e:02:da:e0:f0:83:ee:1c:9e:0e:78:6a: 52:01:f6:49:11:5f:18:21:49:b5:e7:fd:0a:b5:4a:1e:aa:72: 84:01:6a:09:fd:bc:74:e6:cd:6b:ca:13:a0:46:c7:fd:8a:28: 42:d8:e5:8c:a4:c4:d3:b0:1b:94:1d:87:f9:2a:ab:d6:ce:0a: 68:f1:40:8b:98:56:39:3b:c0:44:76:9f:11:e2:20:dc:64:1d: 28:31:70:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7og4FDVN+UEBys2y9GgJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj NTliOTIwHhcNMjUxMjIwMTIwMDM0WhcNMjUxMjIxMTIwMDM0WjAzMTEwLwYDVQQD Eyg0M2M4NGFmM2M4ZmQxZjg5MGFkNDY0MmIwZjgzOTc0MzE3ZGU1YTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvauwY8w4o4IOUWFJHSSHLQWBU8lr RTEUBQvsf6kOFozP9+dsP1fsE0hSTZ8+z74HJ5V5NdZqPfB2MQflhTkSrcZBB1t9 CodBKqlUSb0PSX0Nudu7m5fYOKZTaN6HF/lirbdAVpUtbXXdq4jM9IKLpfnnbDV7 S7Oe3uXs32mZcVh+gW8bBMPsGz1Fr7rCskyNVLzT5TjW5GMKZW12uLkOF2zhOtO4 tCoyQImi/Kq4h4lJcj5CpofgAvXa0p17B0R09V4+wmtxd2rLI0v/plLDxXqaeedR ndt8xRhF+II8z2jJmh5Pr3iVY0YtDav39slIOSSUZjFqFdi5u2aoBSCGVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPISvPI/R+JCtRkKw+Dl0MX3loaMB8GA1UdIwQY MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjpB/e9IT NSMNu9rf4QEmBwReK8/KR/N6SiZgLicCseV4lj7O8Pi9OlXw931ZyuE9aDEE12is jb9SZAE1yZl+ND4Z/pjxcS8/sV1uaoMH2qbUdHzryW6bwasFOER9cGU1nwIgBWha w7U4g1/P91YUrO7sI5vaCxEAmhW4pksqbqVRnTMNcpcRP7EtzKqvqbLQ/tgMgnPE b/tm0J85hlMQD0glF0C1ojXFngLa4PCD7hyeDnhqUgH2SRFfGCFJtef9CrVKHqpy hAFqCf28dObNa8oToEbH/YooQtjljKTE07AblB2H+Sqr1s4KaPFAi5hWOTvARHaf EeIg3GQdKDFwww== -----END CERTIFICATE-----Generated at Sat Dec 20 22:02:32 2025 by rpki-client