This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json) Hash identifier: sJ9jUCXPkIVIsbAxQhCcpXYgxZu6R/OIt+/SncxIk5Y= Subject key identifier: 77:6C:52:B8:0F:00:A3:0A:D3:FB:07:C5:4D:3E:4C:E9:42:E4:DD:AA Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Certificate serial: 019B39B3A01CC322FCADEA9026BBD6471FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft Manifest number: 0BB0 Signing time: Sat 20 Dec 2025 03:00:31 +0000 Manifest this update: Sat 20 Dec 2025 03:00:31 +0000 Manifest next update: Sun 21 Dec 2025 03:00:31 +0000 Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=) 2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: yjBKdvBwA9VergxMfDxbeJnfsLhZz4PUc7INIdbsGAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:a0:1c:c3:22:fc:ad:ea:90:26:bb:d6:47:1f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Validity Not Before: Dec 20 03:00:31 2025 GMT Not After : Dec 21 03:00:31 2025 GMT Subject: CN=776c52b80f00a30ad3fb07c54d3e4ce942e4ddaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:d6:83:c7:40:73:6b:57:93:65:c5:6f:71:30: 6d:44:db:a5:8d:9d:78:b4:b4:bb:02:e8:6e:43:b6: bc:e5:a6:49:e3:aa:52:34:e3:4e:59:e2:67:ed:c6: 99:4a:16:10:28:8a:9b:56:fb:10:1b:fa:ab:97:44: d0:92:47:74:e6:60:74:3c:1c:2f:8e:48:00:3a:5c: 12:60:39:c7:34:38:6d:08:cb:b7:dc:f5:ac:62:af: fd:16:5e:ae:d3:57:ca:6d:2c:c0:04:0b:43:ab:7e: f3:b2:6f:0a:81:bf:07:07:9e:b7:57:3b:9d:fd:53: 18:f5:f8:ad:1b:32:aa:72:99:0a:66:72:27:cc:e6: b3:5d:7d:a0:30:c3:0f:c9:2a:43:6c:51:3e:b1:b9: bd:15:41:1a:b2:55:c5:3b:c7:45:23:fd:b2:2b:6d: 54:1f:3b:77:5d:23:ff:d6:94:92:7b:24:56:f0:45: ca:94:13:05:38:be:f0:95:a8:6f:d6:cf:57:b2:d7: cd:4c:06:10:ec:93:61:21:db:14:05:69:4a:c7:35: a0:e3:69:54:25:94:1e:13:10:94:80:04:7a:59:1f: ee:2f:a6:1b:cf:ae:23:26:35:b3:45:dd:e1:60:f3: 1d:a6:37:5a:dc:22:f0:70:7b:f6:70:aa:c6:25:5f: 0a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6C:52:B8:0F:00:A3:0A:D3:FB:07:C5:4D:3E:4C:E9:42:E4:DD:AA X509v3 Authority Key Identifier: keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:10:42:41:ec:bd:fc:7d:e9:ca:c0:a8:65:23:7b:83:dc:31: 75:50:fc:0e:18:55:53:44:4d:06:13:7c:73:b5:64:89:76:ca: 4c:3b:bd:71:1f:f2:72:5a:79:33:f6:13:50:56:07:c3:d3:eb: 00:fe:c1:17:2e:81:d2:2f:a2:50:7f:66:cf:23:a1:0a:62:c0: 79:58:00:07:98:c5:1d:77:3a:c6:93:94:63:3c:aa:49:6a:ab: da:5e:34:7c:1c:47:47:01:d2:6a:24:73:f2:1c:c2:e6:53:0a: 87:07:90:06:f8:d9:90:2a:78:90:d3:27:b1:f6:04:6b:c5:36: ff:20:e3:a8:2b:69:0b:d7:e2:e2:74:ac:2c:9b:e9:51:7a:3e: ea:cc:b1:85:eb:16:b6:8d:7e:0e:dd:49:2c:53:b1:c2:7b:94: 4c:89:94:8b:bb:d9:0b:f0:db:b5:55:5c:57:29:94:48:aa:3f: 56:0b:0c:e0:90:53:7a:7d:e0:7a:15:2c:2e:a9:83:ff:99:c0: 67:e9:48:48:aa:4c:15:9e:c1:89:c1:8a:95:bf:c6:cd:75:e7: ce:39:f3:f5:59:8d:6d:0c:8b:87:4a:d9:bf:e0:58:d7:4e:ca: e8:98:c1:60:6c:12:da:fe:67:24:19:ff:e4:c1:0d:57:96:78: b4:ba:df:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s6AcwyL8reqQJrvWRx/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj NTliOTIwHhcNMjUxMjIwMDMwMDMxWhcNMjUxMjIxMDMwMDMxWjAzMTEwLwYDVQQD Eyg3NzZjNTJiODBmMDBhMzBhZDNmYjA3YzU0ZDNlNGNlOTQyZTRkZGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7NaDx0Bza1eTZcVvcTBtRNuljZ14 tLS7AuhuQ7a85aZJ46pSNONOWeJn7caZShYQKIqbVvsQG/qrl0TQkkd05mB0PBwv jkgAOlwSYDnHNDhtCMu33PWsYq/9Fl6u01fKbSzABAtDq37zsm8Kgb8HB563Vzud /VMY9fitGzKqcpkKZnInzOazXX2gMMMPySpDbFE+sbm9FUEaslXFO8dFI/2yK21U Hzt3XSP/1pSSeyRW8EXKlBMFOL7wlahv1s9XstfNTAYQ7JNhIdsUBWlKxzWg42lU JZQeExCUgAR6WR/uL6Ybz64jJjWzRd3hYPMdpjda3CLwcHv2cKrGJV8KVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdsUrgPAKMK0/sHxU0+TOlC5N2qMB8GA1UdIwQY MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRBCQey9 /H3pysCoZSN7g9wxdVD8DhhVU0RNBhN8c7VkiXbKTDu9cR/yclp5M/YTUFYHw9Pr AP7BFy6B0i+iUH9mzyOhCmLAeVgAB5jFHXc6xpOUYzyqSWqr2l40fBxHRwHSaiRz 8hzC5lMKhweQBvjZkCp4kNMnsfYEa8U2/yDjqCtpC9fi4nSsLJvpUXo+6syxhesW to1+Dt1JLFOxwnuUTImUi7vZC/DbtVVcVymUSKo/VgsM4JBTen3gehUsLqmD/5nA Z+lISKpMFZ7BicGKlb/GzXXnzjnz9VmNbQyLh0rZv+BY107K6JjBYGwS2v5nJBn/ 5MENV5Z4tLrfsw== -----END CERTIFICATE-----Generated at Sat Dec 20 08:41:19 2025 by rpki-client