This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft File: 9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json) Hash identifier: prctIlJRmNxiBmEs4KEXkhH6CZLTVAwpCY4Dnq5ez7k= Subject key identifier: AA:04:14:2B:AC:2A:E3:45:11:7E:E7:DF:86:AD:F3:57:4E:95:BE:F7 Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 Certificate issuer: /CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Certificate serial: 019B3AC657238FDB0A8A7DBD62C0B645C84B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 08:00:35 +0000 Manifest this update: Sat 20 Dec 2025 08:00:35 +0000 Manifest next update: Sun 21 Dec 2025 08:00:35 +0000 Files and hashes: 1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: gmMr7Zy187+eV4lB4a4AGXjff8id+8h5A/MhlPPr1Gg=) 2: EtJkvePPPWppk5nFnry3B6dGLBk.roa (hash: 7c42tElOeuBdoKmi4aSTV9LcX+EZc0MFBsv/1Jeuh8k=) 3: KYw5Kj_weN6Qm3KwiIVIrurQ0bc.roa (hash: EGFVxLdkIPiRC9X72BBMFwRMiHt1kYN13kO+xHp1ecQ=) 4: LttXh5eMv2jde6QYSngEubF_oow.roa (hash: Yan1EozpbgDCzFrwbK/bTYuqkgAj1nMSodRgwp+TLbk=) 5: d-0FuXxrgivXV_LPUKq93b_p0rk.roa (hash: IyU9YdBTUk2hBlGdTATB3ZTrCwmx/c6jIoibeyre6pQ=) 6: jlPcCTRsHvziUq2lkqlj4JDAVB4.roa (hash: WbQ2Xq5XOzyGj/4mNA7e9pYuBIwnNuiU8FsqrdgzPqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:57:23:8f:db:0a:8a:7d:bd:62:c0:b6:45:c8:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789 Validity Not Before: Dec 20 08:00:35 2025 GMT Not After : Dec 21 08:00:35 2025 GMT Subject: CN=aa04142bac2ae345117ee7df86adf3574e95bef7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d9:7b:1b:d1:60:e3:c1:7f:af:84:2f:a7:6a: 59:5b:9c:d2:24:2e:1a:f3:75:ea:25:7f:b9:65:6b: 66:de:45:8c:70:97:a6:35:30:aa:f2:b6:9f:15:28: 00:40:64:59:7f:1e:da:34:42:ef:19:aa:6f:3d:72: e3:cb:48:93:e5:27:db:75:b2:43:7d:23:36:a3:7a: 5a:0b:5f:73:3f:36:af:3c:b0:88:ed:53:19:fc:a6: 07:b6:4a:4c:0b:ce:17:09:ec:db:f9:d8:14:9a:5f: 13:8a:0f:14:1f:6c:85:64:8e:f1:bd:d7:71:3a:79: a7:27:1c:b0:ab:a9:ff:53:44:af:52:b6:d3:29:e2: 51:08:7c:a3:bb:99:cc:ba:57:16:9e:80:28:3a:a6: bf:9f:af:26:38:43:3c:ce:66:79:39:5f:b2:52:f2: 1e:a4:49:09:93:1c:01:df:cd:7e:f9:56:2a:3e:74: ab:50:b6:80:81:28:6a:cb:b0:e2:17:be:99:c9:d1: 82:e1:55:90:91:95:ed:72:81:32:8a:77:d1:9d:f5: c8:b0:de:99:e6:b7:5d:47:9f:12:12:c1:8a:a1:14: c0:bb:05:e2:1a:ae:92:0c:63:d4:bc:d8:09:10:a6: 03:53:1a:55:53:01:28:4c:b0:49:ef:95:6f:f2:40: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:04:14:2B:AC:2A:E3:45:11:7E:E7:DF:86:AD:F3:57:4E:95:BE:F7 X509v3 Authority Key Identifier: keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5e:6d:71:34:b5:13:35:c4:f5:6e:6d:c8:cf:8d:12:de:ff: 94:a0:c7:d9:b0:45:1a:29:f0:61:0f:e3:12:9d:cc:6d:dc:3d: f0:14:ef:00:d1:36:75:29:11:29:60:c8:dd:dc:dc:22:96:53: 20:61:3f:99:3b:e9:9a:d5:df:5d:ea:53:3d:83:24:d6:89:b0: 22:3e:74:83:3f:28:ab:99:5b:c7:00:2d:9e:26:5b:60:15:a1: d1:98:92:db:cb:f8:8e:fb:c2:d4:fb:eb:d7:40:24:dc:1a:4f: 03:61:65:a4:00:9a:01:95:a6:af:51:ee:33:6c:12:d8:ff:0d: 59:d6:25:ea:7d:c9:cb:3b:6a:b8:20:6f:9c:d8:e1:5f:77:59: b8:0a:74:f8:9b:25:77:95:f2:73:97:7c:c3:5c:90:7d:50:79: b1:d7:b9:04:62:24:ec:9a:28:69:72:bb:49:44:95:67:a3:5c: 7d:9e:0f:69:89:0a:21:a2:3e:13:ff:9c:4a:e6:78:55:a2:9d: 83:43:2d:d4:de:3c:67:9a:3f:5f:9f:11:eb:b9:c7:0c:47:5f: 9e:41:a3:21:a4:61:1e:a4:62:f2:32:a0:9e:15:85:1a:c3:7a: f2:da:56:3c:53:13:d0:91:ad:81:91:cc:f4:24:ac:1f:70:12: 0b:64:0a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xlcjj9sKin29YsC2RchLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5 M2U3ODkwHhcNMjUxMjIwMDgwMDM1WhcNMjUxMjIxMDgwMDM1WjAzMTEwLwYDVQQD EyhhYTA0MTQyYmFjMmFlMzQ1MTE3ZWU3ZGY4NmFkZjM1NzRlOTViZWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9l7G9Fg48F/r4Qvp2pZW5zSJC4a 83XqJX+5ZWtm3kWMcJemNTCq8rafFSgAQGRZfx7aNELvGapvPXLjy0iT5SfbdbJD fSM2o3paC19zPzavPLCI7VMZ/KYHtkpMC84XCezb+dgUml8Tig8UH2yFZI7xvddx OnmnJxywq6n/U0SvUrbTKeJRCHyju5nMulcWnoAoOqa/n68mOEM8zmZ5OV+yUvIe pEkJkxwB381++VYqPnSrULaAgShqy7DiF76ZydGC4VWQkZXtcoEyinfRnfXIsN6Z 5rddR58SEsGKoRTAuwXiGq6SDGPUvNgJEKYDUxpVUwEoTLBJ75Vv8kATtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoEFCusKuNFEX7n34at81dOlb73MB8GA1UdIwQY MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2 LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhl5tcTS1 EzXE9W5tyM+NEt7/lKDH2bBFGinwYQ/jEp3Mbdw98BTvANE2dSkRKWDI3dzcIpZT IGE/mTvpmtXfXepTPYMk1omwIj50gz8oq5lbxwAtniZbYBWh0ZiS28v4jvvC1Pvr 10Ak3BpPA2FlpACaAZWmr1HuM2wS2P8NWdYl6n3JyztquCBvnNjhX3dZuAp0+Jsl d5Xyc5d8w1yQfVB5sde5BGIk7JooaXK7SUSVZ6NcfZ4PaYkKIaI+E/+cSuZ4VaKd g0Mt1N48Z5o/X58R67nHDEdfnkGjIaRhHqRi8jKgnhWFGsN68tpWPFMT0JGtgZHM 9CSsH3ASC2QKKA== -----END CERTIFICATE-----Generated at Sat Dec 20 13:11:47 2025 by rpki-client