This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft File: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft (raw, json) Hash identifier: vCxo51ireAumZPK3N/jZLbZh0l09T6wDHdoySwEO6s8= Subject key identifier: 19:2F:80:58:0C:3D:C9:18:17:D7:EB:8B:19:94:A4:E5:D0:36:53:8A Authority key identifier: F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 Certificate issuer: /CN=f57331288d908dd762e4b56f003b448f01881d24 Certificate serial: 019B405BA834AE57D28F0F71EAFC460C3DFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft Manifest number: 0BC2 Signing time: Sun 21 Dec 2025 10:01:47 +0000 Manifest this update: Sun 21 Dec 2025 10:01:47 +0000 Manifest next update: Mon 22 Dec 2025 10:01:47 +0000 Files and hashes: 1: 9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl (hash: vKUdYuq/2BXIAcIoTVURUOvSWDzBM8NjtS32lv6zFoo=) 2: g7lGHV-1_6YLUG-EIHcKuVMeEvA.roa (hash: vuw6Cb62Uo/aOsqmXFznBzd1y3zPSLM1hJbb48SnJE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:a8:34:ae:57:d2:8f:0f:71:ea:fc:46:0c:3d:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57331288d908dd762e4b56f003b448f01881d24 Validity Not Before: Dec 21 10:01:47 2025 GMT Not After : Dec 22 10:01:47 2025 GMT Subject: CN=192f80580c3dc91817d7eb8b1994a4e5d036538a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:54:e0:3f:ce:dd:07:4d:c4:11:5a:75:df:97: 52:07:9c:ce:84:4b:6c:71:7b:83:02:29:5d:cc:29: a0:ee:b8:e2:e4:70:72:04:db:a3:01:85:a5:32:e1: 3d:94:f7:bd:24:82:a4:59:05:14:54:51:80:75:6e: 81:5d:4c:01:7b:e2:59:8e:12:e0:48:f0:a0:0a:2d: c0:a0:10:cd:7c:3e:c3:93:c6:82:4e:67:9b:41:65: bf:cd:64:b9:31:3a:78:61:d6:3e:08:db:3e:07:3f: cf:a6:f6:61:66:4b:0f:4d:c7:dd:8c:e1:1d:e5:c7: 75:40:ef:93:a5:30:21:1d:aa:25:09:b5:a8:03:59: 23:81:43:8c:40:79:ec:24:a3:aa:9e:d3:d6:29:83: 2d:40:f2:10:4d:8a:93:00:d3:d9:11:fc:1d:77:eb: 0d:67:bf:9c:9d:84:b4:20:1b:65:72:da:66:e7:67: 9f:f0:58:76:dc:bd:28:75:0a:0d:7d:1b:07:02:54: 79:df:28:c4:86:eb:c0:57:1a:a1:d4:02:20:b1:bf: 72:64:47:2a:9b:d7:d1:46:b0:9b:05:40:1d:2f:fa: b5:71:79:c6:22:d3:aa:92:b5:52:35:77:c2:6d:6e: 79:62:66:d0:ec:9b:1e:84:70:b4:9f:f3:0c:f7:21: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:2F:80:58:0C:3D:C9:18:17:D7:EB:8B:19:94:A4:E5:D0:36:53:8A X509v3 Authority Key Identifier: keyid:F5:73:31:28:8D:90:8D:D7:62:E4:B5:6F:00:3B:44:8F:01:88:1D:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XMxKI2Qjddi5LVvADtEjwGIHSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5abb3a-b1b6-4d70-b098-8aea1f68b79b/1/9XMxKI2Qjddi5LVvADtEjwGIHSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c3:18:dd:e3:f3:cf:10:13:fa:c6:70:f2:8e:73:d5:75:b1: 38:b0:6b:52:d0:c5:0e:09:18:8c:26:0e:1a:3f:79:ea:0e:89: 12:43:ce:48:82:41:ba:a7:86:86:22:f8:36:f2:ec:13:55:ad: 5e:21:ab:ca:f5:c3:5c:f5:83:bf:c7:bf:55:cc:b4:ae:3e:a2: 0e:91:89:59:8e:14:a7:26:8e:65:96:6c:47:c2:35:eb:6b:1c: 2a:d9:54:88:2a:7b:9f:76:56:1f:d8:e7:cb:4b:83:bf:ae:37: 95:c8:3f:3c:7a:d4:70:51:f1:0c:28:3f:8d:00:90:90:1f:6e: 98:16:b0:8d:7a:1f:b0:e4:d8:f3:c8:e7:58:5b:6e:db:31:fb: 98:db:ab:e7:f4:e8:9a:32:39:ed:42:f9:4a:22:f6:82:10:9a: f5:17:8b:ad:57:17:5b:7b:f6:3c:40:f9:f1:84:3c:36:3d:53: bd:72:3c:60:dd:71:eb:4e:bd:73:b8:13:b5:e5:70:ef:ec:11: 36:0e:01:d4:74:03:0e:b6:85:32:d1:41:16:06:90:36:5d:57: 66:6b:bc:b1:bb:48:7d:9b:fd:72:b5:fb:d4:3c:76:8f:aa:eb: f2:9d:b4:59:ac:b0:67:25:cc:eb:cc:74:ac:ce:0c:dc:28:94: 18:9c:d5:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW6g0rlfSjw9x6vxGDD3/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NzMzMTI4OGQ5MDhkZDc2MmU0YjU2ZjAwM2I0NDhmMDE4 ODFkMjQwHhcNMjUxMjIxMTAwMTQ3WhcNMjUxMjIyMTAwMTQ3WjAzMTEwLwYDVQQD EygxOTJmODA1ODBjM2RjOTE4MTdkN2ViOGIxOTk0YTRlNWQwMzY1MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVTgP87dB03EEVp135dSB5zOhEts cXuDAildzCmg7rji5HByBNujAYWlMuE9lPe9JIKkWQUUVFGAdW6BXUwBe+JZjhLg SPCgCi3AoBDNfD7Dk8aCTmebQWW/zWS5MTp4YdY+CNs+Bz/PpvZhZksPTcfdjOEd 5cd1QO+TpTAhHaolCbWoA1kjgUOMQHnsJKOqntPWKYMtQPIQTYqTANPZEfwdd+sN Z7+cnYS0IBtlctpm52ef8Fh23L0odQoNfRsHAlR53yjEhuvAVxqh1AIgsb9yZEcq m9fRRrCbBUAdL/q1cXnGItOqkrVSNXfCbW55YmbQ7JsehHC0n/MM9yE25QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkvgFgMPckYF9frixmUpOXQNlOKMB8GA1UdIwQY MBaAFPVzMSiNkI3XYuS1bwA7RI8BiB0kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgt OGFlYTFmNjhiNzliLzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81YWJiM2EtYjFiNi00ZDcwLWIwOTgtOGFlYTFmNjhiNzli LzEvOVhNeEtJMlFqZGRpNUxWdkFEdEVqd0dJSFNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMMY3ePz zxAT+sZw8o5z1XWxOLBrUtDFDgkYjCYOGj956g6JEkPOSIJBuqeGhiL4NvLsE1Wt XiGryvXDXPWDv8e/Vcy0rj6iDpGJWY4UpyaOZZZsR8I162scKtlUiCp7n3ZWH9jn y0uDv643lcg/PHrUcFHxDCg/jQCQkB9umBawjXofsOTY88jnWFtu2zH7mNur5/To mjI57UL5SiL2ghCa9ReLrVcXW3v2PED58YQ8Nj1TvXI8YN1x6069c7gTteVw7+wR Ng4B1HQDDraFMtFBFgaQNl1XZmu8sbtIfZv9crX71Dx2j6rr8p20WaywZyXM68x0 rM4M3CiUGJzVtw== -----END CERTIFICATE-----Generated at Sun Dec 21 12:03:16 2025 by rpki-client