This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft File: A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json) Hash identifier: 0eDudRx/gW2Lz/bfmKxNMQ+rmz7CYy84Ryu87YuOW4o= Subject key identifier: 7A:F9:1E:36:EE:47:DC:B3:32:95:4A:B2:29:50:5F:61:9E:08:E8:BF Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Certificate serial: 019B3A586B7FB70B0345038C89C6ACFDB1AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft Manifest number: 0B9B Signing time: Sat 20 Dec 2025 06:00:31 +0000 Manifest this update: Sat 20 Dec 2025 06:00:31 +0000 Manifest next update: Sun 21 Dec 2025 06:00:31 +0000 Files and hashes: 1: 1-Gv3E907MTfXuMPmsscWz1qmn78.roa (hash: uBQT6rIDTqX3BYBvMNRkEwe9KRdLtsmbFCKT0keUzwo=) 2: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: KbBwBOgpCsosriW7+tl5YRREQ+04h8IDN/qdd1f4aN8=) 3: XNJw0i5YROHsLdGqQV-sQNcutQk.roa (hash: jP7HL40L4UifhwI3DQuFuVlNNqWLOXwjBtyAaPoZl9M=) 4: hHiGsmfrhsgON9dzVYozxtuCCDg.roa (hash: z4ZF0Gqq/BQZKQszFHzmotHi4BZqgEpR8VtVskzydjw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:6b:7f:b7:0b:03:45:03:8c:89:c6:ac:fd:b1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Validity Not Before: Dec 20 06:00:31 2025 GMT Not After : Dec 21 06:00:31 2025 GMT Subject: CN=7af91e36ee47dcb332954ab229505f619e08e8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:ee:fa:cb:04:03:d1:74:ca:41:3b:73:ed: 77:a2:e7:24:71:b6:d9:65:11:26:83:fc:d0:1b:11: 3d:51:67:31:43:fe:df:89:51:14:58:13:47:5a:ae: 83:89:3a:79:90:6a:cf:0e:0f:12:77:c0:e8:67:26: a7:20:d1:d2:65:7c:53:c6:d4:a1:1e:82:c3:9f:49: df:a5:6a:36:8a:c4:35:a7:c6:57:8e:7e:77:89:9e: 35:0d:46:d2:0d:01:3f:32:61:1e:0e:29:92:13:dc: 8a:1c:df:da:7a:8e:b0:72:ae:2a:fc:d8:47:02:60: 2f:60:a1:b9:17:f7:75:bc:f7:94:7e:ef:46:84:9b: bf:8f:e5:a7:06:2f:eb:65:c6:32:52:7e:95:7f:5c: bf:bf:a2:6a:f9:71:71:5b:2f:aa:54:4d:81:7b:dd: 49:fe:8a:d1:d1:8b:0b:40:4b:3c:2b:0c:99:a2:ec: 47:cd:7e:2b:a4:54:98:82:5e:2f:26:be:08:66:63: cc:cd:db:9a:69:11:01:ce:84:4d:01:92:de:81:13: e9:a1:ba:a9:74:90:46:02:5f:bb:fe:83:b4:34:54: 70:85:e4:68:21:54:b9:d3:b4:b2:ec:31:cb:af:21: b4:46:7c:0f:bc:fa:92:9a:e3:93:07:b8:f4:26:3b: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:F9:1E:36:EE:47:DC:B3:32:95:4A:B2:29:50:5F:61:9E:08:E8:BF X509v3 Authority Key Identifier: keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:3f:3a:54:9e:67:bc:db:a1:2a:a4:09:8a:a2:b8:e2:c3:ab: 5c:ae:02:5b:07:b5:7b:54:8c:6f:5e:e4:0a:b2:9a:44:59:56: 1e:85:d5:ef:36:9b:59:ff:12:5c:1b:1c:de:8c:4a:18:5f:f0: 32:91:a9:22:fb:a5:1f:7c:09:85:30:ae:86:29:04:bf:0f:76: 5c:28:9a:b2:f0:56:24:e8:46:f7:cb:cc:5c:36:dc:aa:aa:17: e2:ba:cd:1c:78:7e:2a:98:0b:06:ae:47:95:a8:0b:c2:ea:de: cd:19:4a:c6:6e:19:cd:02:a7:95:7a:11:96:cf:72:d4:c3:35: b5:86:26:b4:2f:f3:cc:3a:13:50:5e:64:b1:4b:86:42:94:35: e5:54:6d:d7:44:be:16:48:4a:35:be:c5:35:a1:f7:2f:5d:15: f8:3c:72:2b:7b:da:8c:a6:42:1c:57:d8:44:fa:4d:8f:cd:09: 37:4f:72:22:70:c5:70:c0:16:f2:b2:63:fc:cb:da:31:5c:ce: ba:97:05:ba:1a:50:28:4f:4a:9d:78:b8:b7:ab:c3:ea:4c:00: cf:c7:6c:3d:04:11:cf:c4:b6:77:1f:78:19:ef:22:fc:0b:c9: fc:41:63:32:94:f4:47:6f:64:9f:40:36:48:26:5e:be:d2:98: c4:97:ad:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WGt/twsDRQOMicas/bGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli YmIxZTIwHhcNMjUxMjIwMDYwMDMxWhcNMjUxMjIxMDYwMDMxWjAzMTEwLwYDVQQD Eyg3YWY5MWUzNmVlNDdkY2IzMzI5NTRhYjIyOTUwNWY2MTllMDhlOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4Lu+ssEA9F0ykE7c+13ouckcbbZ ZREmg/zQGxE9UWcxQ/7fiVEUWBNHWq6DiTp5kGrPDg8Sd8DoZyanINHSZXxTxtSh HoLDn0nfpWo2isQ1p8ZXjn53iZ41DUbSDQE/MmEeDimSE9yKHN/aeo6wcq4q/NhH AmAvYKG5F/d1vPeUfu9GhJu/j+WnBi/rZcYyUn6Vf1y/v6Jq+XFxWy+qVE2Be91J /orR0YsLQEs8KwyZouxHzX4rpFSYgl4vJr4IZmPMzduaaREBzoRNAZLegRPpobqp dJBGAl+7/oO0NFRwheRoIVS507Sy7DHLryG0RnwPvPqSmuOTB7j0JjvwGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHr5HjbuR9yzMpVKsilQX2GeCOi/MB8GA1UdIwQY MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt ZmI5N2RkZDU0ODkxLzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1T86VJ5n vNuhKqQJiqK44sOrXK4CWwe1e1SMb17kCrKaRFlWHoXV7zabWf8SXBsc3oxKGF/w MpGpIvulH3wJhTCuhikEvw92XCiasvBWJOhG98vMXDbcqqoX4rrNHHh+KpgLBq5H lagLwurezRlKxm4ZzQKnlXoRls9y1MM1tYYmtC/zzDoTUF5ksUuGQpQ15VRt10S+ FkhKNb7FNaH3L10V+DxyK3vajKZCHFfYRPpNj80JN09yInDFcMAW8rJj/MvaMVzO upcFuhpQKE9KnXi4t6vD6kwAz8dsPQQRz8S2dx94Ge8i/AvJ/EFjMpT0R29kn0A2 SCZevtKYxJet6w== -----END CERTIFICATE-----Generated at Sat Dec 20 11:42:24 2025 by rpki-client