This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json) Hash identifier: moI3pTB8b/mSmLNgReBJGC0AmhpQLi/ozE7poPiFzpQ= Subject key identifier: B0:54:2E:D5:28:82:FD:CA:7C:9A:37:C5:61:6B:D1:A8:BD:FA:31:8D Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0 Certificate serial: 019B3FB5B2B69D08C9A38410FA86019E09C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft Manifest number: 1531 Signing time: Sun 21 Dec 2025 07:00:30 +0000 Manifest this update: Sun 21 Dec 2025 07:00:30 +0000 Manifest next update: Mon 22 Dec 2025 07:00:30 +0000 Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: K4u9CGJZC2uXESU+NDjiAQuCmeSlZOazvE+qQUzynjs=) 2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:b2:b6:9d:08:c9:a3:84:10:fa:86:01:9e:09:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0 Validity Not Before: Dec 21 07:00:30 2025 GMT Not After : Dec 22 07:00:30 2025 GMT Subject: CN=b0542ed52882fdca7c9a37c5616bd1a8bdfa318d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b4:17:a7:0b:b8:0e:85:27:08:26:a5:44:23: d7:7a:b4:a9:ce:83:0f:ce:6a:34:ef:86:e7:8c:e3: eb:2a:12:3d:2d:4c:87:f6:21:51:78:e8:fc:71:ff: 60:80:28:7d:a6:60:9e:66:72:9c:44:b7:79:e5:70: 82:f7:f9:1a:ab:9c:68:78:63:d3:1f:39:2f:61:b5: 9b:d5:a5:2f:9e:02:f4:33:4b:e8:5d:46:d9:cf:a3: e8:a0:d4:cc:7e:49:d6:c7:42:83:7c:f1:8c:85:c7: 00:d5:4b:26:9e:43:de:23:11:dc:92:65:f4:7d:34: 12:a3:66:93:51:10:4c:c6:bc:6a:e0:0f:45:0a:ec: 9c:2d:89:49:60:92:fa:b0:ae:20:3d:4c:2b:f7:95: 57:7b:62:3a:74:4d:78:d0:b6:ba:d3:e8:81:57:c6: c5:1c:89:63:2a:49:47:4b:b2:0f:96:dc:d1:ca:f6: c6:e7:f7:40:3c:45:f5:39:cf:99:64:55:b5:7f:4e: 8a:3f:89:6d:e3:95:61:88:ad:96:47:20:5a:81:d6: 08:3c:fa:9c:cb:7e:ed:69:cf:5b:5a:a4:cc:c6:0f: 33:81:c8:83:84:d2:e5:e1:0f:6c:df:99:7f:4b:46: b4:c2:b7:81:21:de:35:4b:e7:e8:b4:72:45:96:66: dd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:54:2E:D5:28:82:FD:CA:7C:9A:37:C5:61:6B:D1:A8:BD:FA:31:8D X509v3 Authority Key Identifier: keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:47:89:b8:91:92:95:2e:93:86:7b:7a:de:8e:9f:27:68:74: 3e:20:2f:56:b2:1c:77:8a:8d:fe:32:7b:5a:36:bc:ee:fe:19: 04:12:d9:39:8c:e7:50:33:d5:62:c2:ea:58:1d:0e:8c:75:2e: 97:64:97:5b:8f:a2:f4:f0:8f:fb:9d:b3:9d:2a:6e:32:36:45: f3:fc:34:a1:79:6c:50:c2:99:b2:60:73:f9:97:6d:4c:01:11: 6a:b4:7b:91:bc:20:c4:54:5e:6c:53:3c:7f:c0:b7:21:96:81: 3f:80:04:15:25:8f:53:ee:88:bb:bb:22:89:9b:da:54:1e:05: 3b:e9:f8:a1:91:e3:5f:99:76:0f:75:b2:94:8b:66:50:e9:51: 4d:57:8d:f7:59:fd:d2:d4:4c:d4:61:6d:d7:0f:0d:b3:58:d0: c7:8e:ef:9a:3e:76:1d:f7:9b:4b:cf:d3:f3:8a:9f:67:cd:cc: 2d:ca:ec:d0:0c:90:30:8b:e8:82:36:09:9f:b9:4f:be:05:e9: 8a:2e:37:33:ab:00:90:42:a3:b7:2d:74:7a:da:76:cb:f0:df: 62:0d:dd:ce:b4:bc:14:49:67:62:6a:6b:6e:85:ef:71:45:a4: 41:4a:20:fc:f3:28:29:28:35:56:a8:6c:d4:33:70:3c:1c:50: a9:34:99:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tbK2nQjJo4QQ+oYBngnGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx MDAzYzAwHhcNMjUxMjIxMDcwMDMwWhcNMjUxMjIyMDcwMDMwWjAzMTEwLwYDVQQD EyhiMDU0MmVkNTI4ODJmZGNhN2M5YTM3YzU2MTZiZDFhOGJkZmEzMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbQXpwu4DoUnCCalRCPXerSpzoMP zmo074bnjOPrKhI9LUyH9iFReOj8cf9ggCh9pmCeZnKcRLd55XCC9/kaq5xoeGPT HzkvYbWb1aUvngL0M0voXUbZz6PooNTMfknWx0KDfPGMhccA1UsmnkPeIxHckmX0 fTQSo2aTURBMxrxq4A9FCuycLYlJYJL6sK4gPUwr95VXe2I6dE140La60+iBV8bF HIljKklHS7IPltzRyvbG5/dAPEX1Oc+ZZFW1f06KP4lt45VhiK2WRyBagdYIPPqc y37tac9bWqTMxg8zgciDhNLl4Q9s35l/S0a0wreBId41S+fotHJFlmbdRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBULtUogv3KfJo3xWFr0ai9+jGNMB8GA1UdIwQY MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUeJuJGS lS6Thnt63o6fJ2h0PiAvVrIcd4qN/jJ7Wja87v4ZBBLZOYznUDPVYsLqWB0OjHUu l2SXW4+i9PCP+52znSpuMjZF8/w0oXlsUMKZsmBz+ZdtTAERarR7kbwgxFRebFM8 f8C3IZaBP4AEFSWPU+6Iu7siiZvaVB4FO+n4oZHjX5l2D3WylItmUOlRTVeN91n9 0tRM1GFt1w8Ns1jQx47vmj52HfebS8/T84qfZ83MLcrs0AyQMIvogjYJn7lPvgXp ii43M6sAkEKjty10etp2y/DfYg3dzrS8FElnYmprboXvcUWkQUog/PMoKSg1Vqhs 1DNwPBxQqTSZHA== -----END CERTIFICATE-----Generated at Sun Dec 21 15:24:39 2025 by rpki-client