This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json) Hash identifier: 0nD4Q9BO6OX3saK2QiCZ+WoII7c4n1G7C+XhjmoIt50= Subject key identifier: D1:6A:F5:9A:8F:18:5C:54:B1:7C:BC:3F:80:27:89:97:3C:FC:BD:A1 Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e Certificate serial: 019B3E6D57BE157D24849368979BECB72217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft Manifest number: 0547 Signing time: Sun 21 Dec 2025 01:01:51 +0000 Manifest this update: Sun 21 Dec 2025 01:01:51 +0000 Manifest next update: Mon 22 Dec 2025 01:01:51 +0000 Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=) 2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: GQDccn5KOIFCN/2mdI24d1Dho/0+X74dJ1sltTvKbfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:57:be:15:7d:24:84:93:68:97:9b:ec:b7:22:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e Validity Not Before: Dec 21 01:01:51 2025 GMT Not After : Dec 22 01:01:51 2025 GMT Subject: CN=d16af59a8f185c54b17cbc3f802789973cfcbda1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:3d:44:0d:a4:e7:86:40:f4:f2:0a:b8:92: 2f:92:b6:f0:9c:9c:8d:a6:72:9e:9d:4f:23:ac:9f: 3f:2d:6a:b4:e5:14:3a:ce:cf:48:f4:14:b3:52:2c: ba:aa:a6:dc:1f:11:40:da:d2:a5:0f:2c:ff:25:dc: de:58:2f:03:93:a8:62:42:0e:d0:78:9a:70:79:5f: 9c:5c:c1:7a:93:65:29:75:ea:11:3b:d5:58:81:54: eb:40:cb:35:2f:e3:68:05:e5:f6:af:f1:ee:7c:6c: 62:66:a2:30:46:96:23:2e:86:c5:8d:96:c9:c9:07: 72:13:2e:a3:94:5d:20:17:04:65:7a:93:46:a4:b0: 4d:d4:a0:8b:6d:eb:53:db:4d:22:22:cd:98:af:30: ad:48:7e:67:8b:32:9e:43:05:05:16:83:76:c3:dc: 50:ce:c3:40:60:4b:2c:ff:87:ec:5f:94:86:a1:34: 55:f6:fc:aa:d0:67:c9:b5:2b:f0:f0:a3:3c:10:fb: bb:d9:1e:60:1b:10:fb:de:13:69:4f:fa:d4:75:8a: 47:35:00:53:0f:68:f2:94:ea:43:4f:95:fe:50:ca: d4:da:ec:fe:06:bc:7e:eb:dc:ba:39:56:28:e2:a8: c6:42:9f:e6:f9:d3:07:ac:77:94:46:e3:70:97:df: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:F5:9A:8F:18:5C:54:B1:7C:BC:3F:80:27:89:97:3C:FC:BD:A1 X509v3 Authority Key Identifier: keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:88:24:bd:57:2c:34:a9:3b:83:c5:35:b2:88:91:7c:1d:9a: 67:d0:fc:12:66:a5:b0:df:bf:00:fd:21:f2:09:9d:07:fa:24: 73:c4:85:d2:ac:b5:3c:56:52:d1:ee:d0:d9:f9:9d:5e:4d:e9: 9c:38:bd:8d:08:dc:d3:a9:fb:1d:82:74:bf:44:38:9b:ac:36: 93:11:b9:bd:70:c7:ad:7b:25:3e:a9:6d:f6:b1:ab:87:d7:bc: f0:3e:76:35:a3:7f:c6:d4:83:95:11:af:9f:82:b8:e6:43:a8: 80:40:71:a8:f1:5b:7e:73:68:7f:5a:3e:67:c8:be:e2:4f:07: 5c:50:ea:0e:7e:58:80:aa:f8:5b:df:28:f0:64:ee:b2:0e:2d: c9:bd:c6:9c:b9:d4:af:6c:5b:ae:55:b2:1e:0a:3d:5d:43:a5: 15:3e:72:13:00:b8:6b:01:ea:91:51:0c:f8:e3:bc:e6:63:bf: 14:8a:62:9e:78:a1:2f:d7:08:68:b6:ce:ff:13:cf:17:28:3e: c3:c3:14:f6:73:cf:9b:b5:bc:3b:30:3c:b8:9f:2c:08:f2:54: 70:77:40:49:07:2d:7a:d0:7a:de:f2:a5:21:d2:e1:97:ed:ce: 4f:f9:a9:47:cc:ec:00:fc:30:3c:76:cc:99:bb:62:a4:34:33: ec:bd:1d:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVe+FX0khJNol5vstyIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4 OGQzNmUwHhcNMjUxMjIxMDEwMTUxWhcNMjUxMjIyMDEwMTUxWjAzMTEwLwYDVQQD EyhkMTZhZjU5YThmMTg1YzU0YjE3Y2JjM2Y4MDI3ODk5NzNjZmNiZGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8s9RA2k54ZA9PIKuJIvkrbwnJyN pnKenU8jrJ8/LWq05RQ6zs9I9BSzUiy6qqbcHxFA2tKlDyz/JdzeWC8Dk6hiQg7Q eJpweV+cXMF6k2UpdeoRO9VYgVTrQMs1L+NoBeX2r/HufGxiZqIwRpYjLobFjZbJ yQdyEy6jlF0gFwRlepNGpLBN1KCLbetT200iIs2YrzCtSH5nizKeQwUFFoN2w9xQ zsNAYEss/4fsX5SGoTRV9vyq0GfJtSvw8KM8EPu72R5gGxD73hNpT/rUdYpHNQBT D2jylOpDT5X+UMrU2uz+Brx+69y6OVYo4qjGQp/m+dMHrHeURuNwl9/KVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFq9ZqPGFxUsXy8P4AniZc8/L2hMB8GA1UdIwQY MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4gkvVcs NKk7g8U1soiRfB2aZ9D8EmalsN+/AP0h8gmdB/okc8SF0qy1PFZS0e7Q2fmdXk3p nDi9jQjc06n7HYJ0v0Q4m6w2kxG5vXDHrXslPqlt9rGrh9e88D52NaN/xtSDlRGv n4K45kOogEBxqPFbfnNof1o+Z8i+4k8HXFDqDn5YgKr4W98o8GTusg4tyb3GnLnU r2xbrlWyHgo9XUOlFT5yEwC4awHqkVEM+OO85mO/FIpinnihL9cIaLbO/xPPFyg+ w8MU9nPPm7W8OzA8uJ8sCPJUcHdASQctetB63vKlIdLhl+3OT/mpR8zsAPwwPHbM mbtipDQz7L0d4A== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:14 2025 by rpki-client