This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft File: S9ReWCBqG51Z7d-o-YizJxe_nGs.mft (raw, json) Hash identifier: 8wk3F52qKJP3VwdWG4HBXm/AdWKZonuMnphxpfJiJUo= Subject key identifier: 9E:A3:79:DE:19:57:D9:A9:A9:3C:C3:4C:C7:48:8F:D8:C2:FB:8E:02 Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B Certificate issuer: /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Certificate serial: 019B44DCF0E08A1E80EADCD10F1469526EC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft Manifest number: 08CD Signing time: Mon 22 Dec 2025 07:01:28 +0000 Manifest this update: Mon 22 Dec 2025 07:01:28 +0000 Manifest next update: Tue 23 Dec 2025 07:01:28 +0000 Files and hashes: 1: S9ReWCBqG51Z7d-o-YizJxe_nGs.crl (hash: 6PzulGirFDjUDNZ5AUvZ+fJcJfv65jaEYr+MI0Pn0yc=) 2: uNPxSzoBaXvBOJFQn-2SS8eLdrE.roa (hash: aQ7mvpV3ivI5FkoVAB6sSeBflcpGk3YWeApRgwYyH1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:f0:e0:8a:1e:80:ea:dc:d1:0f:14:69:52:6e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b Validity Not Before: Dec 22 07:01:28 2025 GMT Not After : Dec 23 07:01:28 2025 GMT Subject: CN=9ea379de1957d9a9a93cc34cc7488fd8c2fb8e02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:e7:07:d1:83:d1:28:25:1b:58:1a:38:a8: cd:4a:cf:7c:9c:4b:6b:6d:ec:ae:b6:3a:2f:4c:16: 47:a4:f8:cd:eb:4d:24:22:68:3d:18:14:6b:ce:83: 7c:2b:39:4e:16:ab:a8:88:2d:0a:7c:dc:38:c6:36: 7c:2f:5b:d6:23:5d:97:01:26:7f:f3:25:44:c2:2e: 7c:10:bd:21:d1:b5:50:d1:3a:2b:f8:33:58:aa:a9: 1d:5c:44:5f:18:65:97:75:8d:11:ca:ab:4c:d2:2b: d7:27:9d:a3:69:e4:35:3b:9f:fa:f7:7b:a7:ec:bf: 28:0e:6f:71:d8:73:17:12:c9:10:e2:9e:90:26:9e: e5:16:6a:f3:d3:7a:55:f2:17:6b:39:bc:38:81:35: ac:35:23:0f:c8:ae:45:9a:1d:29:ab:94:1b:ef:31: 34:c4:d0:4d:a2:24:84:59:31:6f:88:4b:fe:72:cc: ce:45:c4:a8:9d:91:6c:ff:45:da:25:e5:31:c9:13: 78:b1:eb:c3:40:03:68:dc:e4:08:bb:36:f9:00:45: 01:4d:76:28:a4:f2:03:b9:6f:a9:f2:5d:6f:40:35: 42:26:8c:dc:08:68:6c:3e:d2:65:87:66:3b:5e:4f: 59:0c:34:05:9a:fb:63:a5:b3:ad:47:20:ea:01:50: f9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A3:79:DE:19:57:D9:A9:A9:3C:C3:4C:C7:48:8F:D8:C2:FB:8E:02 X509v3 Authority Key Identifier: keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c1:f2:43:69:f5:ba:d5:39:e6:f2:c8:e8:0b:4c:cc:81:72: e9:23:c2:47:ca:7e:f5:c9:b2:b4:af:3e:b8:26:92:57:08:04: 24:3c:bd:9a:f2:d5:67:df:23:a6:ab:e5:c1:1e:b2:03:a8:de: 42:52:88:80:f4:f0:7f:cd:03:95:83:ba:49:79:de:61:62:04: 4b:a0:a5:f9:24:89:a9:9a:ab:bd:d1:4b:07:b0:d2:70:48:d9: 30:89:f4:a3:4d:01:f1:05:d2:e4:f8:26:61:46:00:d9:6a:b4: 24:cb:d9:de:dd:7a:fe:b4:92:80:fb:60:31:42:e5:89:32:a3: c5:c9:71:2f:65:9e:16:60:18:3d:93:d0:ec:d6:e8:a9:73:63: a3:c5:67:77:93:62:e6:98:86:d7:4f:e2:e5:77:58:9c:df:d4: 38:00:7b:9a:33:12:01:9c:39:0f:7b:9c:50:f0:73:ad:df:de: 96:c7:09:4e:ca:85:1d:ab:aa:8f:40:5f:02:5a:31:60:77:6d: 10:d5:3c:bb:7a:9e:9c:71:8d:c6:28:42:21:a7:55:55:1c:49: a8:5e:1b:d9:9f:f7:34:24:08:35:44:93:42:fd:3f:55:83:b2: ba:bc:13:26:ea:bd:92:23:64:0e:e3:6f:61:d0:d8:4c:e2:f9: b9:18:5e:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3PDgih6A6tzRDxRpUm7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ1ZTU4MjA2YTFiOWQ1OWVkZGZhOGY5ODhiMzI3MTdi ZjljNmIwHhcNMjUxMjIyMDcwMTI4WhcNMjUxMjIzMDcwMTI4WjAzMTEwLwYDVQQD Eyg5ZWEzNzlkZTE5NTdkOWE5YTkzY2MzNGNjNzQ4OGZkOGMyZmI4ZTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn7nB9GD0SglG1gaOKjNSs98nEtr beyutjovTBZHpPjN600kImg9GBRrzoN8KzlOFquoiC0KfNw4xjZ8L1vWI12XASZ/ 8yVEwi58EL0h0bVQ0Tor+DNYqqkdXERfGGWXdY0RyqtM0ivXJ52jaeQ1O5/693un 7L8oDm9x2HMXEskQ4p6QJp7lFmrz03pV8hdrObw4gTWsNSMPyK5Fmh0pq5Qb7zE0 xNBNoiSEWTFviEv+cszORcSonZFs/0XaJeUxyRN4sevDQANo3OQIuzb5AEUBTXYo pPIDuW+p8l1vQDVCJozcCGhsPtJlh2Y7Xk9ZDDQFmvtjpbOtRyDqAVD5kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6jed4ZV9mpqTzDTMdIj9jC+44CMB8GA1UdIwQY MBaAFEvUXlggahudWe3fqPmIsycXv5xrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQt MDc4NTEwY2VhYzBkLzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yZjQ4YmQtYThlMy00ODdiLWEyNzQtMDc4NTEwY2VhYzBk LzEvUzlSZVdDQnFHNTFaN2Qtby1ZaXpKeGVfbkdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsHyQ2n1 utU55vLI6AtMzIFy6SPCR8p+9cmytK8+uCaSVwgEJDy9mvLVZ98jpqvlwR6yA6je QlKIgPTwf80DlYO6SXneYWIES6Cl+SSJqZqrvdFLB7DScEjZMIn0o00B8QXS5Pgm YUYA2Wq0JMvZ3t16/rSSgPtgMULliTKjxclxL2WeFmAYPZPQ7NboqXNjo8Vnd5Ni 5piG10/i5XdYnN/UOAB7mjMSAZw5D3ucUPBzrd/elscJTsqFHauqj0BfAloxYHdt ENU8u3qenHGNxihCIadVVRxJqF4b2Z/3NCQINUSTQv0/VYOyurwTJuq9kiNkDuNv YdDYTOL5uRheBg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:45:38 2025 by rpki-client