This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft File: 9q7W1c5BV5fBKF9-9v0EPGRm594.mft (raw, json) Hash identifier: zHXDpB1RMtBBLH+ReoSrmgs9/mhR1DOfwoyKMGSIFMY= Subject key identifier: 5F:BF:DD:F7:2C:31:05:70:40:F7:CB:51:B7:2C:49:DE:F8:54:64:47 Authority key identifier: F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE Certificate issuer: /CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Certificate serial: 019B424A7C56249E03E2E037B0555415DD37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft Manifest number: 0C7F Signing time: Sun 21 Dec 2025 19:02:16 +0000 Manifest this update: Sun 21 Dec 2025 19:02:16 +0000 Manifest next update: Mon 22 Dec 2025 19:02:16 +0000 Files and hashes: 1: 9q7W1c5BV5fBKF9-9v0EPGRm594.crl (hash: j/Hqk5bDXWh2qShKLRUNA0rPvvlG8Xk3wZ7Bw3x7SxA=) 2: ziQt4Au1b87EcX3IQE4F3MWkDm8.roa (hash: KUoOZI3FZormf07wPCHQ5jctubRO3hNmnfHFtLKB4fQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:7c:56:24:9e:03:e2:e0:37:b0:55:54:15:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6aed6d5ce415797c1285f7ef6fd043c6466e7de Validity Not Before: Dec 21 19:02:16 2025 GMT Not After : Dec 22 19:02:16 2025 GMT Subject: CN=5fbfddf72c31057040f7cb51b72c49def8546447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1d:cf:30:eb:37:c2:ca:76:fa:c9:d0:01:63: d0:f9:31:e7:19:58:f7:b8:70:97:80:1f:71:71:b4: 42:e0:ba:38:95:06:23:0f:6e:f4:1e:92:af:4f:a0: fe:7f:71:2f:dc:c5:59:4e:de:31:f6:63:38:f5:9f: c9:75:8d:b3:f6:22:8d:0e:6d:0c:aa:df:97:be:75: 4f:69:f2:09:38:db:5a:6f:30:07:f7:9b:5c:63:a9: 28:0a:49:80:7e:38:d2:46:dc:fa:45:62:9a:03:9e: 3f:ae:b0:5a:c1:d0:b7:a2:6d:b5:36:c5:59:51:f9: 18:bd:b4:63:98:86:b5:d3:39:59:89:8a:5e:20:b7: 3c:1a:e7:6f:31:54:36:bf:63:1c:d1:29:8e:fc:b3: d5:a3:5c:b5:de:38:d0:fa:aa:a6:ff:97:df:ad:8c: de:05:a7:6f:d0:6f:77:21:91:5a:c2:69:40:68:43: 53:98:14:03:36:f4:c4:4c:35:c7:2c:c4:d9:ac:d3: 87:aa:f3:ec:eb:7c:bd:c1:1f:34:29:e5:f1:a3:dd: 48:ae:43:8a:73:72:14:15:2d:45:b9:57:45:cc:b6: d5:c1:f3:1a:f9:5e:99:da:b5:bb:b4:14:34:dc:35: 14:ba:4f:4f:d1:fe:f9:fd:0b:9b:eb:be:65:74:47: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:BF:DD:F7:2C:31:05:70:40:F7:CB:51:B7:2C:49:DE:F8:54:64:47 X509v3 Authority Key Identifier: keyid:F6:AE:D6:D5:CE:41:57:97:C1:28:5F:7E:F6:FD:04:3C:64:66:E7:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q7W1c5BV5fBKF9-9v0EPGRm594.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7fa9ed-b087-40cd-a016-d957b8c54c94/1/9q7W1c5BV5fBKF9-9v0EPGRm594.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b6:14:e3:ef:bb:d0:90:ef:07:c0:8d:f6:97:5e:4d:50:8a: e5:e1:fc:a9:df:c5:61:e7:9c:e0:2f:57:29:d1:00:dc:11:a2: 48:cb:bd:0a:a7:86:3f:70:ae:7d:c0:c1:7a:bd:3a:8d:65:7d: 17:e0:db:ae:4c:ab:1b:dd:9a:1f:ec:42:46:0a:1d:e3:e9:72: ab:92:1b:49:9b:38:7a:3e:bb:c1:94:e8:e4:9f:4e:b5:8e:4c: f2:73:51:b0:51:4b:02:b2:4e:1f:a6:e8:d8:a4:26:0e:48:9d: d2:d1:f3:86:f8:23:24:35:b1:d2:b5:69:06:15:74:b7:c0:b5: ed:3f:41:c3:ad:49:45:e5:93:58:fd:4e:04:67:8c:fd:b4:98: 68:a0:ae:73:82:1e:38:4a:da:5d:e3:ae:a3:30:c2:aa:1c:ae: 22:d0:a9:f4:d7:b1:cb:13:11:be:5a:84:c3:1f:89:ed:b1:2b: 7f:c6:78:f5:30:ca:45:2a:9d:e8:a9:e7:94:12:ae:4d:5f:9e: 1b:5f:3e:0e:06:3d:9f:ab:e8:95:84:92:52:e1:d9:4f:1f:00: 58:91:09:47:ff:6d:83:bd:ef:de:da:93:2c:a2:bb:be:47:81: 1d:9d:53:50:b8:9b:08:e1:f5:31:3b:fc:9f:51:81:03:75:9f: eb:2b:89:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSnxWJJ4D4uA3sFVUFd03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWVkNmQ1Y2U0MTU3OTdjMTI4NWY3ZWY2ZmQwNDNjNjQ2 NmU3ZGUwHhcNMjUxMjIxMTkwMjE2WhcNMjUxMjIyMTkwMjE2WjAzMTEwLwYDVQQD Eyg1ZmJmZGRmNzJjMzEwNTcwNDBmN2NiNTFiNzJjNDlkZWY4NTQ2NDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1R3PMOs3wsp2+snQAWPQ+THnGVj3 uHCXgB9xcbRC4Lo4lQYjD270HpKvT6D+f3Ev3MVZTt4x9mM49Z/JdY2z9iKNDm0M qt+XvnVPafIJONtabzAH95tcY6koCkmAfjjSRtz6RWKaA54/rrBawdC3om21NsVZ UfkYvbRjmIa10zlZiYpeILc8GudvMVQ2v2Mc0SmO/LPVo1y13jjQ+qqm/5ffrYze Badv0G93IZFawmlAaENTmBQDNvTETDXHLMTZrNOHqvPs63y9wR80KeXxo91IrkOK c3IUFS1FuVdFzLbVwfMa+V6Z2rW7tBQ03DUUuk9P0f75/Qub675ldEdzCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+/3fcsMQVwQPfLUbcsSd74VGRHMB8GA1UdIwQY MBaAFPau1tXOQVeXwShffvb9BDxkZufeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYt ZDk1N2I4YzU0Yzk0LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC83ZmE5ZWQtYjA4Ny00MGNkLWEwMTYtZDk1N2I4YzU0Yzk0 LzEvOXE3VzFjNUJWNWZCS0Y5LTl2MEVQR1JtNTk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLYU4++7 0JDvB8CN9pdeTVCK5eH8qd/FYeec4C9XKdEA3BGiSMu9CqeGP3CufcDBer06jWV9 F+DbrkyrG92aH+xCRgod4+lyq5IbSZs4ej67wZTo5J9OtY5M8nNRsFFLArJOH6bo 2KQmDkid0tHzhvgjJDWx0rVpBhV0t8C17T9Bw61JReWTWP1OBGeM/bSYaKCuc4Ie OEraXeOuozDCqhyuItCp9NexyxMRvlqEwx+J7bErf8Z49TDKRSqd6KnnlBKuTV+e G18+DgY9n6volYSSUuHZTx8AWJEJR/9tg73v3tqTLKK7vkeBHZ1TULibCOH1MTv8 n1GBA3Wf6yuJlQ== -----END CERTIFICATE-----Generated at Mon Dec 22 00:02:05 2025 by rpki-client