This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json) Hash identifier: Dv9vffWXpxLdGwYWJx0DxZzt1y4Y6FqCegiDrMp1iWQ= Subject key identifier: 76:CC:80:E5:4E:12:85:A5:E7:53:63:61:5C:B7:88:51:9D:FA:BA:AF Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Certificate serial: 019B3C7E5566218CDCAC9139679D00588FE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft Manifest number: 0691 Signing time: Sat 20 Dec 2025 16:01:10 +0000 Manifest this update: Sat 20 Dec 2025 16:01:10 +0000 Manifest next update: Sun 21 Dec 2025 16:01:10 +0000 Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: Uo/04M1G5sxgbMBOADsVVdtJJMpgo2Foysz2QQgnDcE=) 2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:55:66:21:8c:dc:ac:91:39:67:9d:00:58:8f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Validity Not Before: Dec 20 16:01:10 2025 GMT Not After : Dec 21 16:01:10 2025 GMT Subject: CN=76cc80e54e1285a5e75363615cb788519dfabaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:37:3f:eb:98:cc:c3:48:70:a3:73:e8:4b: e2:ef:d4:98:63:9e:fc:f3:4d:0b:1c:b5:d2:cd:4c: 49:58:a3:9b:5e:07:46:62:df:d2:9a:fd:0c:23:1a: dd:8f:9b:f0:06:83:b9:c6:7f:f3:82:c6:7e:32:2d: 7b:c9:6f:97:dd:89:30:53:20:28:8c:d9:e4:d8:0e: c7:40:21:23:07:cb:32:fe:a0:30:2d:2f:c8:ea:83: 96:61:8f:6d:e3:85:79:5f:fa:fa:bb:40:b4:32:2c: 3a:94:b0:d1:13:a8:43:f1:ff:b5:88:a2:39:2d:30: 20:f0:b3:e4:11:23:96:c1:59:b0:2d:87:d5:90:e3: aa:50:f6:a2:63:6d:3f:78:2e:7d:f7:6e:f5:53:70: 7f:84:58:f8:d2:7c:5e:4e:13:4c:8f:f5:2c:45:ef: d5:91:49:dc:b1:94:ce:d6:fa:26:a8:74:03:58:c3: ea:0e:45:29:11:65:31:2e:12:ed:bf:2f:f2:30:29: 72:a8:4d:43:fb:3f:ef:f3:3a:d5:c8:a3:1f:07:f0: 45:9d:f3:4c:5f:91:64:73:87:22:ab:40:f5:72:13: c7:30:6f:bf:b6:b8:d3:0d:42:65:96:03:81:7d:ee: 6c:2c:90:11:0c:ad:67:fb:c9:cf:95:eb:15:5a:39: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:CC:80:E5:4E:12:85:A5:E7:53:63:61:5C:B7:88:51:9D:FA:BA:AF X509v3 Authority Key Identifier: keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:40:b7:12:24:a0:98:38:0c:0f:21:93:aa:5f:91:3e:36: 57:e4:ac:99:de:fc:4d:06:1f:fd:8d:c8:b0:d7:df:52:12:99: e3:cc:e7:0c:a4:09:5a:85:c2:2c:ed:a6:76:c5:5d:df:15:a6: 4a:41:9a:a8:68:95:40:8d:31:08:82:5d:e0:3f:f1:32:ff:a4: 8c:36:fb:45:c3:96:1f:85:ae:df:ec:94:b4:ea:e1:ab:34:11: bb:bf:b2:f6:1a:b9:da:fd:7a:de:1a:75:2c:7b:50:d9:a3:da: 21:10:89:f2:1b:af:7a:0f:8f:46:e0:d2:a9:a1:85:5f:33:3a: 5a:1e:19:0b:88:f1:ea:47:9a:3e:96:13:d0:31:ed:ae:9a:df: 10:10:c6:26:4b:2e:c9:f0:b1:33:78:1e:cb:c9:b0:d5:06:03: 6c:89:49:e4:78:05:a8:55:dd:c6:9b:e3:48:ed:1e:c8:c1:43: 68:f0:23:99:f0:f0:ef:b7:9f:47:16:3f:c2:fd:6b:50:6a:9f: dd:d6:1d:48:21:7b:cd:7e:76:68:c2:e2:27:f8:f1:cf:2a:32: 60:3c:7c:b0:8e:a7:02:64:38:37:65:f7:42:f1:da:4c:44:19: ae:e8:03:71:dc:2d:4d:0e:d3:9e:de:7e:e4:06:ba:3d:90:e5: 37:25:3c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8flVmIYzcrJE5Z50AWI/lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4 NWNmYzIwHhcNMjUxMjIwMTYwMTEwWhcNMjUxMjIxMTYwMTEwWjAzMTEwLwYDVQQD Eyg3NmNjODBlNTRlMTI4NWE1ZTc1MzYzNjE1Y2I3ODg1MTlkZmFiYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkE3P+uYzMNIcKNz6Evi79SYY578 800LHLXSzUxJWKObXgdGYt/Smv0MIxrdj5vwBoO5xn/zgsZ+Mi17yW+X3YkwUyAo jNnk2A7HQCEjB8sy/qAwLS/I6oOWYY9t44V5X/r6u0C0Miw6lLDRE6hD8f+1iKI5 LTAg8LPkESOWwVmwLYfVkOOqUPaiY20/eC599271U3B/hFj40nxeThNMj/UsRe/V kUncsZTO1vomqHQDWMPqDkUpEWUxLhLtvy/yMClyqE1D+z/v8zrVyKMfB/BFnfNM X5Fkc4ciq0D1chPHMG+/trjTDUJllgOBfe5sLJARDK1n+8nPlesVWjkdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbMgOVOEoWl51NjYVy3iFGd+rqvMB8GA1UdIwQY MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2 LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuxAtxIk oJg4DA8hk6pfkT42V+Ssmd78TQYf/Y3IsNffUhKZ48znDKQJWoXCLO2mdsVd3xWm SkGaqGiVQI0xCIJd4D/xMv+kjDb7RcOWH4Wu3+yUtOrhqzQRu7+y9hq52v163hp1 LHtQ2aPaIRCJ8huveg+PRuDSqaGFXzM6Wh4ZC4jx6keaPpYT0DHtrprfEBDGJksu yfCxM3gey8mw1QYDbIlJ5HgFqFXdxpvjSO0eyMFDaPAjmfDw77efRxY/wv1rUGqf 3dYdSCF7zX52aMLiJ/jxzyoyYDx8sI6nAmQ4N2X3QvHaTEQZrugDcdwtTQ7Tnt5+ 5Aa6PZDlNyU8AA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:17 2025 by rpki-client