This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft File: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft (raw, json) Hash identifier: R9DXzZZ2ENL2Xlnakp8EBZK+8bNgBJNdV/ASGpx0LpA= Subject key identifier: 88:49:08:3A:3F:75:11:78:C0:B6:28:A9:4A:31:81:3F:9F:E8:FF:72 Authority key identifier: F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 Certificate issuer: /CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Certificate serial: 019B4FCE5DC838B9C8AB7B415DCAB141A300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft Manifest number: 069B Signing time: Wed 24 Dec 2025 10:01:23 +0000 Manifest this update: Wed 24 Dec 2025 10:01:23 +0000 Manifest next update: Thu 25 Dec 2025 10:01:23 +0000 Files and hashes: 1: 9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl (hash: ECue/9Vdw2VifwDovKdLApEpoCgknDHUhaZQo72bEHM=) 2: hmRzovRV4UHybR1HxVtSJMOLDCw.roa (hash: OsQ6iHBOvn0+b51MYRo/b13uIhsZ7r4gypQoB9TbMVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:5d:c8:38:b9:c8:ab:7b:41:5d:ca:b1:41:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f53fd9e69d7d1f2ddc267091626190ceaa85cfc2 Validity Not Before: Dec 24 10:01:23 2025 GMT Not After : Dec 25 10:01:23 2025 GMT Subject: CN=8849083a3f751178c0b628a94a31813f9fe8ff72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c3:b3:54:d4:14:e4:ad:75:cd:b9:70:f7:fa: 1b:eb:d3:e5:c4:3e:a4:c5:f9:cd:5d:8b:5e:cf:9a: a0:91:96:8d:11:46:a2:f3:38:ac:71:89:e1:22:5a: ad:b2:6b:2e:57:fb:d4:45:15:c8:02:01:d5:58:6b: c2:d0:b4:f5:f1:66:1a:80:82:af:c4:38:13:e8:61: e1:9c:d5:80:0b:b2:14:6f:13:1c:79:91:de:7c:b2: a3:1f:85:5d:d6:b4:2c:b4:59:a6:57:b5:62:eb:86: 66:52:a1:d2:84:2b:0b:f0:ed:ee:81:48:68:05:81: 18:81:c9:9d:3a:69:11:05:1a:58:56:6f:df:5c:d5: 1e:de:55:9a:c5:76:f2:ae:66:f3:a5:93:35:21:11: 11:f0:41:07:44:92:a1:21:d7:ef:ec:bf:a5:65:dc: 22:d4:2d:db:0f:f8:79:87:fe:d3:c1:ec:87:3c:99: 31:88:74:e0:ec:10:ec:a1:8d:14:d1:c2:64:76:29: d0:b3:83:3b:58:ae:2d:ef:0e:88:07:f7:f3:6f:a2: e1:3d:f7:d4:b9:5a:66:2d:a8:e0:79:84:9d:1d:71: f3:7f:e8:ec:76:96:cf:bc:06:c0:f9:02:68:91:42: fd:38:c8:f5:9e:2b:88:32:03:cb:bf:63:fc:ba:15: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:49:08:3A:3F:75:11:78:C0:B6:28:A9:4A:31:81:3F:9F:E8:FF:72 X509v3 Authority Key Identifier: keyid:F5:3F:D9:E6:9D:7D:1F:2D:DC:26:70:91:62:61:90:CE:AA:85:CF:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a7db4c-c9f6-4e0c-aa97-4c8980b58126/1/9T_Z5p19Hy3cJnCRYmGQzqqFz8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:21:f0:b8:a7:12:d9:2e:c6:a2:f6:07:f4:f0:1c:00:5a:9e: ab:a4:67:4f:0f:92:fc:67:7b:2f:81:1f:96:3e:d0:7a:6c:60: 1b:c5:d4:0c:b3:8f:a6:4f:cf:e5:01:40:0f:33:4f:f5:0a:cc: e9:b0:4a:04:73:1b:20:fd:c0:df:75:41:18:50:9e:d9:97:c9: 88:73:41:a5:ec:72:36:68:5a:55:c4:58:2d:0a:79:24:b8:d6: 19:23:87:cc:57:2c:7f:05:d4:31:54:1d:b9:9d:9e:a3:90:df: 68:18:c0:90:08:93:db:61:17:25:46:c8:6a:71:58:eb:7f:28: 9d:41:65:1b:a8:04:c8:a5:26:81:cb:c8:93:8b:84:04:f2:5f: 15:6b:4a:80:9c:d4:6b:6d:26:b5:11:06:29:5f:ad:28:ac:f7: ab:95:4d:e8:26:5a:df:d5:ab:8d:b6:4a:c4:8b:d5:59:c1:0e: 3b:bb:e8:18:bd:c8:9b:9f:a2:7f:de:22:22:81:84:c6:32:d2: a3:96:03:67:27:20:26:d7:50:21:0f:24:3a:67:01:96:73:54: 1f:c2:d4:a6:40:e5:9f:b0:20:79:4a:c1:72:2b:87:42:ad:53: 20:e5:9d:37:78:26:ca:91:83:57:50:65:1a:ef:89:f8:5c:33: 55:6d:26:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzl3IOLnIq3tBXcqxQaMAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1M2ZkOWU2OWQ3ZDFmMmRkYzI2NzA5MTYyNjE5MGNlYWE4 NWNmYzIwHhcNMjUxMjI0MTAwMTIzWhcNMjUxMjI1MTAwMTIzWjAzMTEwLwYDVQQD Eyg4ODQ5MDgzYTNmNzUxMTc4YzBiNjI4YTk0YTMxODEzZjlmZThmZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08OzVNQU5K11zblw9/ob69PlxD6k xfnNXYtez5qgkZaNEUai8ziscYnhIlqtsmsuV/vURRXIAgHVWGvC0LT18WYagIKv xDgT6GHhnNWAC7IUbxMceZHefLKjH4Vd1rQstFmmV7Vi64ZmUqHShCsL8O3ugUho BYEYgcmdOmkRBRpYVm/fXNUe3lWaxXbyrmbzpZM1IRER8EEHRJKhIdfv7L+lZdwi 1C3bD/h5h/7TweyHPJkxiHTg7BDsoY0U0cJkdinQs4M7WK4t7w6IB/fzb6LhPffU uVpmLajgeYSdHXHzf+jsdpbPvAbA+QJokUL9OMj1niuIMgPLv2P8uhW1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhJCDo/dRF4wLYoqUoxgT+f6P9yMB8GA1UdIwQY MBaAFPU/2eadfR8t3CZwkWJhkM6qhc/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTct NGM4OTgwYjU4MTI2LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9hN2RiNGMtYzlmNi00ZTBjLWFhOTctNGM4OTgwYjU4MTI2 LzEvOVRfWjVwMTlIeTNjSm5DUlltR1F6cXFGejhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSHwuKcS 2S7GovYH9PAcAFqeq6RnTw+S/Gd7L4Eflj7QemxgG8XUDLOPpk/P5QFADzNP9QrM 6bBKBHMbIP3A33VBGFCe2ZfJiHNBpexyNmhaVcRYLQp5JLjWGSOHzFcsfwXUMVQd uZ2eo5DfaBjAkAiT22EXJUbIanFY638onUFlG6gEyKUmgcvIk4uEBPJfFWtKgJzU a20mtREGKV+tKKz3q5VN6CZa39WrjbZKxIvVWcEOO7voGL3Im5+if94iIoGExjLS o5YDZycgJtdQIQ8kOmcBlnNUH8LUpkDln7AgeUrBciuHQq1TIOWdN3gmypGDV1Bl Gu+J+FwzVW0mAQ== -----END CERTIFICATE-----Generated at Wed Dec 24 18:08:35 2025 by rpki-client