This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft File: 9ssMjyCEMwIDT2NlbqKevW0RY6o.mft (raw, json) Hash identifier: U0PiBDoDXpqaLDygobd+mVTN8jV8RofXmMKbmGiWx6U= Subject key identifier: B7:CB:87:15:1B:CF:5B:34:AD:38:1F:9D:51:60:1A:6E:AF:B0:D3:E8 Authority key identifier: F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA Certificate issuer: /CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Certificate serial: 019B41A45C4D76302753C6414D948D0B30B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft Manifest number: 1072 Signing time: Sun 21 Dec 2025 16:00:49 +0000 Manifest this update: Sun 21 Dec 2025 16:00:49 +0000 Manifest next update: Mon 22 Dec 2025 16:00:49 +0000 Files and hashes: 1: 9ssMjyCEMwIDT2NlbqKevW0RY6o.crl (hash: L56TsbqwivUmvbadh7fyWAYj3yfFt7AHDuENbfY29qw=) 2: OpJ_uz4hg9WS1uTnKXn75qGvb3w.roa (hash: zJt7hWD6hoBRKS4g5AHeuYKclEqIASb0N8YkICHekl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 16:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:5c:4d:76:30:27:53:c6:41:4d:94:8d:0b:30:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6cb0c8f20843302034f63656ea29ebd6d1163aa Validity Not Before: Dec 21 16:00:49 2025 GMT Not After : Dec 22 16:00:49 2025 GMT Subject: CN=b7cb87151bcf5b34ad381f9d51601a6eafb0d3e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:27:39:62:1f:51:d9:3a:c3:c6:10:4a:82: 34:98:24:97:b5:6d:a3:d5:2f:87:83:47:10:dd:8a: e5:04:14:08:42:81:b3:1c:d9:66:8c:a3:56:4e:25: ca:6b:7a:99:18:b9:46:20:ee:46:6f:e5:70:10:1f: 47:1e:e8:d2:ec:2f:3b:36:0a:6c:5a:dc:10:fa:08: 6b:74:bb:8e:7d:1e:92:6b:0d:c6:65:6b:e5:e9:db: 30:79:07:c5:9b:45:a3:29:4f:9a:ed:c6:76:5d:28: 23:bb:4c:5a:74:a0:a5:f8:5c:d9:fc:1c:8b:16:aa: 41:9e:af:e2:a5:2d:34:6c:82:dd:0c:2e:b9:fd:36: 2c:42:09:6c:a2:bd:8e:e4:74:b1:cf:85:a1:3b:eb: 5c:74:b8:bb:f1:b1:01:51:89:de:25:f5:c9:61:f6: 48:f6:7c:e3:89:50:90:33:04:d1:f1:76:40:df:5d: 8d:fb:b1:d9:43:60:18:27:68:2b:39:22:2b:f9:e0: 6d:90:14:80:af:15:d5:c2:ab:14:76:ff:de:cd:18: 34:f6:3a:32:73:07:9d:fd:a5:14:6c:23:37:c1:27: 1f:d4:a6:98:96:89:06:5e:fa:01:5e:5f:48:21:d0: 92:dd:7f:d7:c8:00:bc:79:60:04:2a:5b:66:52:d1: ca:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CB:87:15:1B:CF:5B:34:AD:38:1F:9D:51:60:1A:6E:AF:B0:D3:E8 X509v3 Authority Key Identifier: keyid:F6:CB:0C:8F:20:84:33:02:03:4F:63:65:6E:A2:9E:BD:6D:11:63:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ssMjyCEMwIDT2NlbqKevW0RY6o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/984844-3eb4-4232-9385-2af3d62be7f2/1/9ssMjyCEMwIDT2NlbqKevW0RY6o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:0b:d4:51:57:c8:09:1e:a1:c5:a6:24:48:16:d6:f1:f0:4e: d2:af:59:b2:3e:ed:05:49:c1:38:ba:8b:d8:c3:64:e5:9b:ad: 3e:e5:72:b0:7a:16:98:21:43:4d:75:8f:31:27:a8:c9:61:ed: 97:7e:46:aa:ea:6b:6c:57:2a:a3:c1:29:df:b8:f7:f4:aa:f4: c1:c8:66:57:47:f6:d4:e5:3b:46:eb:d9:2c:92:de:72:0c:73: 39:44:a2:4e:3e:95:81:25:1b:9b:25:06:e3:98:d2:34:99:6d: 16:38:b9:26:fb:36:c9:fa:bf:72:3c:52:29:03:6d:f6:7e:5c: ce:32:1b:f1:87:81:39:83:5a:f6:8f:ee:aa:da:99:6c:a5:09: 79:ba:bd:52:69:be:3c:57:33:0b:24:69:9e:cb:d5:66:0d:1a: 81:5c:6f:72:00:df:59:9e:3a:c7:0e:d0:eb:07:27:d4:09:c9: 8d:9e:a7:f6:96:11:f0:d4:ca:19:a2:58:9e:7d:73:46:5f:a7: 78:0b:20:21:a3:5c:84:8a:bf:ef:1f:5e:02:0f:31:e3:0d:10: ea:46:18:08:fb:ed:a7:63:a5:33:36:77:0c:c9:aa:70:07:ec: ce:5a:25:57:92:cc:f1:65:45:7c:9c:d5:ec:3b:53:e6:95:33: a0:92:eb:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpFxNdjAnU8ZBTZSNCzCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Y2IwYzhmMjA4NDMzMDIwMzRmNjM2NTZlYTI5ZWJkNmQx MTYzYWEwHhcNMjUxMjIxMTYwMDQ5WhcNMjUxMjIyMTYwMDQ5WjAzMTEwLwYDVQQD EyhiN2NiODcxNTFiY2Y1YjM0YWQzODFmOWQ1MTYwMWE2ZWFmYjBkM2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvUnOWIfUdk6w8YQSoI0mCSXtW2j 1S+Hg0cQ3YrlBBQIQoGzHNlmjKNWTiXKa3qZGLlGIO5Gb+VwEB9HHujS7C87Ngps WtwQ+ghrdLuOfR6Saw3GZWvl6dsweQfFm0WjKU+a7cZ2XSgju0xadKCl+FzZ/ByL FqpBnq/ipS00bILdDC65/TYsQglsor2O5HSxz4WhO+tcdLi78bEBUYneJfXJYfZI 9nzjiVCQMwTR8XZA312N+7HZQ2AYJ2grOSIr+eBtkBSArxXVwqsUdv/ezRg09joy cwed/aUUbCM3wScf1KaYlokGXvoBXl9IIdCS3X/XyAC8eWAEKltmUtHK8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfLhxUbz1s0rTgfnVFgGm6vsNPoMB8GA1UdIwQY MBaAFPbLDI8ghDMCA09jZW6inr1tEWOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUt MmFmM2Q2MmJlN2YyLzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS85ODQ4NDQtM2ViNC00MjMyLTkzODUtMmFmM2Q2MmJlN2Yy LzEvOXNzTWp5Q0VNd0lEVDJObGJxS2V2VzBSWTZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwvUUVfI CR6hxaYkSBbW8fBO0q9Zsj7tBUnBOLqL2MNk5ZutPuVysHoWmCFDTXWPMSeoyWHt l35GquprbFcqo8Ep37j39Kr0wchmV0f21OU7RuvZLJLecgxzOUSiTj6VgSUbmyUG 45jSNJltFji5Jvs2yfq/cjxSKQNt9n5czjIb8YeBOYNa9o/uqtqZbKUJebq9Umm+ PFczCyRpnsvVZg0agVxvcgDfWZ46xw7Q6wcn1AnJjZ6n9pYR8NTKGaJYnn1zRl+n eAsgIaNchIq/7x9eAg8x4w0Q6kYYCPvtp2OlMzZ3DMmqcAfszlolV5LM8WVFfJzV 7DtT5pUzoJLrCQ== -----END CERTIFICATE-----Generated at Mon Dec 22 02:34:24 2025 by rpki-client