This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: lIAwmk48aPrh1/tER98s8jauetHT2DMwuMpvUIuDSr4= Subject key identifier: B8:B3:FD:87:66:53:7C:54:75:ED:B6:A1:AC:14:E4:EB:31:DE:89:17 Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019B3C7DE0093EF01E0FF6E72A86D5FCDDE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 157C Signing time: Sat 20 Dec 2025 16:00:40 +0000 Manifest this update: Sat 20 Dec 2025 16:00:40 +0000 Manifest next update: Sun 21 Dec 2025 16:00:40 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: SIoJ3y1H1f0+0rs2/hlFAkV7A92H+EAgc51C84e2kXo=) 2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=) 3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=) 4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=) 5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:e0:09:3e:f0:1e:0f:f6:e7:2a:86:d5:fc:dd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Dec 20 16:00:40 2025 GMT Not After : Dec 21 16:00:40 2025 GMT Subject: CN=b8b3fd8766537c5475edb6a1ac14e4eb31de8917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:b4:1d:6f:ef:35:b6:a9:e4:86:75:e0:5b: b8:bc:8a:0d:3e:5d:f5:72:15:b5:61:b8:f1:55:6b: 2b:1e:25:d5:b8:1b:f4:05:7b:b1:52:40:60:42:54: 5b:ac:03:9c:77:bd:65:01:50:3d:1f:62:68:0f:46: 0b:74:5c:37:e2:5a:bb:e7:20:91:29:9c:11:1f:eb: 53:4c:e9:78:93:a0:24:c3:86:2a:1b:9e:8b:45:44: 45:da:b7:93:8f:22:20:70:f3:8f:ba:81:9d:53:0c: a7:bd:aa:95:99:ef:c8:68:6e:a0:9a:1d:5a:3d:4c: 1b:a4:16:72:16:10:18:c5:76:6d:59:ff:9f:a2:5d: 14:9f:68:83:a8:04:b0:6d:14:58:b9:5d:24:c1:64: 56:bf:00:1e:54:23:a2:ea:3d:bd:5d:ed:16:9c:cb: ac:a2:13:6a:77:cd:16:31:6e:c4:6b:af:72:04:99: c9:23:27:7c:38:96:b5:59:af:f7:84:a4:f2:6d:e3: 26:3b:df:88:b3:af:1a:41:dd:e2:ee:ae:91:23:d8: 5c:6c:3c:8b:85:c0:7d:25:8c:69:0c:a1:8b:ef:a1: de:34:cd:5c:11:eb:d4:82:41:03:46:20:6b:dd:14: f3:c7:a7:6f:dd:eb:3e:da:d8:3c:4e:ad:a6:5f:88: 24:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:FD:87:66:53:7C:54:75:ED:B6:A1:AC:14:E4:EB:31:DE:89:17 X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:f1:c3:f3:3e:ef:80:e7:bf:e7:aa:b1:7a:54:71:3e:ee:4d: 0a:72:19:1a:90:09:99:01:ea:c4:e5:de:2d:50:ac:fb:12:bc: 19:e2:07:04:5b:d6:6b:99:c8:9d:2b:9b:ff:62:c8:7f:f5:6f: 26:93:74:91:a1:8d:c7:30:b7:43:30:64:9f:4a:b0:b6:ad:34: 88:fa:aa:31:7a:b9:33:50:83:1b:f6:23:f3:66:62:07:ce:12: ec:d8:c3:1b:84:88:46:6c:cf:20:50:5b:89:bd:81:5d:59:3d: bc:b0:cc:f6:fc:09:02:24:fd:b1:21:9a:64:ed:95:5c:f9:37: bf:16:7d:12:4d:c8:ca:e8:bb:31:bc:c5:88:ed:a1:33:f1:18: 33:ea:e5:e9:6a:aa:b4:97:e9:10:3f:d4:59:40:34:46:af:93: a4:4a:ce:3b:88:b9:48:e3:df:17:a2:b3:bd:85:3b:c3:88:ec: 19:cc:5b:2b:e2:99:fc:f7:63:3a:ca:cf:2d:5b:ce:48:06:89: a4:ec:bc:ab:d3:9c:68:80:32:19:2f:ff:95:31:de:d1:24:d9: 8b:59:29:85:3e:1b:4d:a4:a0:5b:88:ae:62:39:cf:d4:72:3f: d6:f0:4f:e4:58:54:7d:08:54:0e:95:aa:b0:b3:30:63:b2:87: a6:d8:01:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8feAJPvAeD/bnKobV/N3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjUxMjIwMTYwMDQwWhcNMjUxMjIxMTYwMDQwWjAzMTEwLwYDVQQD EyhiOGIzZmQ4NzY2NTM3YzU0NzVlZGI2YTFhYzE0ZTRlYjMxZGU4OTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgq0HW/vNbap5IZ14Fu4vIoNPl31 chW1YbjxVWsrHiXVuBv0BXuxUkBgQlRbrAOcd71lAVA9H2JoD0YLdFw34lq75yCR KZwRH+tTTOl4k6Akw4YqG56LRURF2reTjyIgcPOPuoGdUwynvaqVme/IaG6gmh1a PUwbpBZyFhAYxXZtWf+fol0Un2iDqASwbRRYuV0kwWRWvwAeVCOi6j29Xe0WnMus ohNqd80WMW7Ea69yBJnJIyd8OJa1Wa/3hKTybeMmO9+Is68aQd3i7q6RI9hcbDyL hcB9JYxpDKGL76HeNM1cEevUgkEDRiBr3RTzx6dv3es+2tg8Tq2mX4gkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLiz/YdmU3xUde22oawU5Osx3okXMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvHD8z7v gOe/56qxelRxPu5NCnIZGpAJmQHqxOXeLVCs+xK8GeIHBFvWa5nInSub/2LIf/Vv JpN0kaGNxzC3QzBkn0qwtq00iPqqMXq5M1CDG/Yj82ZiB84S7NjDG4SIRmzPIFBb ib2BXVk9vLDM9vwJAiT9sSGaZO2VXPk3vxZ9Ek3Iyui7MbzFiO2hM/EYM+rl6Wqq tJfpED/UWUA0Rq+TpErOO4i5SOPfF6KzvYU7w4jsGcxbK+KZ/PdjOsrPLVvOSAaJ pOy8q9OcaIAyGS//lTHe0STZi1kphT4bTaSgW4iuYjnP1HI/1vBP5FhUfQhUDpWq sLMwY7KHptgB2A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:09:24 2025 by rpki-client