This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft File: 9Fe8GTpZWUint6CWtxC7UmKDD0E.mft (raw, json) Hash identifier: khMAF9Ago+v69+5rGXF/FTfzu0iLFL5UzMzorJAMIhc= Subject key identifier: 41:2B:97:4C:C3:9F:E5:1F:78:B5:06:5C:FC:13:7F:18:DE:DD:E2:14 Authority key identifier: F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 Certificate issuer: /CN=f457bc193a595948a7b7a096b710bb5262830f41 Certificate serial: 019B50AA30504A9106DF214DC0F5A44480A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft Manifest number: 0661 Signing time: Wed 24 Dec 2025 14:01:29 +0000 Manifest this update: Wed 24 Dec 2025 14:01:29 +0000 Manifest next update: Thu 25 Dec 2025 14:01:29 +0000 Files and hashes: 1: 9Fe8GTpZWUint6CWtxC7UmKDD0E.crl (hash: Pe/Jzo0s2OsJ+WfirmuJiOKtbRGXKmq6Ihar+TyUDys=) 2: 9JJ19zbpfgmK5cWw4_TivjNeu1c.roa (hash: nwELuyNPxarY0R8dzJoxHRf1m9BsPwpa7s4U5L6T37U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:aa:30:50:4a:91:06:df:21:4d:c0:f5:a4:44:80:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f457bc193a595948a7b7a096b710bb5262830f41 Validity Not Before: Dec 24 14:01:29 2025 GMT Not After : Dec 25 14:01:29 2025 GMT Subject: CN=412b974cc39fe51f78b5065cfc137f18dedde214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:8a:9d:20:08:a9:5c:fb:d9:ae:ff:71:90: e5:0d:c3:35:c5:f5:d7:8c:24:95:0e:c8:84:53:91: 58:ce:49:d8:26:a5:7a:fb:2f:c4:cb:6f:31:98:a0: 9a:6b:aa:06:42:5d:6e:c2:95:44:39:cb:33:e6:00: a1:fa:f3:88:dd:51:5b:bc:a8:36:2e:10:2f:c8:93: dc:0c:c7:45:d8:af:c0:81:cb:58:15:77:41:ac:53: 05:e8:14:af:0c:56:ea:3e:4a:f6:f4:b6:e3:12:fb: cc:72:a4:60:93:f5:70:cc:e4:5a:a2:b1:7e:b4:04: 4c:00:60:47:60:47:ca:b1:ae:42:f0:8a:b8:37:4d: a2:c5:91:d2:b7:a4:96:7d:3b:40:68:60:76:a5:fa: a7:25:fc:cb:5b:eb:65:72:b5:95:83:78:11:4b:51: 5e:0a:cc:4a:76:f7:74:7d:86:4e:98:73:67:66:f7: 6d:6f:73:13:5a:28:e1:49:a7:f6:54:ba:0f:7e:6c: c1:a1:2e:08:98:14:ec:70:8a:a6:78:36:d2:52:7e: 41:f2:89:b0:3a:4d:10:ac:61:b4:60:73:f8:94:82: 2f:f7:7a:e8:fd:c4:ff:20:a8:41:0f:1a:52:d4:96: ea:89:9c:39:11:83:33:4a:92:56:73:c1:67:74:4b: 97:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2B:97:4C:C3:9F:E5:1F:78:B5:06:5C:FC:13:7F:18:DE:DD:E2:14 X509v3 Authority Key Identifier: keyid:F4:57:BC:19:3A:59:59:48:A7:B7:A0:96:B7:10:BB:52:62:83:0F:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Fe8GTpZWUint6CWtxC7UmKDD0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453cfd-535c-4d2a-bb27-436b3ee7ed35/1/9Fe8GTpZWUint6CWtxC7UmKDD0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:65:c0:22:79:2e:f4:af:f1:b5:3f:de:9c:8a:fd:a2:3b:0a: b8:13:7b:8a:53:77:1f:e0:78:86:47:0f:75:96:74:a5:3e:2b: 82:4e:ac:67:f3:17:07:08:ab:04:bf:27:99:e2:ef:31:4f:e1: 26:cf:6c:8f:f2:56:24:d6:21:9a:4f:67:15:ae:de:ca:a1:65: 00:53:de:4a:3b:0d:ab:aa:91:46:c9:fc:0f:56:1b:9a:a4:05: 57:93:7a:1a:66:5f:c2:2d:a3:5f:23:92:36:23:7e:7c:2c:fa: 8e:42:45:a5:17:65:58:44:ec:7c:49:ac:65:6f:4d:61:80:ea: 26:4f:68:8f:b2:fb:71:ce:78:1d:66:4b:4b:66:26:64:0e:53: 64:9f:17:5a:12:d1:49:59:ef:fb:01:2f:02:4b:67:7e:ab:63: 44:ca:96:62:4a:59:5a:c4:e0:9c:07:02:b2:60:98:2f:ac:fb: a5:3b:5c:9e:32:ee:8c:7c:2e:a0:8f:b1:1b:7b:69:c2:89:9b: 32:99:41:e3:29:92:d5:53:3e:f1:c6:9d:3a:86:3d:f9:9a:be: c8:42:3a:3d:75:4c:7f:fb:c4:c5:8b:ce:09:a8:3b:ae:4d:c4: b3:12:8b:0c:f7:4d:64:29:21:b9:d6:c5:32:18:32:57:82:85: b9:32:2a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQqjBQSpEG3yFNwPWkRICnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTdiYzE5M2E1OTU5NDhhN2I3YTA5NmI3MTBiYjUyNjI4 MzBmNDEwHhcNMjUxMjI0MTQwMTI5WhcNMjUxMjI1MTQwMTI5WjAzMTEwLwYDVQQD Eyg0MTJiOTc0Y2MzOWZlNTFmNzhiNTA2NWNmYzEzN2YxOGRlZGRlMjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYeKnSAIqVz72a7/cZDlDcM1xfXX jCSVDsiEU5FYzknYJqV6+y/Ey28xmKCaa6oGQl1uwpVEOcsz5gCh+vOI3VFbvKg2 LhAvyJPcDMdF2K/AgctYFXdBrFMF6BSvDFbqPkr29LbjEvvMcqRgk/VwzORaorF+ tARMAGBHYEfKsa5C8Iq4N02ixZHSt6SWfTtAaGB2pfqnJfzLW+tlcrWVg3gRS1Fe CsxKdvd0fYZOmHNnZvdtb3MTWijhSaf2VLoPfmzBoS4ImBTscIqmeDbSUn5B8omw Ok0QrGG0YHP4lIIv93ro/cT/IKhBDxpS1JbqiZw5EYMzSpJWc8FndEuXHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEErl0zDn+UfeLUGXPwTfxje3eIUMB8GA1UdIwQY MBaAFPRXvBk6WVlIp7eglrcQu1Jigw9BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjct NDM2YjNlZTdlZDM1LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC80NTNjZmQtNTM1Yy00ZDJhLWJiMjctNDM2YjNlZTdlZDM1 LzEvOUZlOEdUcFpXVWludDZDV3R4QzdVbUtERDBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWXAInku 9K/xtT/enIr9ojsKuBN7ilN3H+B4hkcPdZZ0pT4rgk6sZ/MXBwirBL8nmeLvMU/h Js9sj/JWJNYhmk9nFa7eyqFlAFPeSjsNq6qRRsn8D1YbmqQFV5N6GmZfwi2jXyOS NiN+fCz6jkJFpRdlWETsfEmsZW9NYYDqJk9oj7L7cc54HWZLS2YmZA5TZJ8XWhLR SVnv+wEvAktnfqtjRMqWYkpZWsTgnAcCsmCYL6z7pTtcnjLujHwuoI+xG3tpwomb MplB4ymS1VM+8cadOoY9+Zq+yEI6PXVMf/vExYvOCag7rk3EsxKLDPdNZCkhudbF MhgyV4KFuTIqeQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:26:03 2025 by rpki-client