This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft File: 9lFtfyjNvos_VddTcqrU07EL4J8.mft (raw, json) Hash identifier: t8jOiNfsIjRwQZfF5xKuX+YswwXt6S3h3xT2nalv1mA= Subject key identifier: 21:CE:DE:B0:C8:B4:B8:0F:48:5F:3B:E9:3D:DC:86:1F:E0:FA:04:FA Authority key identifier: F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F Certificate issuer: /CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Certificate serial: 019B3A8FCD2B5D41B3C7876D4F9F528A741F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft Manifest number: 0A81 Signing time: Sat 20 Dec 2025 07:01:01 +0000 Manifest this update: Sat 20 Dec 2025 07:01:01 +0000 Manifest next update: Sun 21 Dec 2025 07:01:01 +0000 Files and hashes: 1: 9lFtfyjNvos_VddTcqrU07EL4J8.crl (hash: +rWtyx/g3T5o95QlQ1lfuviTCRKKFJYgvtx/ITpXYbs=) 2: RFRyemMh5cFgw6G_Hs8rXpd2Ve4.roa (hash: Q/GgNiv43TfFu8lH2/Qowfw2+WyW8sNGbwKNhf/jdeM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:cd:2b:5d:41:b3:c7:87:6d:4f:9f:52:8a:74:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6516d7f28cdbe8b3f55d75372aad4d3b10be09f Validity Not Before: Dec 20 07:01:01 2025 GMT Not After : Dec 21 07:01:01 2025 GMT Subject: CN=21cedeb0c8b4b80f485f3be93ddc861fe0fa04fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:32:96:55:d3:c2:45:ef:b5:19:50:f0:95: b4:81:8e:7f:ea:c6:7d:32:4f:58:75:47:5b:bc:7d: 2f:b8:c2:10:18:e2:e2:3d:14:02:bc:53:4f:65:e1: 69:15:c1:6d:35:9d:c9:52:c7:f9:03:03:3c:31:c2: 3f:1a:42:91:ea:45:a4:83:c7:66:1f:1a:63:43:6c: 3c:d7:61:ee:b8:a7:e8:fd:f7:8f:4a:6c:9b:84:5c: 7c:7e:66:f6:01:e0:08:c7:a9:43:a7:51:7c:0e:ae: fa:d5:1d:29:4e:ad:29:11:a2:33:78:1a:9d:ba:41: 4d:63:4c:62:95:91:8d:ee:d7:08:8a:60:a8:b8:2f: c1:4b:de:5d:2f:6f:27:fe:d2:ab:64:e4:04:a6:1e: 4d:c2:59:94:d5:ef:1c:3c:43:f9:6c:08:1c:1a:82: a8:f1:26:26:ed:d0:eb:48:2a:3f:5f:3c:58:81:29: ca:20:e5:8a:4b:7f:4a:ec:31:de:f3:0b:20:da:9a: 76:6c:20:0d:0b:30:1a:b1:8a:60:63:73:09:69:4c: 1a:95:71:fa:71:d8:7f:59:93:f2:a6:f2:b4:a4:94: 0f:2c:f8:f6:f6:cc:91:cd:8c:95:3b:d0:2e:a8:02: de:b8:02:91:cf:cd:0d:45:e4:23:58:d4:7e:1a:df: 85:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:DE:B0:C8:B4:B8:0F:48:5F:3B:E9:3D:DC:86:1F:E0:FA:04:FA X509v3 Authority Key Identifier: keyid:F6:51:6D:7F:28:CD:BE:8B:3F:55:D7:53:72:AA:D4:D3:B1:0B:E0:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lFtfyjNvos_VddTcqrU07EL4J8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a8c318-338d-4932-8acb-e97ae5c60568/1/9lFtfyjNvos_VddTcqrU07EL4J8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:93:ff:56:a5:15:e8:e2:eb:33:e6:d8:62:7a:c6:e0:72:42: 0f:af:53:e3:9f:4a:2e:e5:af:8c:7e:71:93:62:6b:57:13:d8: 31:14:53:07:a7:ac:ff:27:cf:a0:00:95:d4:c1:a3:e6:0c:09: 4a:20:b9:52:ee:96:da:3a:2a:d2:43:49:6a:25:00:dc:87:26: 9d:47:8b:4d:09:73:6c:84:2d:d3:14:14:36:38:64:b2:1d:bd: 5f:76:65:9c:0e:be:61:2d:d1:53:05:e6:fe:f0:bd:22:db:53: 05:b4:5f:5d:98:2e:94:02:9f:1f:cb:81:18:97:97:a2:76:89: aa:72:61:23:10:c4:21:c5:ec:cc:f2:b8:d1:21:40:99:04:89: 1a:b4:0f:49:f9:fc:ad:85:ca:69:9d:9c:f4:b0:47:d7:63:94: 62:5a:86:54:fe:42:f6:5e:e6:0c:6d:90:11:1a:64:dd:56:31: ba:7f:76:88:d4:68:78:9d:18:ca:9f:e8:ae:c0:95:fd:4e:5e: 1c:9a:4d:5a:5b:93:fd:0f:11:aa:b9:6d:13:53:15:63:23:f6: 06:b4:35:89:40:bb:14:c1:e5:29:c6:41:39:cf:ab:ab:be:24: 3d:87:54:d9:5c:57:62:ce:a5:db:6d:5d:73:c9:87:5b:38:55: 0d:67:03:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j80rXUGzx4dtT59SinQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTE2ZDdmMjhjZGJlOGIzZjU1ZDc1MzcyYWFkNGQzYjEw YmUwOWYwHhcNMjUxMjIwMDcwMTAxWhcNMjUxMjIxMDcwMTAxWjAzMTEwLwYDVQQD EygyMWNlZGViMGM4YjRiODBmNDg1ZjNiZTkzZGRjODYxZmUwZmEwNGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnwyllXTwkXvtRlQ8JW0gY5/6sZ9 Mk9YdUdbvH0vuMIQGOLiPRQCvFNPZeFpFcFtNZ3JUsf5AwM8McI/GkKR6kWkg8dm HxpjQ2w812HuuKfo/fePSmybhFx8fmb2AeAIx6lDp1F8Dq761R0pTq0pEaIzeBqd ukFNY0xilZGN7tcIimCouC/BS95dL28n/tKrZOQEph5NwlmU1e8cPEP5bAgcGoKo 8SYm7dDrSCo/XzxYgSnKIOWKS39K7DHe8wsg2pp2bCANCzAasYpgY3MJaUwalXH6 cdh/WZPypvK0pJQPLPj29syRzYyVO9AuqALeuAKRz80NReQjWNR+Gt+FPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCHO3rDItLgPSF876T3chh/g+gT6MB8GA1UdIwQY MBaAFPZRbX8ozb6LP1XXU3Kq1NOxC+CfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2It ZTk3YWU1YzYwNTY4LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hOGMzMTgtMzM4ZC00OTMyLThhY2ItZTk3YWU1YzYwNTY4 LzEvOWxGdGZ5ak52b3NfVmRkVGNxclUwN0VMNEo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpP/VqUV 6OLrM+bYYnrG4HJCD69T459KLuWvjH5xk2JrVxPYMRRTB6es/yfPoACV1MGj5gwJ SiC5Uu6W2joq0kNJaiUA3IcmnUeLTQlzbIQt0xQUNjhksh29X3ZlnA6+YS3RUwXm /vC9IttTBbRfXZgulAKfH8uBGJeXonaJqnJhIxDEIcXszPK40SFAmQSJGrQPSfn8 rYXKaZ2c9LBH12OUYlqGVP5C9l7mDG2QERpk3VYxun92iNRoeJ0Yyp/orsCV/U5e HJpNWluT/Q8RqrltE1MVYyP2BrQ1iUC7FMHlKcZBOc+rq74kPYdU2VxXYs6l221d c8mHWzhVDWcDMA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:21:56 2025 by rpki-client