This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json) Hash identifier: u/eZBthQL18aWfKca/+6/sIAPcICcy4hTDPzOB58z98= Subject key identifier: AB:33:11:4E:C3:1E:71:96:8A:FE:3E:51:9C:F3:54:E9:7E:F8:5D:FB Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01 Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601 Certificate serial: 019B4BF11F7ADED91D74FA3F46AEAB556307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft Manifest number: 1793 Signing time: Tue 23 Dec 2025 16:00:51 +0000 Manifest this update: Tue 23 Dec 2025 16:00:51 +0000 Manifest next update: Wed 24 Dec 2025 16:00:51 +0000 Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: uTXjI+bOdt1zGsnHp44AYaohbwanZmAHQAwvjes7rrA=) 2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f1:1f:7a:de:d9:1d:74:fa:3f:46:ae:ab:55:63:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601 Validity Not Before: Dec 23 16:00:51 2025 GMT Not After : Dec 24 16:00:51 2025 GMT Subject: CN=ab33114ec31e71968afe3e519cf354e97ef85dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:72:65:7e:fd:97:68:1e:0a:da:5a:b1:f9:ff: 77:84:41:c0:57:f0:af:26:69:aa:b3:cf:79:83:2b: 17:e2:67:49:6a:9a:15:1d:41:31:c5:42:4e:b2:43: ae:ef:a1:8c:0e:c5:a1:97:63:b6:95:ce:93:94:9d: 9b:2c:27:ca:58:b7:aa:56:ba:3e:02:3d:7c:06:46: 06:7d:c0:16:99:2a:d3:1e:20:25:3f:2d:7d:27:3d: fc:4d:de:b2:ee:7e:36:f9:e7:41:a7:f0:ca:b4:62: 8f:d7:29:11:0b:4c:17:07:a9:26:01:2a:d1:82:8c: 91:d7:05:59:d0:60:73:29:2d:f8:26:97:b1:55:db: 81:c5:03:29:bd:8d:53:da:be:ba:57:b0:6f:9e:80: a8:38:91:d8:55:68:9e:16:37:21:c9:b6:a6:d9:66: 34:f9:7e:72:cf:35:1b:0b:a1:4d:f6:57:97:78:be: a3:d6:72:a5:a2:83:0a:c9:c1:7c:82:55:f8:b4:d5: f8:e3:91:5b:15:ea:91:8e:c3:a8:cd:2e:86:3c:19: 3d:8c:d7:90:b8:9f:1d:ae:b4:9c:ba:19:c0:fc:10: f1:b6:31:fa:b9:95:3c:5a:d0:28:b8:ae:d4:4f:29: a2:3a:ac:84:5e:cf:8a:ac:45:28:6d:bf:31:80:30: 12:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:33:11:4E:C3:1E:71:96:8A:FE:3E:51:9C:F3:54:E9:7E:F8:5D:FB X509v3 Authority Key Identifier: keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:56:5c:c2:10:c6:25:7f:ec:00:47:41:74:6c:85:15:95:87: 2f:23:04:3e:e5:48:5e:d8:36:c1:1c:bd:ec:0b:a8:c0:40:50: ad:52:9a:50:af:ec:ab:0e:e9:6a:de:c5:ac:cc:49:f3:78:c5: cc:ef:41:8c:a7:f9:80:69:94:5d:b6:2c:1c:f3:21:05:32:5c: df:c1:7a:a8:cc:ab:17:7a:64:61:00:6f:29:86:a8:0e:62:e9: 4c:b0:c9:a2:ab:6e:3a:f8:47:4d:e9:e1:6f:bb:e5:80:a8:6d: a1:be:0a:54:71:07:fb:7e:6b:c3:91:e8:4d:15:63:44:62:3c: ec:86:9f:7a:13:f4:7b:9c:93:13:0e:b5:28:75:f4:ba:de:06: 10:53:18:02:9c:d2:a1:ee:c1:8c:71:d0:3d:0f:0d:1f:0c:05: 2d:69:ec:9c:a3:33:b3:b5:aa:a0:94:ff:eb:c8:ea:1c:71:b0: ef:6c:a9:92:4a:5f:c2:ce:00:6a:2a:dc:20:a8:c0:f4:fe:5a: 42:d4:d9:f7:1f:d0:b3:e0:97:78:0b:0c:9b:c9:11:21:f1:68: d1:51:67:d7:10:f5:bd:46:3c:9d:c9:c7:59:0c:0b:90:b9:1c: 1d:b0:39:72:a7:41:29:f9:79:0e:01:ec:f1:b8:b2:49:4e:24: 66:36:0c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8R963tkddPo/Rq6rVWMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTAxOGZkZGZkNDIyNTE3YzMwNjllNzU2NTg2NTdiNDBl NzM2MDEwHhcNMjUxMjIzMTYwMDUxWhcNMjUxMjI0MTYwMDUxWjAzMTEwLwYDVQQD EyhhYjMzMTE0ZWMzMWU3MTk2OGFmZTNlNTE5Y2YzNTRlOTdlZjg1ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHJlfv2XaB4K2lqx+f93hEHAV/Cv Jmmqs895gysX4mdJapoVHUExxUJOskOu76GMDsWhl2O2lc6TlJ2bLCfKWLeqVro+ Aj18BkYGfcAWmSrTHiAlPy19Jz38Td6y7n42+edBp/DKtGKP1ykRC0wXB6kmASrR goyR1wVZ0GBzKS34JpexVduBxQMpvY1T2r66V7BvnoCoOJHYVWieFjchybam2WY0 +X5yzzUbC6FN9leXeL6j1nKlooMKycF8glX4tNX445FbFeqRjsOozS6GPBk9jNeQ uJ8drrScuhnA/BDxtjH6uZU8WtAouK7UTymiOqyEXs+KrEUobb8xgDASCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKszEU7DHnGWiv4+UZzzVOl++F37MB8GA1UdIwQY MBaAFPTgGP3f1CJRfDBp51ZYZXtA5zYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQt NzBmOTRkNWVlNWZjLzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQtNzBmOTRkNWVlNWZj LzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFZcwhDG JX/sAEdBdGyFFZWHLyMEPuVIXtg2wRy97AuowEBQrVKaUK/sqw7pat7FrMxJ83jF zO9BjKf5gGmUXbYsHPMhBTJc38F6qMyrF3pkYQBvKYaoDmLpTLDJoqtuOvhHTenh b7vlgKhtob4KVHEH+35rw5HoTRVjRGI87IafehP0e5yTEw61KHX0ut4GEFMYApzS oe7BjHHQPQ8NHwwFLWnsnKMzs7WqoJT/68jqHHGw72ypkkpfws4AaircIKjA9P5a QtTZ9x/Qs+CXeAsMm8kRIfFo0VFn1xD1vUY8ncnHWQwLkLkcHbA5cqdBKfl5DgHs 8biySU4kZjYMxw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:33:22 2025 by rpki-client