This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft File: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft (raw, json) Hash identifier: fREWT48Y2X7JmBVgIqKWPoMZx3lQwiYhMKiDn2ro998= Subject key identifier: 3D:E3:D0:FF:6C:29:BC:45:1E:0E:D7:E8:5A:A4:09:96:73:D1:1D:C3 Authority key identifier: F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 Certificate issuer: /CN=f4dcb5741e29352ddd42469270178506008a4140 Certificate serial: 019B3D237956168931E9FAD1127F28FEC9CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft Manifest number: 03F4 Signing time: Sat 20 Dec 2025 19:01:33 +0000 Manifest this update: Sat 20 Dec 2025 19:01:33 +0000 Manifest next update: Sun 21 Dec 2025 19:01:33 +0000 Files and hashes: 1: 9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl (hash: DywMK1uD/Eaw1fZB446cbGKYFJ0avdAQl5gqfStLPtI=) 2: T3T0ZkFQFPUc2BEd0op7sYAz8XA.roa (hash: WuXt/ChkvGDFgO8WDo1RKpja79/oAcXrCCkvEETR+EY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:79:56:16:89:31:e9:fa:d1:12:7f:28:fe:c9:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dcb5741e29352ddd42469270178506008a4140 Validity Not Before: Dec 20 19:01:33 2025 GMT Not After : Dec 21 19:01:33 2025 GMT Subject: CN=3de3d0ff6c29bc451e0ed7e85aa4099673d11dc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:34:57:bb:e0:bf:21:74:42:94:bc:44:ac:0c: cc:ce:d1:01:d8:9c:9e:80:5a:72:c7:00:6f:42:8c: e9:03:95:c1:96:19:6a:cf:97:cb:c8:2c:33:ea:1a: a9:af:77:a8:73:bb:77:4c:65:ae:13:07:bd:a8:f9: 38:d1:1d:25:09:4c:a6:2b:92:90:70:17:b6:77:59: f2:ab:8b:bb:21:fc:1b:f8:5f:91:0c:e0:07:38:88: b7:52:27:98:59:17:00:78:a4:07:16:61:1a:42:08: 8a:7b:17:5d:f8:0f:fd:43:17:50:77:d2:97:16:8f: 7b:80:4b:b5:89:c8:20:db:cd:bb:ed:28:d1:18:86: d2:1b:36:7d:c1:b8:ff:7f:02:f5:8c:2b:e8:ce:d6: 22:01:a4:09:7f:95:18:88:de:a1:48:d7:11:5d:14: 6c:db:5b:04:d1:9f:7c:45:55:6f:88:ec:d6:66:f9: f2:82:b7:fb:39:6e:f8:12:dd:f2:1d:21:d0:51:49: 63:53:3d:9e:94:2f:25:60:e4:82:85:a9:82:b6:71: 4c:23:eb:36:e5:f8:8f:34:3b:4e:a3:31:dd:7f:01: a4:03:c2:de:61:7a:2f:ca:04:9e:c9:21:b6:98:24: d8:36:25:53:63:8a:c3:79:c2:21:d0:21:ab:cc:35: b6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E3:D0:FF:6C:29:BC:45:1E:0E:D7:E8:5A:A4:09:96:73:D1:1D:C3 X509v3 Authority Key Identifier: keyid:F4:DC:B5:74:1E:29:35:2D:DD:42:46:92:70:17:85:06:00:8A:41:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ny1dB4pNS3dQkaScBeFBgCKQUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d073f1-96ed-4b35-a3f4-f8307779945b/1/9Ny1dB4pNS3dQkaScBeFBgCKQUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5e:87:ae:35:58:1f:86:c8:bf:b5:f3:44:09:83:d2:52:ff: 41:9f:62:be:63:55:e1:38:52:bf:25:78:f0:1d:7c:c1:9e:8f: 51:c5:c7:6e:46:19:ac:32:86:c9:21:04:81:06:1c:7f:d5:00: c2:e3:2e:11:83:9b:d5:5a:05:73:4b:cd:bb:37:58:ad:79:f0: 82:67:fb:02:68:e5:fc:e7:0e:eb:7b:a1:5f:20:76:ea:a5:1c: 54:fc:b8:db:75:ad:ff:10:68:e3:f0:21:c8:93:3f:1d:39:bf: fb:c7:63:d7:81:b9:3d:79:f7:e2:0d:f3:f0:9d:58:5d:56:35: 41:8e:11:25:e7:35:84:6b:fd:35:e2:ee:5d:05:6d:2f:f3:20: ae:5c:65:26:24:95:63:59:1d:b7:13:ed:19:f8:05:f0:73:28: 5f:52:20:09:35:6a:cf:6d:1f:64:69:df:60:44:07:52:1b:5b: d2:18:81:7c:1c:8b:68:6c:bf:46:3f:f7:2f:df:ab:4e:0b:0c: 9e:41:d0:12:bc:ea:5c:d1:6e:19:88:5e:2a:ea:77:4d:7a:ca: e8:fd:49:d2:8a:be:83:c5:41:e7:63:fd:14:00:bf:76:d5:b9: 19:e9:5a:b8:f8:de:c8:f5:05:cf:75:4f:bb:68:38:3d:97:51: 0c:7b:89:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I3lWFokx6frREn8o/snMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGNiNTc0MWUyOTM1MmRkZDQyNDY5MjcwMTc4NTA2MDA4 YTQxNDAwHhcNMjUxMjIwMTkwMTMzWhcNMjUxMjIxMTkwMTMzWjAzMTEwLwYDVQQD EygzZGUzZDBmZjZjMjliYzQ1MWUwZWQ3ZTg1YWE0MDk5NjczZDExZGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzRXu+C/IXRClLxErAzMztEB2Jye gFpyxwBvQozpA5XBlhlqz5fLyCwz6hqpr3eoc7t3TGWuEwe9qPk40R0lCUymK5KQ cBe2d1nyq4u7Ifwb+F+RDOAHOIi3UieYWRcAeKQHFmEaQgiKexdd+A/9QxdQd9KX Fo97gEu1icgg28277SjRGIbSGzZ9wbj/fwL1jCvoztYiAaQJf5UYiN6hSNcRXRRs 21sE0Z98RVVviOzWZvnygrf7OW74Et3yHSHQUUljUz2elC8lYOSChamCtnFMI+s2 5fiPNDtOozHdfwGkA8LeYXovygSeySG2mCTYNiVTY4rDecIh0CGrzDW2sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD3j0P9sKbxFHg7X6FqkCZZz0R3DMB8GA1UdIwQY MBaAFPTctXQeKTUt3UJGknAXhQYAikFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQt ZjgzMDc3Nzk5NDViLzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMDczZjEtOTZlZC00YjM1LWEzZjQtZjgzMDc3Nzk5NDVi LzEvOU55MWRCNHBOUzNkUWthU2NCZUZCZ0NLUVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV6HrjVY H4bIv7XzRAmD0lL/QZ9ivmNV4ThSvyV48B18wZ6PUcXHbkYZrDKGySEEgQYcf9UA wuMuEYOb1VoFc0vNuzdYrXnwgmf7Amjl/OcO63uhXyB26qUcVPy423Wt/xBo4/Ah yJM/HTm/+8dj14G5PXn34g3z8J1YXVY1QY4RJec1hGv9NeLuXQVtL/MgrlxlJiSV Y1kdtxPtGfgF8HMoX1IgCTVqz20fZGnfYEQHUhtb0hiBfByLaGy/Rj/3L9+rTgsM nkHQErzqXNFuGYheKup3TXrK6P1J0oq+g8VB52P9FAC/dtW5GelauPjeyPUFz3VP u2g4PZdRDHuJDA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:48:32 2025 by rpki-client