This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json) Hash identifier: di+k/hqe2r4k6oy0JxZShRZkfxxezP9WyVfieJX7H2k= Subject key identifier: 58:1B:B1:6E:F4:4D:1B:D8:40:A0:60:42:4F:E7:F5:0D:43:F9:6A:82 Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019B3BA2A29D0B717A8F71F3CEDA2D87A349 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft Manifest number: 179C Signing time: Sat 20 Dec 2025 12:01:12 +0000 Manifest this update: Sat 20 Dec 2025 12:01:12 +0000 Manifest next update: Sun 21 Dec 2025 12:01:12 +0000 Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: B2deBIxz0Njpn11VbKO1UWacVF/lE3Q8HJCmoqTzl1w=) 2: CegXcjWKkYbf_Mtu-eu8FyZqxu4.roa (hash: JzYcfLcp0NWOaqlj/D/2sPVuBUCIgNaQuV9Yb0hBAUo=) 3: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=) 4: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=) 5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=) 6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=) 7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=) 8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:a2:9d:0b:71:7a:8f:71:f3:ce:da:2d:87:a3:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Dec 20 12:01:12 2025 GMT Not After : Dec 21 12:01:12 2025 GMT Subject: CN=581bb16ef44d1bd840a060424fe7f50d43f96a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:80:52:62:94:2e:6e:b6:3b:5b:3e:32:3c:61: 80:a0:13:0c:3a:d7:3e:77:0a:31:d3:24:6a:67:f2: bf:b7:ab:38:2d:36:9e:11:2e:22:0d:cb:d4:b0:d6: 33:1a:69:6d:fa:37:fb:89:f6:94:5d:a7:c9:b7:5c: 2d:d4:2c:e4:57:38:f0:64:d9:47:54:bf:69:73:9f: 23:c5:37:52:49:de:89:f1:bc:cb:2c:05:b6:bc:6c: 53:1b:82:99:b6:26:88:9e:3b:2a:49:72:be:ae:fe: 12:a2:bd:fc:c8:77:74:69:23:6c:5f:2b:48:f5:eb: 77:38:db:6d:78:39:ed:37:d1:ee:a6:3d:55:b3:fa: 3d:9e:75:14:57:05:a6:21:3c:d5:01:1b:1f:3d:cc: f6:8a:9f:57:8b:26:92:5f:b9:98:e0:d6:f8:cd:4b: f4:b9:b8:31:f8:ae:f1:f4:85:53:8e:4d:30:bf:3c: 96:17:17:ac:59:a2:36:43:26:c7:49:01:72:72:a6: 76:d2:de:d3:7f:fc:4e:a7:53:ac:65:57:43:29:66: e2:54:b1:01:da:67:b1:ab:cc:6a:ee:25:c8:35:14: a8:9e:49:84:39:28:de:e1:2a:8a:c9:5a:a5:c3:e6: af:0f:b9:7b:d9:7d:a9:3b:df:40:7f:b2:dc:f4:4e: d9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:B1:6E:F4:4D:1B:D8:40:A0:60:42:4F:E7:F5:0D:43:F9:6A:82 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:59:aa:fe:03:c4:0a:21:17:8e:87:6f:1b:3c:8c:40:27:dc: 16:ba:bf:03:d6:c6:89:e1:2c:42:21:de:9d:62:7f:0c:a3:c2: 71:fa:ef:2e:45:cb:8a:0d:8e:0f:ce:8b:7d:7a:78:52:a1:85: 61:b0:6c:59:ba:ad:6c:65:05:3d:19:5a:f7:82:bb:f5:00:7a: 6b:4a:36:a4:ba:02:c3:99:28:3b:bb:56:7e:d0:ed:fe:d9:b4: 52:22:97:5a:d5:d4:68:bc:22:6b:ea:a3:20:15:22:4a:3a:4e: dd:24:7a:96:03:b1:2b:7d:4b:21:85:3f:85:f4:78:cc:43:51: c2:1b:6a:27:3d:d5:9d:96:90:91:96:ed:12:98:9d:d8:04:3a: 71:af:93:4d:dc:05:81:e5:27:ef:9a:0a:8a:c9:27:88:4b:6c: 52:4a:e7:a3:2d:46:58:16:05:3d:6b:4b:86:6e:87:b7:fd:a1: d9:99:dd:7a:eb:74:f7:4f:55:76:79:23:b2:49:74:1c:fa:68: 7b:c2:43:5b:71:24:74:25:84:ab:8b:69:b9:e7:80:78:c8:59: 66:97:b5:65:04:b8:d0:e1:46:39:0c:f2:61:16:5c:7b:62:f0: 8a:7e:37:41:60:10:92:7b:9e:7a:51:9c:cc:b0:04:e1:fa:0a: 3b:5a:8d:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oqKdC3F6j3Hzztoth6NJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjUxMjIwMTIwMTEyWhcNMjUxMjIxMTIwMTEyWjAzMTEwLwYDVQQD Eyg1ODFiYjE2ZWY0NGQxYmQ4NDBhMDYwNDI0ZmU3ZjUwZDQzZjk2YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYBSYpQubrY7Wz4yPGGAoBMMOtc+ dwox0yRqZ/K/t6s4LTaeES4iDcvUsNYzGmlt+jf7ifaUXafJt1wt1CzkVzjwZNlH VL9pc58jxTdSSd6J8bzLLAW2vGxTG4KZtiaInjsqSXK+rv4Sor38yHd0aSNsXytI 9et3ONtteDntN9Hupj1Vs/o9nnUUVwWmITzVARsfPcz2ip9XiyaSX7mY4Nb4zUv0 ubgx+K7x9IVTjk0wvzyWFxesWaI2QybHSQFycqZ20t7Tf/xOp1OsZVdDKWbiVLEB 2mexq8xq7iXINRSonkmEOSje4SqKyVqlw+avD7l72X2pO99Af7Lc9E7ZXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgbsW70TRvYQKBgQk/n9Q1D+WqCMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjFmq/gPE CiEXjodvGzyMQCfcFrq/A9bGieEsQiHenWJ/DKPCcfrvLkXLig2OD86LfXp4UqGF YbBsWbqtbGUFPRla94K79QB6a0o2pLoCw5koO7tWftDt/tm0UiKXWtXUaLwia+qj IBUiSjpO3SR6lgOxK31LIYU/hfR4zENRwhtqJz3VnZaQkZbtEpid2AQ6ca+TTdwF geUn75oKiskniEtsUkrnoy1GWBYFPWtLhm6Ht/2h2Zndeut0909Vdnkjskl0HPpo e8JDW3EkdCWEq4tpueeAeMhZZpe1ZQS40OFGOQzyYRZce2Lwin43QWAQknueelGc zLAE4foKO1qNaQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:14:49 2025 by rpki-client