This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft File: r9v0VgEKm9FJQcoskcpTPn71F4o.mft (raw, json) Hash identifier: thbyRphB5W24QPuXdbaPrFa0INx5o9jCKTwCuTMmKI0= Subject key identifier: BD:71:32:78:C0:6D:FB:8D:E7:07:E7:4B:2D:62:B2:41:84:3F:9F:A1 Authority key identifier: AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A Certificate issuer: /CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Certificate serial: 019B5F4167FE8919F1A61B2373B9CD9AB5E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft Manifest number: 1072 Signing time: Sat 27 Dec 2025 10:01:20 +0000 Manifest this update: Sat 27 Dec 2025 10:01:20 +0000 Manifest next update: Sun 28 Dec 2025 10:01:20 +0000 Files and hashes: 1: ajkzuEH8FnXzD6y9WqgTkvcAyWQ.roa (hash: ezeCzHTBFnMMCDhX8NkCA6ybD9xQfKuL+xUd+x4C3b4=) 2: r9v0VgEKm9FJQcoskcpTPn71F4o.crl (hash: Wd5odCk5lxrET9xCutXi+/TGhMX3xXdI5hcxVneMytk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:41:67:fe:89:19:f1:a6:1b:23:73:b9:cd:9a:b5:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdbf456010a9bd14941ca2c91ca533e7ef5178a Validity Not Before: Dec 27 10:01:20 2025 GMT Not After : Dec 28 10:01:20 2025 GMT Subject: CN=bd713278c06dfb8de707e74b2d62b241843f9fa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:bb:d8:35:b6:ae:cd:be:e0:bb:42:de:06: 5a:50:4f:56:6b:c8:ee:d7:ec:b8:52:49:6b:b4:96: 8d:da:a4:6d:f4:bd:93:d3:00:17:4d:2b:3f:b7:06: 09:03:96:03:ac:98:37:13:59:d2:ba:6e:a8:07:3c: d8:12:be:de:d4:cf:50:d4:d2:7c:74:2e:fa:06:74: 7b:f9:0a:5d:21:ac:5c:18:0b:9a:10:d0:87:6c:00: f5:7a:ab:b1:1b:ca:8f:e6:d3:2f:f7:f0:3e:33:c7: a8:fc:0f:28:8d:94:7b:07:b3:74:fb:b4:38:2c:0b: b3:96:07:cd:8d:5c:4d:98:b3:ca:9b:e0:94:2b:75: ab:61:49:9d:8c:ba:c2:d2:66:aa:4a:da:ec:e6:8f: ec:2e:9b:80:c2:61:4e:03:94:1a:4c:e3:4f:00:e2: 23:12:24:54:77:20:be:dc:e9:3c:2a:77:98:24:8f: 12:aa:4d:ae:20:c1:3b:23:b8:ed:61:0f:d6:4b:b2: bd:e1:36:ba:26:6c:7a:ba:88:0e:3a:5d:63:c6:a2: b1:66:c8:04:55:74:b2:c1:67:e4:b9:9f:5c:b4:a7: b4:37:1d:76:d3:60:1e:70:e3:c6:39:74:83:c3:51: fe:5a:d2:e0:b5:e4:3c:e2:46:1b:59:66:a6:90:0d: 98:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:71:32:78:C0:6D:FB:8D:E7:07:E7:4B:2D:62:B2:41:84:3F:9F:A1 X509v3 Authority Key Identifier: keyid:AF:DB:F4:56:01:0A:9B:D1:49:41:CA:2C:91:CA:53:3E:7E:F5:17:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9v0VgEKm9FJQcoskcpTPn71F4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3eefc1-4f08-452e-84b4-3cddf1751f59/1/r9v0VgEKm9FJQcoskcpTPn71F4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:95:d0:89:74:b8:5e:2f:36:e4:75:1f:9d:32:e9:97:23:94: 56:19:c9:1a:de:14:fa:5c:d6:29:6f:38:51:e3:e8:7a:ca:e5: ec:fd:b8:4e:b1:ec:d4:78:b9:52:5e:ac:71:c3:4f:83:96:19: 11:4b:aa:11:38:06:0e:e8:35:5d:0e:b9:8c:aa:d0:da:96:04: a9:72:ce:b4:3a:92:bb:9f:1f:62:4e:db:29:2a:c1:95:08:82: ab:b0:dd:09:e6:b5:d8:8a:5c:ad:af:80:ef:4d:41:10:79:99: 41:db:40:02:e8:6e:71:2f:fa:1f:57:1c:46:23:9e:c1:63:68: 23:3e:1e:6d:5c:32:5a:05:6c:e2:d0:64:8b:fa:6d:46:d3:6d: 71:c0:26:dd:26:6d:a8:33:13:9e:32:49:22:02:40:e8:90:69: c8:28:34:15:b0:09:e6:c5:6a:8d:db:2b:6d:d7:a9:cb:6b:e9: e5:b4:a1:5c:fc:44:06:eb:26:6e:ed:79:f3:46:d1:b2:a0:9d: a4:b5:7a:81:15:21:88:d1:20:dc:df:ef:ed:2d:90:72:2b:99: c8:15:8b:ee:c0:7e:30:c0:f2:1c:97:c4:e9:e5:48:84:f6:cd: 36:9f:ca:47:0d:76:8f:32:b9:c0:da:64:c7:7f:a8:7a:2f:d8: 0d:b7:3c:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtfQWf+iRnxphsjc7nNmrXmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGJmNDU2MDEwYTliZDE0OTQxY2EyYzkxY2E1MzNlN2Vm NTE3OGEwHhcNMjUxMjI3MTAwMTIwWhcNMjUxMjI4MTAwMTIwWjAzMTEwLwYDVQQD EyhiZDcxMzI3OGMwNmRmYjhkZTcwN2U3NGIyZDYyYjI0MTg0M2Y5ZmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDe72DW2rs2+4LtC3gZaUE9Wa8ju 1+y4UklrtJaN2qRt9L2T0wAXTSs/twYJA5YDrJg3E1nSum6oBzzYEr7e1M9Q1NJ8 dC76BnR7+QpdIaxcGAuaENCHbAD1equxG8qP5tMv9/A+M8eo/A8ojZR7B7N0+7Q4 LAuzlgfNjVxNmLPKm+CUK3WrYUmdjLrC0maqStrs5o/sLpuAwmFOA5QaTONPAOIj EiRUdyC+3Ok8KneYJI8Sqk2uIME7I7jtYQ/WS7K94Ta6Jmx6uogOOl1jxqKxZsgE VXSywWfkuZ9ctKe0Nx1202AecOPGOXSDw1H+WtLgteQ84kYbWWamkA2YAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1xMnjAbfuN5wfnSy1iskGEP5+hMB8GA1UdIwQY MBaAFK/b9FYBCpvRSUHKLJHKUz5+9ReKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQt M2NkZGYxNzUxZjU5LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zZWVmYzEtNGYwOC00NTJlLTg0YjQtM2NkZGYxNzUxZjU5 LzEvcjl2MFZnRUttOUZKUWNvc2tjcFRQbjcxRjRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZXQiXS4 Xi825HUfnTLplyOUVhnJGt4U+lzWKW84UePoesrl7P24TrHs1Hi5Ul6sccNPg5YZ EUuqETgGDug1XQ65jKrQ2pYEqXLOtDqSu58fYk7bKSrBlQiCq7DdCea12Ipcra+A 701BEHmZQdtAAuhucS/6H1ccRiOewWNoIz4ebVwyWgVs4tBki/ptRtNtccAm3SZt qDMTnjJJIgJA6JBpyCg0FbAJ5sVqjdsrbdepy2vp5bShXPxEBusmbu1580bRsqCd pLV6gRUhiNEg3N/v7S2QciuZyBWL7sB+MMDyHJfE6eVIhPbNNp/KRw12jzK5wNpk x3+oei/YDbc8Fw== -----END CERTIFICATE-----Generated at Sat Dec 27 17:47:25 2025 by rpki-client