This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft File: 9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json) Hash identifier: 0Gif1675/uk/Z7iXth+OLPFa/GOGb/L3I4f+nxbbnYE= Subject key identifier: B1:1D:CE:C6:82:04:68:C9:2F:5E:53:C6:94:14:B9:20:B7:85:9E:4B Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B39B3BD01FB1797C4212D5667E982AD2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft Manifest number: 1486 Signing time: Sat 20 Dec 2025 03:00:39 +0000 Manifest this update: Sat 20 Dec 2025 03:00:39 +0000 Manifest next update: Sun 21 Dec 2025 03:00:39 +0000 Files and hashes: 1: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=) 2: 3C4bE5EhpxTD8ntAfMb031Q4N7U.roa (hash: mQejtPkSk7qOy5LIWKfdWmidqPBID43pSZaY4/inuG0=) 3: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=) 4: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=) 5: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=) 6: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: e8YEwrwS/qJ82jlQkv6wnPs+0NEdhqnkSQTIdC3NmJ0=) 7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=) 8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=) 9: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=) 10: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=) 11: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=) 12: fUyauZFzWLubSyadnmzbsZyl6iM.roa (hash: ZXpfbo2eejrS0yFMBL0ES1gh6HanTDFLIm85aYT7+bA=) 13: iGMhmXXBNt2s7l-0mx0YRvUMWSo.roa (hash: McOC3wl39qVTP2IvApkUHWGgt9CHnxQ9E9acv2S4LQA=) 14: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=) 15: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=) 16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:bd:01:fb:17:97:c4:21:2d:56:67:e9:82:ad:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Dec 20 03:00:39 2025 GMT Not After : Dec 21 03:00:39 2025 GMT Subject: CN=b11dcec6820468c92f5e53c69414b920b7859e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:c9:94:99:37:0e:63:f3:f5:4b:0e:f4:f6: 02:1b:7d:1f:44:5c:14:a0:10:25:bc:00:33:37:b6: a6:06:38:60:07:3f:b9:cf:8c:ab:70:22:9c:5d:f4: 7a:1c:fc:04:b7:3b:8a:e4:af:d3:87:7f:39:11:8c: 38:b7:fa:81:20:5e:70:6e:ba:4a:f4:80:4c:66:f0: e3:60:a6:e8:24:2c:0b:9c:f5:74:e3:68:be:63:ae: 35:96:cb:8d:cc:6d:7c:0b:b7:56:98:63:fd:c4:a8: 22:47:ed:f1:ac:d7:38:0f:a8:bb:b9:81:56:f7:6e: ba:11:24:8e:31:2a:7c:a3:e1:92:09:11:9b:82:2f: f9:7c:41:5f:52:1f:11:26:c5:3c:3f:c3:79:7a:69: 50:eb:ec:fe:78:eb:7f:f1:6b:07:6c:dd:58:f1:dc: bb:60:dd:34:49:32:d8:4c:18:35:15:70:bc:fd:29: eb:16:64:a0:1a:eb:43:40:af:ce:f7:76:0e:9a:72: 92:24:61:19:3a:6c:13:a4:a6:a5:d9:ee:3b:79:49: 39:42:49:15:ba:53:be:67:a9:df:10:ad:fb:53:09: 13:e2:03:7a:69:4f:ea:ff:be:19:1b:1e:d1:75:49: e4:57:7d:54:2e:36:10:2a:7c:d7:c2:70:4d:1b:2f: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1D:CE:C6:82:04:68:C9:2F:5E:53:C6:94:14:B9:20:B7:85:9E:4B X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:c4:b6:f3:33:b4:78:3c:1a:8c:59:c3:ee:55:18:cd:7d:dc: b8:07:0e:37:bd:2e:23:56:a4:ed:26:45:e3:f0:76:53:c8:f4: 24:35:62:76:b6:bd:87:43:08:4f:a0:1d:3e:3a:b5:37:b2:ea: b2:d7:96:10:45:92:e0:1f:bf:50:03:0b:5f:2f:3d:eb:42:0e: ba:98:16:ff:04:3c:16:47:b5:96:1f:31:a4:5d:5a:90:16:02: 7b:23:68:f4:d7:be:f9:f5:f8:ea:66:c5:12:15:61:67:f8:4e: be:11:99:79:bf:06:3a:6d:8a:3c:2b:81:03:71:d4:b5:1e:a4: 20:53:7b:3e:fc:7b:ef:02:74:ee:a5:53:b6:0a:69:bf:3d:0f: 6f:b0:3a:f1:75:85:4d:d5:fe:3b:b8:cd:89:a2:66:c3:b0:51: 99:2d:5d:fa:f2:88:1f:0c:12:c4:7e:6e:41:4c:b8:55:ce:6b: a6:7f:48:9f:ba:39:7d:50:3f:31:e4:03:3c:2f:8b:18:f4:68: 98:cd:29:b5:81:9a:67:f5:18:09:75:0d:ee:a3:71:a8:4b:31: 9f:f8:24:60:4d:ca:c7:19:aa:3f:59:5d:d2:55:cf:ca:74:5e: e2:8c:44:6b:fa:4a:f1:03:65:e2:3d:35:dd:b9:6d:29:9e:a2: 6f:55:37:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s70B+xeXxCEtVmfpgq0vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjUxMjIwMDMwMDM5WhcNMjUxMjIxMDMwMDM5WjAzMTEwLwYDVQQD EyhiMTFkY2VjNjgyMDQ2OGM5MmY1ZTUzYzY5NDE0YjkyMGI3ODU5ZTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RHJlJk3DmPz9UsO9PYCG30fRFwU oBAlvAAzN7amBjhgBz+5z4yrcCKcXfR6HPwEtzuK5K/Th385EYw4t/qBIF5wbrpK 9IBMZvDjYKboJCwLnPV042i+Y641lsuNzG18C7dWmGP9xKgiR+3xrNc4D6i7uYFW 9266ESSOMSp8o+GSCRGbgi/5fEFfUh8RJsU8P8N5emlQ6+z+eOt/8WsHbN1Y8dy7 YN00STLYTBg1FXC8/SnrFmSgGutDQK/O93YOmnKSJGEZOmwTpKal2e47eUk5QkkV ulO+Z6nfEK37UwkT4gN6aU/q/74ZGx7RdUnkV31ULjYQKnzXwnBNGy8fZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLEdzsaCBGjJL15TxpQUuSC3hZ5LMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsS28zO0 eDwajFnD7lUYzX3cuAcON70uI1ak7SZF4/B2U8j0JDVidra9h0MIT6AdPjq1N7Lq steWEEWS4B+/UAMLXy8960IOupgW/wQ8Fke1lh8xpF1akBYCeyNo9Ne++fX46mbF EhVhZ/hOvhGZeb8GOm2KPCuBA3HUtR6kIFN7Pvx77wJ07qVTtgppvz0Pb7A68XWF TdX+O7jNiaJmw7BRmS1d+vKIHwwSxH5uQUy4Vc5rpn9In7o5fVA/MeQDPC+LGPRo mM0ptYGaZ/UYCXUN7qNxqEsxn/gkYE3KxxmqP1ld0lXPynRe4oxEa/pK8QNl4j01 3bltKZ6ib1U3Jg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:25:43 2025 by rpki-client