This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft File: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft (raw, json) Hash identifier: 89Qfgyc2gY10+FjeZDARi2BCiuwRToEwcWNFog8kPXY= Subject key identifier: 04:11:03:24:A9:E9:AE:55:B9:AE:37:97:1B:CD:A8:7F:4E:DC:F9:6C Authority key identifier: F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95 Certificate issuer: /CN=f42d0cad0eaed1a61f478fb0919c7a4322724695 Certificate serial: 019B6CFC78DB249315E51C29F4300A81704E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft Manifest number: 0CD5 Signing time: Tue 30 Dec 2025 02:00:43 +0000 Manifest this update: Tue 30 Dec 2025 02:00:43 +0000 Manifest next update: Wed 31 Dec 2025 02:00:43 +0000 Files and hashes: 1: 9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl (hash: ioLHUWP8jcXYfD/WwXLsFA1qPoZKB8rT0Ir0c/P1u30=) 2: BfiNOagjub-Q5UhmAEUO1BegvlM.roa (hash: z7UGbr4hGM96gAGkSVL5gy0uNjYzSjUeofOhu3xqo/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:78:db:24:93:15:e5:1c:29:f4:30:0a:81:70:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42d0cad0eaed1a61f478fb0919c7a4322724695 Validity Not Before: Dec 30 02:00:43 2025 GMT Not After : Dec 31 02:00:43 2025 GMT Subject: CN=04110324a9e9ae55b9ae37971bcda87f4edcf96c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b8:b7:5f:22:a7:7a:db:01:db:f7:54:58:60: 94:9b:d5:35:e6:9f:16:83:34:d6:5e:7b:7a:d5:38: d7:72:b1:12:70:ea:fa:c9:5f:9c:05:a9:da:79:78: 8e:45:e1:e5:85:fa:b5:ca:50:b2:4b:98:72:84:fd: c7:9f:f5:b5:a7:6e:62:b7:90:4f:f8:e9:f7:1c:e1: 7c:f4:b9:6d:ca:04:1f:a1:26:f6:23:8f:1c:e6:d5: b5:4b:e5:30:3b:4e:25:10:6c:a9:df:0d:3b:6c:24: 17:b3:c5:33:c5:b6:09:33:74:6b:6a:62:2e:a2:eb: ed:00:81:cf:9d:c0:28:45:a4:10:25:7b:1f:19:d7: e2:e5:4e:fa:40:82:0a:0e:b7:de:c9:3c:cb:39:4c: 58:99:5a:d0:38:2a:d1:d3:4a:88:e6:40:ea:a2:70: 26:95:e3:bb:06:d6:d6:fc:19:13:f1:d3:db:7a:6a: bd:a4:d2:6f:29:76:f5:32:dd:3c:b4:2f:7f:13:6c: 5e:97:5e:6f:2f:e0:39:60:71:64:ee:e3:ca:ce:17: c9:5e:55:38:4d:e2:12:7b:ca:77:bd:8b:ac:50:f4: c2:56:40:6c:c0:0f:62:be:dc:fc:73:d4:b9:11:66: 7d:36:f2:c6:09:1a:a9:7f:5d:39:f1:7e:1d:c3:b7: ab:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:11:03:24:A9:E9:AE:55:B9:AE:37:97:1B:CD:A8:7F:4E:DC:F9:6C X509v3 Authority Key Identifier: keyid:F4:2D:0C:AD:0E:AE:D1:A6:1F:47:8F:B0:91:9C:7A:43:22:72:46:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dff4d0-1d0a-4951-8b27-7f7394be8ce4/1/9C0MrQ6u0aYfR4-wkZx6QyJyRpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:1d:a9:e8:d8:76:1e:f9:a7:d5:08:83:bd:6a:e8:dc:f8:d2: 09:a5:ff:c1:f4:b2:cf:06:80:75:81:44:94:36:09:44:7c:b0: 6c:14:e0:ac:e3:dc:8e:03:c3:6b:6d:c8:33:a7:98:25:e4:8c: 40:27:6b:32:13:c5:a5:7d:ab:90:46:b9:84:08:f3:8d:65:d9: f1:f7:39:bf:d2:22:ab:32:93:09:ca:83:9f:41:26:c8:c0:18: 2d:94:31:60:ac:b0:81:c3:bb:6c:70:dc:7a:51:63:8d:dc:67: 4d:f1:27:d7:f0:31:d4:d5:cc:48:9f:a1:50:9a:91:38:96:e6: b9:48:f0:0b:f2:58:0e:13:e2:3f:3d:d2:b9:4d:32:9e:dd:97: 65:51:73:1d:ee:23:42:a8:9c:c9:f3:a4:64:58:64:e9:43:ad: c3:a2:f3:0c:3d:70:47:87:8d:ee:5f:ef:04:84:04:6d:84:15: 2b:fb:72:77:bf:18:93:81:c2:d4:95:ce:49:67:f4:66:20:ee: f6:15:d1:f0:60:8d:b7:69:b3:7b:81:9b:ba:8c:09:f0:4b:89: 7b:69:c8:18:21:30:d4:33:5d:2f:8b:bd:60:b5:41:52:88:b5: 75:6e:35:75:ea:2c:1b:f1:16:38:b1:6a:03:a9:07:29:1b:d8: d2:25:01:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/HjbJJMV5Rwp9DAKgXBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmQwY2FkMGVhZWQxYTYxZjQ3OGZiMDkxOWM3YTQzMjI3 MjQ2OTUwHhcNMjUxMjMwMDIwMDQzWhcNMjUxMjMxMDIwMDQzWjAzMTEwLwYDVQQD EygwNDExMDMyNGE5ZTlhZTU1YjlhZTM3OTcxYmNkYTg3ZjRlZGNmOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7i3XyKnetsB2/dUWGCUm9U15p8W gzTWXnt61TjXcrEScOr6yV+cBanaeXiOReHlhfq1ylCyS5hyhP3Hn/W1p25it5BP +On3HOF89LltygQfoSb2I48c5tW1S+UwO04lEGyp3w07bCQXs8UzxbYJM3RramIu ouvtAIHPncAoRaQQJXsfGdfi5U76QIIKDrfeyTzLOUxYmVrQOCrR00qI5kDqonAm leO7BtbW/BkT8dPbemq9pNJvKXb1Mt08tC9/E2xel15vL+A5YHFk7uPKzhfJXlU4 TeISe8p3vYusUPTCVkBswA9ivtz8c9S5EWZ9NvLGCRqpf1058X4dw7erhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQRAySp6a5Vua43lxvNqH9O3PlsMB8GA1UdIwQY MBaAFPQtDK0OrtGmH0ePsJGcekMickaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjct N2Y3Mzk0YmU4Y2U0LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9kZmY0ZDAtMWQwYS00OTUxLThiMjctN2Y3Mzk0YmU4Y2U0 LzEvOUMwTXJRNnUwYVlmUjQtd2taeDZReUp5UnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAix2p6Nh2 Hvmn1QiDvWro3PjSCaX/wfSyzwaAdYFElDYJRHywbBTgrOPcjgPDa23IM6eYJeSM QCdrMhPFpX2rkEa5hAjzjWXZ8fc5v9IiqzKTCcqDn0EmyMAYLZQxYKywgcO7bHDc elFjjdxnTfEn1/Ax1NXMSJ+hUJqROJbmuUjwC/JYDhPiPz3SuU0ynt2XZVFzHe4j QqicyfOkZFhk6UOtw6LzDD1wR4eN7l/vBIQEbYQVK/tyd78Yk4HC1JXOSWf0ZiDu 9hXR8GCNt2mze4GbuowJ8EuJe2nIGCEw1DNdL4u9YLVBUoi1dW41deosG/EWOLFq A6kHKRvY0iUB3Q== -----END CERTIFICATE-----Generated at Tue Dec 30 07:17:23 2025 by rpki-client