This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft File: 9yQQnyF3AuaYDbkFOo9HEPwKCno.mft (raw, json) Hash identifier: GiWpgcxTF4ZEtEOdr4ULZDvNB7b0D9oMSsAMIzkJBxI= Subject key identifier: 8D:46:EF:CA:4C:89:F9:EE:FF:73:57:98:AB:F3:AC:F2:51:9C:B8:78 Authority key identifier: F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A Certificate issuer: /CN=f724109f217702e6980db9053a8f4710fc0a0a7a Certificate serial: 019B50E03C5073515F6FE79A83FE69E9FFFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft Manifest number: 02A2 Signing time: Wed 24 Dec 2025 15:00:31 +0000 Manifest this update: Wed 24 Dec 2025 15:00:31 +0000 Manifest next update: Thu 25 Dec 2025 15:00:31 +0000 Files and hashes: 1: 9yQQnyF3AuaYDbkFOo9HEPwKCno.crl (hash: nkvlTfVyI831gJqL0Ua3HuHAxOuGSUqw64pUF52+PQE=) 2: nFar_UOXP4QzN4-h1MF9qknQEIw.roa (hash: tJ5LZZ8cOfCs7MBCUeqrXfhErlPn41y+8yI8NHVM7o0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:e0:3c:50:73:51:5f:6f:e7:9a:83:fe:69:e9:ff:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f724109f217702e6980db9053a8f4710fc0a0a7a Validity Not Before: Dec 24 15:00:31 2025 GMT Not After : Dec 25 15:00:31 2025 GMT Subject: CN=8d46efca4c89f9eeff735798abf3acf2519cb878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:fc:52:01:1e:c3:7d:62:d6:31:df:97:93:fb: 73:60:ef:8c:52:b9:86:7d:ee:ad:5c:f0:8e:99:7c: fb:e5:6c:f4:2c:43:98:94:81:9b:95:b3:5c:e1:47: 31:db:ef:e0:69:e0:91:7e:db:3e:20:2d:15:d8:e8: 64:db:fa:a3:37:6b:60:c3:52:8b:e3:93:6d:f9:4f: 79:7d:a6:c7:75:99:6b:84:55:29:94:3f:9c:73:0b: 58:53:34:f1:66:d2:e8:49:3e:b7:50:96:90:bb:3a: 20:46:4d:da:2c:be:d1:f3:2c:b5:19:2c:9e:d0:50: 7b:c0:9b:03:16:00:34:67:7f:ae:d3:7f:14:19:a9: ad:3c:8b:a5:31:fe:d0:2c:20:08:07:ec:1b:dc:41: 8a:94:81:3e:84:72:ae:fa:24:6d:06:14:38:bd:01: 91:69:87:27:9d:6e:f3:30:f5:a2:0c:6b:4c:4c:8f: 39:a4:07:b0:56:ba:59:02:f5:cb:87:6c:42:35:d1: 4f:14:53:c6:7a:2d:d3:f0:51:9c:a1:27:1f:99:44: bc:b3:f7:f6:bf:d4:ce:1c:af:6b:c5:88:ae:b2:ea: e5:ee:a3:3f:38:c1:2d:3d:56:0a:89:05:21:71:63: cd:f3:21:d4:6f:9b:ef:48:c5:d0:dd:9d:fe:c8:29: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:46:EF:CA:4C:89:F9:EE:FF:73:57:98:AB:F3:AC:F2:51:9C:B8:78 X509v3 Authority Key Identifier: keyid:F7:24:10:9F:21:77:02:E6:98:0D:B9:05:3A:8F:47:10:FC:0A:0A:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9yQQnyF3AuaYDbkFOo9HEPwKCno.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0d6768-02e9-43dc-82d8-b2f6bc3e0b35/1/9yQQnyF3AuaYDbkFOo9HEPwKCno.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:8d:2b:56:12:2f:c1:36:ab:8d:9a:32:04:c5:ff:ab:10:df: 59:91:29:0c:b9:0e:5a:d3:b6:07:3c:10:c6:54:4a:8c:df:9a: ac:0e:4e:27:09:52:c9:8e:75:08:ef:96:bc:20:40:1d:6a:de: 7a:35:f7:37:c7:9f:69:9c:36:b6:ae:9b:3b:63:c5:7f:44:02: 69:0c:e3:af:3c:87:91:dd:5f:1f:6d:40:f1:09:18:a1:66:20: c3:33:e7:9a:d9:7b:59:42:1c:9e:b6:7d:c3:e8:f7:f7:f7:1e: 35:a8:ac:7b:41:35:8e:30:98:94:8f:b5:55:27:85:b2:29:ee: 05:3b:7e:c9:35:b8:23:77:cc:f2:29:cf:5b:ee:fe:1f:7e:25: b9:03:e9:22:a5:43:ee:30:b0:04:42:54:1a:de:2b:46:ad:5a: 88:dd:b9:1d:73:02:0c:7b:fd:b6:a9:d0:da:07:b8:0f:bf:b4: 4b:0d:38:1d:8f:a6:99:f8:f5:a7:97:ac:72:40:1e:be:c9:21: 66:1c:71:b2:9c:e8:a5:61:1e:53:a4:7e:c8:b1:69:5b:be:a0: bc:1a:06:56:1a:d8:3f:c7:e5:fa:d0:4a:68:c9:53:ee:b8:ba: 86:87:e4:ed:68:5d:37:cf:60:62:74:cd:23:6f:f2:11:9f:02: 87:c2:4c:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQ4DxQc1Ffb+eag/5p6f/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MjQxMDlmMjE3NzAyZTY5ODBkYjkwNTNhOGY0NzEwZmMw YTBhN2EwHhcNMjUxMjI0MTUwMDMxWhcNMjUxMjI1MTUwMDMxWjAzMTEwLwYDVQQD Eyg4ZDQ2ZWZjYTRjODlmOWVlZmY3MzU3OThhYmYzYWNmMjUxOWNiODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PxSAR7DfWLWMd+Xk/tzYO+MUrmG fe6tXPCOmXz75Wz0LEOYlIGblbNc4Ucx2+/gaeCRfts+IC0V2Ohk2/qjN2tgw1KL 45Nt+U95fabHdZlrhFUplD+ccwtYUzTxZtLoST63UJaQuzogRk3aLL7R8yy1GSye 0FB7wJsDFgA0Z3+u038UGamtPIulMf7QLCAIB+wb3EGKlIE+hHKu+iRtBhQ4vQGR aYcnnW7zMPWiDGtMTI85pAewVrpZAvXLh2xCNdFPFFPGei3T8FGcoScfmUS8s/f2 v9TOHK9rxYiusurl7qM/OMEtPVYKiQUhcWPN8yHUb5vvSMXQ3Z3+yCnhVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1G78pMifnu/3NXmKvzrPJRnLh4MB8GA1UdIwQY MBaAFPckEJ8hdwLmmA25BTqPRxD8Cgp6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgt YjJmNmJjM2UwYjM1LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZDY3NjgtMDJlOS00M2RjLTgyZDgtYjJmNmJjM2UwYjM1 LzEvOXlRUW55RjNBdWFZRGJrRk9vOUhFUHdLQ25vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC40rVhIv wTarjZoyBMX/qxDfWZEpDLkOWtO2BzwQxlRKjN+arA5OJwlSyY51CO+WvCBAHWre ejX3N8efaZw2tq6bO2PFf0QCaQzjrzyHkd1fH21A8QkYoWYgwzPnmtl7WUIcnrZ9 w+j39/ceNaise0E1jjCYlI+1VSeFsinuBTt+yTW4I3fM8inPW+7+H34luQPpIqVD 7jCwBEJUGt4rRq1aiN25HXMCDHv9tqnQ2ge4D7+0Sw04HY+mmfj1p5esckAevskh ZhxxspzopWEeU6R+yLFpW76gvBoGVhrYP8fl+tBKaMlT7ri6hofk7WhdN89gYnTN I2/yEZ8Ch8JMuw== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:11 2025 by rpki-client