This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json) Hash identifier: gjUyBIO9M6npqaFhr/lZ7H7LoghmBDtjsZsNNrTTTu8= Subject key identifier: 1A:47:48:42:D5:08:46:43:77:07:08:ED:BA:56:B8:D4:C2:0D:0A:55 Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47 Certificate serial: 019B67312F7062E61FFB8A8D47CBB9D2E244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft Manifest number: 0574 Signing time: Sun 28 Dec 2025 23:00:35 +0000 Manifest this update: Sun 28 Dec 2025 23:00:35 +0000 Manifest next update: Mon 29 Dec 2025 23:00:35 +0000 Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: 2MhK9/QPp8LhvSmiBmOB/OmyrMTkiwqgqbduyF0rk2I=) 2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 23:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:31:2f:70:62:e6:1f:fb:8a:8d:47:cb:b9:d2:e2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47 Validity Not Before: Dec 28 23:00:35 2025 GMT Not After : Dec 29 23:00:35 2025 GMT Subject: CN=1a474842d5084643770708edba56b8d4c20d0a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ab:cb:97:ed:a5:cc:3a:6d:14:00:a4:a3:84: ab:28:70:ea:e1:ee:49:1f:76:6f:db:7e:77:d2:46: ca:b2:e0:73:1e:cd:41:69:34:bc:86:a8:4b:62:fb: da:0a:d0:d9:93:0b:bf:8b:44:a6:60:af:a6:71:14: 98:d8:16:b1:27:d3:f9:44:0f:c3:2b:90:67:6a:0f: 3b:99:07:aa:3d:e9:c6:13:ed:86:86:cb:e9:bc:e4: d6:7e:2d:07:4f:cb:d9:81:02:8e:79:d3:bd:64:2c: ee:f6:9d:41:25:cc:02:d9:ff:8a:cc:65:fb:c2:cb: a0:4e:90:ee:73:f5:86:6f:06:a0:12:a6:7f:fe:21: b2:24:e3:21:bd:0d:08:4d:7a:b8:f4:79:b6:17:63: 54:df:ca:7e:55:28:98:0a:89:10:e8:3f:ee:e5:7e: 2b:8d:43:82:cd:c2:7c:62:4b:be:c3:18:c3:aa:44: b2:ec:2c:28:28:2e:9a:02:74:cd:ee:ed:0b:b6:3f: 7c:00:4d:fe:41:ed:5c:72:ed:7c:e4:e7:b3:77:f5: 87:64:8b:b4:2c:d8:df:98:3d:e8:ba:33:27:7e:d1: 2c:a8:83:2d:7d:6a:04:0b:a1:fe:b2:60:26:59:0c: 61:bd:78:88:51:57:d6:e6:a6:56:95:a3:ae:10:98: 8b:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:47:48:42:D5:08:46:43:77:07:08:ED:BA:56:B8:D4:C2:0D:0A:55 X509v3 Authority Key Identifier: keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:ab:28:9d:e2:02:87:5e:5e:7d:ea:18:94:78:15:9b:92:7b: d6:13:85:d7:4c:8b:f4:75:e4:31:1d:f6:6b:62:41:ee:27:05: f5:f6:83:31:c9:c8:69:53:59:f5:db:78:c0:39:83:b2:2c:b5: 01:4d:43:53:69:4d:48:0a:78:82:29:8e:b1:8d:ea:32:11:88: cf:a3:73:b6:ee:49:99:af:dc:a5:b5:58:a4:62:be:39:a0:51: 8f:1d:89:65:a9:da:b3:d1:5a:8d:d7:e6:95:43:65:a8:81:da: 3f:a5:34:59:b8:a2:1d:51:6d:79:dc:6c:a2:94:f6:cb:98:ab: b5:8c:5a:8b:6e:28:bf:db:05:92:a7:dd:0d:95:34:22:63:e1: 7b:0c:61:6d:d5:7f:98:f1:7e:35:0c:3f:97:4a:7c:ca:4e:08: d7:52:a2:c0:68:38:18:3f:21:21:e2:3a:27:40:46:93:f4:01: fb:42:46:8b:a7:c1:1b:e3:cc:b9:b1:0c:40:0f:c5:98:0b:43: 63:89:72:e1:cf:4c:36:c4:ae:cb:8f:64:bb:4d:cf:2c:a5:f6: e8:9c:97:ed:d0:32:2c:e3:17:45:4a:c3:eb:d1:13:52:09:88: 1b:78:25:0a:14:dd:13:ac:b9:84:a3:97:3c:7b:af:32:aa:8d: 94:aa:5c:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnMS9wYuYf+4qNR8u50uJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzlhMDdlZjQ3ZjgwNWNjYTA3YzEwYWUxODdjOTM5Njg4 MDhjNDcwHhcNMjUxMjI4MjMwMDM1WhcNMjUxMjI5MjMwMDM1WjAzMTEwLwYDVQQD EygxYTQ3NDg0MmQ1MDg0NjQzNzcwNzA4ZWRiYTU2YjhkNGMyMGQwYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqvLl+2lzDptFACko4SrKHDq4e5J H3Zv23530kbKsuBzHs1BaTS8hqhLYvvaCtDZkwu/i0SmYK+mcRSY2BaxJ9P5RA/D K5Bnag87mQeqPenGE+2GhsvpvOTWfi0HT8vZgQKOedO9ZCzu9p1BJcwC2f+KzGX7 wsugTpDuc/WGbwagEqZ//iGyJOMhvQ0ITXq49Hm2F2NU38p+VSiYCokQ6D/u5X4r jUOCzcJ8Yku+wxjDqkSy7CwoKC6aAnTN7u0Ltj98AE3+Qe1ccu185Oezd/WHZIu0 LNjfmD3oujMnftEsqIMtfWoEC6H+smAmWQxhvXiIUVfW5qZWlaOuEJiLgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpHSELVCEZDdwcI7bpWuNTCDQpVMB8GA1UdIwQY MBaAFPU5oH70f4BcygfBCuGHyTlogIxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUt NTAzYTlmYzU5YTIwLzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUtNTAzYTlmYzU5YTIw LzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwqsoneIC h15efeoYlHgVm5J71hOF10yL9HXkMR32a2JB7icF9faDMcnIaVNZ9dt4wDmDsiy1 AU1DU2lNSAp4gimOsY3qMhGIz6Nztu5Jma/cpbVYpGK+OaBRjx2JZanas9Fajdfm lUNlqIHaP6U0WbiiHVFtedxsopT2y5irtYxai24ov9sFkqfdDZU0ImPhewxhbdV/ mPF+NQw/l0p8yk4I11KiwGg4GD8hIeI6J0BGk/QB+0JGi6fBG+PMubEMQA/FmAtD Y4ly4c9MNsSuy49ku03PLKX26JyX7dAyLOMXRUrD69ETUgmIG3glChTdE6y5hKOX PHuvMqqNlKpc3g== -----END CERTIFICATE-----Generated at Mon Dec 29 08:26:27 2025 by rpki-client