This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft File: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft (raw, json) Hash identifier: OUDm3JEt6KNJGzB790tVIIjkedo7ChRrx2BGoFeyhlQ= Subject key identifier: 5B:6A:D6:31:2B:70:31:E7:3B:B0:82:CA:86:95:CB:B9:0F:5A:45:61 Authority key identifier: F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 Certificate issuer: /CN=f539a07ef47f805cca07c10ae187c93968808c47 Certificate serial: 019B3EA32775F606258222B9772D740729C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft Manifest number: 055F Signing time: Sun 21 Dec 2025 02:00:38 +0000 Manifest this update: Sun 21 Dec 2025 02:00:38 +0000 Manifest next update: Mon 22 Dec 2025 02:00:38 +0000 Files and hashes: 1: 9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl (hash: 1s6magIlF9L9/I37RBpPEo9ltYdVv/RZrKCuuQkGoWA=) 2: hQ_4ttT47iSzyY-pXhE0Zk2VRI8.roa (hash: lla8JTSaGgyqrA7kZsNxFenXInFs3bsEJhodvXrTuiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:27:75:f6:06:25:82:22:b9:77:2d:74:07:29:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f539a07ef47f805cca07c10ae187c93968808c47 Validity Not Before: Dec 21 02:00:38 2025 GMT Not After : Dec 22 02:00:38 2025 GMT Subject: CN=5b6ad6312b7031e73bb082ca8695cbb90f5a4561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c5:cd:f7:fa:84:01:6f:26:4b:f4:fb:c5:08: 09:3e:13:9e:75:0f:a3:c6:20:f0:c5:bc:27:ba:e3: 49:30:df:85:af:b2:37:a3:b7:d9:de:37:74:77:35: 85:45:60:c1:ac:c1:e9:4d:81:33:aa:fb:50:8c:1b: 71:8c:07:4d:59:bb:f5:82:d6:34:a7:9b:d9:59:63: c4:7b:0f:ea:ef:8a:d8:ab:db:a2:fa:45:be:7b:63: 5c:42:e1:0f:d9:ab:0d:88:fb:b3:58:14:9c:8a:6d: cf:58:1a:df:44:4f:5d:28:28:f8:f4:e9:60:6e:8f: 34:f5:92:bb:72:13:07:42:bd:29:59:34:b6:14:74: 59:b3:5c:3d:49:b2:99:46:55:93:37:ec:a9:be:86: 82:ed:70:94:e4:06:01:b0:0b:1d:bf:5c:ed:9b:f3: de:e7:f1:ac:e2:8a:a4:39:b9:46:ca:a5:62:db:4b: 48:0d:ba:e4:71:bb:80:dc:ac:60:c4:ba:28:05:8b: 24:fe:a7:48:16:52:15:10:11:49:60:b0:1a:cc:8a: e1:12:f2:2f:d0:6f:66:58:3f:03:91:f5:61:f0:a9: 25:73:64:78:31:cd:e6:82:6b:ae:cf:cd:bf:ce:73: d0:54:6e:5f:24:49:48:70:a6:47:6e:e2:4a:bc:ec: 7d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6A:D6:31:2B:70:31:E7:3B:B0:82:CA:86:95:CB:B9:0F:5A:45:61 X509v3 Authority Key Identifier: keyid:F5:39:A0:7E:F4:7F:80:5C:CA:07:C1:0A:E1:87:C9:39:68:80:8C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TmgfvR_gFzKB8EK4YfJOWiAjEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5f0ac1-205d-4975-aade-503a9fc59a20/1/9TmgfvR_gFzKB8EK4YfJOWiAjEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:66:2c:76:77:a0:1d:f1:b0:3d:6e:4d:25:f0:4f:c1:06:b9: 49:56:7c:ec:49:87:8e:01:be:8c:ab:0e:5e:5f:3c:83:9a:74: 59:27:9a:ac:ff:76:06:7a:df:9a:e0:ab:f3:67:0c:da:6b:c3: ef:b9:fd:b3:36:d5:40:5e:93:34:4d:df:c1:c8:c4:77:b9:74: 3c:63:dd:f0:4c:c0:47:cf:af:7f:39:fc:41:bf:44:72:95:a3: cb:74:0b:cd:08:eb:79:99:6e:3f:c4:75:10:62:26:ea:6d:fa: 06:46:a5:97:5d:c7:f7:7c:57:6e:39:43:78:c9:6c:06:26:8e: b7:14:0b:dc:d8:3d:dd:e1:50:b8:56:49:80:94:28:23:da:16: 53:cb:aa:94:e0:f2:f5:8a:a1:94:6f:fa:a6:2d:4a:b6:fa:4a: 66:01:75:a4:3e:12:db:c6:b6:cd:33:e1:92:1d:05:c6:09:5c: e8:f9:4f:4a:82:97:19:c3:27:fa:0f:f4:a9:0f:75:2c:e1:0e: f8:60:27:96:12:9d:d9:a1:63:f8:0b:ec:92:c6:8e:30:eb:59: 0b:7b:0d:89:28:e9:c4:3b:34:e2:60:d7:83:39:c7:13:c5:ac: 70:e4:ec:4a:6f:67:93:f4:ad:63:4c:0f:ca:35:64:00:06:2b: b0:f7:fc:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oyd19gYlgiK5dy10BynEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzlhMDdlZjQ3ZjgwNWNjYTA3YzEwYWUxODdjOTM5Njg4 MDhjNDcwHhcNMjUxMjIxMDIwMDM4WhcNMjUxMjIyMDIwMDM4WjAzMTEwLwYDVQQD Eyg1YjZhZDYzMTJiNzAzMWU3M2JiMDgyY2E4Njk1Y2JiOTBmNWE0NTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncXN9/qEAW8mS/T7xQgJPhOedQ+j xiDwxbwnuuNJMN+Fr7I3o7fZ3jd0dzWFRWDBrMHpTYEzqvtQjBtxjAdNWbv1gtY0 p5vZWWPEew/q74rYq9ui+kW+e2NcQuEP2asNiPuzWBScim3PWBrfRE9dKCj49Olg bo809ZK7chMHQr0pWTS2FHRZs1w9SbKZRlWTN+ypvoaC7XCU5AYBsAsdv1ztm/Pe 5/Gs4oqkOblGyqVi20tIDbrkcbuA3KxgxLooBYsk/qdIFlIVEBFJYLAazIrhEvIv 0G9mWD8DkfVh8Kklc2R4Mc3mgmuuz82/znPQVG5fJElIcKZHbuJKvOx9fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtq1jErcDHnO7CCyoaVy7kPWkVhMB8GA1UdIwQY MBaAFPU5oH70f4BcygfBCuGHyTlogIxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUt NTAzYTlmYzU5YTIwLzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZjBhYzEtMjA1ZC00OTc1LWFhZGUtNTAzYTlmYzU5YTIw LzEvOVRtZ2Z2Ul9nRnpLQjhFSzRZZkpPV2lBakVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwmYsdneg HfGwPW5NJfBPwQa5SVZ87EmHjgG+jKsOXl88g5p0WSearP92BnrfmuCr82cM2mvD 77n9szbVQF6TNE3fwcjEd7l0PGPd8EzAR8+vfzn8Qb9EcpWjy3QLzQjreZluP8R1 EGIm6m36Bkall13H93xXbjlDeMlsBiaOtxQL3Ng93eFQuFZJgJQoI9oWU8uqlODy 9YqhlG/6pi1KtvpKZgF1pD4S28a2zTPhkh0Fxglc6PlPSoKXGcMn+g/0qQ91LOEO +GAnlhKd2aFj+AvsksaOMOtZC3sNiSjpxDs04mDXgznHE8WscOTsSm9nk/StY0wP yjVkAAYrsPf8Pg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:37 2025 by rpki-client