This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft File: 9TFMH54Rk8ICXLZytSNXOXjSVNk.mft (raw, json) Hash identifier: rYZ15Gx4yXdzgctuo7pEZK+nwb7oJddy7m/qR0XwFmk= Subject key identifier: 25:F3:FB:E8:DA:56:31:06:8B:6A:16:BF:09:C0:63:19:B1:B4:B1:C8 Authority key identifier: F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 Certificate issuer: /CN=f5314c1f9e1193c2025cb672b523573978d254d9 Certificate serial: 019B4E4D55B2CED214623CC38C1E78B2B80F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft Manifest number: 0AFA Signing time: Wed 24 Dec 2025 03:00:49 +0000 Manifest this update: Wed 24 Dec 2025 03:00:49 +0000 Manifest next update: Thu 25 Dec 2025 03:00:49 +0000 Files and hashes: 1: 9TFMH54Rk8ICXLZytSNXOXjSVNk.crl (hash: cIK4Uq/H4csNz9hqWGRAducpszWMdWnaLBji9CVMUA4=) 2: vnQYA6POl1a8tK2ZzQU1CNh2rSU.roa (hash: cwo0eDB9nxSSyKe/qdMpdoKv9t3e96TKN+bq+LM4mpY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:55:b2:ce:d2:14:62:3c:c3:8c:1e:78:b2:b8:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5314c1f9e1193c2025cb672b523573978d254d9 Validity Not Before: Dec 24 03:00:49 2025 GMT Not After : Dec 25 03:00:49 2025 GMT Subject: CN=25f3fbe8da5631068b6a16bf09c06319b1b4b1c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:c3:6b:06:51:5a:fc:1d:c8:68:3f:ef:c7: de:5f:45:bc:c1:da:51:2f:52:ec:b7:a7:5e:9a:77: ff:d8:78:fc:13:fa:19:93:fc:7a:ba:c8:48:a0:12: 43:7b:c7:95:50:d3:22:ef:8c:2b:3d:c3:c5:fd:df: aa:10:6a:5c:5e:ba:1e:51:27:22:e0:2b:a8:47:4a: c3:ca:1a:76:ef:18:5c:e7:15:0f:fb:23:78:7b:28: 9d:76:f9:03:19:b3:57:a5:6b:aa:60:b0:45:2b:70: 20:d4:6a:3f:10:4a:db:2d:d8:4e:dd:fe:d7:09:34: 38:51:57:7f:4e:52:45:df:f1:32:fb:c5:07:ad:e9: 50:d6:94:3f:f0:d7:97:49:63:bd:45:23:94:63:87: 2b:2f:b2:ca:05:39:18:98:dd:63:54:70:e5:b6:8a: 05:d5:a3:b1:1f:fb:93:fe:3d:62:0d:34:c6:eb:3f: 2d:b4:a0:60:a9:72:65:f8:6c:d1:c4:08:f5:5d:cb: 4d:24:76:43:12:2e:ef:7d:08:10:51:1f:4e:0c:40: e5:13:14:4b:81:b2:f4:da:f6:4e:25:f4:ed:b1:f8: b9:4a:47:bc:79:af:54:22:91:e3:3b:d8:22:41:91: b6:7a:c1:d7:62:28:7e:d4:ed:a8:a0:c9:d0:82:63: 6d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F3:FB:E8:DA:56:31:06:8B:6A:16:BF:09:C0:63:19:B1:B4:B1:C8 X509v3 Authority Key Identifier: keyid:F5:31:4C:1F:9E:11:93:C2:02:5C:B6:72:B5:23:57:39:78:D2:54:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TFMH54Rk8ICXLZytSNXOXjSVNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/1d09e6-ae7b-434c-99ec-738c7492f768/1/9TFMH54Rk8ICXLZytSNXOXjSVNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1a:0a:93:4b:14:17:9e:d6:ae:b0:eb:7e:e7:a7:a4:84:fd: b3:d3:3b:b5:6f:ce:5a:4f:e7:de:ca:6c:30:d9:fb:c7:23:89: 97:ff:7d:1e:f7:2b:c8:99:8c:51:c9:7b:a6:0b:21:cb:3b:9f: 8f:41:86:10:bf:1d:4d:95:ce:6d:3e:30:3d:58:30:d8:31:69: ef:96:5d:94:67:fe:5f:17:21:ea:fb:e8:c0:39:5b:b5:fa:f7: 5c:4c:4d:60:6d:2e:ca:c7:7d:74:19:ab:cc:cb:2e:95:15:92: 58:f6:d5:70:74:66:52:15:65:e6:2f:c2:a5:55:f9:ca:02:7e: 9b:17:06:41:2b:9f:2f:32:fb:22:38:4a:20:10:3b:76:f6:3c: d5:26:43:47:f1:c9:a1:3e:0b:de:ec:b0:17:2f:6a:79:05:5f: 24:ed:88:6b:6a:ba:e3:5c:d1:5c:7c:ac:9e:aa:04:12:9e:d0: 0a:4c:fc:f2:60:e9:5d:41:68:3a:a9:fc:c5:4e:51:6d:fc:e2: 98:b3:b7:ed:4d:ce:e7:ac:96:47:ab:df:7a:d8:b6:cc:db:3b: 33:79:2c:9f:c2:95:94:b7:45:07:12:03:b1:7f:41:97:50:a2: f9:d9:4e:42:84:e7:d8:32:d7:39:29:f9:bc:8d:31:c4:7a:82: b9:41:8b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTVWyztIUYjzDjB54srgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzE0YzFmOWUxMTkzYzIwMjVjYjY3MmI1MjM1NzM5Nzhk MjU0ZDkwHhcNMjUxMjI0MDMwMDQ5WhcNMjUxMjI1MDMwMDQ5WjAzMTEwLwYDVQQD EygyNWYzZmJlOGRhNTYzMTA2OGI2YTE2YmYwOWMwNjMxOWIxYjRiMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntXDawZRWvwdyGg/78feX0W8wdpR L1Lst6demnf/2Hj8E/oZk/x6ushIoBJDe8eVUNMi74wrPcPF/d+qEGpcXroeUSci 4CuoR0rDyhp27xhc5xUP+yN4eyiddvkDGbNXpWuqYLBFK3Ag1Go/EErbLdhO3f7X CTQ4UVd/TlJF3/Ey+8UHrelQ1pQ/8NeXSWO9RSOUY4crL7LKBTkYmN1jVHDltooF 1aOxH/uT/j1iDTTG6z8ttKBgqXJl+GzRxAj1XctNJHZDEi7vfQgQUR9ODEDlExRL gbL02vZOJfTtsfi5Ske8ea9UIpHjO9giQZG2esHXYih+1O2ooMnQgmNtYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXz++jaVjEGi2oWvwnAYxmxtLHIMB8GA1UdIwQY MBaAFPUxTB+eEZPCAly2crUjVzl40lTZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMt NzM4Yzc0OTJmNzY4LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8xZDA5ZTYtYWU3Yi00MzRjLTk5ZWMtNzM4Yzc0OTJmNzY4 LzEvOVRGTUg1NFJrOElDWExaeXRTTlhPWGpTVk5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRoKk0sU F57WrrDrfuenpIT9s9M7tW/OWk/n3spsMNn7xyOJl/99HvcryJmMUcl7pgshyzuf j0GGEL8dTZXObT4wPVgw2DFp75ZdlGf+Xxch6vvowDlbtfr3XExNYG0uysd9dBmr zMsulRWSWPbVcHRmUhVl5i/CpVX5ygJ+mxcGQSufLzL7IjhKIBA7dvY81SZDR/HJ oT4L3uywFy9qeQVfJO2Ia2q641zRXHysnqoEEp7QCkz88mDpXUFoOqn8xU5Rbfzi mLO37U3O56yWR6vfeti2zNs7M3ksn8KVlLdFBxIDsX9Bl1Ci+dlOQoTn2DLXOSn5 vI0xxHqCuUGL2A== -----END CERTIFICATE-----Generated at Wed Dec 24 13:10:48 2025 by rpki-client