This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json) Hash identifier: MaaCQhdJ1vNVEr/g+Y6n+Ri6g3cyl2BHnVeRFZqFBtg= Subject key identifier: 05:B7:E7:BC:7F:87:D2:F5:B0:D8:6F:E1:DE:DF:00:1F:E2:CF:39:57 Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Certificate serial: 019B454A0E5FE6253E0ECC368AB83CBB7FF3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft Manifest number: 0908 Signing time: Mon 22 Dec 2025 09:00:39 +0000 Manifest this update: Mon 22 Dec 2025 09:00:39 +0000 Manifest next update: Tue 23 Dec 2025 09:00:39 +0000 Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: SlnyJWwZyS/1H6nK/VSSCp7I6erfwgsCwp8ecnhdJgA=) 2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=) 3: jPbAHMtRmOOxtXFxyDN1-qXJjZI.roa (hash: rubF/nUj1Sxv+4U25Wjdi1dZZsv1ydBfmLAqRQsECUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:0e:5f:e6:25:3e:0e:cc:36:8a:b8:3c:bb:7f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Validity Not Before: Dec 22 09:00:39 2025 GMT Not After : Dec 23 09:00:39 2025 GMT Subject: CN=05b7e7bc7f87d2f5b0d86fe1dedf001fe2cf3957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d8:43:8e:b6:05:7b:eb:6a:ce:51:4d:fd:4e: b1:d4:9f:63:cd:8b:9d:2e:74:98:ad:7a:41:3f:15: 05:05:a1:a8:20:13:03:85:7e:0f:4e:9d:51:a7:25: 62:20:4f:dc:58:fe:a6:40:a7:cb:03:b1:87:48:c2: 36:91:bf:56:b5:05:40:84:0a:57:d1:dc:ad:ae:a0: 9b:d6:b9:03:2d:9b:71:fe:c6:8c:bc:09:d4:97:ee: e7:03:93:1c:67:76:71:05:b8:42:a4:59:9c:ec:5d: 63:73:3c:a0:e5:33:d8:63:cc:6b:75:08:50:dd:ac: 0b:a1:c7:ac:52:0a:8f:53:f9:3d:43:e4:72:3f:0f: d5:0d:76:25:53:d3:12:10:8f:f3:ba:02:5c:b0:83: b4:4b:ea:59:a7:02:f6:57:db:ba:53:91:9e:08:44: 56:ac:92:aa:58:2b:1b:a6:93:04:fd:4e:f9:31:21: 81:60:ef:1f:d8:0f:03:85:86:da:6f:fd:64:98:aa: e7:65:ad:33:62:83:73:3f:89:5b:81:ce:27:87:bd: 17:3f:92:80:0f:47:8a:a2:70:b2:82:48:e0:c4:87: a0:b5:2e:ed:10:f4:5e:85:76:8e:7e:60:4a:ed:5f: b6:72:bd:93:d9:d8:35:4b:7c:e1:82:a9:71:1b:50: 85:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B7:E7:BC:7F:87:D2:F5:B0:D8:6F:E1:DE:DF:00:1F:E2:CF:39:57 X509v3 Authority Key Identifier: keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:82:87:92:37:a8:48:39:a1:27:f6:ff:2d:1c:d5:43:86:95: 15:8a:a3:95:e8:31:a0:0b:a3:10:0f:fe:d0:65:34:0d:83:47: a9:34:8e:1b:ba:0e:85:66:18:d0:7d:c5:5a:54:5e:e5:79:80: d9:5d:99:18:13:6f:f5:78:a5:fb:6b:13:ef:af:e7:aa:cf:8d: c8:13:1d:70:e0:ea:40:4e:cf:f0:08:7f:c0:8f:9e:2d:91:a1: 06:7c:d6:62:f6:23:0b:a8:18:45:66:55:aa:d1:6f:91:64:d4: 09:97:71:2b:24:2c:89:7e:1d:3d:25:a0:2e:4c:77:83:82:2f: b0:a1:a9:c9:26:12:5a:74:f5:df:95:5b:e8:e9:08:b1:ac:95: 0f:16:37:b0:23:30:29:29:2d:44:58:8d:84:5c:ce:c6:66:a1: ba:a0:57:6a:40:3e:55:0b:21:01:a8:55:7f:36:35:13:e0:23: 51:2d:32:dd:27:fe:c0:40:76:87:07:b6:0f:e0:e9:1f:27:11: ca:65:ce:69:ee:0b:eb:0b:be:59:46:7c:01:67:7e:3c:66:a2: be:c7:e5:d4:3b:25:6e:45:05:f3:ad:5d:23:98:fb:55:9e:17: 5b:94:d9:c0:11:4e:bf:79:f9:c7:2b:2c:7e:73:f6:c3:98:77: bd:ef:92:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSg5f5iU+Dsw2irg8u3/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx MDUwZWUwHhcNMjUxMjIyMDkwMDM5WhcNMjUxMjIzMDkwMDM5WjAzMTEwLwYDVQQD EygwNWI3ZTdiYzdmODdkMmY1YjBkODZmZTFkZWRmMDAxZmUyY2YzOTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqthDjrYFe+tqzlFN/U6x1J9jzYud LnSYrXpBPxUFBaGoIBMDhX4PTp1RpyViIE/cWP6mQKfLA7GHSMI2kb9WtQVAhApX 0dytrqCb1rkDLZtx/saMvAnUl+7nA5McZ3ZxBbhCpFmc7F1jczyg5TPYY8xrdQhQ 3awLocesUgqPU/k9Q+RyPw/VDXYlU9MSEI/zugJcsIO0S+pZpwL2V9u6U5GeCERW rJKqWCsbppME/U75MSGBYO8f2A8DhYbab/1kmKrnZa0zYoNzP4lbgc4nh70XP5KA D0eKonCygkjgxIegtS7tEPRehXaOfmBK7V+2cr2T2dg1S3zhgqlxG1CFOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAW357x/h9L1sNhv4d7fAB/izzlXMB8GA1UdIwQY MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt M2E1YzcxZjg2ODIxLzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYKHkjeo SDmhJ/b/LRzVQ4aVFYqjlegxoAujEA/+0GU0DYNHqTSOG7oOhWYY0H3FWlRe5XmA 2V2ZGBNv9Xil+2sT76/nqs+NyBMdcODqQE7P8Ah/wI+eLZGhBnzWYvYjC6gYRWZV qtFvkWTUCZdxKyQsiX4dPSWgLkx3g4IvsKGpySYSWnT135Vb6OkIsayVDxY3sCMw KSktRFiNhFzOxmahuqBXakA+VQshAahVfzY1E+AjUS0y3Sf+wEB2hwe2D+DpHycR ymXOae4L6wu+WUZ8AWd+PGaivsfl1DslbkUF861dI5j7VZ4XW5TZwBFOv3n5xyss fnP2w5h3ve+S+w== -----END CERTIFICATE-----Generated at Mon Dec 22 10:38:53 2025 by rpki-client