This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json) Hash identifier: eLDUyd/LIdyCTcEH46qmN46MBluXfFNM5bhhe1gD8Vc= Subject key identifier: F8:63:36:3F:4D:59:38:C9:49:FC:D0:87:C7:0C:A0:7B:2F:64:91:6B Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Certificate serial: 019B416DB12DC14E189FD79B30484F76D9BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft Manifest number: 0906 Signing time: Sun 21 Dec 2025 15:01:06 +0000 Manifest this update: Sun 21 Dec 2025 15:01:06 +0000 Manifest next update: Mon 22 Dec 2025 15:01:06 +0000 Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: j7MJVjtFAloknwsgQjFzN/p+BG4kaG8Z9M4NqO2jWyI=) 2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=) 3: jPbAHMtRmOOxtXFxyDN1-qXJjZI.roa (hash: rubF/nUj1Sxv+4U25Wjdi1dZZsv1ydBfmLAqRQsECUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:b1:2d:c1:4e:18:9f:d7:9b:30:48:4f:76:d9:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Validity Not Before: Dec 21 15:01:06 2025 GMT Not After : Dec 22 15:01:06 2025 GMT Subject: CN=f863363f4d5938c949fcd087c70ca07b2f64916b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e6:af:0e:d5:2b:55:f7:97:0d:ae:d7:b2:8c: da:9d:26:73:fa:ed:80:d5:cc:e8:d8:55:d6:b6:36: cc:2a:57:5f:b7:8e:7d:97:7f:81:d0:f6:3d:20:c9: 12:77:87:6b:ac:d3:62:de:aa:24:4c:3f:1f:8a:5f: 74:b5:27:e9:0b:f3:fc:ef:ad:6a:99:61:a5:5c:49: f7:e3:1e:c2:cd:3d:6e:e0:6a:74:46:61:85:70:a7: 31:42:63:ae:e0:ea:48:5d:5a:4b:d6:04:a3:79:36: 5a:57:8c:f5:96:28:17:93:bf:71:d0:98:f5:41:ae: 6c:7f:b2:93:f7:27:47:8c:a5:55:b7:af:2c:86:e2: 2d:7c:f5:fb:5a:4b:0f:f6:54:87:fa:c8:df:3d:e2: 03:f0:09:49:ce:a5:fa:41:41:8e:63:69:86:1d:fd: 3b:c9:85:18:ec:b0:2a:b6:7c:9a:7a:f7:96:8d:2b: ce:5d:ce:7a:32:71:50:44:d7:03:35:b2:7b:cb:27: d3:54:42:51:df:31:fc:69:e8:26:ae:6d:96:ec:56: ff:1d:37:7d:e3:1e:38:3d:70:14:66:34:27:24:35: b1:24:c7:be:d4:ac:14:a1:0f:10:8b:af:cc:db:b9: 03:8e:fc:18:33:29:7d:0c:aa:64:fe:00:ca:82:4e: 32:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:63:36:3F:4D:59:38:C9:49:FC:D0:87:C7:0C:A0:7B:2F:64:91:6B X509v3 Authority Key Identifier: keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:44:71:8b:92:77:f5:fa:b7:f8:87:6f:c4:95:a6:37:3a:56: 2c:1a:49:dd:e6:81:da:82:41:7a:ae:b6:e7:d7:3b:7f:53:07: 11:b2:be:98:9f:5f:19:63:b8:5b:60:2d:dc:67:29:c1:46:f4: ad:a6:38:28:f0:bc:47:ed:e1:af:ce:ae:3c:8e:75:77:03:5a: 89:dc:2d:68:8d:32:81:c8:d7:3d:dc:96:44:f3:62:21:20:70: 69:0d:60:ee:a7:92:7d:a3:84:1c:7d:f9:37:db:18:7d:b7:78: 04:ff:25:ec:24:fd:68:3b:ea:b6:4a:df:80:91:a2:75:35:8e: b6:8b:16:96:16:5a:ca:33:6f:4f:01:9f:23:84:b5:00:ec:e1: 14:fd:64:59:af:35:6e:29:0e:51:d0:6c:40:11:26:3f:d8:42: 26:0a:5f:02:b9:86:d1:7e:a4:10:e9:46:8b:f4:6d:3c:6a:e4: 00:41:99:05:32:c3:b6:75:8e:fb:eb:17:65:75:86:a5:51:df: 11:1a:09:68:10:c4:2b:80:10:aa:2c:b8:9f:ed:62:78:08:20: 97:c1:09:b1:0d:8b:47:20:79:10:de:19:d7:18:c6:0d:59:6c: e4:5d:1f:ab:fe:d4:e4:ad:34:31:70:e4:6b:a1:45:a2:ab:de: f1:0f:18:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbbEtwU4Yn9ebMEhPdtm/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx MDUwZWUwHhcNMjUxMjIxMTUwMTA2WhcNMjUxMjIyMTUwMTA2WjAzMTEwLwYDVQQD EyhmODYzMzYzZjRkNTkzOGM5NDlmY2QwODdjNzBjYTA3YjJmNjQ5MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveavDtUrVfeXDa7XsozanSZz+u2A 1czo2FXWtjbMKldft459l3+B0PY9IMkSd4drrNNi3qokTD8fil90tSfpC/P8761q mWGlXEn34x7CzT1u4Gp0RmGFcKcxQmOu4OpIXVpL1gSjeTZaV4z1ligXk79x0Jj1 Qa5sf7KT9ydHjKVVt68shuItfPX7WksP9lSH+sjfPeID8AlJzqX6QUGOY2mGHf07 yYUY7LAqtnyaeveWjSvOXc56MnFQRNcDNbJ7yyfTVEJR3zH8aegmrm2W7Fb/HTd9 4x44PXAUZjQnJDWxJMe+1KwUoQ8Qi6/M27kDjvwYMyl9DKpk/gDKgk4yBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhjNj9NWTjJSfzQh8cMoHsvZJFrMB8GA1UdIwQY MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt M2E1YzcxZjg2ODIxLzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkRxi5J3 9fq3+IdvxJWmNzpWLBpJ3eaB2oJBeq6259c7f1MHEbK+mJ9fGWO4W2At3GcpwUb0 raY4KPC8R+3hr86uPI51dwNaidwtaI0ygcjXPdyWRPNiISBwaQ1g7qeSfaOEHH35 N9sYfbd4BP8l7CT9aDvqtkrfgJGidTWOtosWlhZayjNvTwGfI4S1AOzhFP1kWa81 bikOUdBsQBEmP9hCJgpfArmG0X6kEOlGi/RtPGrkAEGZBTLDtnWO++sXZXWGpVHf ERoJaBDEK4AQqiy4n+1ieAggl8EJsQ2LRyB5EN4Z1xjGDVls5F0fq/7U5K00MXDk a6FFoqve8Q8Y2w== -----END CERTIFICATE-----Generated at Sun Dec 21 18:37:47 2025 by rpki-client