This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft File: 9ghG8hxWqFE9McFV3RmRl6P_x8A.mft (raw, json) Hash identifier: i8JPb4gkQ/0jw6qY+clZ9Ff7Nj20M0e1G33aBfLwyXk= Subject key identifier: 41:3B:D4:6A:1F:BA:01:26:9E:14:BC:4E:28:F4:12:4E:D7:E6:DA:5D Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Certificate serial: 019B35327ECA1F64BB7056B5429BD62D93A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft Manifest number: 1791 Signing time: Fri 19 Dec 2025 06:01:00 +0000 Manifest this update: Fri 19 Dec 2025 06:01:00 +0000 Manifest next update: Sat 20 Dec 2025 06:01:00 +0000 Files and hashes: 1: 094z1xKhD-fPImqcpq7FnS51L8I.roa (hash: QqZNaYuOPYVYXA7nnxP+E5LxcHL1hX5seeAAPJtn8rE=) 2: 5yZgLWjoqGWoHcvTB_31BRphqMg.roa (hash: mnmZiTADtsjplvnjg1DlrvtKGrz4jtZ2ePTtEqRNIiA=) 3: 98--VYzYQvmDhok_sN0s894_jjs.roa (hash: JLE5UUw9XB1alxl+jXRMMgX9sI3zDXH5yt96C0J6SNk=) 4: 9ghG8hxWqFE9McFV3RmRl6P_x8A.crl (hash: dqktLR8yMG/2lrxIW7hTn2mJwNkhTTycsIn4jnQ4gfI=) 5: S1r5hqr0H_eG0pYFEYET1oPJyrU.roa (hash: AL2mRYe3QSk0eHBtZxwwGn0QyvUm0r2qBAzoPe+jc5Y=) 6: tDQppW28D00yJpPN76o5br9V4uc.roa (hash: QeZm1TlTQEFmZaDRdvYJJMWOrlvPWUXQvrMdVOrCdWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:7e:ca:1f:64:bb:70:56:b5:42:9b:d6:2d:93:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0 Validity Not Before: Dec 19 06:01:00 2025 GMT Not After : Dec 20 06:01:00 2025 GMT Subject: CN=413bd46a1fba01269e14bc4e28f4124ed7e6da5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:8e:c3:6b:39:92:6f:cf:8d:86:c2:a9:0c: 0f:16:73:be:f7:21:3c:4d:43:2b:93:c1:35:f5:d4: 61:67:27:00:a9:32:cf:4a:30:cd:8c:29:8b:90:78: 0b:f9:83:68:2a:74:62:2c:1c:f1:d6:17:e9:de:20: 67:83:6b:21:02:9f:3f:f1:5a:36:ce:51:cf:ba:af: df:c5:a5:de:83:f8:90:c5:3a:e0:f0:f1:d2:79:bc: d5:f7:d6:6f:d7:73:53:83:41:fe:64:4b:93:d9:e0: 75:0d:64:2a:3b:77:12:75:a6:1c:60:09:32:d8:26: bd:94:57:66:73:b0:57:d9:7b:27:29:07:d3:5f:ce: 96:aa:36:b1:60:f0:b6:9a:dc:fa:3e:ea:7a:cc:bf: 56:85:39:c7:37:49:48:e2:f1:7a:eb:a4:09:14:21: 8b:33:09:38:86:44:21:03:ea:8e:d0:c3:52:76:48: 3d:97:58:ab:44:8a:35:f2:24:2e:28:d0:71:3e:5b: a5:40:6a:0d:7e:17:04:72:70:5c:70:26:24:a0:9c: 2b:55:c3:2d:7f:a4:50:df:c3:96:c8:33:2f:09:5f: b0:a6:6b:3a:f2:c6:f0:92:f2:29:fd:4f:5a:ee:21: a3:8a:aa:c4:2c:8c:05:28:1a:56:87:b5:1e:af:05: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:3B:D4:6A:1F:BA:01:26:9E:14:BC:4E:28:F4:12:4E:D7:E6:DA:5D X509v3 Authority Key Identifier: keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:81:38:1b:89:e4:03:89:85:9b:8a:f2:77:e5:11:49:99:4d: 97:0c:3c:bd:97:dc:0e:29:82:a3:ec:ad:6a:11:9b:ea:e4:91: 6f:31:9e:09:a4:a3:d7:7f:8b:1b:4b:5e:ec:e4:76:cd:c0:2a: 33:e5:12:ec:71:07:e3:49:a0:6f:7f:ab:8e:24:80:ae:ae:17: 84:88:13:41:14:be:55:ea:49:ff:4a:9b:77:35:e5:03:f1:c4: 63:a3:c5:b5:a9:cf:35:b9:22:a7:15:27:6d:a5:c9:e5:23:ac: d8:bd:76:f4:c4:b2:c3:50:c3:60:dd:5d:3d:a9:06:bf:8b:8b: 86:c2:a6:07:d2:a7:2f:e0:8f:1c:07:7d:20:ce:b2:90:f7:a4: 96:9b:86:8a:de:bc:48:1d:3c:35:35:ef:cf:11:94:6e:1a:26: 58:5b:c5:6d:27:66:22:52:25:2a:64:3a:d7:ac:79:bd:7b:be: cf:ad:e6:b9:4b:4a:d5:1e:1e:bb:fd:d6:b0:16:8f:cc:e7:7e: 41:ad:13:34:cf:89:3a:fc:f5:47:10:32:f4:a2:19:81:88:da: 3a:95:3d:8d:24:08:38:f8:47:9f:2b:71:d4:5e:9f:92:12:55: c3:b1:3c:d0:a3:3b:9a:d1:36:de:a1:50:84:80:70:e4:af:1b: fb:46:c2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mn7KH2S7cFa1QpvWLZOnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDg0NmYyMWM1NmE4NTEzZDMxYzE1NWRkMTk5MTk3YTNm ZmM3YzAwHhcNMjUxMjE5MDYwMTAwWhcNMjUxMjIwMDYwMTAwWjAzMTEwLwYDVQQD Eyg0MTNiZDQ2YTFmYmEwMTI2OWUxNGJjNGUyOGY0MTI0ZWQ3ZTZkYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbaOw2s5km/PjYbCqQwPFnO+9yE8 TUMrk8E19dRhZycAqTLPSjDNjCmLkHgL+YNoKnRiLBzx1hfp3iBng2shAp8/8Vo2 zlHPuq/fxaXeg/iQxTrg8PHSebzV99Zv13NTg0H+ZEuT2eB1DWQqO3cSdaYcYAky 2Ca9lFdmc7BX2XsnKQfTX86WqjaxYPC2mtz6Pup6zL9WhTnHN0lI4vF666QJFCGL Mwk4hkQhA+qO0MNSdkg9l1irRIo18iQuKNBxPlulQGoNfhcEcnBccCYkoJwrVcMt f6RQ38OWyDMvCV+wpms68sbwkvIp/U9a7iGjiqrELIwFKBpWh7UerwWlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEE71GofugEmnhS8Tij0Ek7X5tpdMB8GA1UdIwQY MBaAFPYIRvIcVqhRPTHBVd0ZkZej/8fAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYt YTZkNDVlZjdkMjI3LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hMGY0YmUtNGMwZC00ZGY1LTkwYzYtYTZkNDVlZjdkMjI3 LzEvOWdoRzhoeFdxRkU5TWNGVjNSbVJsNlBfeDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIE4G4nk A4mFm4ryd+URSZlNlww8vZfcDimCo+ytahGb6uSRbzGeCaSj13+LG0te7OR2zcAq M+US7HEH40mgb3+rjiSArq4XhIgTQRS+VepJ/0qbdzXlA/HEY6PFtanPNbkipxUn baXJ5SOs2L129MSyw1DDYN1dPakGv4uLhsKmB9KnL+CPHAd9IM6ykPeklpuGit68 SB08NTXvzxGUbhomWFvFbSdmIlIlKmQ616x5vXu+z63muUtK1R4eu/3WsBaPzOd+ Qa0TNM+JOvz1RxAy9KIZgYjaOpU9jSQIOPhHnytx1F6fkhJVw7E80KM7mtE23qFQ hIBw5K8b+0bCXQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:56:48 2025 by rpki-client