This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft File: 9WQDvByHTu8JuKE0QVWrw_BXWxU.mft (raw, json) Hash identifier: 7bplVBUli3qcExOFrpji5xjUCiJwoR+zUfyD7pY0sz4= Subject key identifier: 92:D9:58:EC:B7:DA:30:A3:4F:13:64:8A:D7:65:F0:D6:49:35:40:9A Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Certificate serial: 019B3BD90CB2FC43F1F4FE2A97B9955899AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft Manifest number: 10FC Signing time: Sat 20 Dec 2025 13:00:38 +0000 Manifest this update: Sat 20 Dec 2025 13:00:38 +0000 Manifest next update: Sun 21 Dec 2025 13:00:38 +0000 Files and hashes: 1: 9WQDvByHTu8JuKE0QVWrw_BXWxU.crl (hash: 3OxUw8naSwsHNGCgn37yfCTKE3Anp4nEltxUo+bs72Y=) 2: UpxBSWugieKNTh9apeAkjKNDuVI.roa (hash: bk8A6HGGurxjqbD4+xEVgCvr+MLGdlWXb+9IzJcqkAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:0c:b2:fc:43:f1:f4:fe:2a:97:b9:95:58:99:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Validity Not Before: Dec 20 13:00:38 2025 GMT Not After : Dec 21 13:00:38 2025 GMT Subject: CN=92d958ecb7da30a34f13648ad765f0d64935409a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:f8:4f:3d:f8:e3:68:42:46:5e:60:95:d4: 13:85:73:0c:b2:ba:97:eb:71:b6:07:e5:8e:8c:28: 46:3f:48:70:04:cc:c1:3d:f9:a6:28:24:ab:1e:65: 98:c9:10:f8:67:02:e9:60:2c:ce:ed:66:b0:46:a9: c2:88:a3:3b:90:6a:50:24:3f:61:6d:26:16:ca:c4: 88:d5:82:e1:8f:3e:21:21:52:2a:9c:ee:99:ed:3f: c5:f5:b8:7f:17:be:d8:05:01:42:50:0f:15:db:b9: 4e:44:4a:b2:66:f5:ae:6c:8b:a3:56:81:42:90:bc: 08:ad:40:31:56:40:e1:d3:f1:ef:6b:1b:be:93:9b: b7:dd:44:bb:7e:19:cc:7c:25:6c:50:52:a9:62:61: d5:f6:5b:fc:9c:4d:d3:dc:91:16:96:a9:ce:49:45: 5d:74:dc:04:0d:7d:ad:77:7a:3c:6a:0d:8b:aa:9f: e2:86:04:e5:9a:11:9d:ee:91:87:fd:25:91:50:6d: 03:47:81:b2:bb:fb:66:7e:4c:4b:8c:91:dd:34:f5: cd:54:8b:3f:a4:1f:e2:fd:f0:62:84:9a:d3:88:46: 18:12:9c:7c:f7:e0:cf:ec:78:f8:ff:25:08:06:6a: a7:ff:60:a8:5b:17:ad:0e:31:b2:87:7b:03:57:91: bc:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:D9:58:EC:B7:DA:30:A3:4F:13:64:8A:D7:65:F0:D6:49:35:40:9A X509v3 Authority Key Identifier: keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:98:22:14:2f:52:08:7a:01:71:ac:d2:19:67:16:6d:56:cb: d5:db:5a:5d:ba:78:c9:01:9b:12:b3:96:10:bd:bf:54:3a:46: 52:3a:54:02:dc:bb:25:d4:d2:d8:82:7a:db:61:4f:c5:dc:64: 89:4f:ca:47:6a:ae:cf:f5:2e:27:06:06:f9:50:3e:9f:80:41: a0:90:7a:11:dd:7f:95:6f:ab:cd:6d:86:10:ac:17:6a:b7:dd: ec:4c:90:19:c6:d1:d3:c1:a9:9c:f2:c6:8a:51:bf:ae:16:58: ff:c4:8c:67:bf:4f:cc:dd:24:5c:13:0a:72:ea:40:fd:b1:28: 51:27:0e:9e:cf:43:b4:c5:bf:44:f0:b1:fb:db:83:dc:95:b1: 68:86:91:f8:33:a7:05:ea:a1:fa:da:f1:7c:a0:23:fc:4b:60: 27:0e:73:83:9f:e8:1d:ec:78:ba:71:ef:2b:6f:62:c5:ca:28: dc:95:9b:6b:da:29:c8:14:5f:8c:b8:46:98:40:69:b8:03:6f: a8:65:ed:3c:93:2e:0f:98:17:ae:18:75:fd:23:9d:e6:bd:1f: 8e:7b:cb:4c:d9:82:af:42:bd:ea:80:a8:8f:0e:a8:ce:98:75: 46:b2:aa:c0:34:00:66:fa:df:74:55:e9:2f:f0:5c:a4:7e:c9: 4c:83:f1:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Qyy/EPx9P4ql7mVWJmrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1 NzViMTUwHhcNMjUxMjIwMTMwMDM4WhcNMjUxMjIxMTMwMDM4WjAzMTEwLwYDVQQD Eyg5MmQ5NThlY2I3ZGEzMGEzNGYxMzY0OGFkNzY1ZjBkNjQ5MzU0MDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzX4Tz3442hCRl5gldQThXMMsrqX 63G2B+WOjChGP0hwBMzBPfmmKCSrHmWYyRD4ZwLpYCzO7WawRqnCiKM7kGpQJD9h bSYWysSI1YLhjz4hIVIqnO6Z7T/F9bh/F77YBQFCUA8V27lOREqyZvWubIujVoFC kLwIrUAxVkDh0/Hvaxu+k5u33US7fhnMfCVsUFKpYmHV9lv8nE3T3JEWlqnOSUVd dNwEDX2td3o8ag2Lqp/ihgTlmhGd7pGH/SWRUG0DR4Gyu/tmfkxLjJHdNPXNVIs/ pB/i/fBihJrTiEYYEpx89+DP7Hj4/yUIBmqn/2CoWxetDjGyh3sDV5G8ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLZWOy32jCjTxNkitdl8NZJNUCaMB8GA1UdIwQY MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct ZmFiODVlZTU3MDJhLzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpgiFC9S CHoBcazSGWcWbVbL1dtaXbp4yQGbErOWEL2/VDpGUjpUAty7JdTS2IJ622FPxdxk iU/KR2quz/UuJwYG+VA+n4BBoJB6Ed1/lW+rzW2GEKwXarfd7EyQGcbR08GpnPLG ilG/rhZY/8SMZ79PzN0kXBMKcupA/bEoUScOns9DtMW/RPCx+9uD3JWxaIaR+DOn Beqh+trxfKAj/EtgJw5zg5/oHex4unHvK29ixcoo3JWba9opyBRfjLhGmEBpuANv qGXtPJMuD5gXrhh1/SOd5r0fjnvLTNmCr0K96oCojw6ozph1RrKqwDQAZvrfdFXp L/BcpH7JTIPxWA== -----END CERTIFICATE-----Generated at Sat Dec 20 20:04:10 2025 by rpki-client