This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft File: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft (raw, json) Hash identifier: LD838etO6BVMGf4W7VRXcDZR7uG2DgffKBH30zrPfeY= Subject key identifier: AA:D0:52:DB:9A:8A:42:98:9C:CF:34:F3:CC:10:18:BC:4D:8B:2C:68 Authority key identifier: F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D Certificate issuer: /CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Certificate serial: 019B462700569E1CEE96CF15CC0C3B574FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft Manifest number: 05F9 Signing time: Mon 22 Dec 2025 13:01:59 +0000 Manifest this update: Mon 22 Dec 2025 13:01:59 +0000 Manifest next update: Tue 23 Dec 2025 13:01:59 +0000 Files and hashes: 1: 9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl (hash: bfAzmwjse38HgtCnjf5yMjxjqxk35KmGM/N4mhuIovs=) 2: pcJxxqpyhZF6JL4G4VK7HBS4yYA.roa (hash: PZShrCQ10JtHGLNXwnmCPSpnucUc5Ex85jH4ClAc2jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:00:56:9e:1c:ee:96:cf:15:cc:0c:3b:57:4f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4dff8b1bd0724ba130f86b848e33caea8e9f11d Validity Not Before: Dec 22 13:01:59 2025 GMT Not After : Dec 23 13:01:59 2025 GMT Subject: CN=aad052db9a8a42989ccf34f3cc1018bc4d8b2c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ff:fe:4c:bb:48:d9:c9:1b:bb:d1:31:7c:d2: bc:44:6c:78:47:2c:9c:6b:d6:7d:a1:54:8e:28:d2: 1d:bd:81:7c:ac:b4:e3:c8:e0:10:3c:76:bb:2b:03: cd:4c:0a:4a:54:71:0a:98:aa:77:8c:4c:4a:f4:8a: aa:88:75:a6:ae:1f:03:5b:fb:d2:9e:de:2e:62:88: 28:da:02:8b:7e:73:e2:ee:c1:41:ee:92:17:a8:33: 45:9e:17:f4:14:b1:54:82:bc:59:f1:bc:60:da:05: c7:b5:25:32:17:3f:b5:80:64:93:ec:ce:42:ec:23: 7b:b9:b7:49:f3:9b:0c:83:fe:5c:24:a7:21:af:eb: 73:b9:d8:af:5a:68:f2:2b:d4:fa:10:e3:58:ce:40: dd:51:31:45:ec:ba:44:14:04:0b:54:44:d8:51:c1: 47:80:8b:7d:a3:3d:7a:0d:76:c8:ce:e8:27:f4:4f: dc:ea:ee:08:d1:21:b5:73:24:78:65:a7:e7:79:b3: 62:35:55:36:df:42:3b:4e:dc:53:54:80:56:5a:1d: 14:a6:14:71:ac:0e:a9:1d:bf:b1:47:2b:71:95:94: 90:96:5b:4b:a8:54:04:b1:b6:d6:75:d3:22:9b:7d: 91:13:84:14:d5:29:21:0a:a7:1b:e9:95:34:be:85: 4b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D0:52:DB:9A:8A:42:98:9C:CF:34:F3:CC:10:18:BC:4D:8B:2C:68 X509v3 Authority Key Identifier: keyid:F4:DF:F8:B1:BD:07:24:BA:13:0F:86:B8:48:E3:3C:AE:A8:E9:F1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9N_4sb0HJLoTD4a4SOM8rqjp8R0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/17272d-2234-42ce-b51b-74f6a2eae175/1/9N_4sb0HJLoTD4a4SOM8rqjp8R0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e5:20:26:0d:fa:7c:7a:14:b6:97:a3:1b:9c:d9:51:e2:20: ec:52:8b:03:54:31:22:f5:2e:61:78:0a:86:40:ce:01:77:8c: 24:07:01:8c:33:7a:a8:05:af:93:2c:a6:57:80:f8:28:a7:1b: 40:df:69:ee:2a:21:8a:7b:72:6d:5e:f2:3b:36:60:3d:7e:16: cf:fa:e3:66:1f:28:82:78:ec:87:a5:79:d1:14:7f:f8:8a:fc: 3c:fa:da:d8:3d:73:00:33:28:8b:87:dd:7c:41:37:cc:50:a1: e3:32:30:f6:1a:91:63:bd:a1:eb:3b:37:34:a5:86:35:e3:01: 6b:c6:5e:19:8c:fd:c9:1d:82:40:84:72:2a:41:ab:2f:4a:ae: 30:b2:df:73:1c:61:9a:8b:48:ea:6b:6c:fb:37:46:4f:e8:04: 45:b1:30:d8:b9:45:e2:25:81:8b:25:ff:d4:65:8d:a9:06:25: cf:80:16:cf:78:42:2e:57:57:81:a5:b8:f4:2b:b0:10:88:d3: 96:5f:1c:19:f9:79:3f:1e:16:3c:94:45:a9:e1:81:73:bf:be: 30:15:24:71:3e:b3:19:94:92:d4:56:84:95:2e:57:ac:c0:3a: f6:15:84:43:2d:2a:3c:5b:ca:f1:c6:6b:76:47:f6:16:10:1c: 3d:4c:e9:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJwBWnhzuls8VzAw7V0/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGZmOGIxYmQwNzI0YmExMzBmODZiODQ4ZTMzY2FlYThl OWYxMWQwHhcNMjUxMjIyMTMwMTU5WhcNMjUxMjIzMTMwMTU5WjAzMTEwLwYDVQQD EyhhYWQwNTJkYjlhOGE0Mjk4OWNjZjM0ZjNjYzEwMThiYzRkOGIyYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr//+TLtI2ckbu9ExfNK8RGx4Ryyc a9Z9oVSOKNIdvYF8rLTjyOAQPHa7KwPNTApKVHEKmKp3jExK9IqqiHWmrh8DW/vS nt4uYogo2gKLfnPi7sFB7pIXqDNFnhf0FLFUgrxZ8bxg2gXHtSUyFz+1gGST7M5C 7CN7ubdJ85sMg/5cJKchr+tzudivWmjyK9T6EONYzkDdUTFF7LpEFAQLVETYUcFH gIt9oz16DXbIzugn9E/c6u4I0SG1cyR4ZafnebNiNVU230I7TtxTVIBWWh0UphRx rA6pHb+xRytxlZSQlltLqFQEsbbWddMim32RE4QU1SkhCqcb6ZU0voVLTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrQUtuaikKYnM8088wQGLxNiyxoMB8GA1UdIwQY MBaAFPTf+LG9ByS6Ew+GuEjjPK6o6fEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWIt NzRmNmEyZWFlMTc1LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8xNzI3MmQtMjIzNC00MmNlLWI1MWItNzRmNmEyZWFlMTc1 LzEvOU5fNHNiMEhKTG9URDRhNFNPTThycWpwOFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+UgJg36 fHoUtpejG5zZUeIg7FKLA1QxIvUuYXgKhkDOAXeMJAcBjDN6qAWvkyymV4D4KKcb QN9p7iohintybV7yOzZgPX4Wz/rjZh8ognjsh6V50RR/+Ir8PPra2D1zADMoi4fd fEE3zFCh4zIw9hqRY72h6zs3NKWGNeMBa8ZeGYz9yR2CQIRyKkGrL0quMLLfcxxh motI6mts+zdGT+gERbEw2LlF4iWBiyX/1GWNqQYlz4AWz3hCLldXgaW49CuwEIjT ll8cGfl5Px4WPJRFqeGBc7++MBUkcT6zGZSS1FaElS5XrMA69hWEQy0qPFvK8cZr dkf2FhAcPUzppw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:41:43 2025 by rpki-client