This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft File: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft (raw, json) Hash identifier: Jx9VRcb+AQ9cMNZI/F2jeWYWE4Y749ZzZCriJK8oEDU= Subject key identifier: 7A:AB:F5:74:20:EB:51:7C:04:46:A9:7B:66:87:74:C2:CA:3C:CB:34 Authority key identifier: F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54 Certificate issuer: /CN=f709528b8828b4d826355e2c52237d642071cd54 Certificate serial: 019B3DC78B5B9AFC2AF80D2F3799BEE324FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft Manifest number: 076D Signing time: Sat 20 Dec 2025 22:00:45 +0000 Manifest this update: Sat 20 Dec 2025 22:00:45 +0000 Manifest next update: Sun 21 Dec 2025 22:00:45 +0000 Files and hashes: 1: 9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl (hash: RAhhdr8SF/1JLq0xNLgHVDKsMf/wuDIjm8iU5rtub9c=) 2: iKhGCzGlkdUH-YeR40es_shy-iQ.roa (hash: UctZx1wGvAAr9xLOczqP8p1as4JR/y4gz7WSAX7sYrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:8b:5b:9a:fc:2a:f8:0d:2f:37:99:be:e3:24:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f709528b8828b4d826355e2c52237d642071cd54 Validity Not Before: Dec 20 22:00:45 2025 GMT Not After : Dec 21 22:00:45 2025 GMT Subject: CN=7aabf57420eb517c0446a97b668774c2ca3ccb34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:af:29:d7:61:00:e7:bd:7d:9e:81:c3:f8: 5b:64:96:a1:d0:e5:f8:5f:9b:05:d3:2a:f3:95:a0: 70:47:93:4c:52:e2:41:86:a2:c8:21:91:17:a2:6b: 4d:0e:ea:cf:68:e7:1a:30:88:58:32:ad:ea:d4:7a: ea:27:53:21:b4:f9:3f:a9:84:76:7b:f9:80:76:2f: 87:27:81:cd:e1:57:b3:1b:06:4d:af:4a:64:32:cb: 44:c7:e2:d0:e0:27:b8:02:a3:89:30:2a:45:d9:f6: 9b:c2:49:62:a8:86:4c:9f:cc:e7:3f:ea:02:3d:e5: cd:ca:91:1d:2e:93:de:6c:0f:21:b3:16:07:49:a1: 2f:8c:b6:57:13:6a:8c:f4:57:3a:08:b8:80:c5:68: a9:ed:50:fe:cb:1f:96:a5:a9:63:f9:63:0f:47:e1: 58:c3:31:fb:fa:31:ed:9b:59:6a:72:b2:ae:96:aa: 55:30:06:20:41:d5:54:50:0d:62:95:88:2f:a3:63: 8c:20:93:2e:1c:99:30:40:12:06:4a:8c:82:f6:2f: da:d3:44:85:3a:15:20:b1:80:fb:a6:93:6a:c7:e7: d6:38:98:00:23:8e:7e:00:d2:ec:ef:bd:a1:83:e8: 46:af:50:15:dc:cb:b2:fe:24:3b:22:8b:be:d4:15: 43:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AB:F5:74:20:EB:51:7C:04:46:A9:7B:66:87:74:C2:CA:3C:CB:34 X509v3 Authority Key Identifier: keyid:F7:09:52:8B:88:28:B4:D8:26:35:5E:2C:52:23:7D:64:20:71:CD:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/2d9d80-b8bf-465a-a291-9f74facae8f1/1/9wlSi4gotNgmNV4sUiN9ZCBxzVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6c:1b:93:06:60:68:da:77:ad:27:f6:0a:87:fa:c0:98:e2: ed:98:f2:69:f4:9c:e3:36:35:74:e0:ff:da:f9:af:c5:10:b7: 4a:c7:e2:f6:73:df:e2:bd:a1:3c:76:90:99:e2:14:c6:aa:1c: 4f:50:14:f8:34:ee:37:65:c5:9f:d3:d9:5f:4a:a6:89:8a:33: 3e:7d:0d:c5:fb:68:b5:3d:d9:dd:9b:fb:f4:0d:ae:46:bf:ab: bc:01:ff:59:76:17:c6:a7:61:a7:54:ec:e5:1f:04:ae:f7:b6: d6:d0:23:44:21:cc:68:52:40:8e:94:64:90:52:9c:03:76:95: 1b:61:de:03:14:67:b5:64:43:41:32:60:4a:c0:5e:c3:22:83: d9:d3:77:5e:eb:f9:53:28:5f:c4:74:77:e5:78:3f:04:dd:0e: be:d3:74:a3:90:1d:10:b6:23:6c:2c:12:40:ce:20:01:5f:aa: cf:8f:5f:ff:33:0a:1a:ef:1f:28:cc:8d:b2:cc:20:9a:3c:41: 21:89:17:29:0f:86:00:08:01:f2:98:ed:39:95:80:2b:75:2c: 4a:69:6d:52:cc:d2:34:ec:54:bd:d3:d3:30:00:51:d9:9b:a0: 68:7f:84:1e:99:cd:98:a1:24:5a:19:0c:c5:92:8f:c4:a6:46: b9:c9:36:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x4tbmvwq+A0vN5m+4yT6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MDk1MjhiODgyOGI0ZDgyNjM1NWUyYzUyMjM3ZDY0MjA3 MWNkNTQwHhcNMjUxMjIwMjIwMDQ1WhcNMjUxMjIxMjIwMDQ1WjAzMTEwLwYDVQQD Eyg3YWFiZjU3NDIwZWI1MTdjMDQ0NmE5N2I2Njg3NzRjMmNhM2NjYjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG6vKddhAOe9fZ6Bw/hbZJah0OX4 X5sF0yrzlaBwR5NMUuJBhqLIIZEXomtNDurPaOcaMIhYMq3q1HrqJ1MhtPk/qYR2 e/mAdi+HJ4HN4VezGwZNr0pkMstEx+LQ4Ce4AqOJMCpF2fabwkliqIZMn8znP+oC PeXNypEdLpPebA8hsxYHSaEvjLZXE2qM9Fc6CLiAxWip7VD+yx+Wpalj+WMPR+FY wzH7+jHtm1lqcrKulqpVMAYgQdVUUA1ilYgvo2OMIJMuHJkwQBIGSoyC9i/a00SF OhUgsYD7ppNqx+fWOJgAI45+ANLs772hg+hGr1AV3Muy/iQ7Iou+1BVD0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqr9XQg61F8BEape2aHdMLKPMs0MB8GA1UdIwQY MBaAFPcJUouIKLTYJjVeLFIjfWQgcc1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEt OWY3NGZhY2FlOGYxLzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8yZDlkODAtYjhiZi00NjVhLWEyOTEtOWY3NGZhY2FlOGYx LzEvOXdsU2k0Z290TmdtTlY0c1VpTjlaQ0J4elZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWwbkwZg aNp3rSf2Cof6wJji7ZjyafSc4zY1dOD/2vmvxRC3Ssfi9nPf4r2hPHaQmeIUxqoc T1AU+DTuN2XFn9PZX0qmiYozPn0NxftotT3Z3Zv79A2uRr+rvAH/WXYXxqdhp1Ts 5R8Erve21tAjRCHMaFJAjpRkkFKcA3aVG2HeAxRntWRDQTJgSsBewyKD2dN3Xuv5 UyhfxHR35Xg/BN0OvtN0o5AdELYjbCwSQM4gAV+qz49f/zMKGu8fKMyNsswgmjxB IYkXKQ+GAAgB8pjtOZWAK3UsSmltUszSNOxUvdPTMABR2ZugaH+EHpnNmKEkWhkM xZKPxKZGuck2Ag== -----END CERTIFICATE-----Generated at Sun Dec 21 06:44:42 2025 by rpki-client