This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: nbFBkvsEPF7S7LpKqBXD1zq3JdEXfzuNasPAQSymCY8= Subject key identifier: A8:EF:B4:04:64:D3:71:83:E6:05:F6:5D:39:59:3A:45:7C:52:63:54 Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019B3DC7A7519CF789EDEBDC7EC4276FF786 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 0DA9 Signing time: Sat 20 Dec 2025 22:00:53 +0000 Manifest this update: Sat 20 Dec 2025 22:00:53 +0000 Manifest next update: Sun 21 Dec 2025 22:00:53 +0000 Files and hashes: 1: 2fQddCIl-7Oq1WuhVFDb_ItwFWs.roa (hash: G5bUTFThyurFxXPOBBEBFBWKjBkZ0p5sb4xbB9qr44M=) 2: 37QCkG1k9gzLrRMVOTELOapS-4Y.roa (hash: fObIS1yLlqyANULO1cGplwcB5m0pXnjdZmigUly+6NA=) 3: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: PpMG4SF38/m5CMvEgLxTWFE3VFIN2tbQETbACcahAIg=) 4: C8rZpiwRRKp7HiBYnxrXRCtzNP4.roa (hash: /a2qXNrKqG5G3jKSkvjhWWJd/4eBrgaawytg7M/VZPQ=) 5: LSwSqqfM6NE3bwsbhZVRM0BePVo.roa (hash: QYxJg9ZEhl4RnY/Twn9fuIOL/2nBIyTko4sjPdP5IhA=) 6: SyqNMF-ydxJR2kxngWZW5-SrEy0.roa (hash: KeocIUb7cPGt5yIgR1YWAUH1gGZjpJ9norLt8H3zU6Q=) 7: gAIi2RzKXjXCtYGsVRw03pRZYeU.roa (hash: PvQsJF0P/z+mLUrW2+GtvSyLdhymARBFgfCdxNsU3JE=) 8: hkqOX4mECokeZ3ChLO-NkzoKVG0.roa (hash: jDSI0Vi3uJHnivxkTcLJyUGbXo6jl9OF+5YD1t9wHog=) 9: xEaq7kolhQn1OmIod6QQM1Gthtk.roa (hash: IC+2lUW0/0ySDq3Q6puBeGjrJpCDJAXfXz5IauHoRHE=) 10: yZE684PU1B3lT-aKA30arKwyTEI.roa (hash: isFNdgWP0HVp5O76X23OI/gh9YCy0xYVcwqK0QPMZ60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:a7:51:9c:f7:89:ed:eb:dc:7e:c4:27:6f:f7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Dec 20 22:00:53 2025 GMT Not After : Dec 21 22:00:53 2025 GMT Subject: CN=a8efb40464d37183e605f65d39593a457c526354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:21:55:1b:42:46:4c:da:c2:f9:c5:fd:1e:ef: e7:9d:a8:2b:7c:c0:3e:dc:41:e7:01:af:82:de:f9: 2e:da:45:04:16:a9:dc:e0:ad:f6:39:3f:34:d2:81: 4f:77:05:1a:c1:30:0f:44:90:cb:51:5b:37:f2:10: d9:a6:8e:86:db:43:b6:d3:af:6c:01:95:20:27:8e: 4e:8d:8b:a8:46:30:f5:58:8b:5b:2e:c4:41:5d:4d: ed:80:7f:2f:25:42:5a:b8:24:72:eb:1a:63:e5:a9: d3:8c:cb:df:f5:8c:59:c7:1c:96:c6:6b:dd:e5:04: a8:63:d4:80:04:18:67:78:9b:07:3c:02:ad:4b:87: 6e:52:f6:43:c5:c3:37:82:1f:5f:b0:86:69:93:d4: 26:3d:5b:de:0f:30:d0:ed:bb:c9:72:dd:95:40:5c: b0:59:6f:39:79:86:7e:39:fe:05:e1:b0:b4:48:1a: da:bf:8d:39:27:86:a2:33:7d:2f:fd:7a:a8:cf:22: 23:66:df:af:c2:0e:21:f6:60:31:5e:d3:c8:11:57: 0a:06:b7:9f:24:68:6d:63:fd:df:92:6e:b2:4a:38: 80:38:51:ce:d0:09:ea:01:99:6e:3a:57:ff:4e:99: a9:fc:47:5d:2c:31:0c:8e:e4:21:26:f4:33:fc:ef: 08:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EF:B4:04:64:D3:71:83:E6:05:F6:5D:39:59:3A:45:7C:52:63:54 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d1:f5:4b:70:7b:ba:8a:c5:61:0e:a8:e6:3f:fc:b0:3b:8a: c4:fe:f7:17:a7:34:93:5b:6a:75:15:13:c9:f8:50:93:37:81: 7c:86:33:13:e4:2b:7d:2d:03:00:0b:ff:80:d3:73:81:e6:7c: 60:d1:45:87:da:a1:9a:5c:26:d3:5d:59:20:ca:d9:33:d3:0d: 7f:ef:92:63:8e:14:14:a2:0d:62:0a:65:8e:ca:40:28:9b:fd: b0:bb:16:dd:d8:51:37:cf:ea:08:47:48:d8:fe:a2:7c:07:db: 40:21:a9:90:87:5e:f3:1a:73:04:30:82:21:60:d4:f2:47:3d: d9:33:5c:f1:17:32:9a:cb:d9:74:94:eb:a7:3f:1f:fc:5f:01: 56:e9:98:28:91:4d:32:30:9c:f6:53:ed:42:5c:0d:1a:18:32: 65:17:a2:1a:1c:95:91:8a:d3:28:f7:5a:98:bd:6d:0f:c4:03: 26:7b:dc:ca:1e:be:3d:83:87:84:41:33:a5:9f:c2:f5:38:bf: 19:dc:dd:a5:74:03:22:c0:3c:a2:07:8e:73:f6:c2:fc:dc:66: 5d:78:06:94:bf:da:8d:7d:c2:4e:6b:80:c5:8c:fc:21:5d:e1: c7:ae:8b:2f:58:e5:a5:9c:86:ca:fc:8f:27:51:f5:5b:3a:83: 59:08:ab:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x6dRnPeJ7evcfsQnb/eGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjUxMjIwMjIwMDUzWhcNMjUxMjIxMjIwMDUzWjAzMTEwLwYDVQQD EyhhOGVmYjQwNDY0ZDM3MTgzZTYwNWY2NWQzOTU5M2E0NTdjNTI2MzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SFVG0JGTNrC+cX9Hu/nnagrfMA+ 3EHnAa+C3vku2kUEFqnc4K32OT800oFPdwUawTAPRJDLUVs38hDZpo6G20O2069s AZUgJ45OjYuoRjD1WItbLsRBXU3tgH8vJUJauCRy6xpj5anTjMvf9YxZxxyWxmvd 5QSoY9SABBhneJsHPAKtS4duUvZDxcM3gh9fsIZpk9QmPVveDzDQ7bvJct2VQFyw WW85eYZ+Of4F4bC0SBrav405J4aiM30v/XqozyIjZt+vwg4h9mAxXtPIEVcKBref JGhtY/3fkm6ySjiAOFHO0AnqAZluOlf/Tpmp/EddLDEMjuQhJvQz/O8IHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjvtARk03GD5gX2XTlZOkV8UmNUMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9H1S3B7 uorFYQ6o5j/8sDuKxP73F6c0k1tqdRUTyfhQkzeBfIYzE+QrfS0DAAv/gNNzgeZ8 YNFFh9qhmlwm011ZIMrZM9MNf++SY44UFKINYgpljspAKJv9sLsW3dhRN8/qCEdI 2P6ifAfbQCGpkIde8xpzBDCCIWDU8kc92TNc8RcymsvZdJTrpz8f/F8BVumYKJFN MjCc9lPtQlwNGhgyZReiGhyVkYrTKPdamL1tD8QDJnvcyh6+PYOHhEEzpZ/C9Ti/ GdzdpXQDIsA8ogeOc/bC/NxmXXgGlL/ajX3CTmuAxYz8IV3hx66LL1jlpZyGyvyP J1H1WzqDWQir/w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:10:27 2025 by rpki-client