This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft File: d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft (raw, json) Hash identifier: dH9hthbqPHOFR7jdTM4snKjB9fTSErpz09WTRlLrLW0= Subject key identifier: 34:72:68:D3:B4:BC:DC:A2:E2:0B:9C:0E:A4:0F:5A:5B:84:BF:E7:D7 Authority key identifier: 77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F Certificate issuer: /CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Certificate serial: 019B3DFEB79B992025A18E174C959C8CCE93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 23:01:01 +0000 Manifest this update: Sat 20 Dec 2025 23:01:01 +0000 Manifest next update: Sun 21 Dec 2025 23:01:01 +0000 Files and hashes: 1: d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl (hash: iA1o/fSHgWrXW8gTw0Q2gM3hz7e34Aw/TZbccdde/8Y=) 2: xYbOIUhhi8f6Ezx2QKpd4kQNixI.roa (hash: sEUW5djd1NzJ3pooD+mv2egmXyQ8A1sExKT4CHNq2Vo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b7:9b:99:20:25:a1:8e:17:4c:95:9c:8c:ce:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77dbfb3d64eb10c782562a37855b0732bd18eb3f Validity Not Before: Dec 20 23:01:01 2025 GMT Not After : Dec 21 23:01:01 2025 GMT Subject: CN=347268d3b4bcdca2e20b9c0ea40f5a5b84bfe7d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:da:24:56:2b:be:ee:26:ed:79:49:1b:a5: ba:6f:15:78:1d:50:9a:1d:2a:a3:f9:8c:15:45:5c: bf:6b:66:d2:07:9b:0a:69:ee:e6:df:5e:c0:5d:57: 57:2a:a0:3e:01:64:d0:d0:1e:52:91:7c:18:fa:3e: bb:d8:39:ea:a0:c1:3a:82:c2:73:b6:44:79:c9:a6: 2f:b4:14:98:94:33:81:c2:d3:aa:1f:5c:ce:2a:11: 2f:db:bf:94:12:f1:96:65:33:71:53:df:a9:a1:d9: fa:76:d0:ac:5b:ba:a1:38:57:8a:2b:1e:0e:d6:19: f5:ec:0e:9f:19:29:ac:d5:8c:04:8a:28:0a:d9:8f: 5a:b7:aa:1a:6d:df:95:a4:56:f1:a3:70:2a:9e:1f: 21:ea:d7:99:ac:3d:71:f7:52:83:7e:5d:6f:55:f7: f2:fc:f3:64:6d:81:c1:b9:e4:06:d3:71:9b:4f:c8: 3e:15:ac:e5:d6:ed:38:50:e8:8d:37:fd:86:5e:7a: 46:8d:5a:68:e5:fa:72:f5:c6:6d:f0:84:c2:4d:9e: 4e:69:99:1f:ff:4d:20:72:2b:12:9a:70:dc:87:18: e5:de:03:81:61:95:6b:f6:40:d2:79:a3:99:2f:a9: f5:80:4d:63:a0:24:07:a3:09:a4:a0:8b:14:0a:29: 24:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:68:D3:B4:BC:DC:A2:E2:0B:9C:0E:A4:0F:5A:5B:84:BF:E7:D7 X509v3 Authority Key Identifier: keyid:77:DB:FB:3D:64:EB:10:C7:82:56:2A:37:85:5B:07:32:BD:18:EB:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9v7PWTrEMeCVio3hVsHMr0Y6z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9e6c48-4bdd-4e60-910a-54b41e4fc63b/1/d9v7PWTrEMeCVio3hVsHMr0Y6z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:32:be:f9:79:ad:99:7e:4a:6b:23:aa:4c:05:10:5c:17:33: 26:40:5a:8a:06:89:98:84:23:06:47:1b:c0:44:46:a5:02:28: 48:5b:01:6b:3e:fa:87:f1:89:00:16:d7:a4:bc:9f:5f:29:0f: 14:3e:a9:42:2f:42:5b:5d:85:e6:a1:41:40:ad:f2:4e:57:2c: 05:b8:50:dc:8f:52:b4:73:22:61:7f:7a:5e:a8:9c:d4:e3:ff: f2:a5:c7:91:b1:e3:8c:2a:e8:6e:d6:e0:d8:74:85:2b:32:28: 31:bc:ca:b8:10:43:ec:65:e5:8e:8e:af:7f:e4:5a:cd:6f:b2: 01:bc:1a:ad:53:26:73:84:1b:82:49:7c:52:3a:8f:95:f3:79: 14:e6:31:7b:37:02:31:9e:88:c8:f4:10:db:63:1c:60:6d:ea: a1:fc:e4:3d:f9:64:5c:ca:e9:61:c6:f8:4b:9c:e7:e6:52:17: 93:ce:ee:59:95:da:e8:d4:3a:29:85:cf:06:8e:57:31:b0:fa: f2:1e:9b:d6:4a:b9:f1:bf:cc:ba:6b:8a:d6:38:f9:ce:11:59: 53:19:7f:1b:b7:63:fe:8c:bb:04:89:0a:63:bf:66:eb:69:f1: d9:60:94:65:07:d9:d2:d2:31:4c:c8:b3:48:41:bd:aa:d8:4f: 8a:0e:e6:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rebmSAloY4XTJWcjM6TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZGJmYjNkNjRlYjEwYzc4MjU2MmEzNzg1NWIwNzMyYmQx OGViM2YwHhcNMjUxMjIwMjMwMTAxWhcNMjUxMjIxMjMwMTAxWjAzMTEwLwYDVQQD EygzNDcyNjhkM2I0YmNkY2EyZTIwYjljMGVhNDBmNWE1Yjg0YmZlN2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyXaJFYrvu4m7XlJG6W6bxV4HVCa HSqj+YwVRVy/a2bSB5sKae7m317AXVdXKqA+AWTQ0B5SkXwY+j672DnqoME6gsJz tkR5yaYvtBSYlDOBwtOqH1zOKhEv27+UEvGWZTNxU9+podn6dtCsW7qhOFeKKx4O 1hn17A6fGSms1YwEiigK2Y9at6oabd+VpFbxo3Aqnh8h6teZrD1x91KDfl1vVffy /PNkbYHBueQG03GbT8g+Fazl1u04UOiNN/2GXnpGjVpo5fpy9cZt8ITCTZ5OaZkf /00gcisSmnDchxjl3gOBYZVr9kDSeaOZL6n1gE1joCQHowmkoIsUCikkkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRyaNO0vNyi4gucDqQPWluEv+fXMB8GA1UdIwQY MBaAFHfb+z1k6xDHglYqN4VbBzK9GOs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEt NTRiNDFlNGZjNjNiLzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZTZjNDgtNGJkZC00ZTYwLTkxMGEtNTRiNDFlNGZjNjNi LzEvZDl2N1BXVHJFTWVDVmlvM2hWc0hNcjBZNno4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDK++Xmt mX5KayOqTAUQXBczJkBaigaJmIQjBkcbwERGpQIoSFsBaz76h/GJABbXpLyfXykP FD6pQi9CW12F5qFBQK3yTlcsBbhQ3I9StHMiYX96Xqic1OP/8qXHkbHjjCrobtbg 2HSFKzIoMbzKuBBD7GXljo6vf+RazW+yAbwarVMmc4Qbgkl8UjqPlfN5FOYxezcC MZ6IyPQQ22McYG3qofzkPflkXMrpYcb4S5zn5lIXk87uWZXa6NQ6KYXPBo5XMbD6 8h6b1kq58b/MumuK1jj5zhFZUxl/G7dj/oy7BIkKY79m62nx2WCUZQfZ0tIxTMiz SEG9qthPig7m0Q== -----END CERTIFICATE-----Generated at Sun Dec 21 05:02:09 2025 by rpki-client