This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft File: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft (raw, json) Hash identifier: ZMBuSRw3aE7O8i0v8qU8/V5Dynm1gGTwLd250R0hbxk= Subject key identifier: 5F:6D:39:13:D4:4B:63:52:F0:32:66:CF:D9:FE:C4:82:18:D5:C6:03 Authority key identifier: F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91 Certificate issuer: /CN=f68e231d5551876e15afc6637eab7fca80088391 Certificate serial: 019B4EBBBACDDD42ADD50851B24AA6FCC325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft Manifest number: 1607 Signing time: Wed 24 Dec 2025 05:01:24 +0000 Manifest this update: Wed 24 Dec 2025 05:01:24 +0000 Manifest next update: Thu 25 Dec 2025 05:01:24 +0000 Files and hashes: 1: 9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl (hash: dAKWZqMNWEsPxsPj7re8FCmMLZ/jz4P4R12r/6BTTg0=) 2: Yj1ZixuYkYbRfQKF1z7pgksE4us.roa (hash: YrNKpDljk4B4Ef1MFB8qPNVZiTFjojjO2XPhpM/1UPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:ba:cd:dd:42:ad:d5:08:51:b2:4a:a6:fc:c3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68e231d5551876e15afc6637eab7fca80088391 Validity Not Before: Dec 24 05:01:24 2025 GMT Not After : Dec 25 05:01:24 2025 GMT Subject: CN=5f6d3913d44b6352f03266cfd9fec48218d5c603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cd:ad:bc:a4:86:dc:b8:8a:db:fb:e4:60:a3: ab:7b:40:a5:84:0c:32:68:11:a4:60:d1:03:b8:f6: e4:4a:2f:cd:30:a8:5f:5a:84:08:49:3b:6f:9b:55: f8:57:82:28:1a:95:2b:86:76:a9:b7:5e:53:ba:eb: 9a:4d:cf:73:1c:e4:dd:2a:ff:20:28:e8:1f:70:4a: d4:14:4d:44:1e:ec:8d:79:2c:1b:4a:99:b5:fe:4e: 18:a6:33:06:a6:06:4f:13:3d:c9:e7:62:e7:0f:b7: 8c:e4:e3:e2:60:e8:e0:97:39:f2:71:bf:db:63:61: 7c:78:29:ef:60:c0:b2:98:ef:c9:46:7e:f7:63:f0: 36:3f:94:25:95:ba:8e:15:c8:95:49:6d:4f:5b:b5: 3d:f3:be:08:28:fa:9d:30:4a:fa:56:db:e7:69:a9: 1f:be:dd:08:12:2c:6e:2e:82:bd:a8:81:ed:15:91: 61:fe:7f:9f:0a:b4:67:1a:97:27:71:29:2b:42:da: c7:b5:bd:33:65:e8:39:c1:db:60:2b:f7:66:06:1e: 89:f0:c3:48:52:01:85:cc:7d:69:4f:91:50:3d:ec: 54:56:1f:b4:bc:21:45:33:2e:fc:1a:fa:f7:13:7b: 77:fa:06:1f:4e:c5:93:fd:10:f2:60:3d:c1:00:b4: 2b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6D:39:13:D4:4B:63:52:F0:32:66:CF:D9:FE:C4:82:18:D5:C6:03 X509v3 Authority Key Identifier: keyid:F6:8E:23:1D:55:51:87:6E:15:AF:C6:63:7E:AB:7F:CA:80:08:83:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/3439d8-7ea3-4e32-9352-ba1ed9474ba2/1/9o4jHVVRh24Vr8Zjfqt_yoAIg5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:77:b0:99:e4:88:32:aa:d1:1a:d1:0b:8e:b6:b3:39:4a:da: 65:3d:1c:ff:31:14:c8:6d:2b:aa:08:f8:e3:62:f3:c4:6a:9e: 45:8b:cd:fd:ab:49:61:3a:c1:03:97:a3:85:e7:4c:6d:af:13: 82:25:90:98:f9:52:e0:42:60:9f:40:66:d8:52:fd:5c:52:bd: bb:2e:3d:16:6a:f6:e7:0b:67:d6:b9:ad:56:dc:58:23:5a:a0: 69:85:3d:fb:50:15:05:3f:4b:28:f8:1f:ca:15:31:b4:fd:d2: fd:c3:2d:89:e9:f6:18:d8:5d:e5:cc:9e:4b:31:eb:13:b8:27: da:06:e2:7a:bf:96:54:37:f1:b5:9e:c7:ba:80:ce:f7:23:e4: 59:51:fb:dc:4b:e5:be:47:83:01:6c:b2:9c:a8:76:6a:b7:ba: b3:3d:b9:2f:66:00:1e:45:2e:9b:cf:30:73:25:c1:e2:65:72: 5d:c0:14:5f:d1:a8:19:b3:36:4a:98:05:82:df:24:2e:90:1c: ed:f7:42:68:6b:84:15:30:68:52:43:a6:a7:44:85:b6:7a:18: 21:3b:9f:84:4d:88:28:ee:89:88:76:34:2c:8d:f9:db:41:03: c8:ef:e1:9b:ba:bc:2e:36:99:59:a1:63:66:12:a5:2c:dc:4f: 8f:28:f3:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu7rN3UKt1QhRskqm/MMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OGUyMzFkNTU1MTg3NmUxNWFmYzY2MzdlYWI3ZmNhODAw ODgzOTEwHhcNMjUxMjI0MDUwMTI0WhcNMjUxMjI1MDUwMTI0WjAzMTEwLwYDVQQD Eyg1ZjZkMzkxM2Q0NGI2MzUyZjAzMjY2Y2ZkOWZlYzQ4MjE4ZDVjNjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c2tvKSG3LiK2/vkYKOre0ClhAwy aBGkYNEDuPbkSi/NMKhfWoQISTtvm1X4V4IoGpUrhnapt15TuuuaTc9zHOTdKv8g KOgfcErUFE1EHuyNeSwbSpm1/k4YpjMGpgZPEz3J52LnD7eM5OPiYOjglznycb/b Y2F8eCnvYMCymO/JRn73Y/A2P5QllbqOFciVSW1PW7U9874IKPqdMEr6Vtvnaakf vt0IEixuLoK9qIHtFZFh/n+fCrRnGpcncSkrQtrHtb0zZeg5wdtgK/dmBh6J8MNI UgGFzH1pT5FQPexUVh+0vCFFMy78Gvr3E3t3+gYfTsWT/RDyYD3BALQrZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9tORPUS2NS8DJmz9n+xIIY1cYDMB8GA1UdIwQY MBaAFPaOIx1VUYduFa/GY36rf8qACIORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTIt YmExZWQ5NDc0YmEyLzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8zNDM5ZDgtN2VhMy00ZTMyLTkzNTItYmExZWQ5NDc0YmEy LzEvOW80akhWVlJoMjRWcjhaamZxdF95b0FJZzVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnewmeSI MqrRGtELjrazOUraZT0c/zEUyG0rqgj442LzxGqeRYvN/atJYTrBA5ejhedMba8T giWQmPlS4EJgn0Bm2FL9XFK9uy49Fmr25wtn1rmtVtxYI1qgaYU9+1AVBT9LKPgf yhUxtP3S/cMtien2GNhd5cyeSzHrE7gn2gbier+WVDfxtZ7HuoDO9yPkWVH73Evl vkeDAWyynKh2are6sz25L2YAHkUum88wcyXB4mVyXcAUX9GoGbM2SpgFgt8kLpAc 7fdCaGuEFTBoUkOmp0SFtnoYITufhE2IKO6JiHY0LI3520EDyO/hm7q8LjaZWaFj ZhKlLNxPjyjzjQ== -----END CERTIFICATE-----Generated at Wed Dec 24 14:55:40 2025 by rpki-client