This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft File: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft (raw, json) Hash identifier: VzhId9zJrxSw/UqrWGyv7MGX+gOKHv57hBKY51RwpvM= Subject key identifier: 1A:4C:1F:99:92:9B:6D:0D:60:14:FD:D8:ED:BC:7B:A0:83:6A:E7:40 Authority key identifier: F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4 Certificate issuer: /CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4 Certificate serial: 019B45138345EE62FF8BACACDE1DDFE305DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft Manifest number: 075D Signing time: Mon 22 Dec 2025 08:01:05 +0000 Manifest this update: Mon 22 Dec 2025 08:01:05 +0000 Manifest next update: Tue 23 Dec 2025 08:01:05 +0000 Files and hashes: 1: 9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl (hash: IrzUO/CVlhZI/XNQeRFTzDXaEfXyXiez5gBE4cKakcs=) 2: GaOIxHYrGt_x1xNOwfVe1mM1uls.roa (hash: 6h4qg1f7k4UwgHPBRYv76SUwfsVkd9pZo7L1FeBQMpI=) 3: S3-UGk16fgBKghN_7jlpmFhtevk.roa (hash: svmOkbDlORnE+JdlDBeTol63DbR+qbg9OLTtqku/fJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:83:45:ee:62:ff:8b:ac:ac:de:1d:df:e3:05:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f72e9c9146ed7bc58c85cdab6eb858e42286eef4 Validity Not Before: Dec 22 08:01:05 2025 GMT Not After : Dec 23 08:01:05 2025 GMT Subject: CN=1a4c1f99929b6d0d6014fdd8edbc7ba0836ae740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:70:33:37:db:be:1d:0e:27:ed:74:86:c6:fc: d1:ea:96:7a:db:a2:38:6b:0d:01:3f:29:a3:b7:d7: b4:b2:aa:1c:57:c4:d9:ff:75:57:48:3b:92:71:01: 53:a4:88:6e:32:bb:d6:4c:67:ab:b1:7c:56:e5:9b: a7:58:4c:52:0b:43:58:f2:9a:fe:4b:fa:a4:7e:40: c4:e0:8e:3f:26:b0:b1:a3:90:42:6b:f2:90:a6:e4: e5:fb:1e:83:90:51:a6:12:52:8a:8c:b1:69:3c:dc: b0:d7:96:97:6c:f9:0c:ce:c2:d9:fd:19:55:3b:89: 52:9c:49:36:66:71:94:f7:41:f7:6e:46:79:14:db: 96:7e:a6:36:88:1f:f4:09:d7:d7:9a:ad:d4:bf:d5: cf:1f:32:d5:57:2c:d6:da:26:a8:ba:7a:34:b6:ae: 2a:8d:9a:db:3d:09:59:3b:3c:3a:a5:41:fe:4c:1b: b4:47:15:d3:5b:b4:39:c3:f2:e8:2b:7c:f5:4f:bb: b6:39:d3:78:2a:61:9e:92:aa:25:cb:15:8d:4e:c1: 72:61:af:93:16:03:61:c7:01:00:de:1d:15:fa:43: 7b:20:fd:57:ff:cf:17:a5:e3:f4:96:99:c4:04:63: aa:50:02:c5:2a:4b:5b:6d:c5:a7:25:55:32:9d:25: 0e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4C:1F:99:92:9B:6D:0D:60:14:FD:D8:ED:BC:7B:A0:83:6A:E7:40 X509v3 Authority Key Identifier: keyid:F7:2E:9C:91:46:ED:7B:C5:8C:85:CD:AB:6E:B8:58:E4:22:86:EE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9y6ckUbte8WMhc2rbrhY5CKG7vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/5efef4-6299-47cc-a9ca-d516f0e1487b/1/9y6ckUbte8WMhc2rbrhY5CKG7vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:c8:61:5e:10:13:58:72:f9:bd:f6:66:75:27:86:ff:43:ab: ac:3e:c9:44:b8:44:d5:4d:69:42:20:c4:b2:a8:ca:8f:c5:2e: 0d:be:47:8a:62:91:fe:e9:19:33:36:77:c1:59:fc:8d:5f:ac: fa:ab:dd:7d:e7:ba:75:0c:e5:61:b9:70:de:21:81:27:c3:a1: b8:13:9e:12:32:40:2d:d5:96:75:85:a0:5c:aa:25:2c:c4:21: bc:f3:a2:c5:fe:9c:da:af:22:a5:74:57:f5:bd:47:36:d6:e7: da:e3:8a:ac:87:c0:84:28:40:07:9c:85:0f:00:12:65:0d:12: bc:9b:a6:3b:54:16:6e:a0:ad:36:12:30:c9:51:47:67:60:a6: 53:b3:31:6f:72:88:4f:43:1e:20:36:4b:9b:0f:67:30:be:7c: 12:ac:38:1d:08:3e:aa:d3:cb:89:99:7a:2f:ed:3b:34:25:3b: 75:fb:82:1d:fb:ce:3c:97:3c:5c:0f:b3:74:e6:d8:55:4e:08: ab:58:fb:48:9b:65:ec:5c:ce:37:42:14:f1:bb:f1:9e:e5:14: 8d:3f:3c:88:fb:b8:81:e4:34:a7:94:3e:6b:dc:00:a3:be:94: b7:6d:b0:d4:cd:b8:9d:c1:1f:b8:97:f8:b8:28:08:25:73:9d: 55:cb:35:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE4NF7mL/i6ys3h3f4wXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MmU5YzkxNDZlZDdiYzU4Yzg1Y2RhYjZlYjg1OGU0MjI4 NmVlZjQwHhcNMjUxMjIyMDgwMTA1WhcNMjUxMjIzMDgwMTA1WjAzMTEwLwYDVQQD EygxYTRjMWY5OTkyOWI2ZDBkNjAxNGZkZDhlZGJjN2JhMDgzNmFlNzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HAzN9u+HQ4n7XSGxvzR6pZ626I4 aw0BPymjt9e0sqocV8TZ/3VXSDuScQFTpIhuMrvWTGersXxW5ZunWExSC0NY8pr+ S/qkfkDE4I4/JrCxo5BCa/KQpuTl+x6DkFGmElKKjLFpPNyw15aXbPkMzsLZ/RlV O4lSnEk2ZnGU90H3bkZ5FNuWfqY2iB/0CdfXmq3Uv9XPHzLVVyzW2iaouno0tq4q jZrbPQlZOzw6pUH+TBu0RxXTW7Q5w/LoK3z1T7u2OdN4KmGekqolyxWNTsFyYa+T FgNhxwEA3h0V+kN7IP1X/88XpeP0lpnEBGOqUALFKktbbcWnJVUynSUOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpMH5mSm20NYBT92O28e6CDaudAMB8GA1UdIwQY MBaAFPcunJFG7XvFjIXNq264WOQihu70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2Et ZDUxNmYwZTE0ODdiLzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC81ZWZlZjQtNjI5OS00N2NjLWE5Y2EtZDUxNmYwZTE0ODdi LzEvOXk2Y2tVYnRlOFdNaGMycmJyaFk1Q0tHN3ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMhhXhAT WHL5vfZmdSeG/0OrrD7JRLhE1U1pQiDEsqjKj8UuDb5HimKR/ukZMzZ3wVn8jV+s +qvdfee6dQzlYblw3iGBJ8OhuBOeEjJALdWWdYWgXKolLMQhvPOixf6c2q8ipXRX 9b1HNtbn2uOKrIfAhChAB5yFDwASZQ0SvJumO1QWbqCtNhIwyVFHZ2CmU7Mxb3KI T0MeIDZLmw9nML58Eqw4HQg+qtPLiZl6L+07NCU7dfuCHfvOPJc8XA+zdObYVU4I q1j7SJtl7FzON0IU8bvxnuUUjT88iPu4geQ0p5Q+a9wAo76Ut22w1M24ncEfuJf4 uCgIJXOdVcs1kQ== -----END CERTIFICATE-----Generated at Mon Dec 22 14:29:25 2025 by rpki-client