This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft File: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json) Hash identifier: hQutHKUph/os9D8aEt2aMssrWu/U7DMWwik8U+VF+IE= Subject key identifier: 41:86:2F:9F:1D:F0:62:B5:07:D7:61:16:C6:2D:C7:B1:EE:58:1A:E7 Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 Certificate issuer: /CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Certificate serial: 019B3C7F738E93EEFB614FC7BA6ED1352772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft Manifest number: 12DD Signing time: Sat 20 Dec 2025 16:02:24 +0000 Manifest this update: Sat 20 Dec 2025 16:02:24 +0000 Manifest next update: Sun 21 Dec 2025 16:02:24 +0000 Files and hashes: 1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: PgBRuoZ1TYAms77xEYmIv0ZM5W6i7xtJArn7scRlAeA=) 2: ftXv30Hlz-_EICPh46zy3bfImAc.roa (hash: 3S31teaHx8GBvsqpB7SE49UNoJHeSlzxpM1K7KnfX/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:73:8e:93:ee:fb:61:4f:c7:ba:6e:d1:35:27:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4 Validity Not Before: Dec 20 16:02:24 2025 GMT Not After : Dec 21 16:02:24 2025 GMT Subject: CN=41862f9f1df062b507d76116c62dc7b1ee581ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:3e:28:f3:7e:b4:51:bb:c7:5e:52:a4:00: 2e:8f:47:9d:dc:fe:a0:5c:f7:16:5f:b7:ab:12:e4: 58:6c:11:f0:7c:37:af:a1:9d:7f:b8:0a:31:70:ef: c4:05:ae:1a:fd:c0:b5:12:82:d7:8b:ce:6c:02:15: 48:74:28:ab:59:dd:78:5f:31:3e:96:a9:1d:45:29: df:33:63:8e:2b:32:2f:2a:77:f9:b3:b9:00:86:4f: c7:a1:00:c6:6e:41:b6:83:ee:b0:d6:25:a0:83:1d: 3b:9b:3f:71:3a:82:c1:62:52:31:e7:02:f9:6d:95: 57:e1:5b:f2:0c:65:fb:62:76:7f:d6:01:28:77:fe: 45:5c:ea:1a:5b:a1:23:22:48:71:e6:3f:ef:e3:1c: 4d:6c:0c:eb:6c:22:fe:52:b2:55:e1:0b:0c:31:77: 1f:ec:7f:6f:f7:56:cc:87:e0:34:9d:28:d9:fc:06: ac:84:9c:fa:b9:c3:8b:97:cd:4c:73:23:85:3f:f9: 3b:7c:dc:5b:3b:70:81:97:16:c7:f6:42:2f:b0:63: fd:cd:ee:11:e7:9d:21:bf:a6:db:af:f4:78:01:79: 6f:95:ce:88:80:e8:d7:5d:c3:17:e3:e0:6a:56:43: c8:43:3d:d9:8d:78:d3:a0:60:86:3f:a5:d9:b0:00: 16:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:86:2F:9F:1D:F0:62:B5:07:D7:61:16:C6:2D:C7:B1:EE:58:1A:E7 X509v3 Authority Key Identifier: keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:7e:03:fe:53:ab:05:e5:2f:91:53:dd:22:d7:9d:d9:de:a5: ec:49:1f:42:c8:58:19:d4:13:2c:3e:2c:87:28:0f:fe:c8:ae: 94:31:47:76:39:61:3d:87:e5:17:c7:ed:f1:ae:5f:6b:f5:5d: 91:05:52:e4:68:ee:0e:2b:71:79:6c:f2:1b:91:b1:ad:03:0c: 29:f2:64:31:3e:73:7a:16:31:d5:83:44:57:90:8f:f2:aa:63: d7:e3:a2:42:6b:68:7a:10:fd:45:7f:86:f2:44:d6:cb:dd:2c: 2e:ba:9d:df:3e:e4:f6:1d:54:d9:86:c3:f4:ce:60:b1:0d:66: 21:17:b4:d5:7f:c6:a1:ae:49:85:9a:96:98:71:b8:76:eb:90: a4:23:aa:b5:b4:46:fc:b1:f6:92:94:a5:5d:1f:e5:93:92:c7: 51:da:72:31:94:29:f3:2d:e4:05:09:6f:93:49:2a:df:01:6b: 84:2a:e0:31:ea:29:3c:09:91:3d:5e:b5:82:02:56:52:07:5a: 8d:4f:fc:31:d9:01:d4:ca:82:d5:4e:8c:45:0d:46:49:55:9c: 9a:81:6a:71:6b:bd:2b:87:0a:2e:2c:24:d0:4b:9a:09:f4:26: da:56:ea:75:fa:ff:cf:6a:21:1a:06:64:0e:7c:53:2d:e0:7a: 7a:63:69:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f3OOk+77YU/Hum7RNSdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDEzNDg2ODg2YjU2MjMxZGVjNTczZmFkNGY4YWIzMmNi ZjkyYTQwHhcNMjUxMjIwMTYwMjI0WhcNMjUxMjIxMTYwMjI0WjAzMTEwLwYDVQQD Eyg0MTg2MmY5ZjFkZjA2MmI1MDdkNzYxMTZjNjJkYzdiMWVlNTgxYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmQ+KPN+tFG7x15SpAAuj0ed3P6g XPcWX7erEuRYbBHwfDevoZ1/uAoxcO/EBa4a/cC1EoLXi85sAhVIdCirWd14XzE+ lqkdRSnfM2OOKzIvKnf5s7kAhk/HoQDGbkG2g+6w1iWggx07mz9xOoLBYlIx5wL5 bZVX4VvyDGX7YnZ/1gEod/5FXOoaW6EjIkhx5j/v4xxNbAzrbCL+UrJV4QsMMXcf 7H9v91bMh+A0nSjZ/AashJz6ucOLl81McyOFP/k7fNxbO3CBlxbH9kIvsGP9ze4R 550hv6bbr/R4AXlvlc6IgOjXXcMX4+BqVkPIQz3ZjXjToGCGP6XZsAAWDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGGL58d8GK1B9dhFsYtx7HuWBrnMB8GA1UdIwQY MBaAFPZBNIaIa1YjHexXP61PirMsv5KkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAt OTllZWY2OTA1ZDgzLzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8yYjU4N2YtMzVlNC00YmJjLWJjZDAtOTllZWY2OTA1ZDgz LzEvOWtFMGhvaHJWaU1kN0ZjX3JVLUtzeXlfa3FRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASX4D/lOr BeUvkVPdIted2d6l7EkfQshYGdQTLD4shygP/siulDFHdjlhPYflF8ft8a5fa/Vd kQVS5GjuDitxeWzyG5GxrQMMKfJkMT5zehYx1YNEV5CP8qpj1+OiQmtoehD9RX+G 8kTWy90sLrqd3z7k9h1U2YbD9M5gsQ1mIRe01X/Goa5JhZqWmHG4duuQpCOqtbRG /LH2kpSlXR/lk5LHUdpyMZQp8y3kBQlvk0kq3wFrhCrgMeopPAmRPV61ggJWUgda jU/8MdkB1MqC1U6MRQ1GSVWcmoFqcWu9K4cKLiwk0EuaCfQm2lbqdfr/z2ohGgZk DnxTLeB6emNp7w== -----END CERTIFICATE-----Generated at Sat Dec 20 22:16:10 2025 by rpki-client