This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft File: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft (raw, json) Hash identifier: 92gMvBWedl+UpeFWojDGYEJeV26svuEH6Cpf9ywgKGk= Subject key identifier: EE:FE:17:98:D8:07:BF:AE:BB:65:F2:E4:87:28:87:9D:0B:01:C4:90 Authority key identifier: F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 Certificate issuer: /CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Certificate serial: 019B4CCD377E74C99B043CB05987F38B3E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft Manifest number: 10F4 Signing time: Tue 23 Dec 2025 20:01:15 +0000 Manifest this update: Tue 23 Dec 2025 20:01:15 +0000 Manifest next update: Wed 24 Dec 2025 20:01:15 +0000 Files and hashes: 1: 9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl (hash: dDesbXW6nxbRgngd745UrhwDjxDdgcGg+yNruwByugQ=) 2: JKDoGMCZzjSndX7Ct7p3CxyKJR4.roa (hash: bo2ZyeRjzsKv0IsXJYurWXlAoWDOMikTk02MIFIPMnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:37:7e:74:c9:9b:04:3c:b0:59:87:f3:8b:3e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4db83adc76baff605700cca48cc4f6f8c529f66 Validity Not Before: Dec 23 20:01:15 2025 GMT Not After : Dec 24 20:01:15 2025 GMT Subject: CN=eefe1798d807bfaebb65f2e48728879d0b01c490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a7:d6:04:ba:c4:79:11:1b:27:fb:bc:2e:de: b3:4d:20:fd:08:f9:2a:0a:7e:58:66:b9:98:2e:6c: ed:92:a5:33:5d:95:ea:35:4a:eb:17:d3:aa:67:5c: a7:bb:25:53:1c:8f:12:e9:fd:46:12:ab:10:26:6a: e4:24:91:cd:bc:a9:03:14:25:2d:68:ab:fe:5b:af: 04:f4:e9:d1:47:48:16:64:5d:64:d6:1f:23:80:05: 65:be:1a:c0:ee:ab:41:87:d7:d8:b3:4f:b2:71:22: dc:f4:21:59:e4:cc:ee:e3:8d:4b:d0:8c:d9:d1:b8: de:38:43:66:60:21:db:86:b7:dc:83:ed:17:23:7e: 4f:31:d4:86:fa:c0:5c:cf:44:96:e3:97:af:c1:7a: 54:45:e0:25:cd:3f:79:75:e6:14:f5:69:5d:e5:00: 43:c1:44:f2:80:fb:70:f6:c4:42:b3:87:cc:c2:e5: b7:0b:8f:83:87:4c:1b:c4:2c:11:b1:84:90:55:3d: d1:e1:2b:fb:00:4a:4d:5b:65:0d:30:f7:1f:8c:7e: b3:3c:14:42:eb:44:c6:db:cc:89:a7:98:70:c3:90: 9d:81:65:0c:9f:2a:55:37:ab:a4:3a:2c:40:fd:07: bb:4c:b1:84:69:1e:01:67:cf:0b:c4:1c:25:5e:20: 77:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:17:98:D8:07:BF:AE:BB:65:F2:E4:87:28:87:9D:0B:01:C4:90 X509v3 Authority Key Identifier: keyid:F4:DB:83:AD:C7:6B:AF:F6:05:70:0C:CA:48:CC:4F:6F:8C:52:9F:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/501ea8-1839-47fe-aa44-1b417d5e1fbd/1/9NuDrcdrr_YFcAzKSMxPb4xSn2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:f6:33:99:27:67:27:71:6b:d8:0c:a8:25:96:81:b0:eb:8f: d2:18:4d:0c:b5:b0:89:1d:22:f3:9a:7c:87:d6:1d:5e:ff:bf: 57:ff:c3:4c:2a:d0:66:6d:a3:bd:16:76:ff:b1:5a:0d:73:30: 08:6a:34:71:2e:cb:ea:c7:21:eb:f6:e9:b5:b4:67:28:23:1e: 35:11:6c:f1:eb:9d:41:45:91:1b:83:66:28:fc:71:9a:1a:d8: f8:0e:0b:5e:49:be:fc:2a:5b:14:db:a3:3a:b9:6d:7d:f3:0e: 7b:f4:a7:e7:d9:bd:7f:a4:36:90:54:fb:26:15:37:d7:15:3e: 15:d5:05:2b:f2:af:1a:27:4c:d2:70:b6:33:8f:22:76:4e:c0: 59:cc:a8:5a:27:23:a2:37:3d:a1:81:30:78:92:13:dc:3f:40: dd:6b:71:a5:7c:50:48:92:13:25:ec:4f:20:10:46:35:ed:8f: e8:9d:47:8f:7c:d4:6b:f1:ab:a3:55:72:a6:0a:c3:74:c2:1d: 3d:ca:0d:a1:ff:b3:7e:25:1b:b3:1f:3d:ca:64:01:eb:3f:e4: 2e:9e:83:25:67:36:9e:cb:55:58:51:eb:4f:43:dc:a1:58:75: 66:0c:dc:e8:df:20:1c:f9:dd:5e:f9:27:ed:57:ef:cc:67:3f: fb:9d:fc:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzTd+dMmbBDywWYfziz49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZGI4M2FkYzc2YmFmZjYwNTcwMGNjYTQ4Y2M0ZjZmOGM1 MjlmNjYwHhcNMjUxMjIzMjAwMTE1WhcNMjUxMjI0MjAwMTE1WjAzMTEwLwYDVQQD EyhlZWZlMTc5OGQ4MDdiZmFlYmI2NWYyZTQ4NzI4ODc5ZDBiMDFjNDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qfWBLrEeREbJ/u8Lt6zTSD9CPkq Cn5YZrmYLmztkqUzXZXqNUrrF9OqZ1ynuyVTHI8S6f1GEqsQJmrkJJHNvKkDFCUt aKv+W68E9OnRR0gWZF1k1h8jgAVlvhrA7qtBh9fYs0+ycSLc9CFZ5Mzu441L0IzZ 0bjeOENmYCHbhrfcg+0XI35PMdSG+sBcz0SW45evwXpUReAlzT95deYU9Wld5QBD wUTygPtw9sRCs4fMwuW3C4+Dh0wbxCwRsYSQVT3R4Sv7AEpNW2UNMPcfjH6zPBRC 60TG28yJp5hww5CdgWUMnypVN6ukOixA/Qe7TLGEaR4BZ88LxBwlXiB3SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7+F5jYB7+uu2Xy5Icoh50LAcSQMB8GA1UdIwQY MBaAFPTbg63Ha6/2BXAMykjMT2+MUp9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQt MWI0MTdkNWUxZmJkLzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi81MDFlYTgtMTgzOS00N2ZlLWFhNDQtMWI0MTdkNWUxZmJk LzEvOU51RHJjZHJyX1lGY0F6S1NNeFBiNHhTbjJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/YzmSdn J3Fr2AyoJZaBsOuP0hhNDLWwiR0i85p8h9YdXv+/V//DTCrQZm2jvRZ2/7FaDXMw CGo0cS7L6sch6/bptbRnKCMeNRFs8eudQUWRG4NmKPxxmhrY+A4LXkm+/CpbFNuj OrltffMOe/Sn59m9f6Q2kFT7JhU31xU+FdUFK/KvGidM0nC2M48idk7AWcyoWicj ojc9oYEweJIT3D9A3WtxpXxQSJITJexPIBBGNe2P6J1Hj3zUa/Gro1VypgrDdMId PcoNof+zfiUbsx89ymQB6z/kLp6DJWc2nstVWFHrT0PcoVh1Zgzc6N8gHPndXvkn 7VfvzGc/+538pw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:33:23 2025 by rpki-client