This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft File: 9WsgSbOpqm8jaObutL_NFnlTpek.mft (raw, json) Hash identifier: nGJBwqExFGKuWp+iiN6iiLb/xDB0XBsgYlsNzCQ8jgA= Subject key identifier: FC:7A:40:F3:4F:81:BB:74:78:10:82:36:23:28:D8:86:EB:95:DF:18 Authority key identifier: F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 Certificate issuer: /CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Certificate serial: 019B3CEC652B39797370CD2B89A96A879B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 18:01:23 +0000 Manifest this update: Sat 20 Dec 2025 18:01:23 +0000 Manifest next update: Sun 21 Dec 2025 18:01:23 +0000 Files and hashes: 1: 1-Rgkx9BsEfikK5eKOgyodd6h4gY.roa (hash: CT7Rp9+Jw7zWR3AQw89KWuUkHEx7Im+IKlsSdQ20Nq8=) 2: 9WsgSbOpqm8jaObutL_NFnlTpek.crl (hash: mszTw061LpjQZiHRMqtHSI+L404y7NhbKK/OmYzxUOE=) 3: JOUMaPpHTLs0B4CR5_freWlNIso.roa (hash: lQdFlW5I+9SlK8gtAYGtz3jqfCmzmwfXYR3qnMqPbFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:65:2b:39:79:73:70:cd:2b:89:a9:6a:87:9b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56b2049b3a9aa6f2368e6eeb4bfcd167953a5e9 Validity Not Before: Dec 20 18:01:23 2025 GMT Not After : Dec 21 18:01:23 2025 GMT Subject: CN=fc7a40f34f81bb74781082362328d886eb95df18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:99:f4:97:3e:36:04:dc:b0:34:9e:a5:8e: b9:c3:17:eb:65:ae:d8:3e:3c:76:54:16:90:7f:6a: 55:5a:de:d4:c1:32:1e:94:16:83:f1:3f:38:21:5d: 28:5c:23:9e:5c:38:18:aa:bc:ce:2e:6c:b5:f3:8e: 4c:3d:24:ab:7c:b5:3f:b1:6a:2f:9c:92:4e:0d:86: 71:c4:91:79:d8:7b:e5:7a:ed:af:06:43:bc:8c:09: a6:e7:0d:b1:c1:18:ce:27:4e:bd:88:b9:ff:49:dd: 2e:55:b3:6f:65:5b:b2:99:7f:b6:56:00:76:d4:ab: 06:12:2d:65:ce:d1:2f:ac:e7:07:64:b7:d3:c3:b4: 56:81:c6:e2:f7:61:de:df:37:f2:25:8d:51:28:99: 22:77:85:fc:db:1d:5f:66:9a:c7:a3:dc:9b:d0:22: 11:12:08:be:db:fb:79:8a:25:6c:33:69:dc:17:71: 23:da:e5:8c:c9:82:77:91:89:25:b5:39:b0:98:9e: 82:23:1b:df:79:1b:24:fc:21:0f:1f:10:44:0c:34: 5a:e4:82:8a:23:bd:9c:91:4c:ce:34:f3:bb:38:ee: 2c:69:4e:49:b1:52:19:b3:a5:0a:25:da:69:de:36: bd:2d:79:b3:72:d1:a3:12:99:ac:ab:3c:fe:e7:a6: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7A:40:F3:4F:81:BB:74:78:10:82:36:23:28:D8:86:EB:95:DF:18 X509v3 Authority Key Identifier: keyid:F5:6B:20:49:B3:A9:AA:6F:23:68:E6:EE:B4:BF:CD:16:79:53:A5:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WsgSbOpqm8jaObutL_NFnlTpek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d1a71c-b8f8-412d-9da1-2401b74206f3/1/9WsgSbOpqm8jaObutL_NFnlTpek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:9f:54:df:e1:73:58:bc:91:df:9b:0d:d0:4e:a7:7f:50:c2: 3a:63:18:dd:e9:cc:46:bc:fc:a9:70:20:20:55:9c:e5:f1:07: b7:06:d3:96:ad:6e:74:3d:a8:57:6b:63:44:49:17:97:2a:c3: c5:be:6c:bb:55:eb:79:15:fd:16:5f:d7:cc:3b:35:21:a0:ff: 03:de:da:ba:20:2e:e2:2d:a0:3c:fe:f0:fa:a2:a1:48:4c:fe: 16:93:6b:0e:2b:6d:e0:9e:3e:72:c6:ab:33:ac:53:2c:4c:a9: d5:96:2a:e0:4a:65:6d:82:46:65:96:5b:fe:15:bf:3d:32:33: f1:2d:83:fe:31:d9:3b:dd:44:7b:59:e0:8c:ec:5d:90:67:d5: b5:f9:ce:c3:e1:5b:7e:56:7f:30:98:7c:26:a7:13:25:7d:43: 46:0b:4a:c5:09:a4:84:11:56:ca:f6:40:95:a2:57:d4:fd:2e: a7:5f:20:3b:aa:85:71:90:5f:9d:b6:2c:5e:a4:17:45:9d:41: 64:4d:bf:54:4d:f8:f3:2e:54:26:65:75:08:62:66:7d:3c:77: d7:94:2a:4e:1b:2b:49:05:29:c4:5d:b4:7a:23:66:cf:56:cc: 5a:fc:92:63:9c:e5:60:79:1e:35:c7:aa:90:90:3e:ad:4a:97: 79:ca:08:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GUrOXlzcM0rialqh5uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NmIyMDQ5YjNhOWFhNmYyMzY4ZTZlZWI0YmZjZDE2Nzk1 M2E1ZTkwHhcNMjUxMjIwMTgwMTIzWhcNMjUxMjIxMTgwMTIzWjAzMTEwLwYDVQQD EyhmYzdhNDBmMzRmODFiYjc0NzgxMDgyMzYyMzI4ZDg4NmViOTVkZjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LOZ9Jc+NgTcsDSepY65wxfrZa7Y Pjx2VBaQf2pVWt7UwTIelBaD8T84IV0oXCOeXDgYqrzOLmy1845MPSSrfLU/sWov nJJODYZxxJF52Hvleu2vBkO8jAmm5w2xwRjOJ069iLn/Sd0uVbNvZVuymX+2VgB2 1KsGEi1lztEvrOcHZLfTw7RWgcbi92He3zfyJY1RKJkid4X82x1fZprHo9yb0CIR Egi+2/t5iiVsM2ncF3Ej2uWMyYJ3kYkltTmwmJ6CIxvfeRsk/CEPHxBEDDRa5IKK I72ckUzONPO7OO4saU5JsVIZs6UKJdpp3ja9LXmzctGjEpmsqzz+56amRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPx6QPNPgbt0eBCCNiMo2Ibrld8YMB8GA1UdIwQY MBaAFPVrIEmzqapvI2jm7rS/zRZ5U6XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEt MjQwMWI3NDIwNmYzLzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kMWE3MWMtYjhmOC00MTJkLTlkYTEtMjQwMWI3NDIwNmYz LzEvOVdzZ1NiT3BxbThqYU9idXRMX05GbmxUcGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAep9U3+Fz WLyR35sN0E6nf1DCOmMY3enMRrz8qXAgIFWc5fEHtwbTlq1udD2oV2tjREkXlyrD xb5su1XreRX9Fl/XzDs1IaD/A97auiAu4i2gPP7w+qKhSEz+FpNrDitt4J4+csar M6xTLEyp1ZYq4EplbYJGZZZb/hW/PTIz8S2D/jHZO91Ee1ngjOxdkGfVtfnOw+Fb flZ/MJh8JqcTJX1DRgtKxQmkhBFWyvZAlaJX1P0up18gO6qFcZBfnbYsXqQXRZ1B ZE2/VE348y5UJmV1CGJmfTx315QqThsrSQUpxF20eiNmz1bMWvySY5zlYHkeNceq kJA+rUqXecoIrA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:32:34 2025 by rpki-client