This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft File: S9REyGTp6F01N24PaCgXmfYoHxQ.mft (raw, json) Hash identifier: U8UHr3wSZKbNV3CqA8iCV1lFQieeTleMdn/ECq1xxHs= Subject key identifier: 95:01:11:24:11:48:99:78:38:8E:1A:2D:C0:9E:61:53:A3:BA:06:CE Authority key identifier: 4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 Certificate issuer: /CN=4bd444c864e9e85d35376e0f68281799f6281f14 Certificate serial: 019B3A90CE00EBFD2E6103C73486BA822783 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft Manifest number: 0F7C Signing time: Sat 20 Dec 2025 07:02:07 +0000 Manifest this update: Sat 20 Dec 2025 07:02:07 +0000 Manifest next update: Sun 21 Dec 2025 07:02:07 +0000 Files and hashes: 1: S9REyGTp6F01N24PaCgXmfYoHxQ.crl (hash: bcZwrt+9rvzovqZwv3sf6mxD5anEcfnUtBdMnADmhHM=) 2: _0wH1BRcgc6tfF99TwNnC3iQ1pU.roa (hash: O+Zelc4oaCgFlSMOLR6IXR0OWFyZm1W0ImLAmE3cggg=) 3: igkLmqGvdo3ZptL2OBtAT5tgBr8.roa (hash: JNS1dghL0HEbj9Q46she80UtZ72vLWiMcXMi6xfr/RQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:ce:00:eb:fd:2e:61:03:c7:34:86:ba:82:27:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bd444c864e9e85d35376e0f68281799f6281f14 Validity Not Before: Dec 20 07:02:07 2025 GMT Not After : Dec 21 07:02:07 2025 GMT Subject: CN=9501112411489978388e1a2dc09e6153a3ba06ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fa:49:66:62:be:e8:55:43:cb:bb:3e:d2:e0: f7:4a:fe:1f:73:ee:47:31:3c:bf:5a:51:2d:1d:cb: 04:47:36:03:41:5e:83:f6:4b:f1:7b:3f:53:a5:50: 48:fe:07:ba:11:5f:97:40:e2:a4:1a:58:de:f7:6a: d0:c7:24:2e:49:22:be:8e:2a:73:5a:ef:96:25:2e: 5c:55:a8:1c:14:d0:86:68:69:f0:b2:9d:79:50:53: d0:82:99:27:00:3e:c8:ba:a8:82:b4:14:08:2e:6f: e5:78:a7:56:b8:f0:92:f3:ff:66:02:5e:27:80:e6: 92:a5:94:c4:c4:1d:3e:09:19:43:71:44:2c:d8:1f: 19:8c:83:cc:fb:ef:32:bf:3d:0e:c0:85:66:dc:09: 17:58:fb:12:a9:16:fa:7a:a5:f0:0e:60:e8:fb:75: 5a:83:65:16:89:b6:d8:b1:33:16:0e:c5:ac:e3:f8: c9:ad:29:b1:4d:db:02:bc:28:68:68:62:06:50:cf: 11:1a:56:bf:c0:17:7e:ba:79:6c:52:6e:25:14:e1: ef:3a:b3:2d:40:a3:79:e3:b4:af:5c:ca:41:46:28: a2:8c:0a:f4:0c:9d:73:53:af:11:51:d9:6a:d0:47: 22:20:1e:92:8f:21:82:c7:29:c1:8b:82:54:7a:3f: 30:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:01:11:24:11:48:99:78:38:8E:1A:2D:C0:9E:61:53:A3:BA:06:CE X509v3 Authority Key Identifier: keyid:4B:D4:44:C8:64:E9:E8:5D:35:37:6E:0F:68:28:17:99:F6:28:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9REyGTp6F01N24PaCgXmfYoHxQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/4a0cdc-e7fe-450e-97ec-29095ad1cced/1/S9REyGTp6F01N24PaCgXmfYoHxQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:84:d3:6f:ce:44:ed:9f:2a:cc:f9:66:50:cf:d3:02:b4:fa: 02:b8:9d:30:30:0b:27:69:b0:30:23:4a:c8:f3:3a:87:8a:9f: b2:47:e2:1b:e9:d3:14:d0:95:79:17:13:68:65:e8:a1:c8:6d: e7:ac:ef:25:32:86:d5:66:0e:53:5f:dc:7b:2b:d9:3c:32:6f: 0f:e9:70:5c:8c:e5:9f:84:30:dd:72:47:30:38:47:9f:ff:d7: aa:1c:ce:ac:63:37:7b:c6:e0:00:73:84:cb:9e:e1:9c:ac:31: a3:b6:07:b1:32:08:b9:2c:35:de:6a:4d:19:ad:ef:6d:c4:06: 6e:a5:64:72:90:a1:cb:a2:0e:d5:2a:dc:9e:6c:a3:72:1d:5b: 37:86:e7:d0:64:4f:8d:b2:c6:11:78:c4:99:a6:af:ee:11:4d: f1:29:5e:6d:22:40:01:ca:7a:fe:9a:f2:8b:ab:a2:e2:a8:f3: 53:5d:fb:14:87:09:ab:d3:85:e5:61:82:56:09:36:01:69:1f: 6f:2b:b8:87:bf:f1:67:0a:20:48:b3:06:a6:8b:ab:67:b5:78: 2e:88:32:d4:e7:ae:77:46:34:e9:e3:3a:64:a6:9a:f7:1d:ca: 9b:0a:98:b8:98:57:ae:b4:ef:4d:06:6c:36:6f:81:89:fc:ec: 2c:cc:fa:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kM4A6/0uYQPHNIa6gieDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZDQ0NGM4NjRlOWU4NWQzNTM3NmUwZjY4MjgxNzk5ZjYy ODFmMTQwHhcNMjUxMjIwMDcwMjA3WhcNMjUxMjIxMDcwMjA3WjAzMTEwLwYDVQQD Eyg5NTAxMTEyNDExNDg5OTc4Mzg4ZTFhMmRjMDllNjE1M2EzYmEwNmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfpJZmK+6FVDy7s+0uD3Sv4fc+5H MTy/WlEtHcsERzYDQV6D9kvxez9TpVBI/ge6EV+XQOKkGlje92rQxyQuSSK+jipz Wu+WJS5cVagcFNCGaGnwsp15UFPQgpknAD7IuqiCtBQILm/leKdWuPCS8/9mAl4n gOaSpZTExB0+CRlDcUQs2B8ZjIPM++8yvz0OwIVm3AkXWPsSqRb6eqXwDmDo+3Va g2UWibbYsTMWDsWs4/jJrSmxTdsCvChoaGIGUM8RGla/wBd+unlsUm4lFOHvOrMt QKN547SvXMpBRiiijAr0DJ1zU68RUdlq0EciIB6SjyGCxynBi4JUej8wPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUBESQRSJl4OI4aLcCeYVOjugbOMB8GA1UdIwQY MBaAFEvURMhk6ehdNTduD2goF5n2KB8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMt MjkwOTVhZDFjY2VkLzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS80YTBjZGMtZTdmZS00NTBlLTk3ZWMtMjkwOTVhZDFjY2Vk LzEvUzlSRXlHVHA2RjAxTjI0UGFDZ1htZllvSHhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXYTTb85E 7Z8qzPlmUM/TArT6AridMDALJ2mwMCNKyPM6h4qfskfiG+nTFNCVeRcTaGXoocht 56zvJTKG1WYOU1/ceyvZPDJvD+lwXIzln4Qw3XJHMDhHn//XqhzOrGM3e8bgAHOE y57hnKwxo7YHsTIIuSw13mpNGa3vbcQGbqVkcpChy6IO1Srcnmyjch1bN4bn0GRP jbLGEXjEmaav7hFN8SlebSJAAcp6/pryi6ui4qjzU137FIcJq9OF5WGCVgk2AWkf byu4h7/xZwogSLMGpourZ7V4Logy1Oeud0Y06eM6ZKaa9x3KmwqYuJhXrrTvTQZs Nm+BifzsLMz68g== -----END CERTIFICATE-----Generated at Sat Dec 20 08:45:33 2025 by rpki-client