This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json) Hash identifier: p4ne8lCMWzUged+Veks8BIdj2pau520096ZzCv94dfM= Subject key identifier: 36:8D:2B:22:2B:F6:14:F6:CE:F0:74:B4:D1:CC:B5:5B:52:E8:25:0F Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6 Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6 Certificate serial: 019B390EE8B329041749CD4644329C819830 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft Manifest number: 073D Signing time: Sat 20 Dec 2025 00:00:36 +0000 Manifest this update: Sat 20 Dec 2025 00:00:36 +0000 Manifest next update: Sun 21 Dec 2025 00:00:36 +0000 Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=) 2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: NjEauNVCHm0M6sMDvmdgJJv4zQjjz1K2QVeGfrYOmuQ=) 3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:e8:b3:29:04:17:49:cd:46:44:32:9c:81:98:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6 Validity Not Before: Dec 20 00:00:36 2025 GMT Not After : Dec 21 00:00:36 2025 GMT Subject: CN=368d2b222bf614f6cef074b4d1ccb55b52e8250f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:d5:01:cc:49:84:bc:99:ac:69:40:fd:03: ef:63:3d:a7:bd:1a:86:c3:e8:d4:59:b1:34:57:4a: 7e:9e:ec:fa:91:eb:da:ac:02:59:f7:ae:1a:02:75: c3:b5:46:14:83:96:9b:99:4a:9d:1e:21:0c:33:d1: 41:d9:ae:ca:2e:ac:59:f5:8f:f5:0f:4f:a0:fe:d3: cb:a5:48:93:67:26:f1:1c:7a:3b:34:af:b5:f3:15: a0:d9:7d:e7:48:bd:15:f6:e3:be:d8:8a:8a:c2:4b: 34:54:72:37:62:ad:ea:78:45:7c:33:ac:8d:2e:01: 93:42:91:c4:41:c4:ab:b4:d5:88:79:d5:35:3f:2a: 6a:c8:f4:0b:92:ec:8e:2a:e0:87:55:1d:ba:64:e7: 86:d9:6e:b8:ee:6e:c7:ae:3d:91:37:20:38:51:c7: 3a:4e:a9:cf:3b:15:19:0b:d7:3f:77:7d:d8:40:63: 3f:29:89:c1:f1:ac:dd:de:76:a6:16:dc:f0:03:c3: a4:2c:ab:0e:d9:d6:98:b9:94:d6:db:56:84:5c:ab: 06:76:7c:4c:7f:5f:22:d5:e3:d7:69:33:34:af:0f: 63:94:c8:ae:36:61:37:e0:16:54:e8:04:e1:75:89: 65:17:4e:3c:5a:f8:ab:de:de:5b:84:af:e1:f6:94: eb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8D:2B:22:2B:F6:14:F6:CE:F0:74:B4:D1:CC:B5:5B:52:E8:25:0F X509v3 Authority Key Identifier: keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:90:2e:8e:b5:00:f1:5c:fe:0a:44:95:8d:5c:a5:af:a2:93: 2d:b1:98:99:f7:e2:55:c8:4b:55:02:8e:b8:98:6f:29:c3:7a: c2:da:a3:4c:91:67:a8:42:ba:83:7d:8e:6d:96:e6:79:a4:bc: a5:44:12:98:52:de:2f:3e:54:a7:b3:e4:7a:cb:b3:9b:a8:d7: 68:a8:27:20:7e:72:cb:9d:79:9f:a0:cd:84:1f:e0:15:b4:9e: 27:45:69:e2:98:11:e6:94:92:96:c5:cf:1c:eb:14:d4:b5:e5: 20:b0:48:d4:0c:bb:1c:a4:29:00:84:03:bd:9c:49:68:e1:d8: a4:2c:4f:d0:49:9e:8b:c8:10:66:f9:12:2c:59:ef:b2:4a:ed: 09:dc:e2:86:72:6e:10:8b:72:dd:00:65:95:0d:3f:cb:80:81: 17:55:ec:be:18:20:a7:c1:40:5b:36:37:91:86:85:c4:fb:b5: f4:0c:37:be:83:56:0d:07:c7:fb:11:6a:fd:dd:ce:52:cc:42: ee:1e:bd:cd:7f:4a:15:5f:5e:c5:df:18:fd:f4:26:79:e5:9d: 19:cc:39:ef:7b:27:4d:4e:9b:56:1e:c8:88:87:ab:9f:4a:00: 7b:71:5b:84:e4:ac:02:e7:9e:31:5e:2e:42:32:20:16:88:8c: 72:7f:b6:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DuizKQQXSc1GRDKcgZgwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Mzg5NDdkZGI4OTJmNWYzYTQ4YTY5YWY5N2E4ZmI1MjEw M2EwZDYwHhcNMjUxMjIwMDAwMDM2WhcNMjUxMjIxMDAwMDM2WjAzMTEwLwYDVQQD EygzNjhkMmIyMjJiZjYxNGY2Y2VmMDc0YjRkMWNjYjU1YjUyZTgyNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLrVAcxJhLyZrGlA/QPvYz2nvRqG w+jUWbE0V0p+nuz6kevarAJZ964aAnXDtUYUg5abmUqdHiEMM9FB2a7KLqxZ9Y/1 D0+g/tPLpUiTZybxHHo7NK+18xWg2X3nSL0V9uO+2IqKwks0VHI3Yq3qeEV8M6yN LgGTQpHEQcSrtNWIedU1PypqyPQLkuyOKuCHVR26ZOeG2W647m7Hrj2RNyA4Ucc6 TqnPOxUZC9c/d33YQGM/KYnB8azd3namFtzwA8OkLKsO2daYuZTW21aEXKsGdnxM f18i1ePXaTM0rw9jlMiuNmE34BZU6AThdYllF048Wvir3t5bhK/h9pTrhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaNKyIr9hT2zvB0tNHMtVtS6CUPMB8GA1UdIwQY MBaAFPY4lH3biS9fOkimmvl6j7UhA6DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMt NjFkMjY2MDNjMzdjLzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMtNjFkMjY2MDNjMzdj LzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpAujrUA 8Vz+CkSVjVylr6KTLbGYmffiVchLVQKOuJhvKcN6wtqjTJFnqEK6g32ObZbmeaS8 pUQSmFLeLz5Up7Pkesuzm6jXaKgnIH5yy515n6DNhB/gFbSeJ0Vp4pgR5pSSlsXP HOsU1LXlILBI1Ay7HKQpAIQDvZxJaOHYpCxP0Emei8gQZvkSLFnvskrtCdzihnJu EIty3QBllQ0/y4CBF1Xsvhggp8FAWzY3kYaFxPu19Aw3voNWDQfH+xFq/d3OUsxC 7h69zX9KFV9exd8Y/fQmeeWdGcw573snTU6bVh7IiIern0oAe3FbhOSsAueeMV4u QjIgFoiMcn+2YA== -----END CERTIFICATE-----Generated at Sat Dec 20 04:26:44 2025 by rpki-client