This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft File: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json) Hash identifier: N5c17u1aaSGri/vp6FHLT0FvjqmvKZQE1h/lDXktVQc= Subject key identifier: 35:E4:27:9D:20:71:40:18:29:91:50:E9:7B:7B:87:17:E4:F4:4A:F1 Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 Certificate issuer: /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Certificate serial: 019B3CB4D53E7D4C667EF9730603F564D316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 17:00:42 +0000 Manifest this update: Sat 20 Dec 2025 17:00:42 +0000 Manifest next update: Sun 21 Dec 2025 17:00:42 +0000 Files and hashes: 1: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: co2uogf6QOC99XDoTog5pFJMt1hPTCyZl1y6a994MuU=) 2: WMejWLM-fXx9J5hQgJ4TNGxlL40.roa (hash: 9oO47gALmpiotO1VgFePsYnaYk2I9wrq424pEV3SiMU=) 3: n5VL-9G7-YZixQJP-BPKVSDqpR4.roa (hash: t+3M+svFb4/LG8WrDBM3x4yGiPVd0ez6gYqaJNLI3Wg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:d5:3e:7d:4c:66:7e:f9:73:06:03:f5:64:d3:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8 Validity Not Before: Dec 20 17:00:42 2025 GMT Not After : Dec 21 17:00:42 2025 GMT Subject: CN=35e4279d20714018299150e97b7b8717e4f44af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d7:bc:b8:93:3e:da:bb:66:e1:32:bc:34:c1: ff:26:88:96:69:b1:d1:86:82:33:19:a1:de:90:60: 14:a7:8b:98:51:da:12:11:e7:fb:df:ea:20:f8:6b: 5a:18:08:b6:40:ad:64:0e:fd:49:28:0a:e5:02:84: e3:8c:a7:fb:e2:af:b9:ab:11:b4:67:db:4d:83:c2: 3f:d4:78:b2:e8:25:63:d2:36:bd:9d:f8:56:c4:bc: 88:01:68:16:3f:ee:b2:96:ff:6e:f2:72:01:13:a2: ca:53:cf:b4:7f:b6:8c:73:48:42:d2:ec:0d:41:33: 99:16:af:7f:19:4b:1d:78:59:18:cf:5f:38:c2:3f: 8c:40:0e:54:3a:2a:bd:ea:a8:66:59:b3:73:1b:12: 1b:1d:d4:64:f0:f7:b8:9d:d1:79:51:a3:df:7e:32: df:2a:05:ac:d4:dc:a9:1f:f6:28:ba:e7:65:4e:56: 83:91:19:6d:71:88:10:c3:72:da:bf:39:c2:b5:6b: 7e:a9:5e:47:9d:ef:a6:62:ce:77:55:a9:d7:49:c0: 74:8c:9d:69:a3:f4:32:a7:59:7b:e4:4f:e5:db:18: 84:26:6c:6f:df:57:9c:31:1e:68:80:42:10:7c:cc: 93:3e:f5:dc:88:d7:0e:04:48:3f:3d:22:4a:8f:29: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E4:27:9D:20:71:40:18:29:91:50:E9:7B:7B:87:17:E4:F4:4A:F1 X509v3 Authority Key Identifier: keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2d:1d:fc:73:72:fb:46:b2:5b:72:56:69:3d:7c:71:41:25: 59:c5:70:6d:7a:c0:97:2e:e0:5a:9f:b9:06:6e:73:73:97:65: 1e:4d:17:d0:44:3a:c0:f0:a4:38:23:6e:8f:a4:67:0c:19:48: ce:34:66:f0:88:16:78:d4:37:45:68:1d:89:6a:27:d9:70:b4: 78:f9:b7:08:4b:75:a8:f8:59:1a:b2:bd:3f:f1:ca:9a:c5:c5: d3:a7:8f:66:fb:e7:01:b4:04:94:9a:c6:71:8b:d9:7f:a5:84: 2d:ce:8d:7c:31:9f:54:04:50:9f:fa:0b:f8:8f:3d:78:18:08: c9:9e:c2:2e:34:0b:5d:4d:1c:84:94:f0:dc:97:c2:02:b9:da: ef:26:9a:29:c9:62:33:8c:92:6f:e6:d4:4a:97:5a:c0:ab:31: 63:4d:6d:d6:1b:45:82:f3:c8:c6:b2:0c:0c:d2:67:7e:94:9c: ba:e3:09:af:c0:ae:1d:0c:70:25:37:fe:60:cf:b4:69:14:59: 31:a5:65:87:e0:10:4a:4a:b0:73:e2:d8:ac:ef:0b:98:00:df: 83:f7:29:2e:c4:b5:82:07:ac:97:45:9d:cc:fa:c8:f7:e0:a9: 94:cc:4a:99:61:33:ea:b3:05:61:37:a0:15:cc:70:6f:fd:05: 57:19:39:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tNU+fUxmfvlzBgP1ZNMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MmIwODRmOWI5Yzk4Y2ZkOTA0MTBiODMwNWNjNmNiNDZk Y2NlZDgwHhcNMjUxMjIwMTcwMDQyWhcNMjUxMjIxMTcwMDQyWjAzMTEwLwYDVQQD EygzNWU0Mjc5ZDIwNzE0MDE4Mjk5MTUwZTk3YjdiODcxN2U0ZjQ0YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4te8uJM+2rtm4TK8NMH/JoiWabHR hoIzGaHekGAUp4uYUdoSEef73+og+GtaGAi2QK1kDv1JKArlAoTjjKf74q+5qxG0 Z9tNg8I/1Hiy6CVj0ja9nfhWxLyIAWgWP+6ylv9u8nIBE6LKU8+0f7aMc0hC0uwN QTOZFq9/GUsdeFkYz184wj+MQA5UOiq96qhmWbNzGxIbHdRk8Pe4ndF5UaPffjLf KgWs1NypH/YouudlTlaDkRltcYgQw3LavznCtWt+qV5Hne+mYs53VanXScB0jJ1p o/Qyp1l75E/l2xiEJmxv31ecMR5ogEIQfMyTPvXciNcOBEg/PSJKjylalQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXkJ50gcUAYKZFQ6Xt7hxfk9ErxMB8GA1UdIwQY MBaAFPQrCE+bnJjP2QQQuDBcxstG3M7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAt NmE5Y2Q5NDIwMmZmLzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mOTQ5YTUtODRhYy00NTlkLWI5YTAtNmE5Y2Q5NDIwMmZm LzEvOUNzSVQ1dWNtTV9aQkJDNE1Gekd5MGJjenRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFS0d/HNy +0ayW3JWaT18cUElWcVwbXrAly7gWp+5Bm5zc5dlHk0X0EQ6wPCkOCNuj6RnDBlI zjRm8IgWeNQ3RWgdiWon2XC0ePm3CEt1qPhZGrK9P/HKmsXF06ePZvvnAbQElJrG cYvZf6WELc6NfDGfVARQn/oL+I89eBgIyZ7CLjQLXU0chJTw3JfCArna7yaaKcli M4ySb+bUSpdawKsxY01t1htFgvPIxrIMDNJnfpScuuMJr8CuHQxwJTf+YM+0aRRZ MaVlh+AQSkqwc+LYrO8LmADfg/cpLsS1ggesl0WdzPrI9+CplMxKmWEz6rMFYTeg Fcxwb/0FVxk5Aw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:23 2025 by rpki-client