This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json) Hash identifier: vurCiiUiW4rCtiHm8ZjtHko4MJbCQjBHcXvwcLIX4E8= Subject key identifier: 6C:75:97:01:F3:CF:D2:84:22:3E:38:54:67:0D:13:BA:EA:4F:18:49 Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Certificate serial: 019B390ED333AE414A60633FE49959B45CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 00:00:31 +0000 Manifest this update: Sat 20 Dec 2025 00:00:31 +0000 Manifest next update: Sun 21 Dec 2025 00:00:31 +0000 Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: 6QQf8t7z6MMYFQQhhe63V7K03IhiyV0TW1wUi2XGG88=) 2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=) 3: fZI41ms3tzFvI-4Rmi0bivMoobg.roa (hash: mvSKdaR0Cd14+1pWdKPrKKbl4qxiwAO24l5+RIBOEk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0e:d3:33:ae:41:4a:60:63:3f:e4:99:59:b4:5c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Validity Not Before: Dec 20 00:00:31 2025 GMT Not After : Dec 21 00:00:31 2025 GMT Subject: CN=6c759701f3cfd284223e3854670d13baea4f1849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4c:08:fc:ca:11:30:20:91:5d:99:6b:e2:e6: 5d:e0:60:4e:09:4c:b3:3e:2e:78:cf:d5:48:8c:b9: 93:6a:de:26:2f:1a:cb:f2:63:94:b8:96:e5:59:bc: 8c:da:55:4c:d1:81:9a:6e:92:20:67:25:c4:91:ed: 08:b8:35:40:b1:a4:24:b9:90:10:fe:31:83:e5:df: 81:70:fc:59:ed:9a:1f:04:47:57:fb:aa:ef:0e:96: 66:fb:19:01:e6:20:81:ba:4a:33:c5:4d:68:7e:63: 9c:9f:73:9b:26:97:62:9b:0f:c9:11:90:7b:ce:44: 97:8a:17:da:53:d8:fd:3d:9b:e3:ac:18:cf:e6:d9: 51:59:01:b2:3f:89:64:f0:ad:6a:a4:fe:a4:86:7f: ec:f2:ae:01:91:44:6e:cb:20:b8:99:64:03:45:af: d7:c0:48:5a:33:0d:58:f0:a0:98:aa:be:94:da:d6: cf:16:aa:8a:92:93:bd:f2:48:b5:b7:c1:1e:8b:1d: 0a:a2:f7:63:d7:60:ce:45:ca:64:b0:d6:20:bf:90: 53:da:dd:7f:cc:57:c8:30:61:97:96:df:13:4e:a5: 38:5e:d3:15:fd:ac:b9:2a:3d:d3:9e:f8:ed:e1:9a: 2f:36:72:14:67:c1:02:32:d1:5a:2c:fa:1f:76:7e: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:75:97:01:F3:CF:D2:84:22:3E:38:54:67:0D:13:BA:EA:4F:18:49 X509v3 Authority Key Identifier: keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c4:5b:78:c3:ab:c8:0a:26:8e:e3:65:65:85:e8:1b:7b:30: 7e:8a:6e:cc:e8:1b:c1:eb:82:00:fe:e3:2e:39:d8:6b:b8:c5: be:e9:e5:07:5e:d6:4a:41:fb:10:cc:4d:1c:3f:c4:2a:14:53: 9f:fa:fc:d3:91:a5:04:e6:a1:1a:a9:29:cf:2c:39:b7:63:62: c6:85:b1:c7:0f:0c:03:52:4b:dd:7f:fb:56:17:46:d3:74:02: 96:42:f3:34:28:58:18:4c:67:43:32:cc:75:f0:f2:2a:c6:a7: 19:9a:14:f7:3b:5f:e0:b5:ac:e0:af:db:fc:23:cd:09:57:1a: c3:60:cf:83:fb:7b:0a:40:73:2c:c5:5c:22:00:da:51:f6:e3: 68:f9:dc:36:0a:20:87:2b:7d:10:b6:f9:1a:c7:f2:55:0d:56: 5b:a2:3c:65:96:85:68:8b:18:27:44:b1:d5:c7:7e:4a:3e:36: 3e:7e:05:4a:3e:50:5c:02:f9:ad:b7:fb:e1:af:e2:8b:0c:68: ed:9c:ba:02:bc:b1:70:e5:7b:f6:bb:40:1d:85:7e:e3:44:dd: 28:2f:a2:d2:b3:28:46:58:16:36:c2:0b:00:88:0b:bc:05:cf: e8:78:28:cc:88:e0:42:7d:25:85:21:37:62:d1:34:13:68:6a: d8:6c:ec:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5DtMzrkFKYGM/5JlZtFzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk NDcwMzcwHhcNMjUxMjIwMDAwMDMxWhcNMjUxMjIxMDAwMDMxWjAzMTEwLwYDVQQD Eyg2Yzc1OTcwMWYzY2ZkMjg0MjIzZTM4NTQ2NzBkMTNiYWVhNGYxODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEwI/MoRMCCRXZlr4uZd4GBOCUyz Pi54z9VIjLmTat4mLxrL8mOUuJblWbyM2lVM0YGabpIgZyXEke0IuDVAsaQkuZAQ /jGD5d+BcPxZ7ZofBEdX+6rvDpZm+xkB5iCBukozxU1ofmOcn3ObJpdimw/JEZB7 zkSXihfaU9j9PZvjrBjP5tlRWQGyP4lk8K1qpP6khn/s8q4BkURuyyC4mWQDRa/X wEhaMw1Y8KCYqr6U2tbPFqqKkpO98ki1t8Eeix0Kovdj12DORcpksNYgv5BT2t1/ zFfIMGGXlt8TTqU4XtMV/ay5Kj3Tnvjt4ZovNnIUZ8ECMtFaLPofdn4xdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGx1lwHzz9KEIj44VGcNE7rqTxhJMB8GA1UdIwQY MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5 LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADsRbeMOr yAomjuNlZYXoG3swfopuzOgbweuCAP7jLjnYa7jFvunlB17WSkH7EMxNHD/EKhRT n/r805GlBOahGqkpzyw5t2NixoWxxw8MA1JL3X/7VhdG03QClkLzNChYGExnQzLM dfDyKsanGZoU9ztf4LWs4K/b/CPNCVcaw2DPg/t7CkBzLMVcIgDaUfbjaPncNgog hyt9ELb5GsfyVQ1WW6I8ZZaFaIsYJ0Sx1cd+Sj42Pn4FSj5QXAL5rbf74a/iiwxo 7Zy6AryxcOV79rtAHYV+40TdKC+i0rMoRlgWNsILAIgLvAXP6HgozIjgQn0lhSE3 YtE0E2hq2Gzs6g== -----END CERTIFICATE-----Generated at Sat Dec 20 06:41:54 2025 by rpki-client