This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft File: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json) Hash identifier: RYn4RHvmt7d11SLx6uKnzM00YDLwp3n4uyATotoC57M= Subject key identifier: 77:96:CB:A5:74:E5:EF:9A:6D:AB:DE:DA:B3:91:FC:87:02:26:C0:B1 Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8 Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8 Certificate serial: 019B51BE44D0C832093C4FB66BDA7147B829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 19:03:02 +0000 Manifest this update: Wed 24 Dec 2025 19:03:02 +0000 Manifest next update: Thu 25 Dec 2025 19:03:02 +0000 Files and hashes: 1: 6Rwi5WxIjLb63K0eJqe1EvEuxDc.roa (hash: r7Wc6Mt/nHycECkDV3tNY4uy3f9xC1QAnYnLvp1ogpU=) 2: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: pwAiG4CYDHrpLU4AclsrWcg5hpeXw4xMSZ5Qw7XwbB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:be:44:d0:c8:32:09:3c:4f:b6:6b:da:71:47:b8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8 Validity Not Before: Dec 24 19:03:02 2025 GMT Not After : Dec 25 19:03:02 2025 GMT Subject: CN=7796cba574e5ef9a6dabdedab391fc870226c0b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:52:ac:e5:49:e5:9c:6a:26:75:82:d2:fd:40: 8a:62:37:8a:6f:69:29:3b:03:b1:b8:4f:08:45:49: 19:16:7f:b7:f1:36:16:17:21:24:46:e2:f2:8b:0f: 0f:ec:df:b8:38:d1:db:1d:30:a6:1d:79:80:a7:8c: 8e:47:b8:33:5a:d5:7e:89:83:68:d0:7f:3a:6c:96: 3a:38:21:81:e8:93:6e:4c:cb:0b:4a:da:50:44:2d: 03:e3:33:8d:77:e5:da:f7:18:ae:d7:85:4a:f6:18: 3b:25:a8:5f:2b:e9:54:69:b7:ea:cd:08:e8:91:8d: f2:31:a1:20:5a:fd:2b:55:d2:0d:3f:86:c7:63:48: 0d:81:2f:7f:0c:fa:30:2e:f8:d1:d9:eb:f2:6e:82: 12:5c:cd:b9:6a:f3:59:ea:8a:0e:93:bc:9f:ea:e0: 98:af:df:9d:38:b0:a4:09:88:a6:f5:80:61:56:52: 66:98:fc:1b:b8:b1:25:2f:b5:a6:b2:d4:ad:29:6c: e0:22:43:d4:e8:21:ab:cc:34:ff:cf:0b:1e:77:4c: 42:9d:ed:a9:de:e6:ef:df:45:6e:52:5d:2b:32:41: 3c:ac:d5:f8:98:33:52:43:88:e7:54:7d:ff:cd:85: 1a:e3:70:35:f0:5d:ef:4c:a3:bc:a7:10:91:7b:eb: 53:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:96:CB:A5:74:E5:EF:9A:6D:AB:DE:DA:B3:91:FC:87:02:26:C0:B1 X509v3 Authority Key Identifier: keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:e5:e5:b6:d6:44:70:cd:e0:fc:cb:1d:e4:fb:b4:c6:d3:14: a5:e2:5a:26:62:12:bd:e7:8d:90:e7:91:f3:95:dd:ad:6b:38: 4b:a1:db:df:9c:f7:ba:2f:71:fe:2c:42:b1:f9:a6:0f:1b:db: 6f:b3:b2:82:1e:a6:9e:05:02:62:70:aa:97:f8:5e:5a:db:45: 5a:16:0b:d8:9c:cc:9a:46:c6:ea:46:f5:fc:04:fe:60:6a:e6: 57:1e:78:3a:57:f9:75:03:5e:88:61:40:86:9f:bb:23:03:40: 59:25:48:8e:1a:9b:13:fd:fc:d9:b5:25:29:8a:b1:80:40:5f: 5f:7e:e8:10:f6:0d:50:19:26:fa:99:a4:ee:a2:df:b8:3d:12: 9a:1e:68:8f:b5:d8:e3:e6:58:69:77:eb:0f:84:b8:65:11:f3: e6:96:61:cb:bd:6a:ef:7a:f6:a4:e6:2c:02:bd:d7:69:f6:0a: 58:07:35:24:99:54:f1:ea:53:d8:7b:c0:06:82:89:4a:11:b9: cd:b2:21:c7:f4:8b:52:aa:45:f1:e8:2d:df:6d:4b:d3:82:ff: 3a:15:d6:49:ce:d0:10:0b:7b:07:3a:2b:4c:bf:c8:cf:7c:5d: f7:55:44:a0:da:64:65:4b:6f:53:71:38:88:72:1f:b5:bc:15: 9c:fe:01:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvkTQyDIJPE+2a9pxR7gpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjE4YzAyNDA1NzQyYzI1Mzc3ZDY5NmNkMmE2OWRjYzk3 NGJmZjgwHhcNMjUxMjI0MTkwMzAyWhcNMjUxMjI1MTkwMzAyWjAzMTEwLwYDVQQD Eyg3Nzk2Y2JhNTc0ZTVlZjlhNmRhYmRlZGFiMzkxZmM4NzAyMjZjMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlKs5UnlnGomdYLS/UCKYjeKb2kp OwOxuE8IRUkZFn+38TYWFyEkRuLyiw8P7N+4ONHbHTCmHXmAp4yOR7gzWtV+iYNo 0H86bJY6OCGB6JNuTMsLStpQRC0D4zONd+Xa9xiu14VK9hg7JahfK+lUabfqzQjo kY3yMaEgWv0rVdINP4bHY0gNgS9/DPowLvjR2evyboISXM25avNZ6ooOk7yf6uCY r9+dOLCkCYim9YBhVlJmmPwbuLElL7WmstStKWzgIkPU6CGrzDT/zwsed0xCne2p 3ubv30VuUl0rMkE8rNX4mDNSQ4jnVH3/zYUa43A18F3vTKO8pxCRe+tTwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeWy6V05e+abave2rOR/IcCJsCxMB8GA1UdIwQY MBaAFPbxjAJAV0LCU3fWls0qadzJdL/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQt MTUwYjVkYjRmNTZiLzEvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQtMTUwYjVkYjRmNTZi LzEvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeXlttZE cM3g/Msd5Pu0xtMUpeJaJmISveeNkOeR85XdrWs4S6Hb35z3ui9x/ixCsfmmDxvb b7Oygh6mngUCYnCql/heWttFWhYL2JzMmkbG6kb1/AT+YGrmVx54Olf5dQNeiGFA hp+7IwNAWSVIjhqbE/382bUlKYqxgEBfX37oEPYNUBkm+pmk7qLfuD0Smh5oj7XY 4+ZYaXfrD4S4ZRHz5pZhy71q73r2pOYsAr3XafYKWAc1JJlU8epT2HvABoKJShG5 zbIhx/SLUqpF8egt321L04L/OhXWSc7QEAt7BzorTL/Iz3xd91VEoNpkZUtvU3E4 iHIftbwVnP4B9w== -----END CERTIFICATE-----Generated at Thu Dec 25 03:30:42 2025 by rpki-client