This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft File: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft (raw, json) Hash identifier: xwYBRANh34q2/+vhkuDHU4Wjk43ruGEOYGjsfHNBlsY= Subject key identifier: E1:8C:9F:13:AF:24:4E:0B:6C:BB:3F:9B:B6:01:EF:1D:5A:C5:C1:ED Authority key identifier: F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8 Certificate issuer: /CN=f6f18c02405742c25377d696cd2a69dcc974bff8 Certificate serial: 019B3C7FAAD96F81C45C1D5D5196AD97B0C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 16:02:38 +0000 Manifest this update: Sat 20 Dec 2025 16:02:38 +0000 Manifest next update: Sun 21 Dec 2025 16:02:38 +0000 Files and hashes: 1: 6Rwi5WxIjLb63K0eJqe1EvEuxDc.roa (hash: r7Wc6Mt/nHycECkDV3tNY4uy3f9xC1QAnYnLvp1ogpU=) 2: 9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl (hash: WguLwA/NcaOZ67xfafsOlpCVX+0srzdBiNlRT2JGst4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:aa:d9:6f:81:c4:5c:1d:5d:51:96:ad:97:b0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f18c02405742c25377d696cd2a69dcc974bff8 Validity Not Before: Dec 20 16:02:38 2025 GMT Not After : Dec 21 16:02:38 2025 GMT Subject: CN=e18c9f13af244e0b6cbb3f9bb601ef1d5ac5c1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:17:22:97:ae:f8:bf:b0:67:f7:90:c0:77:80: 15:36:33:7e:b3:5d:54:57:2e:ea:08:ea:b6:79:c7: 65:f9:bd:61:4f:06:61:9f:4c:aa:31:6d:43:05:16: d3:e3:ff:d3:c0:95:49:42:79:a4:93:0e:57:f9:bc: 94:23:94:87:2d:6f:65:55:6b:86:2f:01:87:f8:5b: ec:eb:54:48:41:a5:5a:c6:57:cb:6e:ae:f9:45:04: b1:0b:cc:6e:05:3b:ee:7c:ec:ad:c0:5e:a5:90:e6: 06:65:7a:e5:91:b4:65:20:64:11:e6:ad:d2:5e:1a: 7b:3b:ee:77:9c:4c:5a:6e:e8:ab:1a:18:a5:35:a8: dc:ef:78:71:4c:a0:87:41:6b:1c:26:05:cc:78:82: 76:67:58:de:3a:20:71:7e:7b:0e:40:76:25:6a:34: 91:8b:d6:dd:c8:ab:81:ee:fb:22:9c:f1:ca:5c:9e: 0f:a7:cb:56:b6:31:32:e9:08:95:e3:ac:f9:29:a0: 3c:e8:fe:49:e6:54:e6:12:33:ff:ae:22:40:61:ed: db:88:a4:b2:32:62:83:6c:67:91:06:30:45:02:78: 00:78:ef:95:92:b7:d8:60:22:52:f3:9b:70:14:87: a8:d6:54:fb:f6:8a:97:36:ae:a1:14:2b:12:73:d9: 29:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8C:9F:13:AF:24:4E:0B:6C:BB:3F:9B:B6:01:EF:1D:5A:C5:C1:ED X509v3 Authority Key Identifier: keyid:F6:F1:8C:02:40:57:42:C2:53:77:D6:96:CD:2A:69:DC:C9:74:BF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df05e1-6862-4ed4-876d-150b5db4f56b/1/9vGMAkBXQsJTd9aWzSpp3Ml0v_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:09:7a:9f:cc:ed:66:78:d0:f6:8f:bf:20:a4:0b:bc:53:35: e2:c3:f7:62:18:a0:45:79:4a:7b:f5:05:b6:17:3f:27:2b:41: f7:84:66:38:0d:c3:87:45:72:43:26:e9:91:e7:c5:bd:b1:93: ce:ee:b8:a6:da:0e:82:b5:93:4e:44:77:4b:5d:c0:cd:33:c5: bd:09:51:ca:e6:82:fe:90:fa:8f:11:45:11:37:4c:a9:60:8e: 16:32:cf:09:1b:18:f2:61:8a:40:07:c9:1e:53:4b:6c:93:5b: a8:b0:ea:6a:d7:c7:ea:b8:a2:a6:70:0e:c3:f8:19:0f:48:4f: ec:17:58:59:8e:75:a2:8b:81:6a:a1:70:fc:e1:62:4b:02:55: 67:e6:c1:cd:9d:15:4e:3b:c4:d5:84:d3:53:00:af:94:25:77: 1d:78:7e:f1:51:3e:9e:2c:58:3d:3a:e6:40:12:28:bd:aa:98: c6:1e:e2:2b:04:46:b4:0a:af:82:f3:83:15:16:0f:99:0d:e7: 36:a0:a6:19:6a:a4:63:53:57:0a:df:a7:b9:08:dc:86:39:e6: 83:3b:9e:8a:b6:90:ab:4f:0a:a4:e0:6d:6b:57:a8:03:ce:cd: d1:8d:86:c0:a5:3e:00:22:4a:0c:31:82:b3:e6:63:76:48:98: 35:a3:32:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f6rZb4HEXB1dUZatl7DIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjE4YzAyNDA1NzQyYzI1Mzc3ZDY5NmNkMmE2OWRjYzk3 NGJmZjgwHhcNMjUxMjIwMTYwMjM4WhcNMjUxMjIxMTYwMjM4WjAzMTEwLwYDVQQD EyhlMThjOWYxM2FmMjQ0ZTBiNmNiYjNmOWJiNjAxZWYxZDVhYzVjMWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRcil674v7Bn95DAd4AVNjN+s11U Vy7qCOq2ecdl+b1hTwZhn0yqMW1DBRbT4//TwJVJQnmkkw5X+byUI5SHLW9lVWuG LwGH+Fvs61RIQaVaxlfLbq75RQSxC8xuBTvufOytwF6lkOYGZXrlkbRlIGQR5q3S Xhp7O+53nExabuirGhilNajc73hxTKCHQWscJgXMeIJ2Z1jeOiBxfnsOQHYlajSR i9bdyKuB7vsinPHKXJ4Pp8tWtjEy6QiV46z5KaA86P5J5lTmEjP/riJAYe3biKSy MmKDbGeRBjBFAngAeO+VkrfYYCJS85twFIeo1lT79oqXNq6hFCsSc9kprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGMnxOvJE4LbLs/m7YB7x1axcHtMB8GA1UdIwQY MBaAFPbxjAJAV0LCU3fWls0qadzJdL/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQt MTUwYjVkYjRmNTZiLzEvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9kZjA1ZTEtNjg2Mi00ZWQ0LTg3NmQtMTUwYjVkYjRmNTZi LzEvOXZHTUFrQlhRc0pUZDlhV3pTcHAzTWwwdl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHAl6n8zt ZnjQ9o+/IKQLvFM14sP3YhigRXlKe/UFthc/JytB94RmOA3Dh0VyQybpkefFvbGT zu64ptoOgrWTTkR3S13AzTPFvQlRyuaC/pD6jxFFETdMqWCOFjLPCRsY8mGKQAfJ HlNLbJNbqLDqatfH6riipnAOw/gZD0hP7BdYWY51oouBaqFw/OFiSwJVZ+bBzZ0V TjvE1YTTUwCvlCV3HXh+8VE+nixYPTrmQBIovaqYxh7iKwRGtAqvgvODFRYPmQ3n NqCmGWqkY1NXCt+nuQjchjnmgzueiraQq08KpOBta1eoA87N0Y2GwKU+ACJKDDGC s+ZjdkiYNaMyzA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:36 2025 by rpki-client