This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft File: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft (raw, json) Hash identifier: NMbbot3KLP6DtQU1xdNLXioGnem1c0eI/AJTmO3FuIo= Subject key identifier: 1E:FE:25:CE:44:1D:85:0A:70:D7:51:12:C7:8A:48:0B:26:BE:32:3E Authority key identifier: F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC Certificate issuer: /CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac Certificate serial: 019B4513DA40AE8353BD4F873966F22AE977 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft Manifest number: 0127 Signing time: Mon 22 Dec 2025 08:01:27 +0000 Manifest this update: Mon 22 Dec 2025 08:01:27 +0000 Manifest next update: Tue 23 Dec 2025 08:01:27 +0000 Files and hashes: 1: 9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl (hash: QLG3hAh1QqjFLCPwJAyH+Lapa0CfRivRDaqtvqMqqHg=) 2: f1Mto9GzcPc4M2Oix0yJMh6toWA.roa (hash: 84CvNJo6FYo7qJUGi59PScidN7rKl7gKNL3hWWKJ6Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 08:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:da:40:ae:83:53:bd:4f:87:39:66:f2:2a:e9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d6b1d90ed4bf1651aa2270e6ecbac2d87922ac Validity Not Before: Dec 22 08:01:27 2025 GMT Not After : Dec 23 08:01:27 2025 GMT Subject: CN=1efe25ce441d850a70d75112c78a480b26be323e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ca:d7:68:64:78:16:e8:2b:eb:74:98:46:ee: cb:56:04:84:1d:4e:dd:ca:85:d7:60:06:03:0a:4d: 94:06:b5:f4:41:b5:8d:24:a2:f7:12:a5:82:9e:cb: 8d:72:98:de:96:c8:31:3f:24:07:a6:3c:a7:6c:3f: 08:0b:3d:4e:00:06:fc:eb:53:66:56:77:dd:ed:38: cf:1d:08:e3:65:b6:1a:48:88:61:6e:ee:8e:26:7c: 26:1d:0b:36:7e:a5:66:a3:f7:b1:1d:b5:ad:eb:a5: a3:13:ff:fd:06:0e:f0:8a:1e:a7:e7:97:28:24:df: 0f:9b:00:01:2a:e7:c4:b9:88:56:84:11:3e:a1:cd: a3:45:a6:86:39:a9:8a:45:9c:72:b9:69:d6:f4:6f: e5:64:cb:35:65:1a:59:59:e6:a9:70:29:3c:c4:b6: 97:da:89:d1:be:ab:e8:5d:d3:73:fb:50:f1:bd:66: 82:f6:aa:19:b3:8b:fb:de:81:16:9a:68:08:88:ac: f6:bc:a0:60:f4:de:8d:6c:38:48:e7:03:ff:c8:72: fd:ec:10:f0:69:3d:a4:e3:91:14:b3:e8:85:8d:6a: 9a:b7:61:4b:17:f9:bd:94:53:df:81:8e:6d:a9:c9: d9:0d:e5:42:ee:91:ef:d2:0b:68:ee:8c:cf:49:95: 9d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:FE:25:CE:44:1D:85:0A:70:D7:51:12:C7:8A:48:0B:26:BE:32:3E X509v3 Authority Key Identifier: keyid:F5:D6:B1:D9:0E:D4:BF:16:51:AA:22:70:E6:EC:BA:C2:D8:79:22:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dax2Q7UvxZRqiJw5uy6wth5Iqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/45fee7-6985-4abe-afab-0142fef672ec/1/9dax2Q7UvxZRqiJw5uy6wth5Iqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:de:b4:40:e9:3a:c3:71:7c:7f:48:24:57:fd:4b:6b:d1:17: e0:5f:da:a9:18:7f:31:62:d2:d6:e4:f4:6b:4e:a0:9c:36:31: da:88:ba:41:05:cd:b2:a0:f4:32:b9:a4:cd:d4:ae:af:d0:58: 94:82:57:2f:b9:a3:e4:8b:89:58:75:f4:5a:53:0c:bf:e4:c7: 70:db:9d:09:93:b1:b9:7b:11:81:7f:7e:cd:ca:43:e9:44:34: ca:5e:c9:e0:2d:c3:e4:0e:0f:ed:d1:ab:9d:cd:c9:ba:fd:b6: 4e:be:c4:bc:0d:74:b2:3b:2f:71:72:30:ca:ab:c7:dd:79:48: 0e:cd:48:ea:4d:13:08:8c:92:fb:e9:eb:07:66:6e:4e:ca:15: 0c:35:ed:91:84:f1:53:1d:43:df:da:ab:54:d3:5c:3c:ab:ae: 12:5e:f7:b2:66:eb:ed:9b:99:9d:6d:b6:71:d1:ef:34:c5:22: a6:6d:16:b3:2b:0a:7f:2c:c2:59:8e:4b:99:cc:aa:f5:2e:8b: 10:49:ee:77:a1:ca:f5:f2:b4:15:c4:bb:61:d6:db:9f:49:fa: 2f:a4:f6:f9:02:85:14:18:3e:fe:5f:04:ff:00:47:91:78:5f: ce:6e:70:75:0a:a8:d0:c0:19:08:e0:b7:df:db:3d:05:dd:e7: c6:aa:13:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE9pAroNTvU+HOWbyKul3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDZiMWQ5MGVkNGJmMTY1MWFhMjI3MGU2ZWNiYWMyZDg3 OTIyYWMwHhcNMjUxMjIyMDgwMTI3WhcNMjUxMjIzMDgwMTI3WjAzMTEwLwYDVQQD EygxZWZlMjVjZTQ0MWQ4NTBhNzBkNzUxMTJjNzhhNDgwYjI2YmUzMjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rXaGR4Fugr63SYRu7LVgSEHU7d yoXXYAYDCk2UBrX0QbWNJKL3EqWCnsuNcpjelsgxPyQHpjynbD8ICz1OAAb861Nm Vnfd7TjPHQjjZbYaSIhhbu6OJnwmHQs2fqVmo/exHbWt66WjE//9Bg7wih6n55co JN8PmwABKufEuYhWhBE+oc2jRaaGOamKRZxyuWnW9G/lZMs1ZRpZWeapcCk8xLaX 2onRvqvoXdNz+1DxvWaC9qoZs4v73oEWmmgIiKz2vKBg9N6NbDhI5wP/yHL97BDw aT2k45EUs+iFjWqat2FLF/m9lFPfgY5tqcnZDeVC7pHv0gto7ozPSZWdawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7+Jc5EHYUKcNdREseKSAsmvjI+MB8GA1UdIwQY MBaAFPXWsdkO1L8WUaoicObsusLYeSKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWIt MDE0MmZlZjY3MmVjLzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80NWZlZTctNjk4NS00YWJlLWFmYWItMDE0MmZlZjY3MmVj LzEvOWRheDJRN1V2eFpScWlKdzV1eTZ3dGg1SXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR960QOk6 w3F8f0gkV/1La9EX4F/aqRh/MWLS1uT0a06gnDYx2oi6QQXNsqD0MrmkzdSur9BY lIJXL7mj5IuJWHX0WlMMv+THcNudCZOxuXsRgX9+zcpD6UQ0yl7J4C3D5A4P7dGr nc3Juv22Tr7EvA10sjsvcXIwyqvH3XlIDs1I6k0TCIyS++nrB2ZuTsoVDDXtkYTx Ux1D39qrVNNcPKuuEl73smbr7ZuZnW22cdHvNMUipm0WsysKfyzCWY5Lmcyq9S6L EEnud6HK9fK0FcS7Ydbbn0n6L6T2+QKFFBg+/l8E/wBHkXhfzm5wdQqo0MAZCOC3 39s9Bd3nxqoTmw== -----END CERTIFICATE-----Generated at Mon Dec 22 15:25:34 2025 by rpki-client