This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json) Hash identifier: R7NRYHEclh6IsxcqW+UPHzXraMkBb+Z+uFeEJP+SSRY= Subject key identifier: B8:23:CA:22:3F:56:98:95:25:04:53:1F:F1:38:DA:F8:2F:45:95:AE Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043 Certificate serial: 019B3AC6EC3B575D1C652E323C5EE375E256 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 08:01:13 +0000 Manifest this update: Sat 20 Dec 2025 08:01:13 +0000 Manifest next update: Sun 21 Dec 2025 08:01:13 +0000 Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=) 2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: b1jUwvK6BG+HUU2RD3F4ejlCfeSBH9MHkPy6Qr5E9hY=) 3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ec:3b:57:5d:1c:65:2e:32:3c:5e:e3:75:e2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e9d53310243187083fdc9609735465b1089043 Validity Not Before: Dec 20 08:01:13 2025 GMT Not After : Dec 21 08:01:13 2025 GMT Subject: CN=b823ca223f5698952504531ff138daf82f4595ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:25:ce:12:2b:1f:92:87:83:e7:ae:00:fe:9d: 4d:89:bb:19:cc:ba:0c:c0:76:c5:2d:e8:12:48:54: 4d:b7:b0:39:38:c7:90:b4:ed:f1:3b:6f:a0:f4:70: db:9a:ea:6e:eb:f3:3c:9a:e7:fa:a1:a9:12:61:e7: 91:37:cf:be:28:b5:58:cf:68:4c:fb:e9:23:67:f5: 25:7b:de:b9:83:10:10:56:30:24:fe:9b:82:7f:31: 30:5e:64:d1:b4:50:6e:a7:b0:4a:08:bc:8d:74:ba: e1:5a:7c:a8:39:e4:88:ba:e1:30:46:a3:47:1f:42: d7:6e:26:33:29:88:6c:a6:78:7a:61:f1:03:bf:d8: 13:95:dc:be:77:af:93:44:0d:cd:15:4e:29:bc:ea: 81:66:fd:4a:7f:ac:83:e4:76:dc:90:77:c7:96:b5: 04:b5:a6:33:4a:06:15:56:d1:aa:1c:61:b9:97:e2: ce:f4:13:e5:7c:db:5e:14:27:f7:34:8f:13:e8:1a: f7:13:63:6e:64:4b:1e:7e:f1:05:53:a0:07:40:7b: fe:2e:2b:c5:d3:0e:18:34:e0:35:cd:8c:35:c4:99: 5d:b3:6a:2f:1d:7b:27:b5:8a:b8:e8:ec:33:8e:81: fa:2d:fb:8e:b2:8c:d7:52:8a:24:e4:0b:f7:85:cd: 70:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:23:CA:22:3F:56:98:95:25:04:53:1F:F1:38:DA:F8:2F:45:95:AE X509v3 Authority Key Identifier: keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:62:eb:0b:32:8e:61:c5:e1:29:3e:21:ff:c7:63:73:c5:5f: ef:a1:54:27:2d:0a:b9:d4:a5:88:b6:4c:fe:5a:80:db:ca:76: 5b:ce:ec:37:73:dc:dd:67:87:59:9e:2a:1c:96:8a:1c:35:32: 50:89:40:80:cc:02:13:09:eb:f3:98:cd:61:90:6d:a2:20:cc: 42:cd:10:7e:8a:53:e0:17:59:6c:1b:c5:48:ab:38:4f:67:ad: e6:c0:10:df:b7:ad:5b:2f:6d:1f:2b:1f:ff:b4:19:43:ad:08: 3b:e2:2c:d6:23:3a:37:00:3e:56:66:c1:4b:9b:cc:0c:24:d6: a3:f6:af:27:c2:a2:3b:26:b3:14:54:6c:bd:18:7f:f4:ff:0b: 3e:79:7c:9c:aa:9d:b0:42:43:97:26:ce:a0:5e:11:eb:5d:ae: 03:e5:24:b5:64:ee:09:de:ad:a7:c8:2c:21:30:4e:c3:98:dc: e5:8a:ef:e4:aa:2d:d1:ea:f4:dc:0f:2f:e8:2e:9b:c0:7c:ae: 64:e5:12:e0:90:00:05:13:da:61:44:6a:93:9c:69:7c:2f:07: f0:16:be:d7:d8:96:02:f9:6e:61:a2:99:70:03:0e:84:a1:7c: 9b:90:54:7a:d6:4a:80:0a:61:2a:03:61:2d:37:88:e5:d3:23: 2f:aa:e0:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xuw7V10cZS4yPF7jdeJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw ODkwNDMwHhcNMjUxMjIwMDgwMTEzWhcNMjUxMjIxMDgwMTEzWjAzMTEwLwYDVQQD EyhiODIzY2EyMjNmNTY5ODk1MjUwNDUzMWZmMTM4ZGFmODJmNDU5NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCXOEisfkoeD564A/p1NibsZzLoM wHbFLegSSFRNt7A5OMeQtO3xO2+g9HDbmupu6/M8muf6oakSYeeRN8++KLVYz2hM ++kjZ/Ule965gxAQVjAk/puCfzEwXmTRtFBup7BKCLyNdLrhWnyoOeSIuuEwRqNH H0LXbiYzKYhspnh6YfEDv9gTldy+d6+TRA3NFU4pvOqBZv1Kf6yD5HbckHfHlrUE taYzSgYVVtGqHGG5l+LO9BPlfNteFCf3NI8T6Br3E2NuZEsefvEFU6AHQHv+LivF 0w4YNOA1zYw1xJlds2ovHXsntYq46OwzjoH6LfuOsozXUook5Av3hc1wywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgjyiI/VpiVJQRTH/E42vgvRZWuMB8GA1UdIwQY MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0 LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj2LrCzKO YcXhKT4h/8djc8Vf76FUJy0KudSliLZM/lqA28p2W87sN3Pc3WeHWZ4qHJaKHDUy UIlAgMwCEwnr85jNYZBtoiDMQs0QfopT4BdZbBvFSKs4T2et5sAQ37etWy9tHysf /7QZQ60IO+Is1iM6NwA+VmbBS5vMDCTWo/avJ8KiOyazFFRsvRh/9P8LPnl8nKqd sEJDlybOoF4R612uA+UktWTuCd6tp8gsITBOw5jc5Yrv5Kot0er03A8v6C6bwHyu ZOUS4JAABRPaYURqk5xpfC8H8Ba+19iWAvluYaKZcAMOhKF8m5BUetZKgAphKgNh LTeI5dMjL6rgDQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:38 2025 by rpki-client