This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json) Hash identifier: VTMmxSMlbMO42KdLd8sE2F9J5o3vlGvslkoGGFizIqc= Subject key identifier: 1E:3E:71:5D:66:65:00:0A:FD:E1:A2:BB:CC:A2:B5:21:80:B1:B6:A0 Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c Certificate serial: 019B5D52A4712338F99F673D6F49B44DD130 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft Manifest number: 1797 Signing time: Sat 27 Dec 2025 01:00:55 +0000 Manifest this update: Sat 27 Dec 2025 01:00:55 +0000 Manifest next update: Sun 28 Dec 2025 01:00:55 +0000 Files and hashes: 1: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (hash: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=) 2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: YPCKsnDvlrGqYq55QwfJKy6pYQf0WUJiNBzRcSr3HWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:a4:71:23:38:f9:9f:67:3d:6f:49:b4:4d:d1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c Validity Not Before: Dec 27 01:00:55 2025 GMT Not After : Dec 28 01:00:55 2025 GMT Subject: CN=1e3e715d6665000afde1a2bbcca2b52180b1b6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:35:b8:db:82:61:bf:8e:cb:b2:0b:db:02: 71:17:a0:74:a1:ad:11:15:bc:d6:f5:90:ef:73:7a: 4c:16:22:9b:4f:a0:36:43:03:98:64:67:88:6b:38: aa:30:06:d9:d4:36:38:54:66:4a:92:d0:49:a7:a0: 00:96:45:95:e3:de:06:02:26:71:da:eb:9a:e9:99: 01:5c:eb:76:6e:63:b1:ca:a1:47:4b:23:f2:b2:aa: 14:dd:05:a9:07:ef:a1:cf:90:ec:2e:5b:06:55:d9: b2:ae:0f:5c:40:d9:60:82:a4:8c:ac:97:40:97:8d: c8:0a:b9:cc:6f:26:68:dc:dc:9e:12:94:ae:bc:47: 84:8e:34:c2:c4:9f:bf:41:95:61:a9:68:d5:c0:d9: 64:c1:ca:34:69:ce:81:47:7d:d1:0f:51:b7:b4:86: 1c:a9:c9:a0:72:d9:27:91:8d:88:98:8c:af:9a:56: a8:0c:d1:64:3e:f0:0d:cf:c4:6b:da:93:7f:03:fc: bd:c7:5f:4b:d0:24:9f:0f:b3:6b:02:d8:95:43:12: 3f:7a:6d:14:3d:26:56:c7:df:18:50:39:91:9d:da: 3a:ac:52:ac:0f:c5:d1:d7:d6:8d:ca:40:b2:de:98: 82:39:5e:b0:97:0a:45:be:99:95:07:44:96:aa:f2: da:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:3E:71:5D:66:65:00:0A:FD:E1:A2:BB:CC:A2:B5:21:80:B1:B6:A0 X509v3 Authority Key Identifier: keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:91:a0:0f:36:88:a1:e3:28:53:05:84:c9:87:49:cc:36:49: f5:6b:2d:31:78:45:c2:10:ef:24:33:a3:41:92:ba:06:46:20: 27:f0:74:c0:23:2f:ce:a2:b4:9c:b6:88:76:73:f1:8b:0a:f2: 9d:81:43:51:bf:a7:bb:81:ed:81:76:25:86:f6:2d:d1:93:1a: 06:42:6b:51:67:16:25:f5:e5:24:89:26:f8:11:fd:61:c0:38: a8:04:f8:24:dd:b0:d1:13:e1:58:81:ee:33:ca:90:7b:f2:56: b5:e4:18:bd:10:9f:9d:c9:03:8f:0a:ad:a2:6d:2b:74:c9:b1: 12:0c:8e:41:89:6d:76:99:66:43:b3:54:a7:76:bb:a8:df:a4: 94:ca:d7:43:f8:c0:5f:29:2a:cd:ad:46:9d:d7:8f:29:82:6d: d1:de:57:12:2a:93:f4:88:66:10:48:82:9d:00:fe:44:ec:d1: 16:63:9b:4b:c0:89:1b:05:40:4a:58:3b:95:1f:66:4c:a7:84: ab:16:98:20:ab:c7:36:b5:d5:cd:53:a8:cc:ec:63:f8:76:0c: c4:4d:d6:67:d1:26:0b:95:af:8c:7d:e5:b6:b6:8d:b0:b8:f8: f1:07:1b:65:2f:64:ed:40:40:62:c6:dd:8c:e9:1d:c6:ae:ef: f6:52:55:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUqRxIzj5n2c9b0m0TdEwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZDIzY2M1NWFlZWFmMzM3ZWRiNzNlYWUyNWI1OTA5N2Ey Nzc4NGMwHhcNMjUxMjI3MDEwMDU1WhcNMjUxMjI4MDEwMDU1WjAzMTEwLwYDVQQD EygxZTNlNzE1ZDY2NjUwMDBhZmRlMWEyYmJjY2EyYjUyMTgwYjFiNmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylA1uNuCYb+Oy7IL2wJxF6B0oa0R FbzW9ZDvc3pMFiKbT6A2QwOYZGeIaziqMAbZ1DY4VGZKktBJp6AAlkWV494GAiZx 2uua6ZkBXOt2bmOxyqFHSyPysqoU3QWpB++hz5DsLlsGVdmyrg9cQNlggqSMrJdA l43ICrnMbyZo3NyeEpSuvEeEjjTCxJ+/QZVhqWjVwNlkwco0ac6BR33RD1G3tIYc qcmgctknkY2ImIyvmlaoDNFkPvANz8Rr2pN/A/y9x19L0CSfD7NrAtiVQxI/em0U PSZWx98YUDmRndo6rFKsD8XR19aNykCy3piCOV6wlwpFvpmVB0SWqvLaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4+cV1mZQAK/eGiu8yitSGAsbagMB8GA1UdIwQY MBaAFK/SPMVa7q8zfttz6uJbWQl6J3hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2Mt NDk0ZjA4YzIxNDk3LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2MtNDk0ZjA4YzIxNDk3 LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpGgDzaI oeMoUwWEyYdJzDZJ9WstMXhFwhDvJDOjQZK6BkYgJ/B0wCMvzqK0nLaIdnPxiwry nYFDUb+nu4HtgXYlhvYt0ZMaBkJrUWcWJfXlJIkm+BH9YcA4qAT4JN2w0RPhWIHu M8qQe/JWteQYvRCfnckDjwqtom0rdMmxEgyOQYltdplmQ7NUp3a7qN+klMrXQ/jA Xykqza1GndePKYJt0d5XEiqT9IhmEEiCnQD+ROzRFmObS8CJGwVASlg7lR9mTKeE qxaYIKvHNrXVzVOozOxj+HYMxE3WZ9EmC5WvjH3ltraNsLj48QcbZS9k7UBAYsbd jOkdxq7v9lJV2A== -----END CERTIFICATE-----Generated at Sat Dec 27 07:05:46 2025 by rpki-client