This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft File: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json) Hash identifier: M7v6nA5G3jW55Y7ORLE/JQNWy85jLKGHKC5jc/hMFO4= Subject key identifier: 3D:25:42:F5:67:C2:07:E5:9A:23:2F:0F:4F:74:EE:F3:C3:A3:72:77 Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Certificate serial: 019B3C7E5D85786A3B2DBC63392301883BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft Manifest number: 17B1 Signing time: Sat 20 Dec 2025 16:01:13 +0000 Manifest this update: Sat 20 Dec 2025 16:01:13 +0000 Manifest next update: Sun 21 Dec 2025 16:01:13 +0000 Files and hashes: 1: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: z39atnTHK2Wb5hniH+jJ2+UQKnJrlc/8cZ0O6Hjrx/8=) 2: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=) 3: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=) 4: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=) 5: _vpABpH1G0K1MkWppXgkduvknzo.roa (hash: vpV6s9o/VZ8yHVBA8qgPNDiqKNndzHDCOpFszNMOBTw=) 6: vDPixKgN9cnWG32t5mlBhsbJW7w.roa (hash: w3x81UuJu604xVLv5Y9pzJS6KY4OE1wgLypWn562lG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:5d:85:78:6a:3b:2d:bc:63:39:23:01:88:3b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4 Validity Not Before: Dec 20 16:01:13 2025 GMT Not After : Dec 21 16:01:13 2025 GMT Subject: CN=3d2542f567c207e59a232f0f4f74eef3c3a37277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:88:42:8f:2b:9d:0c:23:19:a7:dd:9f:57:e4: a7:d6:92:b6:4e:1d:b3:8c:2a:c1:58:bf:8e:33:5f: c8:24:a6:c3:04:2b:b6:1a:63:44:1e:64:72:13:a0: 1e:cb:9b:0a:70:a9:5f:b2:6b:17:80:37:74:de:e7: f8:4b:68:45:7d:3f:55:4d:2f:50:cf:5a:64:d8:49: 24:d5:b7:24:bd:f8:7d:84:db:a6:e3:c5:6e:0b:31: a4:56:46:a4:b1:7d:fd:9e:94:74:c1:e3:91:90:e2: 3f:01:27:dd:95:20:a6:f1:3e:d0:1a:e1:15:cb:bc: c9:ac:90:4f:ab:c9:56:e5:b8:99:cf:87:56:6b:69: df:4e:f3:2f:95:46:c6:70:d1:7d:8f:3c:19:61:9d: 64:27:65:d5:2a:ff:8c:77:3f:79:b2:6d:6f:de:59: 17:02:06:e6:22:66:2f:f5:a6:a9:e5:2c:13:4a:a1: 7b:66:56:f9:52:7b:56:05:45:b2:5b:12:b3:2b:70: ac:d1:e7:34:79:87:cd:ef:64:6d:fa:67:77:fc:ce: 21:8f:9e:8d:83:1f:84:cb:8d:f2:a1:a3:4a:16:ee: 41:54:32:de:a8:29:4f:9a:ef:b5:47:d4:29:88:b4: 1a:05:78:58:13:2e:ba:54:27:37:fb:10:d5:31:09: 2d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:25:42:F5:67:C2:07:E5:9A:23:2F:0F:4F:74:EE:F3:C3:A3:72:77 X509v3 Authority Key Identifier: keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:90:43:9b:e0:a7:d4:cd:57:7c:7b:00:95:27:3d:73:dd:68: 87:52:bd:dd:e8:7d:9a:c0:5e:e7:96:98:e3:77:97:32:9d:ca: e1:67:d7:1f:5f:c7:89:1a:77:3a:f8:3b:15:76:83:f2:fd:7a: 62:11:72:f3:68:72:f5:ad:4b:df:9e:12:19:2d:2f:81:0c:26: 25:14:79:bb:f0:e7:38:d8:77:8a:fc:15:61:8e:69:24:f8:53: e3:72:9e:99:2f:9c:5b:41:50:ae:07:39:1a:67:03:0d:7f:a5: df:75:e2:c9:2c:11:98:ee:0e:61:fc:4b:0c:0f:d4:58:e2:7c: b9:94:c3:6c:50:c3:22:a9:4a:07:7c:ff:67:8a:5f:58:1d:22: 78:b0:03:dd:4b:58:9b:5e:50:ea:dc:82:b8:d9:c8:bd:3d:e0: 16:a1:54:d1:49:92:c0:f3:99:72:92:ea:07:f7:31:bd:94:a6: 10:c0:ef:13:24:63:2d:93:2d:a7:48:4b:69:24:d3:e0:0b:af: 8e:bf:f9:86:c8:94:f7:0e:ea:b8:6e:c1:c0:f9:01:c3:d9:63: 7a:24:83:a3:db:d8:48:ab:26:4a:37:c5:a4:a1:e8:99:dc:6b: a0:39:6c:3b:11:1b:03:39:8f:29:36:3e:ae:fe:f6:41:7b:a1: c6:01:9c:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fl2FeGo7LbxjOSMBiDvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjllYTRkOWQ4M2E3MjhkZDQxMDI5ZTg2YWY4YTEzMGQz ODllZDQwHhcNMjUxMjIwMTYwMTEzWhcNMjUxMjIxMTYwMTEzWjAzMTEwLwYDVQQD EygzZDI1NDJmNTY3YzIwN2U1OWEyMzJmMGY0Zjc0ZWVmM2MzYTM3Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuohCjyudDCMZp92fV+Sn1pK2Th2z jCrBWL+OM1/IJKbDBCu2GmNEHmRyE6Aey5sKcKlfsmsXgDd03uf4S2hFfT9VTS9Q z1pk2Ekk1bckvfh9hNum48VuCzGkVkaksX39npR0weORkOI/ASfdlSCm8T7QGuEV y7zJrJBPq8lW5biZz4dWa2nfTvMvlUbGcNF9jzwZYZ1kJ2XVKv+Mdz95sm1v3lkX AgbmImYv9aap5SwTSqF7Zlb5UntWBUWyWxKzK3Cs0ec0eYfN72Rt+md3/M4hj56N gx+Ey43yoaNKFu5BVDLeqClPmu+1R9QpiLQaBXhYEy66VCc3+xDVMQkt5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0lQvVnwgflmiMvD0907vPDo3J3MB8GA1UdIwQY MBaAFPS56k2dg6co3UECnoavihMNOJ7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMt MDgxY2IyYjE3YWI1LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8xNGYzMDUtMDEzYi00NTNlLWFjNTMtMDgxY2IyYjE3YWI1 LzEvOUxucVRaMkRweWpkUVFLZWhxLUtFdzA0bnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJBDm+Cn 1M1XfHsAlSc9c91oh1K93eh9msBe55aY43eXMp3K4WfXH1/HiRp3Ovg7FXaD8v16 YhFy82hy9a1L354SGS0vgQwmJRR5u/DnONh3ivwVYY5pJPhT43KemS+cW0FQrgc5 GmcDDX+l33XiySwRmO4OYfxLDA/UWOJ8uZTDbFDDIqlKB3z/Z4pfWB0ieLAD3UtY m15Q6tyCuNnIvT3gFqFU0UmSwPOZcpLqB/cxvZSmEMDvEyRjLZMtp0hLaSTT4Auv jr/5hsiU9w7quG7BwPkBw9ljeiSDo9vYSKsmSjfFpKHomdxroDlsOxEbAzmPKTY+ rv72QXuhxgGceA== -----END CERTIFICATE-----Generated at Sat Dec 20 17:36:52 2025 by rpki-client