This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json) Hash identifier: 1lhD86tCJ7D9IQ6JCp+XzSBSIFYfDHWdl3IihxfaI8Q= Subject key identifier: AA:C0:27:2A:6F:F6:E8:3D:FC:33:82:3F:2C:6D:D7:B5:FF:8A:28:8C Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7 Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7 Certificate serial: 019B5D5326F84C9D3751881024C44A40F606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft Manifest number: 08CF Signing time: Sat 27 Dec 2025 01:01:29 +0000 Manifest this update: Sat 27 Dec 2025 01:01:29 +0000 Manifest next update: Sun 28 Dec 2025 01:01:29 +0000 Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=) 2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: 00/AeZmPxQeuUdWejKN0X7WUI7E24qH3X9+rApOdf1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:53:26:f8:4c:9d:37:51:88:10:24:c4:4a:40:f6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7 Validity Not Before: Dec 27 01:01:29 2025 GMT Not After : Dec 28 01:01:29 2025 GMT Subject: CN=aac0272a6ff6e83dfc33823f2c6dd7b5ff8a288c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:ff:50:41:1e:83:6a:cc:79:92:af:fa:f6: 34:74:f0:9a:8d:21:8c:7c:cb:55:06:ea:78:48:3e: 92:8c:08:b6:65:58:6b:a9:62:e0:92:38:c6:5b:dc: 4e:0f:46:43:20:7d:45:ac:ef:6c:89:c2:b4:7e:e7: 10:06:5e:e6:60:65:12:29:34:81:85:ec:7d:c1:93: 9d:aa:03:c2:6d:5e:96:dd:f6:0a:c4:e0:d9:e7:c5: 7c:d5:5a:69:36:5d:7e:d2:d7:ab:71:52:c1:f2:6b: 05:9d:13:8e:94:5b:19:6a:de:9a:cf:a4:96:a4:48: 6a:62:4b:cd:9a:9b:fe:47:4d:ce:c9:a4:3e:27:46: 48:dc:f1:33:e0:47:fe:d7:17:c9:12:4b:aa:aa:18: 60:0e:1e:15:45:cd:02:5a:ec:12:e0:51:fb:ef:1e: 68:a8:f9:7a:ad:7b:7f:1d:45:f1:6c:6d:0b:a2:b0: 1c:e1:72:0d:5f:55:5d:69:08:99:53:0c:a5:14:57: 2f:44:a8:23:17:36:5e:fd:5c:e0:9f:91:e7:14:03: d3:6d:50:bc:11:ad:6b:06:42:a0:2d:1e:b3:2b:9a: 27:13:10:b7:16:b9:fd:eb:2c:ac:88:06:56:f7:ef: 14:37:22:02:c7:06:f4:48:fa:be:da:54:eb:e0:3c: 6c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C0:27:2A:6F:F6:E8:3D:FC:33:82:3F:2C:6D:D7:B5:FF:8A:28:8C X509v3 Authority Key Identifier: keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:27:87:de:c2:f9:ce:19:61:7e:50:7c:39:0c:14:87:0f:fd: a8:30:9a:ea:32:f2:ea:15:70:b5:a4:8c:56:fb:25:91:eb:08: ca:86:3a:97:aa:84:5b:2e:85:2b:31:9c:6b:2b:41:5a:1c:69: 5b:f2:98:4d:0d:99:f6:6b:a3:1f:fc:f6:55:04:f3:88:54:28: 82:05:a2:d5:79:cd:97:c4:07:b7:2a:74:8a:7d:38:f2:87:17: b2:ac:8d:37:4f:d4:30:33:d8:ee:43:e2:41:76:96:a7:7a:f9: 8a:ce:8a:11:58:15:c7:3e:71:33:2e:35:9e:a5:75:e0:1e:d6: 82:dd:5c:01:b8:3a:3a:9d:cd:8f:f4:8d:7f:98:ed:37:84:d4: 75:68:18:b5:30:9d:0d:d4:43:21:81:0f:24:4d:8c:8b:87:7b: ac:43:2a:ea:87:0b:3a:39:b0:54:01:e2:12:74:25:80:9a:04: 4a:4e:b4:9e:4a:6e:f9:ef:f7:6d:43:a9:aa:37:a6:da:d3:85: 5f:55:1e:36:0d:68:e5:31:f1:58:90:4e:c4:66:7b:34:b9:6d: 6a:0b:54:3b:14:e1:d5:18:30:72:5e:e0:49:98:2d:3f:ab:e5: 7a:6c:bb:e8:04:42:df:df:b8:dd:eb:63:64:af:70:02:92:ff: 78:06:9b:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUyb4TJ03UYgQJMRKQPYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi ZjA1ZjcwHhcNMjUxMjI3MDEwMTI5WhcNMjUxMjI4MDEwMTI5WjAzMTEwLwYDVQQD EyhhYWMwMjcyYTZmZjZlODNkZmMzMzgyM2YyYzZkZDdiNWZmOGEyODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bP/UEEeg2rMeZKv+vY0dPCajSGM fMtVBup4SD6SjAi2ZVhrqWLgkjjGW9xOD0ZDIH1FrO9sicK0fucQBl7mYGUSKTSB hex9wZOdqgPCbV6W3fYKxODZ58V81VppNl1+0tercVLB8msFnROOlFsZat6az6SW pEhqYkvNmpv+R03OyaQ+J0ZI3PEz4Ef+1xfJEkuqqhhgDh4VRc0CWuwS4FH77x5o qPl6rXt/HUXxbG0LorAc4XINX1VdaQiZUwylFFcvRKgjFzZe/Vzgn5HnFAPTbVC8 Ea1rBkKgLR6zK5onExC3Frn96yysiAZW9+8UNyICxwb0SPq+2lTr4DxsxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrAJypv9ug9/DOCPyxt17X/iiiMMB8GA1UdIwQY MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1 LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfieH3sL5 zhlhflB8OQwUhw/9qDCa6jLy6hVwtaSMVvslkesIyoY6l6qEWy6FKzGcaytBWhxp W/KYTQ2Z9mujH/z2VQTziFQoggWi1XnNl8QHtyp0in048ocXsqyNN0/UMDPY7kPi QXaWp3r5is6KEVgVxz5xMy41nqV14B7Wgt1cAbg6Op3Nj/SNf5jtN4TUdWgYtTCd DdRDIYEPJE2Mi4d7rEMq6ocLOjmwVAHiEnQlgJoESk60nkpu+e/3bUOpqjem2tOF X1UeNg1o5THxWJBOxGZ7NLltagtUOxTh1Rgwcl7gSZgtP6vlemy76ARC39+43etj ZK9wApL/eAabtQ== -----END CERTIFICATE-----Generated at Sat Dec 27 07:05:09 2025 by rpki-client