This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json) Hash identifier: b2NBHHxOQic/6dr1p84vZzsnvN/5Hu5PTMIPl3eZtJo= Subject key identifier: A7:5E:C6:38:9C:29:8E:D1:AE:FA:B6:D2:78:8B:2A:51:6E:D0:BE:E4 Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af Certificate serial: 019B2AAEC8AB5934212DB4C06E774F738FAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft Manifest number: 020F Signing time: Wed 17 Dec 2025 05:00:56 +0000 Manifest this update: Wed 17 Dec 2025 05:00:56 +0000 Manifest next update: Thu 18 Dec 2025 05:00:56 +0000 Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=) 2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: NAfYJ4xc5f74MLDbN4K7T6PJ7U6L45mJI4k9MgyIbSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:ae:c8:ab:59:34:21:2d:b4:c0:6e:77:4f:73:8f:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af Validity Not Before: Dec 17 05:00:56 2025 GMT Not After : Dec 18 05:00:56 2025 GMT Subject: CN=a75ec6389c298ed1aefab6d2788b2a516ed0bee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e2:0b:b6:29:28:da:50:dc:4f:ef:a4:2c:76: 24:c5:e3:2d:64:ab:6a:60:88:95:15:43:a5:84:9b: 5a:c0:5a:3d:fc:c7:62:4a:10:bf:ea:01:89:cd:20: 5b:ee:f4:c2:fb:24:9d:d7:af:c4:0a:66:ed:8e:7d: 5c:44:9b:3d:6b:a7:4d:29:fa:16:01:ee:f4:5b:66: a3:12:58:4e:a4:65:d7:9a:5f:99:4b:fd:9b:c8:3c: f1:98:61:5f:b5:4f:82:ae:c8:89:24:04:89:74:a0: f6:0b:8b:7c:d0:5b:98:13:6d:7f:66:ce:b2:71:df: 9f:ba:53:55:af:40:f6:e8:58:0d:17:15:4d:73:19: 09:cc:ac:16:02:d0:bd:59:9a:fe:b3:f1:bd:da:fa: 64:79:93:07:e4:c5:94:3c:a9:b5:0b:e8:39:95:33: af:db:84:d0:35:41:98:11:29:ae:0a:29:10:45:4d: 4b:96:9d:52:32:1a:ad:1b:71:13:54:68:a3:87:23: 6a:61:64:24:64:59:a3:2b:a3:e6:37:da:56:c5:52: ee:9b:31:a6:45:f9:19:3f:a7:db:f1:24:a4:57:a5: ed:86:3e:28:7a:a3:32:1f:1b:00:42:b9:9a:4f:84: 22:c8:33:4a:56:d7:4a:04:d1:12:ed:92:af:5d:f5: 9b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:5E:C6:38:9C:29:8E:D1:AE:FA:B6:D2:78:8B:2A:51:6E:D0:BE:E4 X509v3 Authority Key Identifier: keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:a3:2d:e4:a2:6e:38:c7:24:df:cd:2d:3a:9c:fc:d0:98:47: 66:9c:80:e7:4a:51:ba:3c:38:ad:5f:f6:43:de:93:6a:8d:b8: 5a:7c:8a:04:cf:32:f2:46:e5:c5:1a:71:07:bc:be:a6:8c:85: 8a:2b:5b:84:d4:c9:92:2a:72:19:2b:d1:e6:a3:90:b1:81:f8: c9:b7:32:2f:e4:35:0c:a9:e5:9c:ff:c7:62:36:d4:27:2f:6d: 75:d4:c5:62:1a:28:61:ad:62:80:32:8e:b3:37:8b:b6:1d:2b: e7:48:47:2d:74:ac:c8:c4:d6:ad:bb:1a:81:e2:99:9a:3d:d9: 0d:69:90:a1:c8:c9:00:3d:cd:3c:29:57:f2:60:7b:c9:dd:5c: 1c:40:67:8b:bc:69:ac:04:36:8c:2c:aa:20:e2:a1:63:31:97: bf:1f:05:fa:3d:ec:18:b1:6d:cd:3a:70:34:76:a2:18:6a:59: 55:5c:f7:7f:1a:28:1e:6a:30:5d:97:05:1d:94:51:d1:2c:9d: 7f:59:4a:1d:c5:50:cd:fb:6f:b9:b3:d1:78:a9:77:38:d1:45: 63:0d:c6:d0:06:29:da:93:35:dc:1c:1e:18:5e:2c:53:3d:3f: e2:ee:8a:6f:cf:0e:7a:31:95:b5:5f:04:34:1e:a5:71:31:11: 67:9d:d5:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqrsirWTQhLbTAbndPc4+vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDQ1ZTI2MDc5YzMxYzg1MjE2YjczMDBjZDhlNjMzMGQ0 M2Q1YWYwHhcNMjUxMjE3MDUwMDU2WhcNMjUxMjE4MDUwMDU2WjAzMTEwLwYDVQQD EyhhNzVlYzYzODljMjk4ZWQxYWVmYWI2ZDI3ODhiMmE1MTZlZDBiZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eILtiko2lDcT++kLHYkxeMtZKtq YIiVFUOlhJtawFo9/MdiShC/6gGJzSBb7vTC+ySd16/ECmbtjn1cRJs9a6dNKfoW Ae70W2ajElhOpGXXml+ZS/2byDzxmGFftU+CrsiJJASJdKD2C4t80FuYE21/Zs6y cd+fulNVr0D26FgNFxVNcxkJzKwWAtC9WZr+s/G92vpkeZMH5MWUPKm1C+g5lTOv 24TQNUGYESmuCikQRU1Llp1SMhqtG3ETVGijhyNqYWQkZFmjK6PmN9pWxVLumzGm RfkZP6fb8SSkV6Xthj4oeqMyHxsAQrmaT4QiyDNKVtdKBNES7ZKvXfWbXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdexjicKY7Rrvq20niLKlFu0L7kMB8GA1UdIwQY MBaAFJvUXiYHnDHIUha3MAzY5jMNQ9WvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUt ZGY5ZDVmYmRiYzE1LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUtZGY5ZDVmYmRiYzE1 LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaMt5KJu OMck380tOpz80JhHZpyA50pRujw4rV/2Q96Tao24WnyKBM8y8kblxRpxB7y+poyF iitbhNTJkipyGSvR5qOQsYH4ybcyL+Q1DKnlnP/HYjbUJy9tddTFYhooYa1igDKO szeLth0r50hHLXSsyMTWrbsageKZmj3ZDWmQocjJAD3NPClX8mB7yd1cHEBni7xp rAQ2jCyqIOKhYzGXvx8F+j3sGLFtzTpwNHaiGGpZVVz3fxooHmowXZcFHZRR0Syd f1lKHcVQzftvubPReKl3ONFFYw3G0AYp2pM13BweGF4sUz0/4u6Kb88OejGVtV8E NB6lcTERZ53V2Q== -----END CERTIFICATE-----Generated at Wed Dec 17 13:29:20 2025 by rpki-client