This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: 2N6UwRkm5KTeXp3NW1ieGNqcOhNQ6Eh48X2LoC+0nl8= Subject key identifier: 28:97:B6:66:D6:18:1F:13:7A:95:DD:1B:02:98:9D:C4:B5:FB:C9:D5 Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 019B41367261D1D0B7D8B721661EFC936A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 181E Signing time: Sun 21 Dec 2025 14:00:45 +0000 Manifest this update: Sun 21 Dec 2025 14:00:45 +0000 Manifest next update: Mon 22 Dec 2025 14:00:45 +0000 Files and hashes: 1: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: J0RPXYoAXnORd1aci6AWTmKpfeYuPqxAZzKFyLuvY/s=) 2: DSxMowOlSTC_MwVM7KlgQMPQNrE.roa (hash: nlhxWq37E/ratvBd5zCucB9L6gUR7nqV3LRV9tj9pbU=) 3: GnNRUTaHKbvwp7s1YiOty60yT_4.roa (hash: DPbHniq9Fo7ay7YRJ0huiIByC8Soz9pYUx8L6HOv9sQ=) 4: KnjyYVOU3YLigPxZRgN4AIoHUvQ.roa (hash: RKZNdSizbytDBkbsChEKMTDt0/k1bzP9vgLbksKhVuw=) 5: QNttCfsRuRLZvfJbkaOBCIPuwh0.roa (hash: JLiKXYuPVXcBLBoE9Kt2pa4tnI2ncSaE6qIZD2hxOms=) 6: eIGROqEP_UMAGqwd_UF27f4fmZI.roa (hash: PTOYqGwoLaRLkb7pZ9O+ROkYyxABiCDB4jwXpj+Fojw=) 7: iNeJPd86ukMD5LJRKI03IcI4aR8.roa (hash: zF30P8QynaOrv8qAmVAHNi6YCjV5/lmN6BVFSTJGcBU=) 8: rSXDYdDhtGY6mAhj2Yx5dAMm9XY.roa (hash: FCFQH85pPvPZL6nivkLqilRYIo7O5H0KAY3npTX/SAo=) 9: wEOyaII8ofTcxpdp7U0hKgvJ_rA.roa (hash: BzCbGCRxMuWWL0WJXC3qLwx7jLDACyNbgAFEvlAin18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:72:61:d1:d0:b7:d8:b7:21:66:1e:fc:93:6a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Dec 21 14:00:45 2025 GMT Not After : Dec 22 14:00:45 2025 GMT Subject: CN=2897b666d6181f137a95dd1b02989dc4b5fbc9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ef:15:f9:cd:08:3f:a4:95:21:23:bd:8e:70: e7:9b:ce:8e:c4:2f:2c:0e:8b:03:58:f1:1c:ce:08: 3c:dc:84:3b:1b:7a:bf:e5:83:d2:d5:82:87:df:ba: 5d:05:d1:da:27:57:38:f7:eb:61:65:a7:e8:75:e6: 9c:7c:cc:be:0e:14:d6:e5:f4:57:3f:02:b6:04:fc: 9d:25:8a:5e:ce:84:8b:62:1f:1d:3d:c7:4c:fa:70: 88:91:8a:6a:f9:0d:3d:08:a1:d2:22:2c:64:da:4b: 54:3a:d4:74:a4:73:e3:1f:49:a9:f9:f6:0b:a4:e1: c3:91:89:43:0b:2f:09:da:c8:a9:d4:66:e3:92:02: cd:30:61:64:13:83:f5:0d:b2:09:05:b2:59:f7:6f: 34:cd:80:d4:46:f9:06:47:3d:d3:8a:9c:50:05:21: c7:9f:88:a6:28:78:e2:c7:97:56:c8:cd:08:29:b1: 44:b2:84:e4:5f:49:20:0c:45:23:44:d2:f1:ff:3c: a5:c9:21:95:37:87:c2:0c:55:8f:b1:6d:5e:af:21: 32:dd:17:62:9b:5d:d9:cc:2c:a2:b8:0b:7d:68:58: 83:8e:54:9f:a9:46:75:28:63:52:1a:ff:b2:b8:43: f8:35:b7:2c:c3:36:50:6a:46:73:f1:b7:0b:b8:5b: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:97:B6:66:D6:18:1F:13:7A:95:DD:1B:02:98:9D:C4:B5:FB:C9:D5 X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:eb:75:c3:02:bb:7f:f5:36:f8:ca:10:20:7a:40:a7:1d:1f: 16:4d:42:45:59:96:5e:00:55:f3:8d:c1:79:d0:76:f7:0c:b0: 29:54:fb:fa:17:13:e6:26:0f:88:0a:e0:d9:d9:a2:11:d5:a0: fa:c2:cb:cf:ab:95:6e:24:9a:a2:9f:c0:81:02:88:6d:57:06: bc:36:19:90:25:26:67:46:68:de:3e:af:fd:92:af:a8:4e:d1: 51:2e:da:dd:70:1e:f8:fa:f9:95:1e:03:93:83:6c:5a:0c:b3: ed:86:07:fa:da:83:37:7f:89:2b:1b:20:6d:80:e5:63:29:e9: 2a:5e:d0:b8:a5:13:e8:2d:29:29:52:47:cd:fe:ce:4a:bb:de: 6b:b7:f2:75:7f:fc:e0:88:6c:cf:0c:70:78:19:03:71:fb:72: 01:63:92:62:2d:94:20:28:ee:57:a9:db:fc:d4:76:88:0e:e8: f4:18:cb:da:60:72:0a:7c:b0:8d:bf:ff:27:58:0e:77:bb:5a: 18:78:22:55:5a:57:c6:12:e6:85:7f:59:4d:5e:c9:4a:64:ef: 87:70:8b:fc:2f:b3:ad:13:cf:7d:15:68:9e:f9:f7:e9:4a:86: f5:cb:45:e2:a6:d5:5f:95:43:d1:2b:11:ee:ec:48:8e:68:aa: 76:4f:e1:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNnJh0dC32LchZh78k2qJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjUxMjIxMTQwMDQ1WhcNMjUxMjIyMTQwMDQ1WjAzMTEwLwYDVQQD EygyODk3YjY2NmQ2MTgxZjEzN2E5NWRkMWIwMjk4OWRjNGI1ZmJjOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+8V+c0IP6SVISO9jnDnm86OxC8s DosDWPEczgg83IQ7G3q/5YPS1YKH37pdBdHaJ1c49+thZafodeacfMy+DhTW5fRX PwK2BPydJYpezoSLYh8dPcdM+nCIkYpq+Q09CKHSIixk2ktUOtR0pHPjH0mp+fYL pOHDkYlDCy8J2sip1GbjkgLNMGFkE4P1DbIJBbJZ9280zYDURvkGRz3TipxQBSHH n4imKHjix5dWyM0IKbFEsoTkX0kgDEUjRNLx/zylySGVN4fCDFWPsW1eryEy3Rdi m13ZzCyiuAt9aFiDjlSfqUZ1KGNSGv+yuEP4NbcswzZQakZz8bcLuFsSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCiXtmbWGB8TepXdGwKYncS1+8nVMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUut1wwK7 f/U2+MoQIHpApx0fFk1CRVmWXgBV843BedB29wywKVT7+hcT5iYPiArg2dmiEdWg +sLLz6uVbiSaop/AgQKIbVcGvDYZkCUmZ0Zo3j6v/ZKvqE7RUS7a3XAe+Pr5lR4D k4NsWgyz7YYH+tqDN3+JKxsgbYDlYynpKl7QuKUT6C0pKVJHzf7OSrvea7fydX/8 4IhszwxweBkDcftyAWOSYi2UICjuV6nb/NR2iA7o9BjL2mByCnywjb//J1gOd7ta GHgiVVpXxhLmhX9ZTV7JSmTvh3CL/C+zrRPPfRVonvn36UqG9ctF4qbVX5VD0SsR 7uxIjmiqdk/hSw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:43:39 2025 by rpki-client