This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft File: 9aKRIk-CvG0mtRntevviXLMsEVw.mft (raw, json) Hash identifier: TxW51ABhKRlyTcOuKot7cPVt47GLMFgu0p0P1aJ+T4Q= Subject key identifier: 95:2E:28:78:0C:56:BF:19:F6:65:0A:C6:52:BE:8A:C8:06:23:53:9A Authority key identifier: F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C Certificate issuer: /CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Certificate serial: 019B42EE7B2048D06213062387220E62EC00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft Manifest number: 0C5C Signing time: Sun 21 Dec 2025 22:01:23 +0000 Manifest this update: Sun 21 Dec 2025 22:01:23 +0000 Manifest next update: Mon 22 Dec 2025 22:01:23 +0000 Files and hashes: 1: 9aKRIk-CvG0mtRntevviXLMsEVw.crl (hash: Nijt+nXbSyFotO9rAcQoHlpJ5nF4fhmSSfvOYJerKy8=) 2: TvqtU6kGEWNG1Cpdb9p7065y7Us.roa (hash: feIhe0HlEu5dhdmycewb1eBF/nryf3+/l635UbwMTEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:7b:20:48:d0:62:13:06:23:87:22:0e:62:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5a291224f82bc6d26b519ed7afbe25cb32c115c Validity Not Before: Dec 21 22:01:23 2025 GMT Not After : Dec 22 22:01:23 2025 GMT Subject: CN=952e28780c56bf19f6650ac652be8ac80623539a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5b:b5:49:15:c9:fa:c3:56:4d:8f:33:0b:de: f4:44:b9:51:51:82:68:7b:a0:e3:0b:d2:10:48:b4: 7f:b8:36:df:73:7a:1e:82:de:59:15:a4:3f:38:66: 70:3f:40:9d:62:1b:76:b2:45:e8:1e:88:39:ed:7a: 07:1c:86:e7:02:af:3a:db:70:7c:fe:2e:b4:5c:c6: 16:87:77:d8:74:67:62:fc:d8:de:7b:70:ed:95:37: d0:7f:17:c8:ee:7e:5d:d5:e5:f5:ad:0f:e6:7a:fa: 06:aa:64:2b:04:0c:d6:0e:c2:aa:d4:70:a6:70:75: d0:01:78:49:d5:e6:13:82:1c:13:35:31:bf:ca:02: ff:33:3c:b6:83:39:e3:c0:b1:2e:d5:32:30:d3:0d: ce:6a:e7:71:59:c3:62:01:06:c0:2a:31:f9:03:ba: 8c:d7:2a:1e:dd:2e:d7:a2:5e:45:33:28:47:a1:2a: 1d:2c:a2:0c:f7:de:34:15:c8:7c:89:9d:fe:cb:1c: 28:a2:48:ef:e7:32:7f:48:8b:45:d1:85:ac:01:99: 6c:91:19:7d:34:ea:71:71:aa:35:55:96:03:27:06: 5b:ad:b2:13:b4:8c:1c:50:e9:e8:6d:c5:8c:dc:9c: 6d:87:b2:a5:f0:73:41:85:ef:4e:63:46:1b:7e:0b: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2E:28:78:0C:56:BF:19:F6:65:0A:C6:52:BE:8A:C8:06:23:53:9A X509v3 Authority Key Identifier: keyid:F5:A2:91:22:4F:82:BC:6D:26:B5:19:ED:7A:FB:E2:5C:B3:2C:11:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aKRIk-CvG0mtRntevviXLMsEVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a5cc2-c542-4c9b-8077-bc7977396d9b/1/9aKRIk-CvG0mtRntevviXLMsEVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cd:20:78:dd:07:a5:2c:07:e3:93:de:d6:d7:a6:61:1c:ee: c1:3b:42:a9:e3:20:0b:cf:44:97:88:f6:b0:7f:86:92:ea:76: 1d:80:9e:a6:d2:29:39:99:2a:6d:34:84:ed:d1:6f:56:3a:55: c3:32:c7:fd:a4:f5:61:4e:a5:1f:1d:84:4c:6f:ab:d0:02:53: 68:da:97:f2:86:84:38:fc:1b:98:0e:47:13:f2:f6:a4:a8:98: b4:97:d7:41:36:b6:c0:35:c9:1f:e3:23:4a:60:53:c2:dc:70: bd:33:d9:4f:cd:a8:77:e4:88:91:ea:d6:93:be:e3:e2:c8:c2: 49:85:63:92:f0:a5:eb:a7:0a:3e:5a:78:57:09:04:99:8b:ca: 59:f0:92:80:f7:d6:6a:f1:02:ca:6a:d0:bf:f5:91:92:6c:07: e1:f3:9f:74:d2:23:54:97:fd:46:a9:40:0d:38:b4:c2:f9:ee: a5:c9:67:8d:39:5c:67:d2:fe:67:85:2a:18:4b:6f:ce:77:2e: 8a:31:15:05:f1:a9:3e:03:61:7c:19:2c:0d:aa:5d:1d:b7:91: f1:fd:60:65:7e:89:e8:be:d1:8a:fb:b5:ee:b3:6d:9b:8f:45: 57:4a:5c:90:a2:7c:c6:a1:37:fe:19:93:13:3b:3b:90:1c:ff: b5:d6:7b:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7nsgSNBiEwYjhyIOYuwAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YTI5MTIyNGY4MmJjNmQyNmI1MTllZDdhZmJlMjVjYjMy YzExNWMwHhcNMjUxMjIxMjIwMTIzWhcNMjUxMjIyMjIwMTIzWjAzMTEwLwYDVQQD Eyg5NTJlMjg3ODBjNTZiZjE5ZjY2NTBhYzY1MmJlOGFjODA2MjM1MzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVu1SRXJ+sNWTY8zC970RLlRUYJo e6DjC9IQSLR/uDbfc3oegt5ZFaQ/OGZwP0CdYht2skXoHog57XoHHIbnAq8623B8 /i60XMYWh3fYdGdi/Njee3DtlTfQfxfI7n5d1eX1rQ/mevoGqmQrBAzWDsKq1HCm cHXQAXhJ1eYTghwTNTG/ygL/Mzy2gznjwLEu1TIw0w3OaudxWcNiAQbAKjH5A7qM 1yoe3S7Xol5FMyhHoSodLKIM9940Fch8iZ3+yxwookjv5zJ/SItF0YWsAZlskRl9 NOpxcao1VZYDJwZbrbITtIwcUOnobcWM3Jxth7Kl8HNBhe9OY0Ybfgs7wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUuKHgMVr8Z9mUKxlK+isgGI1OaMB8GA1UdIwQY MBaAFPWikSJPgrxtJrUZ7Xr74lyzLBFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzct YmM3OTc3Mzk2ZDliLzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTVjYzItYzU0Mi00YzliLTgwNzctYmM3OTc3Mzk2ZDli LzEvOWFLUklrLUN2RzBtdFJudGV2dmlYTE1zRVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV80geN0H pSwH45Pe1temYRzuwTtCqeMgC89El4j2sH+Gkup2HYCeptIpOZkqbTSE7dFvVjpV wzLH/aT1YU6lHx2ETG+r0AJTaNqX8oaEOPwbmA5HE/L2pKiYtJfXQTa2wDXJH+Mj SmBTwtxwvTPZT82od+SIkerWk77j4sjCSYVjkvCl66cKPlp4VwkEmYvKWfCSgPfW avECymrQv/WRkmwH4fOfdNIjVJf9RqlADTi0wvnupclnjTlcZ9L+Z4UqGEtvzncu ijEVBfGpPgNhfBksDapdHbeR8f1gZX6J6L7Rivu17rNtm49FV0pckKJ8xqE3/hmT Ezs7kBz/tdZ7qA== -----END CERTIFICATE-----Generated at Mon Dec 22 01:41:59 2025 by rpki-client