This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft File: 9EufgJPdiJ5HfO-np1VjkqZrOHA.mft (raw, json) Hash identifier: S4Rx7MlwLVmndwot0dmRTgzbBFd1g0nLPIAaSoI5P3s= Subject key identifier: 5F:D0:19:16:A3:2F:E0:26:AF:2D:9D:1D:A3:41:2D:00:1C:44:94:D0 Authority key identifier: F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70 Certificate issuer: /CN=f44b9f8093dd889e477cefa7a7556392a66b3870 Certificate serial: 019B4BF2A0553C9657934B9A46F983857D1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft Manifest number: 0CAF Signing time: Tue 23 Dec 2025 16:02:30 +0000 Manifest this update: Tue 23 Dec 2025 16:02:30 +0000 Manifest next update: Wed 24 Dec 2025 16:02:30 +0000 Files and hashes: 1: 2iT_kM3PkUEf8NeJ29enDVY5XmM.roa (hash: Dzh4bklpE4pirUMSN3Hq/Ic2ypp5OVgKHU7vTB3ErEs=) 2: 9EufgJPdiJ5HfO-np1VjkqZrOHA.crl (hash: K2ysJB22aN0XZlzVb6+aqZPJ4iLH6drWJ6ZvAb4eWnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:a0:55:3c:96:57:93:4b:9a:46:f9:83:85:7d:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44b9f8093dd889e477cefa7a7556392a66b3870 Validity Not Before: Dec 23 16:02:30 2025 GMT Not After : Dec 24 16:02:30 2025 GMT Subject: CN=5fd01916a32fe026af2d9d1da3412d001c4494d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:64:97:7b:eb:d6:11:a1:7f:d8:b5:53:01: a5:85:4a:1a:2d:4e:ea:ac:ce:ad:b9:61:ed:b2:56: 2f:ae:c3:10:04:11:14:a9:82:e5:64:ed:e9:bc:93: 76:54:65:c5:53:77:02:31:5c:76:05:21:41:20:18: b8:f7:1a:97:ac:f0:38:e9:f7:22:c8:bc:10:20:cb: d5:c2:06:a5:94:71:c3:cd:e5:9e:f6:c4:af:fd:14: 12:a3:2f:65:62:ae:c6:cb:12:59:93:72:ef:3d:0a: d6:71:d9:65:ba:fa:12:87:29:b4:08:a6:55:19:43: 87:8a:be:dc:55:09:66:4a:5c:a8:f7:0b:b2:64:6a: 59:d2:3a:30:64:ac:5e:73:38:6e:8c:3c:9c:af:e1: 3b:8c:71:b7:d0:af:94:3d:a1:b5:76:c7:3c:fb:7b: 98:8d:71:0c:24:f7:b9:11:63:78:2e:23:85:3c:ff: 77:83:43:30:dc:eb:30:2c:f3:0d:0f:0f:5c:76:c0: a3:58:29:4f:ad:0b:bd:9c:0f:67:6a:65:f8:53:68: d2:6f:d1:44:44:26:e7:38:7c:f2:85:5f:44:7b:df: 8b:67:f5:9c:df:1f:d7:c2:4c:72:50:72:7c:a4:4f: c2:b8:a7:a1:a6:2e:23:c6:a4:9a:e3:8c:df:6e:16: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D0:19:16:A3:2F:E0:26:AF:2D:9D:1D:A3:41:2D:00:1C:44:94:D0 X509v3 Authority Key Identifier: keyid:F4:4B:9F:80:93:DD:88:9E:47:7C:EF:A7:A7:55:63:92:A6:6B:38:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EufgJPdiJ5HfO-np1VjkqZrOHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ea19f8-7dd2-429d-9718-103b0485203b/1/9EufgJPdiJ5HfO-np1VjkqZrOHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fb:38:d3:34:1c:39:56:9f:dd:ca:d5:f8:2a:9a:5c:d9:61: 02:b0:3c:ba:9b:73:06:be:4e:fe:8b:a6:50:73:f6:c2:08:b3: d8:3c:f7:d8:aa:74:af:96:c5:88:dc:a0:02:4b:b9:c3:df:6b: d6:7f:4b:c9:5d:50:b7:0a:d4:78:e1:13:43:4e:64:17:43:7e: c5:b5:a7:16:50:42:94:ba:bf:b3:94:d7:b9:44:f7:86:38:59: 91:50:05:e7:39:c4:80:5e:c2:ed:25:97:01:72:24:3f:d1:f8: a5:63:7f:31:7a:ed:12:59:7a:6d:5e:8a:fe:0b:20:15:1a:de: 8a:c9:da:0f:ad:1a:e2:a0:26:5e:b2:86:f1:33:14:b2:79:ab: be:a7:6c:b1:d6:28:90:46:46:2c:81:65:7c:03:17:c9:c0:e8: d5:e5:60:49:3b:95:e1:65:d0:ca:e5:51:5a:4f:36:10:f1:2c: d8:20:6c:75:ea:10:6f:6e:97:79:d2:c2:e2:f7:03:63:48:4a: bd:f8:65:0d:e0:5b:96:32:fe:4f:0c:b5:d3:3c:7c:8f:7e:ff: 3f:0d:1f:fa:e2:69:d4:f8:fd:1d:c8:b1:ed:47:5e:4a:6b:b6: 4c:4c:81:18:f9:0c:4d:d9:df:76:b6:a4:96:6f:0a:f5:6b:27: 90:1a:af:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8qBVPJZXk0uaRvmDhX0fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NGI5ZjgwOTNkZDg4OWU0NzdjZWZhN2E3NTU2MzkyYTY2 YjM4NzAwHhcNMjUxMjIzMTYwMjMwWhcNMjUxMjI0MTYwMjMwWjAzMTEwLwYDVQQD Eyg1ZmQwMTkxNmEzMmZlMDI2YWYyZDlkMWRhMzQxMmQwMDFjNDQ5NGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD5kl3vr1hGhf9i1UwGlhUoaLU7q rM6tuWHtslYvrsMQBBEUqYLlZO3pvJN2VGXFU3cCMVx2BSFBIBi49xqXrPA46fci yLwQIMvVwgallHHDzeWe9sSv/RQSoy9lYq7GyxJZk3LvPQrWcdlluvoShym0CKZV GUOHir7cVQlmSlyo9wuyZGpZ0jowZKxeczhujDycr+E7jHG30K+UPaG1dsc8+3uY jXEMJPe5EWN4LiOFPP93g0Mw3OswLPMNDw9cdsCjWClPrQu9nA9namX4U2jSb9FE RCbnOHzyhV9Ee9+LZ/Wc3x/XwkxyUHJ8pE/CuKehpi4jxqSa44zfbhaM1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/QGRajL+Amry2dHaNBLQAcRJTQMB8GA1UdIwQY MBaAFPRLn4CT3YieR3zvp6dVY5KmazhwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgt MTAzYjA0ODUyMDNiLzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9lYTE5ZjgtN2RkMi00MjlkLTk3MTgtMTAzYjA0ODUyMDNi LzEvOUV1ZmdKUGRpSjVIZk8tbnAxVmprcVpyT0hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPs40zQc OVaf3crV+CqaXNlhArA8uptzBr5O/oumUHP2wgiz2Dz32Kp0r5bFiNygAku5w99r 1n9LyV1QtwrUeOETQ05kF0N+xbWnFlBClLq/s5TXuUT3hjhZkVAF5znEgF7C7SWX AXIkP9H4pWN/MXrtEll6bV6K/gsgFRreisnaD60a4qAmXrKG8TMUsnmrvqdssdYo kEZGLIFlfAMXycDo1eVgSTuV4WXQyuVRWk82EPEs2CBsdeoQb26XedLC4vcDY0hK vfhlDeBbljL+Twy10zx8j37/Pw0f+uJp1Pj9Hcix7UdeSmu2TEyBGPkMTdnfdrak lm8K9WsnkBqvUA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:35:08 2025 by rpki-client