This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json) Hash identifier: RXl3ooHQKh9gFI6NAgO5OMkL9K1BD4m5iFhE7rNmqbQ= Subject key identifier: CB:3E:87:1D:F4:68:89:B1:DC:44:64:1B:A2:C9:E7:6A:CB:8F:7E:F6 Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a Certificate serial: 019B3833505F25B2251236BCF4C0248183AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft Manifest number: 0250 Signing time: Fri 19 Dec 2025 20:00:45 +0000 Manifest this update: Fri 19 Dec 2025 20:00:45 +0000 Manifest next update: Sat 20 Dec 2025 20:00:45 +0000 Files and hashes: 1: 59uDpaWEezIlndm7ImZL33KmY98.roa (hash: faf2z4pHl5bW71/IOumRXeUq2DneYTGbFv6mONAFUxg=) 2: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: mudK65zAZZkKuq9euryNZBw7R8nc0h1xPopGv89Z0VQ=) 3: FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa (hash: 888rexXxSPjA4V1QgAN4s9dCepxu8RrFKO0s2g6CYeM=) 4: U02yntsAPfPK9DKBsRhU3Tc1HoQ.roa (hash: Rh+ABlbykq4lEGUZu+XpvC7FjPWl1oXlv1c6u60nzNY=) 5: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=) 6: kEeDyUl01hTZEGFM3itOVXFr62M.roa (hash: FjPrfh53WoDMFf9Gz/XVlKYYZ1UhSfrDGs50b54qMv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:50:5f:25:b2:25:12:36:bc:f4:c0:24:81:83:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a Validity Not Before: Dec 19 20:00:45 2025 GMT Not After : Dec 20 20:00:45 2025 GMT Subject: CN=cb3e871df46889b1dc44641ba2c9e76acb8f7ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b8:c8:9b:95:78:53:d8:62:15:1e:d9:b5:39: 9d:28:98:78:01:2d:b7:1b:b2:ce:8a:de:a0:75:44: 2f:1a:c1:f7:5a:61:46:27:a6:39:53:9e:2d:86:ef: 69:23:f0:ef:02:6d:b5:20:cd:04:e8:83:7e:29:63: 95:1f:d4:60:b9:55:f8:b5:28:65:67:91:35:1e:b3: 9e:07:53:59:41:d4:9c:6e:ee:14:f8:25:a3:9f:3f: 8c:73:1d:58:c8:e6:8d:96:00:ce:02:b9:59:07:fc: 21:83:84:18:aa:10:e7:ea:4e:d6:51:31:9b:88:00: 7c:b3:e9:91:2b:9b:80:6c:0f:eb:5a:3f:93:86:5f: 04:cf:f8:d6:7d:fc:f9:06:2f:96:b9:a0:17:3b:a1: 1d:a2:4f:2e:cc:77:6d:e4:dc:0b:50:97:cd:c5:59: 70:a5:16:f8:01:61:74:8a:ee:8b:a0:05:89:85:df: 84:b5:b2:e0:ab:75:72:af:12:f1:76:25:e1:e6:1a: db:5c:13:5f:86:b7:f7:42:35:2e:01:1f:0a:25:51: 6c:a3:1b:f8:4f:70:ae:c3:55:7e:4f:59:51:56:82: 50:0c:29:10:83:e9:2e:74:f0:1d:46:b4:05:4b:21: 6a:cf:37:c0:48:90:00:99:cd:99:4b:3f:f5:e2:70: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:3E:87:1D:F4:68:89:B1:DC:44:64:1B:A2:C9:E7:6A:CB:8F:7E:F6 X509v3 Authority Key Identifier: keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:1e:95:71:09:c4:0d:41:28:6f:6b:e0:53:fa:93:8b:32:92: 6e:6c:38:2d:bc:e5:b8:51:ab:f3:44:0b:7a:f1:ba:f6:82:30: 05:77:fd:36:54:e6:ab:df:65:74:df:e2:d4:9e:6c:3b:48:9f: de:af:06:b2:ab:58:e3:6a:5a:b3:c1:7b:77:1b:a1:9f:e7:4d: dc:8d:8e:2d:ff:be:34:af:ad:f6:9d:3c:4c:4f:2e:d9:ad:5d: 1a:08:ad:61:a5:d8:d6:de:6e:c6:4d:d9:19:94:d6:b9:e0:41: ff:d7:a7:ec:04:61:8b:95:2b:31:99:c0:a3:5b:a2:52:95:f7: 38:61:07:74:e3:65:6e:87:e4:ab:ef:02:b1:95:c9:42:08:55: c8:03:16:12:f4:5f:84:ac:3f:35:31:bb:96:56:c9:53:52:21: 64:c6:03:0b:bd:b5:5c:33:22:eb:85:36:8f:36:80:01:53:22: bf:59:59:ca:93:32:28:89:6f:d3:93:67:04:ad:be:88:75:cb: c9:bb:91:f3:57:52:af:45:9d:cc:cb:02:25:de:07:a8:a7:ef: 5a:e6:43:28:b3:d9:ee:ff:49:d6:c6:1f:2e:57:cd:06:30:6f: 0d:83:97:cf:34:83:68:db:8f:9e:54:11:42:2a:88:a7:95:d3: 50:05:18:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M1BfJbIlEja89MAkgYOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1 NTk1M2EwHhcNMjUxMjE5MjAwMDQ1WhcNMjUxMjIwMjAwMDQ1WjAzMTEwLwYDVQQD EyhjYjNlODcxZGY0Njg4OWIxZGM0NDY0MWJhMmM5ZTc2YWNiOGY3ZWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LjIm5V4U9hiFR7ZtTmdKJh4AS23 G7LOit6gdUQvGsH3WmFGJ6Y5U54thu9pI/DvAm21IM0E6IN+KWOVH9RguVX4tShl Z5E1HrOeB1NZQdScbu4U+CWjnz+Mcx1YyOaNlgDOArlZB/whg4QYqhDn6k7WUTGb iAB8s+mRK5uAbA/rWj+Thl8Ez/jWffz5Bi+WuaAXO6Edok8uzHdt5NwLUJfNxVlw pRb4AWF0iu6LoAWJhd+EtbLgq3VyrxLxdiXh5hrbXBNfhrf3QjUuAR8KJVFsoxv4 T3Cuw1V+T1lRVoJQDCkQg+kudPAdRrQFSyFqzzfASJAAmc2ZSz/14nDPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMs+hx30aImx3ERkG6LJ52rLj372MB8GA1UdIwQY MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt ZDY1NjE3YmQzYjRmLzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVx6VcQnE DUEob2vgU/qTizKSbmw4LbzluFGr80QLevG69oIwBXf9NlTmq99ldN/i1J5sO0if 3q8GsqtY42pas8F7dxuhn+dN3I2OLf++NK+t9p08TE8u2a1dGgitYaXY1t5uxk3Z GZTWueBB/9en7ARhi5UrMZnAo1uiUpX3OGEHdONlbofkq+8CsZXJQghVyAMWEvRf hKw/NTG7llbJU1IhZMYDC721XDMi64U2jzaAAVMiv1lZypMyKIlv05NnBK2+iHXL ybuR81dSr0WdzMsCJd4HqKfvWuZDKLPZ7v9J1sYfLlfNBjBvDYOXzzSDaNuPnlQR QiqIp5XTUAUYAg== -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:00 2025 by rpki-client