This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json) Hash identifier: PnoMoLEVKI+grMOoFWyYWr7zEtrlldX5gSy44DCvpIc= Subject key identifier: B7:7C:A9:29:B8:71:E6:E3:21:A7:C1:D3:EB:54:F6:E4:C5:F5:06:29 Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 Certificate issuer: /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Certificate serial: 019B3C7DD38C81CFD25BE813B71105FA741F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft Manifest number: 0D50 Signing time: Sat 20 Dec 2025 16:00:37 +0000 Manifest this update: Sat 20 Dec 2025 16:00:37 +0000 Manifest next update: Sun 21 Dec 2025 16:00:37 +0000 Files and hashes: 1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: TCb9+n4KKeSuYSdu2bIQyRsDB7k6i+YLwKbanDCwIV0=) 2: HnZ1VjQW735MMUi4UDqiepCAdeM.roa (hash: 31a3rYl8qptlSMbknXPbZIkMQ7iUM4ri0d4GzZPfheM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 16:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:d3:8c:81:cf:d2:5b:e8:13:b7:11:05:fa:74:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12 Validity Not Before: Dec 20 16:00:37 2025 GMT Not After : Dec 21 16:00:37 2025 GMT Subject: CN=b77ca929b871e6e321a7c1d3eb54f6e4c5f50629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4f:b3:7d:24:41:ae:fd:7e:50:52:58:9e:3f: 44:ce:1d:02:f9:3a:c1:e6:ab:f4:fa:95:70:f2:77: 9e:8d:25:29:2d:0b:28:69:2c:c1:17:3c:e0:79:be: e1:6d:bc:58:dd:15:59:3d:c5:97:70:e8:b1:b1:28: 29:59:7f:c2:c0:d7:48:42:12:9a:01:46:fb:bf:d1: c8:5b:81:1d:16:c9:10:92:2b:ff:3f:39:e8:db:b9: 19:67:1c:8c:bc:7a:92:99:84:4e:0d:f4:84:f7:10: a8:5f:88:5a:55:ba:4d:23:54:be:47:d7:03:69:0a: 87:01:02:76:65:fd:af:28:35:ce:57:20:00:bb:7d: 4e:57:83:e0:cf:59:7d:2b:84:7f:ee:82:bc:32:35: 6f:aa:f9:83:ed:26:ba:79:ee:2c:35:ed:7b:98:06: 00:57:11:26:ce:75:fa:8f:0b:08:15:d6:0e:6b:e8: a7:c4:ff:27:38:d7:23:a1:af:9e:13:78:0d:e6:47: c6:20:83:d5:ad:2b:5c:7c:40:10:27:31:2a:0e:c1: 59:01:85:57:71:e9:0c:44:48:56:50:fe:07:9a:af: 7e:2f:6d:82:66:a7:24:c1:d4:33:59:b6:9c:86:bb: bb:a0:da:8d:39:2b:05:98:a4:93:20:c6:1c:29:4f: 02:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:A9:29:B8:71:E6:E3:21:A7:C1:D3:EB:54:F6:E4:C5:F5:06:29 X509v3 Authority Key Identifier: keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:87:0c:89:d6:48:d3:b2:ee:e0:59:53:0c:41:b6:28:16:55: 17:67:87:5a:d1:7b:db:b0:2b:99:84:b3:85:b6:3d:21:86:18: 71:10:cf:03:70:5c:5b:80:69:67:05:5c:9b:8a:86:27:90:51: 4f:96:ec:97:b1:44:51:df:6d:04:e7:8d:48:64:c2:53:c6:de: 65:28:89:d9:03:f8:54:87:3b:40:bb:f6:97:31:b9:46:53:04: 72:7c:06:ec:e7:0f:40:66:91:a8:55:e2:f2:77:52:0f:c0:7c: fd:d3:e6:6a:36:5b:83:7f:94:a0:6a:5f:98:11:e1:26:3a:f0: 90:83:22:51:a3:d4:c6:56:16:a6:9f:07:b6:46:05:1d:c0:09: 97:c1:60:03:81:2e:7f:f0:4b:6f:b9:ae:fa:31:bf:87:11:57: ab:e4:28:4d:31:f3:0f:d5:58:64:7a:29:d7:77:fb:ba:ac:b0: 70:5e:07:00:80:ff:da:eb:98:b9:3f:e2:12:79:97:43:0c:f8: 7f:58:ee:1d:0b:d3:7f:cd:d4:65:2f:d2:4f:b8:80:d7:7e:03: 53:b8:63:b2:68:d9:79:2f:cc:2d:af:44:b2:14:f1:5e:cc:e5: 56:f7:25:34:a1:5d:25:43:91:2b:ac:f1:0e:7f:61:40:83:15: ba:29:70:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fdOMgc/SW+gTtxEF+nQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTUyN2EwNmEwMzVjYmNhZWNmMDBkYWNhMmZkODgzOTlj ZjlkMTIwHhcNMjUxMjIwMTYwMDM3WhcNMjUxMjIxMTYwMDM3WjAzMTEwLwYDVQQD EyhiNzdjYTkyOWI4NzFlNmUzMjFhN2MxZDNlYjU0ZjZlNGM1ZjUwNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk+zfSRBrv1+UFJYnj9Ezh0C+TrB 5qv0+pVw8neejSUpLQsoaSzBFzzgeb7hbbxY3RVZPcWXcOixsSgpWX/CwNdIQhKa AUb7v9HIW4EdFskQkiv/Pzno27kZZxyMvHqSmYRODfSE9xCoX4haVbpNI1S+R9cD aQqHAQJ2Zf2vKDXOVyAAu31OV4Pgz1l9K4R/7oK8MjVvqvmD7Sa6ee4sNe17mAYA VxEmznX6jwsIFdYOa+inxP8nONcjoa+eE3gN5kfGIIPVrStcfEAQJzEqDsFZAYVX cekMREhWUP4Hmq9+L22CZqckwdQzWbachru7oNqNOSsFmKSTIMYcKU8CzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLd8qSm4cebjIafB0+tU9uTF9QYpMB8GA1UdIwQY MBaAFPaVJ6BqA1y8rs8A2sov2IOZz50SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYt ODVjODU1MjI3YjIzLzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNDU1MzEtZDZjOC00ZGNlLWI2MDYtODVjODU1MjI3YjIz LzEvOXBVbm9Hb0RYTHl1endEYXlpX1lnNW5QblJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4cMidZI 07Lu4FlTDEG2KBZVF2eHWtF727ArmYSzhbY9IYYYcRDPA3BcW4BpZwVcm4qGJ5BR T5bsl7FEUd9tBOeNSGTCU8beZSiJ2QP4VIc7QLv2lzG5RlMEcnwG7OcPQGaRqFXi 8ndSD8B8/dPmajZbg3+UoGpfmBHhJjrwkIMiUaPUxlYWpp8HtkYFHcAJl8FgA4Eu f/BLb7mu+jG/hxFXq+QoTTHzD9VYZHop13f7uqywcF4HAID/2uuYuT/iEnmXQwz4 f1juHQvTf83UZS/ST7iA134DU7hjsmjZeS/MLa9EshTxXszlVvclNKFdJUORK6zx Dn9hQIMVuilwdw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:01:35 2025 by rpki-client