This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json) Hash identifier: +dI0Ka2wbxvfXX3ki7Om+OYX2eUswXSdTzYKyEe/h80= Subject key identifier: EA:4D:A8:3C:26:A2:67:72:2C:44:62:6F:61:22:C6:A1:98:A9:72:29 Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Certificate serial: 019B4136BEB7F0B3459C8EE1819FEADE883A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft Manifest number: 017D Signing time: Sun 21 Dec 2025 14:01:05 +0000 Manifest this update: Sun 21 Dec 2025 14:01:05 +0000 Manifest next update: Mon 22 Dec 2025 14:01:05 +0000 Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: dlNnNHMUV1KOZXWzzaSk6C5gKsvU62QF3hwBvh46B6E=) 2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:be:b7:f0:b3:45:9c:8e:e1:81:9f:ea:de:88:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Validity Not Before: Dec 21 14:01:05 2025 GMT Not After : Dec 22 14:01:05 2025 GMT Subject: CN=ea4da83c26a267722c44626f6122c6a198a97229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:32:be:e5:10:66:f8:1f:b7:72:97:b9:a5:2f: f1:39:06:b4:af:cd:73:61:1f:e7:89:19:89:4c:a0: 27:a6:ba:ff:bc:f4:25:73:4d:e1:35:93:49:0c:e5: 18:08:9d:23:28:cf:00:10:0a:4d:1d:e3:4f:a4:4f: e0:b3:d1:c8:d9:de:02:7c:b1:bd:d5:cb:37:c8:8b: cc:5f:e2:dc:2b:86:30:d6:b9:34:f4:1a:3f:d7:da: e4:69:4e:d9:fc:cd:45:a6:3c:2b:8a:b1:33:ad:bb: 39:11:e0:dd:8f:a4:bf:e4:98:d9:ee:02:76:a0:fc: 9d:e8:e8:56:9e:2e:8f:96:52:44:8f:b1:75:f1:8b: 12:fc:10:05:fd:3a:c9:61:b4:f9:5e:41:76:69:63: 40:5e:3a:5d:b7:23:03:ee:f9:76:c9:44:0b:7e:64: 49:9a:a3:e5:3c:65:62:32:6f:f8:59:5c:c2:2b:92: f4:17:01:11:94:41:36:d9:5b:90:ea:f5:fb:d4:54: 75:20:02:fb:71:0e:8f:33:ab:80:e8:90:36:17:42: a2:9b:4f:04:70:78:82:a5:ed:2d:e8:0d:ea:6c:47: 25:96:68:d0:72:d6:31:71:5a:cb:fa:24:5b:7a:58: 65:f3:2c:1d:3d:7c:56:86:0e:9b:13:01:fa:a7:75: a9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4D:A8:3C:26:A2:67:72:2C:44:62:6F:61:22:C6:A1:98:A9:72:29 X509v3 Authority Key Identifier: keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:22:59:a6:30:56:e0:d1:9e:45:88:0e:46:65:ab:d0:81:11: 4f:c2:5c:10:43:42:95:75:87:c5:77:98:a9:a1:c0:e2:d6:5b: e5:6b:de:8c:c5:92:f5:d8:9c:2c:e9:d3:48:dc:73:d9:2a:14: 4f:86:d3:78:87:0c:50:9d:37:cb:c1:50:d5:ee:cb:1b:d6:70: 7a:87:ea:a0:40:a0:77:96:8b:bf:d8:4c:b5:8f:93:f8:69:32: 24:12:fd:61:e5:88:78:d8:08:73:55:40:fc:5c:db:a3:05:df: 01:57:28:0f:d3:99:0b:e0:b9:66:dc:4b:fe:12:21:27:99:83: ec:76:4a:7f:ad:bb:ad:a7:af:dd:6d:37:7c:c7:28:9a:f4:ac: 07:f2:dd:b1:cd:d7:ad:a0:ad:ce:69:cf:0e:df:39:5a:d0:1f: 99:60:b6:79:b5:a1:dd:2f:f5:23:ad:62:18:90:7e:19:6d:37: d2:b9:25:0e:e4:a7:17:ad:cb:0c:97:17:ba:b6:df:a2:22:5f: 9d:20:0e:e1:0f:d0:17:bf:a8:2c:5d:58:b9:e4:e0:81:34:df: 9a:22:23:2c:67:41:67:b2:d6:94:50:0c:71:ca:77:01:8f:09: 90:1e:c8:82:56:8d:f0:2a:e3:bb:37:e6:4a:f4:e4:d2:db:88: 90:01:22:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNr638LNFnI7hgZ/q3og6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTk4ODE4ODBjNmY5OTVjMjljMTc3YmVkMzNhMWE2ZTNk NGZiMzAwHhcNMjUxMjIxMTQwMTA1WhcNMjUxMjIyMTQwMTA1WjAzMTEwLwYDVQQD EyhlYTRkYTgzYzI2YTI2NzcyMmM0NDYyNmY2MTIyYzZhMTk4YTk3MjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjK+5RBm+B+3cpe5pS/xOQa0r81z YR/niRmJTKAnprr/vPQlc03hNZNJDOUYCJ0jKM8AEApNHeNPpE/gs9HI2d4CfLG9 1cs3yIvMX+LcK4Yw1rk09Bo/19rkaU7Z/M1FpjwrirEzrbs5EeDdj6S/5JjZ7gJ2 oPyd6OhWni6PllJEj7F18YsS/BAF/TrJYbT5XkF2aWNAXjpdtyMD7vl2yUQLfmRJ mqPlPGViMm/4WVzCK5L0FwERlEE22VuQ6vX71FR1IAL7cQ6PM6uA6JA2F0Kim08E cHiCpe0t6A3qbEcllmjQctYxcVrL+iRbelhl8ywdPXxWhg6bEwH6p3WpfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpNqDwmomdyLERib2EixqGYqXIpMB8GA1UdIwQY MBaAFPSZiBiAxvmVwpwXe+0zoabj1PswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3Mjkt YjNhZjgzMDBhZGQzLzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3MjktYjNhZjgzMDBhZGQz LzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiJZpjBW 4NGeRYgORmWr0IERT8JcEENClXWHxXeYqaHA4tZb5WvejMWS9dicLOnTSNxz2SoU T4bTeIcMUJ03y8FQ1e7LG9ZweofqoECgd5aLv9hMtY+T+GkyJBL9YeWIeNgIc1VA /FzbowXfAVcoD9OZC+C5ZtxL/hIhJ5mD7HZKf627raev3W03fMcomvSsB/Ldsc3X raCtzmnPDt85WtAfmWC2ebWh3S/1I61iGJB+GW030rklDuSnF63LDJcXurbfoiJf nSAO4Q/QF7+oLF1YueTggTTfmiIjLGdBZ7LWlFAMccp3AY8JkB7IglaN8Crjuzfm SvTk0tuIkAEikw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:30 2025 by rpki-client