This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft File: 9gcH8oeiMJvuy7hS7kCqgxueeGY.mft (raw, json) Hash identifier: q76uvzsSBlQY8r46mXFwwhibX1+zKRHqw35l0SQ7OVg= Subject key identifier: 7A:A2:63:31:B4:AD:0E:AE:3F:69:9C:C9:23:A8:8E:D6:56:46:C6:EC Authority key identifier: F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66 Certificate issuer: /CN=f60707f287a2309beecbb852ee40aa831b9e7866 Certificate serial: 019B4F5FBA1E912AB060F9464FF549665133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft Manifest number: 0E3F Signing time: Wed 24 Dec 2025 08:00:31 +0000 Manifest this update: Wed 24 Dec 2025 08:00:31 +0000 Manifest next update: Thu 25 Dec 2025 08:00:31 +0000 Files and hashes: 1: 1qWzBwVhmQ6zdPJi5w7aMEYeKoc.roa (hash: QUUw5IgATMBX8godfHfSxzPR3Se/paZBDUtUUYMUESM=) 2: 9gcH8oeiMJvuy7hS7kCqgxueeGY.crl (hash: O7ntcVJgeMaQ8Nu0hjWZvXfWLOZu02cgtLZf3uV4ZkA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:5f:ba:1e:91:2a:b0:60:f9:46:4f:f5:49:66:51:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60707f287a2309beecbb852ee40aa831b9e7866 Validity Not Before: Dec 24 08:00:31 2025 GMT Not After : Dec 25 08:00:31 2025 GMT Subject: CN=7aa26331b4ad0eae3f699cc923a88ed65646c6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1f:a1:a0:7e:53:02:ae:ab:d9:ba:61:46:07: ed:8e:3b:07:c3:70:e2:12:bd:b6:e8:fe:b4:df:98: 3d:e6:e0:94:05:e6:9c:55:16:10:11:fe:41:b9:e2: a0:33:27:bf:eb:83:8b:b7:96:d3:79:2d:57:5b:dd: db:06:bf:fc:8a:53:9f:fc:25:00:9b:33:9e:0d:0c: 4f:34:b1:40:3a:41:68:13:00:00:56:58:a7:60:93: 61:42:61:2d:44:cc:72:3b:89:46:5a:72:54:64:f6: e8:fc:7e:43:f3:0e:46:d5:e9:e9:5f:23:3b:c3:6d: ff:94:c3:b6:e7:0d:42:10:74:26:0f:90:e0:fa:f2: e7:f6:3e:99:14:6c:c5:37:4e:7d:30:57:62:41:dc: 7e:2b:cc:9b:4e:44:77:97:8f:eb:11:df:de:b1:a7: 1a:d4:48:91:7f:77:16:70:13:15:f3:b2:b8:a8:e6: c1:cb:d5:47:2e:c1:d8:fb:57:c3:5f:1a:fb:f5:36: 06:92:77:a6:c8:2f:d8:0e:df:b6:01:41:4f:f5:5d: 1f:ac:95:33:22:f7:1a:11:b0:5a:70:5d:8f:33:31: 02:cd:d6:1a:14:d7:5c:2e:83:cc:7b:33:2f:f9:7c: 72:6e:8b:2d:1b:45:4d:ce:b8:a0:e0:c9:7e:74:75: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:A2:63:31:B4:AD:0E:AE:3F:69:9C:C9:23:A8:8E:D6:56:46:C6:EC X509v3 Authority Key Identifier: keyid:F6:07:07:F2:87:A2:30:9B:EE:CB:B8:52:EE:40:AA:83:1B:9E:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gcH8oeiMJvuy7hS7kCqgxueeGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a3a708-c669-477f-9d3b-e5fa350f8fa8/1/9gcH8oeiMJvuy7hS7kCqgxueeGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a5:0a:3e:29:87:6f:52:8c:11:cd:fa:a4:38:70:a5:be:24: 82:b8:ac:dc:17:d2:90:1a:3d:50:08:91:8d:f9:9e:86:26:0d: d4:a5:ce:89:43:0c:ef:be:bc:65:36:3c:e0:ff:9e:39:ce:20: d7:0e:3d:5b:d8:13:e4:cd:5d:f8:ea:d5:f8:a8:96:0a:58:88: ba:cd:36:7e:0b:24:dd:7e:df:ce:4d:9a:07:b3:dd:69:0e:2e: ac:c2:c6:59:ae:f5:2c:df:d9:a8:fe:15:6f:32:35:8c:aa:44: da:47:af:d4:6d:b7:50:fa:e3:02:63:d7:68:d9:fd:bb:ce:83: e3:28:85:6b:b8:24:5f:d0:ff:86:4c:80:f1:92:e7:15:16:ce: 2a:09:d6:a2:b9:18:7e:68:2c:e4:f4:28:cb:3f:18:da:01:d4: 24:2a:04:6d:f8:5a:ab:4d:35:ab:1c:40:f7:74:e8:f9:db:55: 89:96:8d:d1:04:15:61:52:b2:dd:17:80:96:54:2d:1d:02:c6: 90:be:a9:cf:4f:26:f2:a1:7c:a2:4c:4f:0a:15:6f:35:01:68: fc:01:8c:6c:96:13:47:75:7d:b0:91:62:a1:1a:c5:06:24:0e: cc:51:cd:dd:7b:b1:c1:fb:53:6f:64:b1:ed:86:1e:ca:15:72: 6c:46:20:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPX7oekSqwYPlGT/VJZlEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MDcwN2YyODdhMjMwOWJlZWNiYjg1MmVlNDBhYTgzMWI5 ZTc4NjYwHhcNMjUxMjI0MDgwMDMxWhcNMjUxMjI1MDgwMDMxWjAzMTEwLwYDVQQD Eyg3YWEyNjMzMWI0YWQwZWFlM2Y2OTljYzkyM2E4OGVkNjU2NDZjNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR+hoH5TAq6r2bphRgftjjsHw3Di Er226P6035g95uCUBeacVRYQEf5BueKgMye/64OLt5bTeS1XW93bBr/8ilOf/CUA mzOeDQxPNLFAOkFoEwAAVlinYJNhQmEtRMxyO4lGWnJUZPbo/H5D8w5G1enpXyM7 w23/lMO25w1CEHQmD5Dg+vLn9j6ZFGzFN059MFdiQdx+K8ybTkR3l4/rEd/esaca 1EiRf3cWcBMV87K4qObBy9VHLsHY+1fDXxr79TYGknemyC/YDt+2AUFP9V0frJUz IvcaEbBacF2PMzECzdYaFNdcLoPMezMv+XxybostG0VNzrig4Ml+dHVbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqiYzG0rQ6uP2mcySOojtZWRsbsMB8GA1UdIwQY MBaAFPYHB/KHojCb7su4Uu5AqoMbnnhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2It ZTVmYTM1MGY4ZmE4LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hM2E3MDgtYzY2OS00NzdmLTlkM2ItZTVmYTM1MGY4ZmE4 LzEvOWdjSDhvZWlNSnZ1eTdoUzdrQ3FneHVlZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIaUKPimH b1KMEc36pDhwpb4kgris3BfSkBo9UAiRjfmehiYN1KXOiUMM7768ZTY84P+eOc4g 1w49W9gT5M1d+OrV+KiWCliIus02fgsk3X7fzk2aB7PdaQ4urMLGWa71LN/ZqP4V bzI1jKpE2kev1G23UPrjAmPXaNn9u86D4yiFa7gkX9D/hkyA8ZLnFRbOKgnWorkY fmgs5PQoyz8Y2gHUJCoEbfhaq001qxxA93To+dtViZaN0QQVYVKy3ReAllQtHQLG kL6pz08m8qF8okxPChVvNQFo/AGMbJYTR3V9sJFioRrFBiQOzFHN3XuxwftTb2Sx 7YYeyhVybEYgiA== -----END CERTIFICATE-----Generated at Wed Dec 24 11:26:31 2025 by rpki-client