This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json) Hash identifier: tntiSWnaMxEbf28HYuDPQekyxbOdygsLFNct/DmZWwQ= Subject key identifier: A4:86:0A:81:CF:8F:73:78:60:E7:14:21:C9:F0:CF:02:4E:A6:16:98 Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Certificate serial: 019B2EF9F1866BF08CA70CD1CCD4FC586F9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 01:01:30 +0000 Manifest this update: Thu 18 Dec 2025 01:01:30 +0000 Manifest next update: Fri 19 Dec 2025 01:01:30 +0000 Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: 57FpQBcHDq5s62ac+/kiKDZ0oCs4g+hqGtjNZQuipPQ=) 2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:f1:86:6b:f0:8c:a7:0c:d1:cc:d4:fc:58:6f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Validity Not Before: Dec 18 01:01:30 2025 GMT Not After : Dec 19 01:01:30 2025 GMT Subject: CN=a4860a81cf8f737860e71421c9f0cf024ea61698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:6e:bc:28:32:07:fd:1c:40:97:30:37:68:ef: d3:9c:85:9e:dc:11:8c:b9:0c:96:c7:0c:9b:6e:7d: 56:bc:2c:8c:0a:e5:e3:d6:ff:d1:c0:81:e7:61:0c: 23:99:b2:5d:4c:6d:a1:14:03:9f:41:9f:f1:1f:68: 84:1c:74:95:e2:07:a6:b6:6d:2d:53:83:de:5f:7d: dd:a6:20:8e:51:d1:6f:3e:71:1f:1c:71:78:51:8d: ae:c3:aa:1f:67:7c:4e:3e:d9:85:63:23:d6:28:28: 66:10:1d:f8:24:4f:5d:53:89:a2:44:b7:f4:f3:9f: e4:38:27:7a:9e:10:6c:41:c1:93:24:f3:fb:5f:2b: 40:5f:1b:aa:e5:96:c7:b8:b4:83:ff:7e:06:7c:e7: 13:bc:0b:96:d8:84:5a:2f:6f:8a:bd:1f:6e:33:c1: ab:1b:a0:44:ef:98:8c:1b:37:d5:f3:d2:55:82:d9: b4:0f:e1:fa:b3:56:c7:4c:ee:69:63:2f:97:a4:af: b9:ba:c0:55:c7:8d:3a:06:7e:dd:01:fd:96:a2:a6: ce:38:4c:e8:54:de:3c:d6:a6:97:72:81:23:f3:e0: 55:79:dc:4f:fe:98:06:8c:1a:4c:ff:98:50:40:b1: 62:d2:63:1b:ea:33:3e:32:58:b2:7c:80:df:bf:ec: 62:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:86:0A:81:CF:8F:73:78:60:E7:14:21:C9:F0:CF:02:4E:A6:16:98 X509v3 Authority Key Identifier: keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:9d:13:65:bf:5f:10:d9:0f:c4:e2:da:88:7e:13:84:ae:61: 62:c4:9b:7f:1f:c6:a1:bd:b9:7f:b1:53:e6:b1:24:51:8a:68: 09:fc:4f:5e:dc:71:0d:f5:91:c3:d3:e5:06:54:85:c2:27:47: 1d:5c:a2:d3:cd:12:27:12:5b:77:e3:a5:fe:c9:14:ff:6f:a6: 6c:90:69:8a:e6:e3:f2:d0:f5:00:7c:d9:7e:11:6c:fd:80:20: fe:20:54:30:ab:df:8b:3f:c7:37:09:79:c9:75:63:03:52:46: 1b:00:e2:53:b3:17:4f:96:ea:84:b3:e1:87:4c:2c:f0:7d:55: bc:36:74:4c:7d:00:42:f1:aa:71:64:db:ae:05:73:04:17:0e: 48:82:20:ba:07:dc:d7:c5:fc:ad:79:be:30:f3:6c:d7:f0:b7: 38:f7:71:94:ce:15:ee:83:42:e9:28:22:ae:e3:2a:8d:89:dd: 30:02:34:61:bc:2b:4e:44:32:55:56:84:0a:62:59:7c:ee:9a: c5:a0:67:9f:18:e6:5d:b6:7c:8f:63:21:4a:f5:09:59:8e:70: b6:8f:b8:a7:e3:ff:3f:97:ca:fe:3e:72:11:c8:0c:ad:f3:2d: a9:83:4c:e5:3c:1c:84:e1:39:90:90:e2:df:62:a1:ff:02:b7: 91:c4:da:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+fGGa/CMpwzRzNT8WG+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3 NWUyZTcwHhcNMjUxMjE4MDEwMTMwWhcNMjUxMjE5MDEwMTMwWjAzMTEwLwYDVQQD EyhhNDg2MGE4MWNmOGY3Mzc4NjBlNzE0MjFjOWYwY2YwMjRlYTYxNjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh268KDIH/RxAlzA3aO/TnIWe3BGM uQyWxwybbn1WvCyMCuXj1v/RwIHnYQwjmbJdTG2hFAOfQZ/xH2iEHHSV4gemtm0t U4PeX33dpiCOUdFvPnEfHHF4UY2uw6ofZ3xOPtmFYyPWKChmEB34JE9dU4miRLf0 85/kOCd6nhBsQcGTJPP7XytAXxuq5ZbHuLSD/34GfOcTvAuW2IRaL2+KvR9uM8Gr G6BE75iMGzfV89JVgtm0D+H6s1bHTO5pYy+XpK+5usBVx406Bn7dAf2WoqbOOEzo VN481qaXcoEj8+BVedxP/pgGjBpM/5hQQLFi0mMb6jM+MliyfIDfv+xidwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSGCoHPj3N4YOcUIcnwzwJOphaYMB8GA1UdIwQY MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0 LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq50TZb9f ENkPxOLaiH4ThK5hYsSbfx/Gob25f7FT5rEkUYpoCfxPXtxxDfWRw9PlBlSFwidH HVyi080SJxJbd+Ol/skU/2+mbJBpiubj8tD1AHzZfhFs/YAg/iBUMKvfiz/HNwl5 yXVjA1JGGwDiU7MXT5bqhLPhh0ws8H1VvDZ0TH0AQvGqcWTbrgVzBBcOSIIgugfc 18X8rXm+MPNs1/C3OPdxlM4V7oNC6SgiruMqjYndMAI0YbwrTkQyVVaECmJZfO6a xaBnnxjmXbZ8j2MhSvUJWY5wto+4p+P/P5fK/j5yEcgMrfMtqYNM5TwchOE5kJDi 32Kh/wK3kcTazA== -----END CERTIFICATE-----Generated at Thu Dec 18 06:50:24 2025 by rpki-client