This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft File: f9GKakmRDMMx3JERSuWbcYXV8w0.mft (raw, json) Hash identifier: xGg4FW97v2Xc9p3GtIYkW63QdJX54yE/1IkDHFV2O70= Subject key identifier: FD:C8:55:B2:9D:56:B0:7D:BE:3A:F2:F3:28:7D:74:1B:48:44:7C:A8 Authority key identifier: 7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D Certificate issuer: /CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d Certificate serial: 019B4249322C4DC15FDEE2B9F034A2262ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:00:51 +0000 Manifest this update: Sun 21 Dec 2025 19:00:51 +0000 Manifest next update: Mon 22 Dec 2025 19:00:51 +0000 Files and hashes: 1: V0avlIfWr1Ry2dGFNI3vVU-t6qU.roa (hash: 9Z/Tt+Wupiygby78OxWX59dKpP6JLPmGNyGTYRjbjHQ=) 2: f9GKakmRDMMx3JERSuWbcYXV8w0.crl (hash: hZydrzl6MHyg1lupuyzVMpkLn+WIYjuNXVuMh0JpZPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:32:2c:4d:c1:5f:de:e2:b9:f0:34:a2:26:2e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fd18a6a49910cc331dc91114ae59b7185d5f30d Validity Not Before: Dec 21 19:00:51 2025 GMT Not After : Dec 22 19:00:51 2025 GMT Subject: CN=fdc855b29d56b07dbe3af2f3287d741b48447ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b6:69:d1:89:22:11:c2:81:df:97:4a:cb:2e: 31:91:9c:1a:82:b2:78:33:d7:d2:ca:bc:30:91:bf: 1e:90:09:c8:79:18:72:84:0c:57:a0:ff:b8:55:b3: e6:3c:7b:11:ea:c7:cb:69:04:80:d4:d9:8c:84:47: 80:c3:f3:90:b9:a3:95:db:83:ca:e1:fd:c1:9e:5b: 13:92:bd:9b:61:d7:4a:35:e0:25:40:3a:44:5b:41: 35:26:2b:c4:ac:a2:18:05:0d:d1:15:8c:e9:45:6f: 0b:b2:3d:dc:4a:50:e1:6c:ee:6b:0b:b0:99:d2:e2: 34:38:52:4f:fa:c9:66:86:c8:8f:54:2d:8c:b8:51: 81:4c:c4:81:16:32:ec:55:a9:1f:11:93:0b:a0:d4: 86:b4:9d:e6:59:69:52:a8:c3:67:fb:80:2f:95:bf: ea:c0:4b:9e:1e:25:78:47:2c:2d:0c:ca:ed:33:b3: 2c:c0:b8:69:83:4b:f7:9b:d1:90:76:1a:35:be:d8: 02:b4:bd:82:af:e5:7e:71:92:d4:a3:0a:23:e2:a6: f3:e3:24:af:0e:b8:8c:2c:d3:bd:fd:ac:64:68:f1: 6a:10:09:fb:e0:fa:00:28:35:34:12:29:11:36:b8: b3:c9:ce:e5:0a:ac:26:ff:f4:3b:cb:c8:33:89:fe: c4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C8:55:B2:9D:56:B0:7D:BE:3A:F2:F3:28:7D:74:1B:48:44:7C:A8 X509v3 Authority Key Identifier: keyid:7F:D1:8A:6A:49:91:0C:C3:31:DC:91:11:4A:E5:9B:71:85:D5:F3:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9GKakmRDMMx3JERSuWbcYXV8w0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0947f2-22ca-47cb-89ad-3e50a5f01998/1/f9GKakmRDMMx3JERSuWbcYXV8w0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:95:a9:a5:ce:12:fa:45:fa:74:c2:1d:0e:ba:6a:86:b5:7e: b4:a7:dd:57:61:19:42:f7:f8:36:7b:8d:97:5c:ad:4e:34:d7: be:51:50:74:0b:41:4f:19:3a:17:54:09:61:65:c0:cc:e1:5b: 71:f8:ea:49:0c:29:54:04:6e:06:b7:26:da:18:8a:c8:ab:f4: d1:dd:c6:41:89:68:0e:64:87:ba:5b:67:5a:d1:49:e4:e2:38: 15:04:99:87:58:d7:15:8f:a9:1f:f2:ea:dd:cf:65:7c:5e:5f: 7d:83:3b:bc:8e:c6:fd:12:df:78:a9:58:28:e8:46:01:55:86: 95:3d:ea:9b:e7:c7:2e:3f:f4:d6:00:3c:78:7f:ad:99:1d:fb: db:42:27:ad:ef:34:58:3b:a6:90:84:43:a5:dd:86:a8:c2:98: 59:04:4d:ee:1b:12:6e:ff:6a:e4:b7:28:d6:e1:0e:38:e9:ae: 66:d9:97:38:01:7a:e9:2e:ec:90:0f:b1:08:9d:1b:08:74:43: aa:a2:64:5b:6e:39:65:69:53:cb:43:8f:9c:28:2c:fe:40:f1: af:3f:6b:04:9b:12:a9:26:de:4a:e0:01:90:56:41:43:dd:2b: 62:ea:c1:d4:ba:98:da:e9:d3:85:21:92:52:32:09:d5:5a:14: 50:ad:ae:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSTIsTcFf3uK58DSiJi7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZDE4YTZhNDk5MTBjYzMzMWRjOTExMTRhZTU5YjcxODVk NWYzMGQwHhcNMjUxMjIxMTkwMDUxWhcNMjUxMjIyMTkwMDUxWjAzMTEwLwYDVQQD EyhmZGM4NTViMjlkNTZiMDdkYmUzYWYyZjMyODdkNzQxYjQ4NDQ3Y2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrZp0YkiEcKB35dKyy4xkZwagrJ4 M9fSyrwwkb8ekAnIeRhyhAxXoP+4VbPmPHsR6sfLaQSA1NmMhEeAw/OQuaOV24PK 4f3BnlsTkr2bYddKNeAlQDpEW0E1JivErKIYBQ3RFYzpRW8Lsj3cSlDhbO5rC7CZ 0uI0OFJP+slmhsiPVC2MuFGBTMSBFjLsVakfEZMLoNSGtJ3mWWlSqMNn+4Avlb/q wEueHiV4RywtDMrtM7MswLhpg0v3m9GQdho1vtgCtL2Cr+V+cZLUowoj4qbz4ySv DriMLNO9/axkaPFqEAn74PoAKDU0EikRNrizyc7lCqwm//Q7y8gzif7ENwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3IVbKdVrB9vjry8yh9dBtIRHyoMB8GA1UdIwQY MBaAFH/RimpJkQzDMdyREUrlm3GF1fMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wOTQ3ZjItMjJjYS00N2NiLTg5YWQt M2U1MGE1ZjAxOTk4LzEvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wOTQ3ZjItMjJjYS00N2NiLTg5YWQtM2U1MGE1ZjAxOTk4 LzEvZjlHS2FrbVJETU14M0pFUlN1V2JjWVhWOHcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpWppc4S +kX6dMIdDrpqhrV+tKfdV2EZQvf4NnuNl1ytTjTXvlFQdAtBTxk6F1QJYWXAzOFb cfjqSQwpVARuBrcm2hiKyKv00d3GQYloDmSHultnWtFJ5OI4FQSZh1jXFY+pH/Lq 3c9lfF5ffYM7vI7G/RLfeKlYKOhGAVWGlT3qm+fHLj/01gA8eH+tmR3720Inre80 WDumkIRDpd2GqMKYWQRN7hsSbv9q5Lco1uEOOOmuZtmXOAF66S7skA+xCJ0bCHRD qqJkW245ZWlTy0OPnCgs/kDxrz9rBJsSqSbeSuABkFZBQ90rYurB1LqY2unThSGS UjIJ1VoUUK2uog== -----END CERTIFICATE-----Generated at Mon Dec 22 00:22:57 2025 by rpki-client