This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json) Hash identifier: e3kb8qjk0poqACOLsCF1OsI/fpkYbmV5VQEj0fkwFB8= Subject key identifier: B3:FD:48:A9:5C:36:35:41:3D:96:A6:AF:6C:EA:1F:3B:E3:75:D3:37 Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019B3B6BF549A917C4CAF27047F8DC3C254F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft Manifest number: 17A4 Signing time: Sat 20 Dec 2025 11:01:29 +0000 Manifest this update: Sat 20 Dec 2025 11:01:29 +0000 Manifest next update: Sun 21 Dec 2025 11:01:29 +0000 Files and hashes: 1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=) 2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: OneviuIUXpmf07zokxnfpwdFU+U3sKCjWLgGmevLpKo=) 3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=) 4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=) 5: azUb986KPmjNBXNI1GEnnjHJfR8.roa (hash: 0Eh3zrlfIiIGJgQrMOsGTA9FYjfTizw8KSjWE+UgRQA=) 6: jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa (hash: KIeWObQIaCMxnHDPh3clv17Pl6xMfKd4hJmG5jzOw94=) 7: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f5:49:a9:17:c4:ca:f2:70:47:f8:dc:3c:25:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Dec 20 11:01:29 2025 GMT Not After : Dec 21 11:01:29 2025 GMT Subject: CN=b3fd48a95c3635413d96a6af6cea1f3be375d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:3f:bf:b0:bb:1c:ec:1e:82:de:ff:b1:61: 07:78:d8:7d:c7:54:71:12:c6:98:25:76:65:95:d0: f9:13:95:70:cc:53:67:31:7b:8c:b7:74:c5:86:fb: f4:dd:97:1b:5c:4d:86:bf:ed:c0:8f:c3:95:48:c1: ee:5d:62:16:9f:af:2b:5d:31:27:a2:d7:b3:83:be: b6:8c:65:1f:9c:60:8b:fa:19:3d:dc:47:35:3e:3d: 0e:76:03:19:91:34:8e:34:58:d8:4b:af:fc:ac:79: ee:6a:e8:93:2e:25:8a:79:2b:24:b7:74:fd:8b:be: d3:7b:db:7f:a7:3e:91:9d:3d:56:9f:35:34:1a:01: 24:3e:8e:e7:32:c6:8d:ab:0a:40:bd:70:1a:68:b1: 80:a7:63:90:15:5a:b9:24:c4:22:5d:24:0b:c4:9a: 14:ed:8b:b7:47:10:d4:52:61:4c:0f:89:a1:0d:e9: a4:c3:99:4c:1c:43:53:9d:6c:26:9a:78:7f:9d:e5: 3d:8a:f9:c6:be:67:df:f2:c6:d3:d1:5e:69:e9:bb: b1:b7:06:e0:41:23:c8:65:00:ef:3e:64:53:a4:1a: 54:5d:80:7b:eb:11:c1:66:5e:cb:27:c7:e8:8e:4e: 8f:74:7f:b1:1c:b6:03:e8:47:29:08:d6:88:55:62: 4d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FD:48:A9:5C:36:35:41:3D:96:A6:AF:6C:EA:1F:3B:E3:75:D3:37 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:58:a7:84:22:09:68:fc:cf:aa:ac:f2:f2:30:6a:03:2c:0b: 14:00:f8:ed:c6:77:60:98:f6:99:c7:cf:07:16:c8:da:0f:6a: d0:25:d8:b4:5e:05:21:cf:bc:5f:f8:cb:24:35:d9:d5:a5:5f: 07:09:b4:9b:90:64:08:c1:bc:33:e0:0d:f3:9f:14:69:42:78: 91:0e:28:bb:86:69:17:56:fd:41:60:7b:b7:6c:8c:2d:23:2c: 2b:67:37:ef:d6:64:b8:8f:7b:bb:6d:fe:39:a7:d9:f5:ef:13: d0:b0:2c:eb:5c:b5:c0:7c:c9:6c:33:c6:83:d9:70:14:9f:0f: c8:20:cd:4b:bc:f8:ff:d3:04:df:01:bc:60:d1:99:29:36:0e: 7c:33:40:c7:a1:fa:e7:53:38:9c:5c:b0:67:be:6d:0a:7f:9d: e0:39:11:fc:bd:43:45:24:9a:47:f2:6b:13:6b:0a:0c:c3:23: 40:4f:05:d9:9e:03:c7:1c:60:a4:fd:20:01:32:77:97:36:0b: 95:d1:83:6b:b8:48:c9:2d:3c:6a:d0:bc:4f:ec:35:d4:aa:0f: f9:3b:c3:e7:80:ac:b2:ef:35:a2:85:6b:9d:2f:ea:e3:4d:87: 9a:16:93:66:d9:4e:aa:fd:9c:25:f9:98:66:7f:a8:12:4a:3b: 78:a7:33:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/VJqRfEyvJwR/jcPCVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjUxMjIwMTEwMTI5WhcNMjUxMjIxMTEwMTI5WjAzMTEwLwYDVQQD EyhiM2ZkNDhhOTVjMzYzNTQxM2Q5NmE2YWY2Y2VhMWYzYmUzNzVkMzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4U/v7C7HOwegt7/sWEHeNh9x1Rx EsaYJXZlldD5E5VwzFNnMXuMt3TFhvv03ZcbXE2Gv+3Aj8OVSMHuXWIWn68rXTEn otezg762jGUfnGCL+hk93Ec1Pj0OdgMZkTSONFjYS6/8rHnuauiTLiWKeSskt3T9 i77Te9t/pz6RnT1WnzU0GgEkPo7nMsaNqwpAvXAaaLGAp2OQFVq5JMQiXSQLxJoU 7Yu3RxDUUmFMD4mhDemkw5lMHENTnWwmmnh/neU9ivnGvmff8sbT0V5p6buxtwbg QSPIZQDvPmRTpBpUXYB76xHBZl7LJ8fojk6PdH+xHLYD6EcpCNaIVWJNyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLP9SKlcNjVBPZamr2zqHzvjddM3MB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlinhCIJ aPzPqqzy8jBqAywLFAD47cZ3YJj2mcfPBxbI2g9q0CXYtF4FIc+8X/jLJDXZ1aVf Bwm0m5BkCMG8M+AN858UaUJ4kQ4ou4ZpF1b9QWB7t2yMLSMsK2c379ZkuI97u23+ OafZ9e8T0LAs61y1wHzJbDPGg9lwFJ8PyCDNS7z4/9ME3wG8YNGZKTYOfDNAx6H6 51M4nFywZ75tCn+d4DkR/L1DRSSaR/JrE2sKDMMjQE8F2Z4DxxxgpP0gATJ3lzYL ldGDa7hIyS08atC8T+w11KoP+TvD54Cssu81ooVrnS/q402HmhaTZtlOqv2cJfmY Zn+oEko7eKcz4Q== -----END CERTIFICATE-----Generated at Sat Dec 20 17:12:11 2025 by rpki-client