This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json) Hash identifier: bCRWmnFPVvp1trcOB2cvefrt63IOfpB3nzlQ832SV38= Subject key identifier: 45:98:8C:5A:77:71:67:16:3E:19:C2:2B:55:D9:52:0C:25:22:A7:AB Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59 Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059 Certificate serial: 019B3A8F792B2CA4FA71DB878551A69CFE96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft Manifest number: 10FF Signing time: Sat 20 Dec 2025 07:00:39 +0000 Manifest this update: Sat 20 Dec 2025 07:00:39 +0000 Manifest next update: Sun 21 Dec 2025 07:00:39 +0000 Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=) 2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: kZA0C4o1QBIL/qVXeLdmJptGqamIigFbHtT0Ul+H69A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:79:2b:2c:a4:fa:71:db:87:85:51:a6:9c:fe:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f694668ba76cf550c4139c17300160077dcea059 Validity Not Before: Dec 20 07:00:39 2025 GMT Not After : Dec 21 07:00:39 2025 GMT Subject: CN=45988c5a777167163e19c22b55d9520c2522a7ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:37:7c:83:fb:ad:2d:07:58:97:f7:b1:ad:61: 5f:ce:a3:3f:3f:1e:80:80:ba:75:d5:51:83:1c:7e: 71:4d:f3:c4:0b:b9:03:56:1d:1f:3d:69:c9:3a:22: 87:7e:74:52:56:8d:31:7f:14:63:14:31:9c:10:e6: 31:8a:1b:a7:9e:c3:ef:45:2b:3e:ef:19:5d:7b:fa: 9b:b0:d2:d5:7b:f3:35:a9:77:dc:45:dc:9d:76:97: 0e:23:3f:03:1c:ed:d6:c4:07:49:a3:ee:7c:8f:51: 2f:51:c6:15:f9:24:01:39:97:46:e9:de:2a:83:6c: 89:31:74:b4:e0:44:01:aa:52:e7:d4:13:47:0b:e9: 84:d5:69:18:c7:2b:39:10:f9:21:72:35:ee:87:d9: 8a:df:db:c8:07:d1:99:88:ea:66:0e:2b:10:1b:39: b2:93:6b:f5:34:72:c8:00:ef:93:28:8d:54:bf:49: b2:c6:18:17:fb:e7:cc:91:16:25:6f:e8:88:14:c8: 9b:57:51:89:34:ec:20:ca:56:cb:bc:ef:fc:bf:22: b4:75:0f:5d:05:d7:03:d6:24:dd:3b:24:7d:c5:10: 65:95:39:8f:9a:85:72:01:68:7e:09:a3:9d:db:1b: 57:95:22:70:29:08:06:28:31:7e:47:08:8f:7a:7b: 98:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:98:8C:5A:77:71:67:16:3E:19:C2:2B:55:D9:52:0C:25:22:A7:AB X509v3 Authority Key Identifier: keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:06:08:42:74:69:b5:fb:bd:fc:3d:67:40:1c:5c:f4:e7:9b: 17:85:39:d6:7a:05:66:ad:40:3c:ea:e8:e1:7c:ba:33:f5:68: 13:df:37:b5:b5:d6:c4:12:99:5d:a8:c5:42:66:b3:e1:9f:22: aa:6e:c9:af:5b:83:39:11:8a:f4:00:bf:72:27:94:34:c9:21: 36:8a:df:4b:10:6f:3b:e6:76:70:1a:89:8a:ef:f1:f5:55:fc: 06:26:82:7b:6f:da:ee:09:ec:db:71:e3:35:7d:0f:1d:42:78: 74:74:37:e5:72:ca:59:11:8f:a4:74:44:82:6c:de:86:76:48: cb:22:e7:f7:92:80:06:9a:b1:59:18:92:8b:b2:23:2e:7d:b8: 7b:04:da:52:93:b5:5c:b9:82:4b:ea:e0:55:d4:d4:76:59:55: 51:36:3a:23:77:89:94:24:d6:55:c9:45:7d:92:b3:70:76:fa: a5:31:1f:23:7b:52:6f:7b:a7:ec:cf:74:5d:4f:7f:03:ab:30: 5c:3e:73:ec:2a:1f:ef:70:d0:60:2f:ba:61:68:36:59:2b:07: 50:f3:ff:40:56:7d:c1:c8:85:6e:bc:4f:f5:64:09:78:77:0e: 5a:f0:21:86:5e:a6:df:9d:2f:50:7d:b7:a2:8f:5b:36:a2:68: 11:a9:89:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j3krLKT6cduHhVGmnP6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj ZWEwNTkwHhcNMjUxMjIwMDcwMDM5WhcNMjUxMjIxMDcwMDM5WjAzMTEwLwYDVQQD Eyg0NTk4OGM1YTc3NzE2NzE2M2UxOWMyMmI1NWQ5NTIwYzI1MjJhN2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTd8g/utLQdYl/exrWFfzqM/Px6A gLp11VGDHH5xTfPEC7kDVh0fPWnJOiKHfnRSVo0xfxRjFDGcEOYxihunnsPvRSs+ 7xlde/qbsNLVe/M1qXfcRdyddpcOIz8DHO3WxAdJo+58j1EvUcYV+SQBOZdG6d4q g2yJMXS04EQBqlLn1BNHC+mE1WkYxys5EPkhcjXuh9mK39vIB9GZiOpmDisQGzmy k2v1NHLIAO+TKI1Uv0myxhgX++fMkRYlb+iIFMibV1GJNOwgylbLvO/8vyK0dQ9d BdcD1iTdOyR9xRBllTmPmoVyAWh+CaOd2xtXlSJwKQgGKDF+RwiPenuYSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEWYjFp3cWcWPhnCK1XZUgwlIqerMB8GA1UdIwQY MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAYIQnRp tfu9/D1nQBxc9OebF4U51noFZq1APOro4Xy6M/VoE983tbXWxBKZXajFQmaz4Z8i qm7Jr1uDORGK9AC/cieUNMkhNorfSxBvO+Z2cBqJiu/x9VX8BiaCe2/a7gns23Hj NX0PHUJ4dHQ35XLKWRGPpHREgmzehnZIyyLn95KABpqxWRiSi7IjLn24ewTaUpO1 XLmCS+rgVdTUdllVUTY6I3eJlCTWVclFfZKzcHb6pTEfI3tSb3un7M90XU9/A6sw XD5z7Cof73DQYC+6YWg2WSsHUPP/QFZ9wciFbrxP9WQJeHcOWvAhhl6m350vUH23 oo9bNqJoEamJlw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:27:45 2025 by rpki-client