This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json) Hash identifier: +ah7togW+0kq62AE/W5/B+gy+UO/6JOzyYhFyTfv0nQ= Subject key identifier: BC:F8:BA:56:59:84:6E:55:39:1D:83:C2:27:58:82:35:FB:71:85:AE Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019B624225660C53775437E2D2644B1F12BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft Manifest number: 1387 Signing time: Sun 28 Dec 2025 00:01:00 +0000 Manifest this update: Sun 28 Dec 2025 00:01:00 +0000 Manifest next update: Mon 29 Dec 2025 00:01:00 +0000 Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: s0nSn2XVlVGhDIRHgKQ8ysw3m+CddsAPuBKurWX6Yak=) 2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:42:25:66:0c:53:77:54:37:e2:d2:64:4b:1f:12:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Dec 28 00:01:00 2025 GMT Not After : Dec 29 00:01:00 2025 GMT Subject: CN=bcf8ba5659846e55391d83c227588235fb7185ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:e0:80:3e:ec:85:57:d6:cd:53:84:0c:d8: b9:d9:bd:16:48:a0:be:df:5c:92:98:20:99:1e:63: 37:0c:d3:32:a8:57:df:1b:c6:b2:65:e7:3d:c6:4d: b2:af:1d:bf:4e:b7:4f:96:4b:e9:76:da:89:2a:fe: 3b:08:24:bf:08:2c:fb:f8:31:0a:d6:93:f0:3d:c9: 44:71:a9:ef:34:62:5f:f2:09:06:06:2c:85:8b:c8: 56:82:bd:0d:dc:66:1b:a6:5b:5d:45:16:59:49:dc: 84:7b:44:28:e5:64:1b:c8:de:df:5a:5b:65:02:8a: 47:6e:cd:8e:72:f8:00:33:ea:25:92:45:45:ec:57: 17:1e:68:70:cb:51:3d:cd:b0:ad:f3:e6:57:32:a5: 06:34:67:e1:09:aa:04:8d:bd:8b:ad:51:e2:45:c0: 33:b3:17:4c:82:4b:b0:4b:0a:86:88:d8:7f:e4:13: 64:f7:d5:89:89:7b:39:5b:3b:de:35:98:30:79:de: 49:7c:65:79:dd:56:31:6a:45:bd:24:c8:6e:ef:5f: 1a:87:ee:6d:35:0e:1a:e2:04:a0:b9:5b:a0:4c:45: be:c4:3c:a9:68:a6:94:bc:53:ad:f2:77:e7:66:66: 2b:62:66:07:98:d5:2d:61:e3:88:b4:12:18:63:17: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:F8:BA:56:59:84:6E:55:39:1D:83:C2:27:58:82:35:FB:71:85:AE X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:39:f0:74:1c:b0:ad:3e:7d:6f:54:41:9d:e6:c3:64:9a:61: 33:78:03:9c:5e:12:eb:28:2e:ae:60:16:12:c9:24:8e:b4:8f: a7:6f:25:0d:12:0f:9e:45:33:65:6b:f1:61:34:65:42:6e:bf: a7:b9:b7:dd:bc:bd:c0:ee:16:c1:87:d3:c5:0e:de:a7:c4:29: 1f:5b:f7:b6:5f:45:ea:b3:a1:5b:cc:bb:11:21:a1:00:f2:f7: 24:db:4e:dc:94:42:27:76:79:da:45:c4:d4:2e:3f:91:33:eb: 9c:f5:d3:a9:c0:d2:e5:a7:a2:ba:ff:39:1f:5a:68:33:42:92: dd:61:7d:c3:78:c0:fc:4d:79:59:77:89:2a:a9:e0:e4:5a:87: d5:83:9a:75:99:7f:85:c5:3b:78:64:37:52:db:b7:5b:00:55: a3:1f:d0:69:db:fc:1d:f3:76:00:f7:fd:6c:f4:47:1b:ec:f3: 80:bf:d5:19:8d:47:93:fc:dd:f3:5d:3d:ec:27:77:6b:77:05: 99:b4:21:b0:02:6a:ec:39:b9:55:7e:9b:2d:03:b6:1f:ef:a6: 72:b6:31:ce:fa:e9:e1:a1:6c:80:7f:39:0b:42:cc:84:f2:bf: b3:6d:0a:14:e4:46:f5:bc:19:2b:f8:57:f9:c1:0e:8d:5d:d7: fa:0d:01:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiQiVmDFN3VDfi0mRLHxK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjUxMjI4MDAwMTAwWhcNMjUxMjI5MDAwMTAwWjAzMTEwLwYDVQQD EyhiY2Y4YmE1NjU5ODQ2ZTU1MzkxZDgzYzIyNzU4ODIzNWZiNzE4NWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8rggD7shVfWzVOEDNi52b0WSKC+ 31ySmCCZHmM3DNMyqFffG8ayZec9xk2yrx2/TrdPlkvpdtqJKv47CCS/CCz7+DEK 1pPwPclEcanvNGJf8gkGBiyFi8hWgr0N3GYbpltdRRZZSdyEe0Qo5WQbyN7fWltl AopHbs2OcvgAM+olkkVF7FcXHmhwy1E9zbCt8+ZXMqUGNGfhCaoEjb2LrVHiRcAz sxdMgkuwSwqGiNh/5BNk99WJiXs5WzveNZgwed5JfGV53VYxakW9JMhu718ah+5t NQ4a4gSguVugTEW+xDypaKaUvFOt8nfnZmYrYmYHmNUtYeOItBIYYxee8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLz4ulZZhG5VOR2DwidYgjX7cYWuMB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwznwdByw rT59b1RBnebDZJphM3gDnF4S6ygurmAWEskkjrSPp28lDRIPnkUzZWvxYTRlQm6/ p7m33by9wO4WwYfTxQ7ep8QpH1v3tl9F6rOhW8y7ESGhAPL3JNtO3JRCJ3Z52kXE 1C4/kTPrnPXTqcDS5aeiuv85H1poM0KS3WF9w3jA/E15WXeJKqng5FqH1YOadZl/ hcU7eGQ3Utu3WwBVox/Qadv8HfN2APf9bPRHG+zzgL/VGY1Hk/zd81097Cd3a3cF mbQhsAJq7Dm5VX6bLQO2H++mcrYxzvrp4aFsgH85C0LMhPK/s20KFORG9bwZK/hX +cEOjV3X+g0B+Q== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:46 2025 by rpki-client