This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json) Hash identifier: /07+cbJccdzAiSEtwxO2J7nIpscbpEdNQbwFqlSmI2c= Subject key identifier: 01:06:49:CB:B0:6A:3A:6C:2A:CE:12:41:3E:13:23:8E:1C:71:0C:FF Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019B52CEDFF1749BB9EB3758BF5B4A473EA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft Manifest number: 137F Signing time: Thu 25 Dec 2025 00:00:47 +0000 Manifest this update: Thu 25 Dec 2025 00:00:47 +0000 Manifest next update: Fri 26 Dec 2025 00:00:47 +0000 Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: dZ4B8izfH7SM+ML2YYAMEVSg2BnaXGMPPaMzWVEUL80=) 2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:ce:df:f1:74:9b:b9:eb:37:58:bf:5b:4a:47:3e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Dec 25 00:00:47 2025 GMT Not After : Dec 26 00:00:47 2025 GMT Subject: CN=010649cbb06a3a6c2ace12413e13238e1c710cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:e4:e2:1a:ac:11:ff:32:cb:64:44:28:d2: 39:f5:ab:93:d6:48:0b:b2:63:81:97:0e:3f:60:46: d7:75:24:e8:d1:f0:2d:05:90:14:31:8b:dc:df:08: 5a:47:25:e3:77:de:bb:94:8e:97:1d:91:90:9d:a0: 10:c4:4c:02:2b:75:c2:75:bf:9d:f4:6d:5e:9f:7c: 95:02:cf:dd:9e:b4:9f:f9:57:43:75:8a:7c:84:8a: 56:f3:8f:f9:fb:bb:4a:06:c4:39:ba:95:6e:d0:49: 5f:70:6b:69:57:f4:db:07:c0:cf:36:fa:17:cb:c9: 3f:af:ec:44:45:16:a5:64:6f:1e:80:cb:f8:56:0c: 73:19:df:1b:96:02:e8:ac:4e:84:e8:4e:5a:83:dc: 2d:a1:52:6f:f6:c0:ee:2f:af:2e:8c:85:b2:b1:42: b8:fa:32:85:c0:d6:cf:87:2d:7a:42:bd:61:ec:47: 3a:9d:80:ea:09:f8:27:40:0e:26:d3:d6:44:2a:2c: 8c:3c:1c:da:62:8c:11:c8:29:e3:c8:87:ce:c7:b2: 0d:ab:10:2a:db:b1:43:91:fe:6c:23:63:3c:5e:6b: 22:54:1b:b7:a8:a0:d1:63:9b:5d:2d:94:3b:10:3a: cb:0a:83:64:d1:d2:45:84:da:1a:46:30:4a:4b:54: 46:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:06:49:CB:B0:6A:3A:6C:2A:CE:12:41:3E:13:23:8E:1C:71:0C:FF X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:01:1b:a1:c7:c5:6a:c8:13:d9:22:45:5e:45:9c:42:26:2f: f7:db:75:59:fe:8c:d3:d4:72:9b:bb:cf:f8:50:04:43:09:59: bb:0d:f9:9e:be:70:48:1d:6f:9d:37:6a:5d:91:2f:7b:c6:01: bc:89:4b:10:6e:c7:49:74:86:ac:f8:70:94:f6:83:38:c1:20: d3:95:54:69:cb:44:b7:e3:80:fd:00:5d:7f:0b:94:62:f2:19: 27:4b:e3:aa:80:ce:90:7a:67:55:30:bf:09:85:75:91:e6:c7: f4:89:62:91:a9:9f:c7:d4:af:bf:a4:05:e6:61:48:76:40:f3: 04:19:dd:98:3c:f3:fd:a3:c1:b0:f6:f4:f2:45:81:70:78:62: 22:12:4d:d9:0e:fb:4e:59:c7:2a:2b:22:d6:ea:b6:11:5a:91: 49:90:cc:ac:a1:ec:b5:0f:89:65:2f:b9:67:24:0e:0b:8f:fa: e7:9b:9b:04:57:1a:6c:79:0d:00:17:ac:97:1c:1c:00:1b:b1: b0:eb:8b:ce:fe:a7:43:00:3a:b1:6e:16:9f:a8:08:67:ef:33: ff:58:d2:2e:84:eb:cc:68:4c:94:41:f5:11:a6:74:97:b8:fa: 3c:95:2f:2d:f7:aa:1f:b9:4e:c7:71:bc:14:95:9a:17:b2:d8: b1:d9:25:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzt/xdJu56zdYv1tKRz6gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjUxMjI1MDAwMDQ3WhcNMjUxMjI2MDAwMDQ3WjAzMTEwLwYDVQQD EygwMTA2NDljYmIwNmEzYTZjMmFjZTEyNDEzZTEzMjM4ZTFjNzEwY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1zk4hqsEf8yy2REKNI59auT1kgL smOBlw4/YEbXdSTo0fAtBZAUMYvc3whaRyXjd967lI6XHZGQnaAQxEwCK3XCdb+d 9G1en3yVAs/dnrSf+VdDdYp8hIpW84/5+7tKBsQ5upVu0ElfcGtpV/TbB8DPNvoX y8k/r+xERRalZG8egMv4VgxzGd8blgLorE6E6E5ag9wtoVJv9sDuL68ujIWysUK4 +jKFwNbPhy16Qr1h7Ec6nYDqCfgnQA4m09ZEKiyMPBzaYowRyCnjyIfOx7INqxAq 27FDkf5sI2M8XmsiVBu3qKDRY5tdLZQ7EDrLCoNk0dJFhNoaRjBKS1RGWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEGScuwajpsKs4SQT4TI44ccQz/MB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQEbocfF asgT2SJFXkWcQiYv99t1Wf6M09Rym7vP+FAEQwlZuw35nr5wSB1vnTdqXZEve8YB vIlLEG7HSXSGrPhwlPaDOMEg05VUactEt+OA/QBdfwuUYvIZJ0vjqoDOkHpnVTC/ CYV1kebH9Ilikamfx9Svv6QF5mFIdkDzBBndmDzz/aPBsPb08kWBcHhiIhJN2Q77 TlnHKisi1uq2EVqRSZDMrKHstQ+JZS+5ZyQOC4/655ubBFcabHkNABeslxwcABux sOuLzv6nQwA6sW4Wn6gIZ+8z/1jSLoTrzGhMlEH1EaZ0l7j6PJUvLfeqH7lOx3G8 FJWaF7LYsdklvA== -----END CERTIFICATE-----Generated at Thu Dec 25 02:43:08 2025 by rpki-client