This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft File: 9f9GumzY4vNa_bW1-fhlAvg0w0o.mft (raw, json) Hash identifier: xAYV7zw4i2bdw5b2dyTzedI91o4FTjJbZoiv5rvSNqM= Subject key identifier: 92:96:F0:99:25:77:D6:48:AE:47:B4:AD:7E:7E:69:05:8B:E9:92:87 Authority key identifier: F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A Certificate issuer: /CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Certificate serial: 019B3D90A71FB785172B2417A660B6883742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft Manifest number: 1374 Signing time: Sat 20 Dec 2025 21:00:48 +0000 Manifest this update: Sat 20 Dec 2025 21:00:48 +0000 Manifest next update: Sun 21 Dec 2025 21:00:48 +0000 Files and hashes: 1: 9f9GumzY4vNa_bW1-fhlAvg0w0o.crl (hash: YNSljlkqKNikbhYMFfZB3CqLTeDktCY1dE7Fz1wXtU0=) 2: jFj_wAVFaMa6v6BwAOU_Uc1FIto.roa (hash: OCl5X/o2fl4tL/vj2OOu1PZNEi03ZxIx2lIN6Tnh8gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:a7:1f:b7:85:17:2b:24:17:a6:60:b6:88:37:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5ff46ba6cd8e2f35afdb5b5f9f86502f834c34a Validity Not Before: Dec 20 21:00:48 2025 GMT Not After : Dec 21 21:00:48 2025 GMT Subject: CN=9296f0992577d648ae47b4ad7e7e69058be99287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:3e:8e:70:57:ce:87:51:b1:55:ca:2f:54: c9:49:93:43:48:0d:d3:2d:9e:26:57:56:64:a9:bd: 55:b3:ba:41:bf:f5:52:6e:26:07:f6:4e:b2:40:2a: 8a:80:74:d7:91:5a:17:ef:5f:7a:e5:7a:78:a9:12: 01:27:06:7a:10:86:3e:a3:53:21:2a:8a:8c:c9:a4: 8a:75:17:e6:fc:b3:a4:34:98:e7:ec:14:75:18:91: c5:40:5b:40:8f:4d:5a:5c:5f:b5:2b:e2:a4:0e:f8: 4d:8e:2e:f3:39:52:4b:0d:59:97:f1:24:cf:06:c5: 33:58:be:e7:8c:4d:6e:18:b0:1f:db:89:42:7b:c1: 7f:ac:1a:5e:c4:2a:03:5d:3e:77:59:3b:bd:e1:6a: bc:f4:3f:9e:be:fa:1f:33:3d:42:b3:92:50:a5:7a: 98:45:ff:67:7f:12:4e:c5:41:fc:14:a0:e3:25:b8: 10:43:a5:f7:9d:cc:4b:65:65:e0:18:a8:dc:7e:e0: 86:08:bd:20:58:33:d6:2f:2e:d6:fa:3c:0d:a4:e5: 94:10:e4:ae:88:89:8d:6e:26:7c:f5:5c:07:c3:8e: 17:30:28:8a:73:4f:c0:5a:d7:a9:d6:5d:d8:ad:03: 73:64:9b:1d:cc:b3:76:89:43:00:95:0a:b0:26:3d: 25:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:96:F0:99:25:77:D6:48:AE:47:B4:AD:7E:7E:69:05:8B:E9:92:87 X509v3 Authority Key Identifier: keyid:F5:FF:46:BA:6C:D8:E2:F3:5A:FD:B5:B5:F9:F8:65:02:F8:34:C3:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f9GumzY4vNa_bW1-fhlAvg0w0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1fde04-587b-4085-b585-6ad20a2eacb8/1/9f9GumzY4vNa_bW1-fhlAvg0w0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:9b:cf:a9:56:32:dd:7a:9d:ba:01:88:5d:10:c1:fc:71:38: e2:3d:34:fb:d9:d0:b0:3b:94:5e:fb:68:d4:47:5f:30:06:db: 27:df:e2:ac:c3:f8:81:11:57:05:c9:2b:59:d5:1a:75:a5:87: 1f:58:b9:a1:9c:2f:c2:60:cf:44:68:b1:e8:da:ec:bb:bd:d9: ac:67:eb:4b:1c:92:d2:10:e8:52:3b:74:2a:83:6c:a0:17:33: e3:ff:f4:e9:99:93:a7:ae:d5:be:65:1f:45:7e:c1:35:57:c7: e0:10:a4:02:51:da:58:a8:30:75:ef:3b:ae:2f:f4:e3:a2:3c: d3:e2:28:98:2a:1f:e9:ff:67:12:eb:fe:01:30:5c:61:37:0b: 90:cd:40:13:f8:d5:39:01:11:bd:ac:59:29:f7:ca:df:f9:9f: a6:c7:0a:7b:de:29:07:a3:fa:5b:b1:c9:0b:65:89:2c:ec:3c: 35:1e:0d:c7:85:62:05:95:df:a2:cb:3e:83:62:b1:35:ef:55: 53:97:92:7a:ef:e8:26:1e:77:b0:a8:2b:94:f9:6b:a9:7c:a1: 52:4c:1b:cd:84:66:3d:71:34:b5:53:89:1f:cb:d3:7a:42:ac: 02:ea:60:8c:4f:98:65:4c:0c:a7:b7:ee:7f:8b:dc:ba:91:b6: ac:2a:91:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKcft4UXKyQXpmC2iDdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmY0NmJhNmNkOGUyZjM1YWZkYjViNWY5Zjg2NTAyZjgz NGMzNGEwHhcNMjUxMjIwMjEwMDQ4WhcNMjUxMjIxMjEwMDQ4WjAzMTEwLwYDVQQD Eyg5Mjk2ZjA5OTI1NzdkNjQ4YWU0N2I0YWQ3ZTdlNjkwNThiZTk5Mjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qs+jnBXzodRsVXKL1TJSZNDSA3T LZ4mV1Zkqb1Vs7pBv/VSbiYH9k6yQCqKgHTXkVoX71965Xp4qRIBJwZ6EIY+o1Mh KoqMyaSKdRfm/LOkNJjn7BR1GJHFQFtAj01aXF+1K+KkDvhNji7zOVJLDVmX8STP BsUzWL7njE1uGLAf24lCe8F/rBpexCoDXT53WTu94Wq89D+evvofMz1Cs5JQpXqY Rf9nfxJOxUH8FKDjJbgQQ6X3ncxLZWXgGKjcfuCGCL0gWDPWLy7W+jwNpOWUEOSu iImNbiZ89VwHw44XMCiKc0/AWtep1l3YrQNzZJsdzLN2iUMAlQqwJj0lqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKW8Jkld9ZIrke0rX5+aQWL6ZKHMB8GA1UdIwQY MBaAFPX/Rrps2OLzWv21tfn4ZQL4NMNKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUt NmFkMjBhMmVhY2I4LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8xZmRlMDQtNTg3Yi00MDg1LWI1ODUtNmFkMjBhMmVhY2I4 LzEvOWY5R3Vtelk0dk5hX2JXMS1maGxBdmcwdzBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxZvPqVYy 3XqdugGIXRDB/HE44j00+9nQsDuUXvto1EdfMAbbJ9/irMP4gRFXBckrWdUadaWH H1i5oZwvwmDPRGix6Nrsu73ZrGfrSxyS0hDoUjt0KoNsoBcz4//06ZmTp67VvmUf RX7BNVfH4BCkAlHaWKgwde87ri/046I80+IomCof6f9nEuv+ATBcYTcLkM1AE/jV OQERvaxZKffK3/mfpscKe94pB6P6W7HJC2WJLOw8NR4Nx4ViBZXfoss+g2KxNe9V U5eSeu/oJh53sKgrlPlrqXyhUkwbzYRmPXE0tVOJH8vTekKsAupgjE+YZUwMp7fu f4vcupG2rCqRpQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:55:39 2025 by rpki-client