This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft File: 9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json) Hash identifier: GWTifLuq/s48V7s3j1nSb2sOxES7B4f703X+h/mG9PA= Subject key identifier: 6A:1B:A8:A9:F2:C5:22:1B:17:54:69:E9:F8:B7:DF:3A:3D:EA:CC:78 Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8 Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8 Certificate serial: 019B38A2C5BECB219FE35C6C87DC4BDF21D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 22:02:30 +0000 Manifest this update: Fri 19 Dec 2025 22:02:30 +0000 Manifest next update: Sat 20 Dec 2025 22:02:30 +0000 Files and hashes: 1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: HPvGEogoD3MYcfCaJoTmBtz+K0ESGdr9mGf2sITQ9VY=) 2: Ru57e4KJGmCNDXrPayGNrM1Z2dE.roa (hash: PjkMG0o3XCBX2V0z1wG5kUtXFYLyKVu1bhkUTY6FzyU=) 3: nRY6f0HmJ7S8CYmolnmrtVb1JGw.roa (hash: jhgaQrPs/TQq82v7wbUyYwj7VfBFttXWHM8WTx1fF9k=) 4: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (hash: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:c5:be:cb:21:9f:e3:5c:6c:87:dc:4b:df:21:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8 Validity Not Before: Dec 19 22:02:30 2025 GMT Not After : Dec 20 22:02:30 2025 GMT Subject: CN=6a1ba8a9f2c5221b175469e9f8b7df3a3deacc78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f7:27:1f:7c:1d:3e:88:45:40:8e:e3:8c:e6: a3:05:0b:a4:5b:db:24:fa:c9:7e:71:f7:f0:03:6e: b7:5a:b1:25:20:da:54:a0:f2:bf:61:17:ca:89:16: 2e:12:7e:16:e2:58:f2:60:81:20:b8:5c:67:52:7d: ae:92:2a:72:16:be:ea:de:50:2a:1a:93:f8:55:47: 88:f5:53:3a:ea:f9:66:00:0a:a0:3c:4b:6e:9e:fc: af:e1:d8:6b:13:4c:4b:4f:ea:cf:51:aa:8e:f6:bf: a1:d2:a4:ed:fa:4e:d4:ab:26:0d:fe:f5:3f:55:7f: 5b:dc:4b:6d:62:c8:5d:c9:bf:4c:07:c2:cf:11:a3: 64:6e:7d:28:34:8e:37:00:7c:ee:00:cb:74:0c:3e: ca:7b:bd:a5:bb:da:1d:8e:5a:a6:27:d5:c6:6e:d8: 5d:bf:a5:70:fc:9b:0e:c6:53:65:11:24:ef:8c:50: c3:05:e5:d7:88:cd:46:45:27:3b:ee:6d:8d:f7:1b: aa:21:57:9a:31:2c:7e:0a:2b:6f:16:88:26:5e:f9: 95:a5:6d:01:b7:a7:96:fb:11:11:ce:36:90:5b:81: fb:d0:f8:d9:80:83:59:5a:ca:53:b8:06:94:d0:fb: cf:54:56:41:e4:b2:93:0b:bf:e5:dc:84:a6:18:48: 06:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1B:A8:A9:F2:C5:22:1B:17:54:69:E9:F8:B7:DF:3A:3D:EA:CC:78 X509v3 Authority Key Identifier: keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:47:0f:69:f5:b4:6b:28:31:2a:5f:63:41:bd:99:d4:90:54: 94:ab:22:c1:39:01:68:23:55:2d:61:9c:ae:c3:bc:f9:86:8a: 89:c5:f9:b4:65:2b:9e:b4:a9:ab:38:55:8c:0c:c3:e4:0d:1c: cc:4e:c8:76:68:ff:7a:2d:45:0a:17:a2:8e:e1:b5:48:ed:ef: f5:33:38:27:42:9d:a4:00:79:42:8a:f9:ac:fe:0f:2b:aa:40: 7e:9f:83:f4:25:a6:dd:d7:99:df:d4:ac:3e:1b:f7:75:3d:98: 36:d8:e4:9c:c6:59:cd:51:ba:9a:75:04:a2:82:fe:13:e5:e3: a5:9a:6e:84:b3:11:c5:d2:b7:6f:de:1d:ed:b5:1b:d8:f8:5e: 38:95:ae:e1:9a:79:56:0f:ce:fe:05:a5:85:be:b4:76:1c:9b: 1a:46:c6:48:a8:0c:c2:90:db:57:58:7c:89:ac:bc:8a:33:f7: 2d:38:70:10:ea:31:aa:4d:28:b8:a8:41:a2:a9:94:f9:c0:67: e5:7c:a7:ad:b1:db:ba:20:b8:8f:32:c0:27:af:5d:48:ef:5a: 15:cc:95:30:b3:80:c3:db:6c:36:a0:a7:42:a4:00:27:c0:42: 18:57:06:3f:f1:c2:f7:d5:e0:7b:ab:52:f0:0a:f2:9d:df:48: 78:0e:b2:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4osW+yyGf41xsh9xL3yHUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzQ2ZDNlZGJlYzZkYTcyNzgwNzIyYzBhNDFhYmVlYTYz NjYxZDgwHhcNMjUxMjE5MjIwMjMwWhcNMjUxMjIwMjIwMjMwWjAzMTEwLwYDVQQD Eyg2YTFiYThhOWYyYzUyMjFiMTc1NDY5ZTlmOGI3ZGYzYTNkZWFjYzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/cnH3wdPohFQI7jjOajBQukW9sk +sl+cffwA263WrElINpUoPK/YRfKiRYuEn4W4ljyYIEguFxnUn2ukipyFr7q3lAq GpP4VUeI9VM66vlmAAqgPEtunvyv4dhrE0xLT+rPUaqO9r+h0qTt+k7UqyYN/vU/ VX9b3EttYshdyb9MB8LPEaNkbn0oNI43AHzuAMt0DD7Ke72lu9odjlqmJ9XGbthd v6Vw/JsOxlNlESTvjFDDBeXXiM1GRSc77m2N9xuqIVeaMSx+CitvFogmXvmVpW0B t6eW+xERzjaQW4H70PjZgINZWspTuAaU0PvPVFZB5LKTC7/l3ISmGEgGPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGobqKnyxSIbF1Rp6fi33zo96sx4MB8GA1UdIwQY MBaAFPU0bT7b7G2nJ4ByLApBq+6mNmHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQt ZmE3MGJkOTBlODk0LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQtZmE3MGJkOTBlODk0 LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUcPafW0 aygxKl9jQb2Z1JBUlKsiwTkBaCNVLWGcrsO8+YaKicX5tGUrnrSpqzhVjAzD5A0c zE7Idmj/ei1FCheijuG1SO3v9TM4J0KdpAB5Qor5rP4PK6pAfp+D9CWm3deZ39Ss Phv3dT2YNtjknMZZzVG6mnUEooL+E+XjpZpuhLMRxdK3b94d7bUb2PheOJWu4Zp5 Vg/O/gWlhb60dhybGkbGSKgMwpDbV1h8iay8ijP3LThwEOoxqk0ouKhBoqmU+cBn 5XynrbHbuiC4jzLAJ69dSO9aFcyVMLOAw9tsNqCnQqQAJ8BCGFcGP/HC99Xge6tS 8Arynd9IeA6yXQ== -----END CERTIFICATE-----Generated at Sat Dec 20 01:15:25 2025 by rpki-client