This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft File: koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft (raw, json) Hash identifier: 1Nhhy66ymWXjbeMH9lqnkr3FtEzJOjFhqsVHpXZTzEM= Subject key identifier: 3C:F9:F0:B0:97:78:69:83:5F:C6:D3:0E:7B:7C:8F:86:0B:4A:4E:B7 Authority key identifier: 92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 Certificate issuer: /CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Certificate serial: 019B3DFEB2067F155DD7798B35A2C0184DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 23:01:00 +0000 Manifest this update: Sat 20 Dec 2025 23:01:00 +0000 Manifest next update: Sun 21 Dec 2025 23:01:00 +0000 Files and hashes: 1: FlduQKMxPetRFEf3K99xaEoZ7QU.roa (hash: 2r4TM6IwMUnx2aicUZFPb2Iq+BV2xdiFUdzdromgaYg=) 2: aX_b4UaRWSPBF6_UJgMjS5N9O-c.roa (hash: YV9fhTwKDLCkfBPeMSZl5AvTP7h0hbaT54bWMdXdAUo=) 3: koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl (hash: Y62wxW5S/fhyo7VqhNt+yPWql0w5+ZER83TEBbQpbNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:b2:06:7f:15:5d:d7:79:8b:35:a2:c0:18:4d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9280fdc9e7a86430c8e28f5e349e317fbb8a1ca9 Validity Not Before: Dec 20 23:01:00 2025 GMT Not After : Dec 21 23:01:00 2025 GMT Subject: CN=3cf9f0b0977869835fc6d30e7b7c8f860b4a4eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:05:a1:d5:5a:cf:a5:25:8f:5c:b1:cc:e9:d4: b6:bf:87:5d:1d:5e:a9:fe:f4:6c:ee:3b:86:02:3a: 1c:47:2d:8d:2a:dd:24:21:0c:0d:20:49:ef:67:b3: 9f:45:a1:20:40:95:37:cd:f3:dc:b1:ef:38:fa:f9: 0d:36:12:f1:0b:9c:01:68:e2:45:a8:d3:ec:14:e4: 82:3a:d3:6b:8d:55:12:94:ba:b1:68:68:42:7b:17: c0:36:de:64:17:b0:77:da:b0:d6:28:d3:db:86:c1: 10:e2:a1:d3:61:66:aa:4f:14:3e:08:23:14:05:84: 6a:2c:ed:e0:bc:92:c2:a2:06:32:d0:6f:75:02:0d: 45:6a:e3:36:24:36:4b:28:42:5c:98:e1:2d:32:42: 9e:df:99:ce:7c:78:9c:78:83:2a:98:7b:15:75:6f: 5c:8c:44:d3:57:6a:2b:5e:2a:d8:96:dd:e9:db:2b: 89:88:f7:32:15:a2:b1:39:89:47:78:34:fa:b4:6c: 14:66:03:60:22:22:03:78:36:55:b0:ba:9d:f8:5e: a1:2c:a9:fe:1c:63:69:92:5b:93:39:90:9c:b2:55: 99:dc:92:f5:85:88:5e:99:ae:16:d5:64:c8:74:aa: 84:5e:08:e8:52:a5:5b:20:8e:0a:04:73:ec:22:2b: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F9:F0:B0:97:78:69:83:5F:C6:D3:0E:7B:7C:8F:86:0B:4A:4E:B7 X509v3 Authority Key Identifier: keyid:92:80:FD:C9:E7:A8:64:30:C8:E2:8F:5E:34:9E:31:7F:BB:8A:1C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koD9yeeoZDDI4o9eNJ4xf7uKHKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/cf4946-f5c2-45aa-9a41-f44299865a28/1/koD9yeeoZDDI4o9eNJ4xf7uKHKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ea:80:21:c0:14:da:e9:d2:41:ae:9a:10:51:58:cf:1a:07: 7b:2f:49:7b:04:8f:d8:05:28:00:07:d6:d7:b7:d4:e0:31:de: b4:7a:fe:07:80:ab:85:da:44:46:f6:d3:6d:77:88:d0:25:fc: 49:6b:e4:77:2d:60:eb:11:41:3e:b3:4c:55:35:14:23:2b:39: 3c:8a:cb:a1:e7:c0:a5:6c:7a:a3:57:c5:c7:e3:8d:7c:08:4d: b2:e3:46:e8:f0:42:86:50:e1:ce:16:09:9e:32:4b:8b:79:45: 18:06:6b:fd:77:ad:c1:74:93:9e:4c:71:62:d6:be:43:7a:7b: 1c:85:52:23:d2:4f:36:26:ed:8a:78:fb:bd:02:fe:8c:a8:88: ea:9c:e2:09:e8:d6:27:3c:63:6d:a6:0b:01:68:b0:91:d1:0e: 46:ca:8d:ed:45:1b:dc:7d:cd:68:f0:50:2f:76:05:55:5c:4b: 82:ca:34:40:ea:b1:5b:85:47:87:cf:0b:03:c5:e2:a1:16:69: 12:b1:51:b3:08:b2:c4:f6:22:45:82:b0:e1:17:4e:b8:51:bb: cb:b7:fa:1a:7f:29:ba:9d:20:34:9d:f0:be:0c:c9:f0:c0:ab: 26:5f:c6:72:6c:3c:24:0d:be:49:37:50:85:28:2d:42:cb:d5: c3:b0:d5:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rIGfxVd13mLNaLAGE25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyODBmZGM5ZTdhODY0MzBjOGUyOGY1ZTM0OWUzMTdmYmI4 YTFjYTkwHhcNMjUxMjIwMjMwMTAwWhcNMjUxMjIxMjMwMTAwWjAzMTEwLwYDVQQD EygzY2Y5ZjBiMDk3Nzg2OTgzNWZjNmQzMGU3YjdjOGY4NjBiNGE0ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gWh1VrPpSWPXLHM6dS2v4ddHV6p /vRs7juGAjocRy2NKt0kIQwNIEnvZ7OfRaEgQJU3zfPcse84+vkNNhLxC5wBaOJF qNPsFOSCOtNrjVUSlLqxaGhCexfANt5kF7B32rDWKNPbhsEQ4qHTYWaqTxQ+CCMU BYRqLO3gvJLCogYy0G91Ag1FauM2JDZLKEJcmOEtMkKe35nOfHiceIMqmHsVdW9c jETTV2orXirYlt3p2yuJiPcyFaKxOYlHeDT6tGwUZgNgIiIDeDZVsLqd+F6hLKn+ HGNpkluTOZCcslWZ3JL1hYhema4W1WTIdKqEXgjoUqVbII4KBHPsIivFfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz58LCXeGmDX8bTDnt8j4YLSk63MB8GA1UdIwQY MBaAFJKA/cnnqGQwyOKPXjSeMX+7ihypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEt ZjQ0Mjk5ODY1YTI4LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9jZjQ5NDYtZjVjMi00NWFhLTlhNDEtZjQ0Mjk5ODY1YTI4 LzEva29EOXllZW9aRERJNG85ZU5KNHhmN3VLSEtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeqAIcAU 2unSQa6aEFFYzxoHey9JewSP2AUoAAfW17fU4DHetHr+B4CrhdpERvbTbXeI0CX8 SWvkdy1g6xFBPrNMVTUUIys5PIrLoefApWx6o1fFx+ONfAhNsuNG6PBChlDhzhYJ njJLi3lFGAZr/XetwXSTnkxxYta+Q3p7HIVSI9JPNibtinj7vQL+jKiI6pziCejW JzxjbaYLAWiwkdEORsqN7UUb3H3NaPBQL3YFVVxLgso0QOqxW4VHh88LA8XioRZp ErFRswiyxPYiRYKw4RdOuFG7y7f6Gn8pup0gNJ3wvgzJ8MCrJl/Gcmw8JA2+STdQ hSgtQsvVw7DVxA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:18:45 2025 by rpki-client