This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft File: 9YmCO6FHWAB83oc69L9H_Zw5c3s.mft (raw, json) Hash identifier: B0JTEs9Jhp3MS4OlDcgzNeZDbRbLKKiR1KrEn4URS7Y= Subject key identifier: 9F:08:A9:4B:6C:9B:3D:9E:91:8A:16:A3:8C:67:5C:11:93:5C:65:66 Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B Certificate issuer: /CN=f589823ba14758007cde873af4bf47fd9c39737b Certificate serial: 019B51BCE9B68F5F50414FA19010635F4F7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft Manifest number: 1274 Signing time: Wed 24 Dec 2025 19:01:33 +0000 Manifest this update: Wed 24 Dec 2025 19:01:33 +0000 Manifest next update: Thu 25 Dec 2025 19:01:33 +0000 Files and hashes: 1: 9YmCO6FHWAB83oc69L9H_Zw5c3s.crl (hash: eam4oPRDjnY/KgBQbrxxjQokF359xladm1PxNOnj32U=) 2: cwCE2hhjusn86QvOu2pcA9KTbHA.roa (hash: NxYhK1mgxO/73LOxU0Rf/stDIA61i1imewNDavbu5Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:e9:b6:8f:5f:50:41:4f:a1:90:10:63:5f:4f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b Validity Not Before: Dec 24 19:01:33 2025 GMT Not After : Dec 25 19:01:33 2025 GMT Subject: CN=9f08a94b6c9b3d9e918a16a38c675c11935c6566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:71:04:d3:b2:2e:41:94:18:aa:f5:83:48:38: 31:6f:79:14:72:e9:25:c5:89:8f:52:34:7b:a1:60: cc:22:28:e6:0c:18:ab:d2:28:5f:8d:5a:a1:c4:3a: 8e:24:5a:cf:02:af:a3:8e:75:8b:79:b5:42:2c:75: 77:6e:51:7d:8c:67:bb:19:b3:4f:e8:90:58:4d:ea: a6:63:66:06:d2:1d:3e:90:89:46:95:20:8c:8b:4c: 62:b7:de:d8:81:ca:61:bd:90:0f:74:83:66:be:a1: 3f:e8:bc:1f:58:70:36:d3:6a:72:f7:cc:4f:91:33: 1b:ad:fa:85:b6:60:fa:8b:a4:d8:8d:a3:e9:f9:a8: 56:5b:5f:8e:cf:7c:9d:ba:f3:02:17:df:93:ed:8c: 14:3f:11:d6:24:fb:7a:78:3f:d6:a1:6c:d5:4e:3c: 2c:2b:28:5e:f2:2c:f1:3e:4d:13:7a:7e:4b:93:10: 14:b4:d2:0a:55:a2:f9:04:9e:3e:ed:26:a0:f9:c1: 30:b2:91:bf:06:0c:01:94:dd:01:e4:e7:71:bc:fb: 81:ee:15:37:37:71:82:43:ab:c2:0f:7c:56:32:2d: fd:f6:50:c3:9e:82:5a:1c:fc:49:bb:25:35:f1:dc: a6:76:86:37:ad:a1:68:2b:3d:69:28:7b:c6:d3:5d: 4a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:08:A9:4B:6C:9B:3D:9E:91:8A:16:A3:8C:67:5C:11:93:5C:65:66 X509v3 Authority Key Identifier: keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d5:a1:b3:5d:d3:64:cd:ed:35:82:9b:76:16:b1:9b:18:9e: f0:f3:28:79:2a:ec:ca:6d:29:4b:b3:1c:e2:74:b0:a1:e2:10: 40:04:54:ee:33:1d:aa:9d:f5:a3:d2:cb:c5:1f:a1:6e:5f:6a: 9c:14:13:e5:65:a5:87:57:5d:34:6a:2b:b9:4b:56:28:42:2f: 21:5a:09:d5:8a:65:5a:f0:6e:fa:55:a8:2d:89:20:60:4e:3b: 1a:cf:ab:37:b5:5c:01:1a:08:6d:6d:d1:76:81:84:cb:8e:b1: dc:39:d6:c5:15:56:26:94:09:fb:23:7a:1e:11:76:32:a3:7c: 3f:5e:30:c8:c5:49:4d:fc:cb:da:c6:e3:b8:0a:a2:79:f3:89: 62:18:d7:57:2c:f6:52:47:99:d7:6f:57:fd:31:8b:d4:00:ab: 09:4c:ae:42:a5:b7:09:f3:f5:79:a5:83:b6:03:a4:2e:0f:e1: 97:c4:f5:53:fe:8f:c5:33:3e:25:72:99:62:1b:46:21:7c:ba: 57:ca:91:61:57:06:4a:72:7d:6a:14:c6:05:2b:5d:16:73:da: 2b:60:68:b3:59:ac:e1:19:02:26:4a:b3:b2:f0:0d:67:66:18: da:c5:7c:aa:8e:f0:c2:41:9d:de:35:b2:9b:a2:31:e9:f4:b8: 01:a0:28:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvOm2j19QQU+hkBBjX098MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ODk4MjNiYTE0NzU4MDA3Y2RlODczYWY0YmY0N2ZkOWMz OTczN2IwHhcNMjUxMjI0MTkwMTMzWhcNMjUxMjI1MTkwMTMzWjAzMTEwLwYDVQQD Eyg5ZjA4YTk0YjZjOWIzZDllOTE4YTE2YTM4YzY3NWMxMTkzNWM2NTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXEE07IuQZQYqvWDSDgxb3kUcukl xYmPUjR7oWDMIijmDBir0ihfjVqhxDqOJFrPAq+jjnWLebVCLHV3blF9jGe7GbNP 6JBYTeqmY2YG0h0+kIlGlSCMi0xit97YgcphvZAPdINmvqE/6LwfWHA202py98xP kTMbrfqFtmD6i6TYjaPp+ahWW1+Oz3yduvMCF9+T7YwUPxHWJPt6eD/WoWzVTjws Kyhe8izxPk0Ten5LkxAUtNIKVaL5BJ4+7Sag+cEwspG/BgwBlN0B5OdxvPuB7hU3 N3GCQ6vCD3xWMi399lDDnoJaHPxJuyU18dymdoY3raFoKz1pKHvG011KzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8IqUtsmz2ekYoWo4xnXBGTXGVmMB8GA1UdIwQY MBaAFPWJgjuhR1gAfN6HOvS/R/2cOXN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEt OWJhNGVjMzFjYjZiLzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9hZTE3NWEtMWMwMC00MDkxLWEwNjEtOWJhNGVjMzFjYjZi LzEvOVltQ082RkhXQUI4M29jNjlMOUhfWnc1YzNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtWhs13T ZM3tNYKbdhaxmxie8PMoeSrsym0pS7Mc4nSwoeIQQARU7jMdqp31o9LLxR+hbl9q nBQT5WWlh1ddNGoruUtWKEIvIVoJ1YplWvBu+lWoLYkgYE47Gs+rN7VcARoIbW3R doGEy46x3DnWxRVWJpQJ+yN6HhF2MqN8P14wyMVJTfzL2sbjuAqiefOJYhjXVyz2 UkeZ129X/TGL1ACrCUyuQqW3CfP1eaWDtgOkLg/hl8T1U/6PxTM+JXKZYhtGIXy6 V8qRYVcGSnJ9ahTGBStdFnPaK2Bos1ms4RkCJkqzsvANZ2YY2sV8qo7wwkGd3jWy m6Ix6fS4AaAoog== -----END CERTIFICATE-----Generated at Thu Dec 25 03:35:57 2025 by rpki-client