This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft File: c9-R-zxozrhlDuGaY85As8WSpWs.mft (raw, json) Hash identifier: XhHwLkrWYq7ElEsscQuVIqqDyiA3KsH6Zdq83IXM2+s= Subject key identifier: 29:86:43:07:22:69:B8:AE:9F:2C:06:84:D8:AA:8A:CD:47:EB:54:82 Authority key identifier: 73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B Certificate issuer: /CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b Certificate serial: 019B4DE08B63DCC1360761CDE7D49F764D99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft Manifest number: 178A Signing time: Wed 24 Dec 2025 01:01:59 +0000 Manifest this update: Wed 24 Dec 2025 01:01:59 +0000 Manifest next update: Thu 25 Dec 2025 01:01:59 +0000 Files and hashes: 1: 0amjr-ykBDXEbQi_cMXvoQKh8bk.roa (hash: pJpLLUDDlGjGkAROaE4HmHEdylVREbndXEfDAHQqlPs=) 2: c9-R-zxozrhlDuGaY85As8WSpWs.crl (hash: mjKeiqFMJChjQUqMFIlb3k96JaItOC6gcjv8YYhFIXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:8b:63:dc:c1:36:07:61:cd:e7:d4:9f:76:4d:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73df91fb3c68ceb8650ee19a63ce40b3c592a56b Validity Not Before: Dec 24 01:01:59 2025 GMT Not After : Dec 25 01:01:59 2025 GMT Subject: CN=298643072269b8ae9f2c0684d8aa8acd47eb5482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:08:36:0b:f9:a1:2a:10:b6:bc:dc:f7:03:58: 7b:b6:41:bf:82:7f:f0:d3:94:80:d6:97:3d:62:12: 6e:72:9a:8d:16:8b:2d:5e:57:4f:6b:32:c6:8d:0e: b8:0a:09:1f:9d:2a:f7:69:16:25:d1:dc:37:b9:05: 3a:e3:09:f1:74:9e:17:e6:4d:6d:43:1d:1d:f2:ae: 48:b9:4b:8b:c8:a1:76:43:af:01:dc:f8:86:d1:19: c5:90:4b:d0:ac:a7:8b:3f:bb:b4:f6:a7:19:67:19: 7d:41:d8:6d:41:98:05:20:11:0e:13:c6:30:6a:3b: 41:6c:99:71:6d:10:46:6e:cc:23:75:21:c5:36:56: 92:03:f6:9e:e9:ca:a1:3d:fa:9b:d5:be:29:fd:98: b3:1c:5b:be:5d:7d:d4:5f:e6:72:92:14:67:85:2a: da:5f:27:89:31:cd:1c:e7:18:74:3f:ce:c8:41:0d: dc:f1:59:d8:8b:3e:88:34:1a:0d:57:ba:99:9f:32: 40:7a:d1:31:c6:be:b2:e2:61:0b:81:a8:36:ba:7e: aa:08:f8:ce:39:c9:79:54:39:e9:7a:82:14:cf:74: c4:8b:d7:0d:7c:b0:4c:bf:49:e2:42:bb:33:1f:0e: 40:24:e7:e1:9c:be:4a:d5:04:8c:23:99:f5:ba:b8: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:86:43:07:22:69:B8:AE:9F:2C:06:84:D8:AA:8A:CD:47:EB:54:82 X509v3 Authority Key Identifier: keyid:73:DF:91:FB:3C:68:CE:B8:65:0E:E1:9A:63:CE:40:B3:C5:92:A5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9-R-zxozrhlDuGaY85As8WSpWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f30d2b-2abd-4872-b17e-fbdf94a11e6f/1/c9-R-zxozrhlDuGaY85As8WSpWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:44:14:08:ec:37:d3:15:21:8a:d7:e9:2f:ce:1e:0a:5a:08: d3:c4:a4:25:38:b7:0a:a5:19:23:c9:00:40:1a:67:aa:18:f5: 4d:b3:55:6e:a4:97:bd:59:a5:70:ad:7e:91:c1:dc:30:6f:22: d2:a9:2b:cb:bd:27:0b:b5:d4:4d:3c:b4:83:36:84:c0:6d:59: 04:53:e7:f2:2b:0d:07:fd:9f:33:4a:44:a3:57:de:a4:a3:df: 72:cf:d0:38:18:e1:cf:ca:ac:a9:e0:74:17:b8:0b:44:ee:80: 4e:0a:fe:df:36:35:e5:9c:15:d6:39:cc:b1:cb:4a:7d:5b:62: cf:5e:2c:f9:80:8b:59:67:28:0b:b2:3b:d4:59:0e:de:7b:a2: ef:3a:90:a5:75:51:ac:11:29:c1:5c:3c:0c:8b:32:fc:e8:34: 4e:b0:c9:d2:75:91:b6:ac:ee:0f:5c:8e:b4:9e:ab:d2:8f:e1: 56:ad:d1:17:90:05:e2:2a:bf:7b:b3:5b:b0:16:3d:00:6a:57: 6e:01:d3:b5:70:10:59:ae:27:2f:72:87:28:dc:a5:e4:8b:25: cd:a6:a4:2e:5f:45:29:62:ba:a3:ac:d8:77:9c:d9:91:2f:a8: 29:f5:cf:0d:ee:02:20:55:3d:d8:6f:17:38:f0:aa:b5:e1:b2: c8:13:f3:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4Itj3ME2B2HN59Sfdk2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZGY5MWZiM2M2OGNlYjg2NTBlZTE5YTYzY2U0MGIzYzU5 MmE1NmIwHhcNMjUxMjI0MDEwMTU5WhcNMjUxMjI1MDEwMTU5WjAzMTEwLwYDVQQD EygyOTg2NDMwNzIyNjliOGFlOWYyYzA2ODRkOGFhOGFjZDQ3ZWI1NDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAg2C/mhKhC2vNz3A1h7tkG/gn/w 05SA1pc9YhJucpqNFostXldPazLGjQ64CgkfnSr3aRYl0dw3uQU64wnxdJ4X5k1t Qx0d8q5IuUuLyKF2Q68B3PiG0RnFkEvQrKeLP7u09qcZZxl9QdhtQZgFIBEOE8Yw ajtBbJlxbRBGbswjdSHFNlaSA/ae6cqhPfqb1b4p/ZizHFu+XX3UX+ZykhRnhSra XyeJMc0c5xh0P87IQQ3c8VnYiz6INBoNV7qZnzJAetExxr6y4mELgag2un6qCPjO Ocl5VDnpeoIUz3TEi9cNfLBMv0niQrszHw5AJOfhnL5K1QSMI5n1uriUAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCmGQwciabiunywGhNiqis1H61SCMB8GA1UdIwQY MBaAFHPfkfs8aM64ZQ7hmmPOQLPFkqVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzktUi16eG96cmhsRHVHYVk4NUFzOFdTcFdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mMzBkMmItMmFiZC00ODcyLWIxN2Ut ZmJkZjk0YTExZTZmLzEvYzktUi16eG96cmhsRHVHYVk4NUFzOFdTcFdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mMzBkMmItMmFiZC00ODcyLWIxN2UtZmJkZjk0YTExZTZm LzEvYzktUi16eG96cmhsRHVHYVk4NUFzOFdTcFdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUQUCOw3 0xUhitfpL84eCloI08SkJTi3CqUZI8kAQBpnqhj1TbNVbqSXvVmlcK1+kcHcMG8i 0qkry70nC7XUTTy0gzaEwG1ZBFPn8isNB/2fM0pEo1fepKPfcs/QOBjhz8qsqeB0 F7gLRO6ATgr+3zY15ZwV1jnMsctKfVtiz14s+YCLWWcoC7I71FkO3nui7zqQpXVR rBEpwVw8DIsy/Og0TrDJ0nWRtqzuD1yOtJ6r0o/hVq3RF5AF4iq/e7NbsBY9AGpX bgHTtXAQWa4nL3KHKNyl5IslzaakLl9FKWK6o6zYd5zZkS+oKfXPDe4CIFU92G8X OPCqteGyyBPz1g== -----END CERTIFICATE-----Generated at Wed Dec 24 10:46:59 2025 by rpki-client