This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json) Hash identifier: IkQteNSxU4Nisr/BA8TonB2ipoX75sAsTwAAvtgaMmY= Subject key identifier: D0:DB:79:85:78:6D:3D:C1:46:1E:A6:99:0D:91:A0:91:9C:1E:06:AE Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4 Certificate serial: 019B3CB5669710107B81F60EB6CE0B364FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft Manifest number: 171B Signing time: Sat 20 Dec 2025 17:01:19 +0000 Manifest this update: Sat 20 Dec 2025 17:01:19 +0000 Manifest next update: Sun 21 Dec 2025 17:01:19 +0000 Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=) 2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: zaEDK0udLLEEUGmuh3h55iRv7GfZM8mhdA69+Gcp9Ow=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:66:97:10:10:7b:81:f6:0e:b6:ce:0b:36:4f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4 Validity Not Before: Dec 20 17:01:19 2025 GMT Not After : Dec 21 17:01:19 2025 GMT Subject: CN=d0db7985786d3dc1461ea6990d91a0919c1e06ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:29:fd:48:c7:9a:8c:33:5c:19:5e:be:01: 9f:d4:22:f3:7d:e3:c6:0c:6a:a7:54:be:53:4f:68: 02:7d:39:3b:1e:52:e9:82:45:1d:26:e3:22:ee:13: 8d:a0:70:1b:bd:78:d5:49:f6:c1:aa:77:b7:a5:19: 38:d7:62:a4:36:0a:95:23:18:13:52:c8:73:c3:37: eb:67:18:ca:e6:7c:e1:fd:b3:2d:4a:15:e4:24:ad: 90:6d:f1:63:47:57:99:a6:a4:dc:1b:83:2d:a3:42: 60:7a:0e:04:e1:f0:34:fa:66:11:45:71:82:d0:fd: 31:4d:00:4a:be:8a:14:14:64:4f:de:f8:bf:9b:c4: d6:4a:81:aa:76:37:19:40:dd:79:00:e9:0a:70:d7: 30:a3:68:e8:3d:84:c8:94:20:59:63:81:e0:9d:78: f8:98:c9:f9:10:0b:53:de:bf:98:39:b1:4e:47:f7: e0:e5:a7:3e:a5:7f:47:bf:33:ed:70:6e:cd:d1:4e: 6c:b5:22:32:f2:8d:a5:d8:c3:f3:11:af:eb:0d:4d: b5:a0:ab:41:1e:e6:db:30:f3:a6:f5:39:7d:28:ca: 8b:81:bc:07:66:2d:f4:ab:f9:3e:4f:57:dd:73:3d: 76:95:48:c0:4a:bd:7a:d7:3e:70:a6:9c:00:80:5b: cf:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DB:79:85:78:6D:3D:C1:46:1E:A6:99:0D:91:A0:91:9C:1E:06:AE X509v3 Authority Key Identifier: keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:fa:38:76:37:d4:84:ad:3f:e2:fb:85:ca:5e:2c:99:10:54: 76:cb:a2:61:a1:f8:0c:a0:ae:fc:7d:3b:63:ab:3b:6e:dd:66: ff:49:01:50:65:7e:98:10:e4:06:b6:b6:ba:33:d8:9a:56:3d: 43:b2:5a:16:12:0e:b8:57:02:72:5a:df:c2:f0:c4:bf:4a:65: 4c:45:a8:51:9c:5e:be:ab:17:67:dc:83:4e:ae:c4:9c:80:72: 99:88:4b:02:e2:d3:1b:01:be:8a:84:df:d3:91:df:e2:54:4a: eb:72:ec:88:b3:05:04:98:27:f7:ab:16:fe:38:04:9e:a2:08: b2:13:5b:9a:1d:aa:0b:c6:7c:97:25:a3:f6:b9:16:8b:5d:f9: f1:86:01:85:bc:5c:97:83:36:f6:fb:e0:a8:9d:8e:15:3a:9b: 45:d6:62:14:8e:26:ad:ee:2a:3b:6c:92:45:8d:89:87:67:b7: b8:13:a8:75:8b:bc:86:66:ea:fb:bf:d0:07:c7:b8:69:a1:18: c4:d3:a9:64:bf:0d:60:30:f1:0d:a0:ff:e2:47:94:8c:4d:2f: 9a:f4:f9:76:f0:b8:d7:98:6d:15:63:6e:79:fa:bc:18:3e:8c: 3b:10:ea:f7:73:cb:f1:21:30:c8:c5:53:56:b4:06:b4:b2:18: 1d:0f:c7:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tWaXEBB7gfYOts4LNk/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz ODYxYTQwHhcNMjUxMjIwMTcwMTE5WhcNMjUxMjIxMTcwMTE5WjAzMTEwLwYDVQQD EyhkMGRiNzk4NTc4NmQzZGMxNDYxZWE2OTkwZDkxYTA5MTljMWUwNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Ip/UjHmowzXBlevgGf1CLzfePG DGqnVL5TT2gCfTk7HlLpgkUdJuMi7hONoHAbvXjVSfbBqne3pRk412KkNgqVIxgT UshzwzfrZxjK5nzh/bMtShXkJK2QbfFjR1eZpqTcG4Mto0Jgeg4E4fA0+mYRRXGC 0P0xTQBKvooUFGRP3vi/m8TWSoGqdjcZQN15AOkKcNcwo2joPYTIlCBZY4HgnXj4 mMn5EAtT3r+YObFOR/fg5ac+pX9HvzPtcG7N0U5stSIy8o2l2MPzEa/rDU21oKtB HubbMPOm9Tl9KMqLgbwHZi30q/k+T1fdcz12lUjASr161z5wppwAgFvPKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDbeYV4bT3BRh6mmQ2RoJGcHgauMB8GA1UdIwQY MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2 LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAivo4djfU hK0/4vuFyl4smRBUdsuiYaH4DKCu/H07Y6s7bt1m/0kBUGV+mBDkBra2ujPYmlY9 Q7JaFhIOuFcCclrfwvDEv0plTEWoUZxevqsXZ9yDTq7EnIBymYhLAuLTGwG+ioTf 05Hf4lRK63LsiLMFBJgn96sW/jgEnqIIshNbmh2qC8Z8lyWj9rkWi1358YYBhbxc l4M29vvgqJ2OFTqbRdZiFI4mre4qO2ySRY2Jh2e3uBOodYu8hmbq+7/QB8e4aaEY xNOpZL8NYDDxDaD/4keUjE0vmvT5dvC415htFWNuefq8GD6MOxDq93PL8SEwyMVT VrQGtLIYHQ/H3w== -----END CERTIFICATE-----Generated at Sat Dec 20 21:13:59 2025 by rpki-client