This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft File: F9uL3_IuGjew9KaVNCS2UWmwNCk.mft (raw, json) Hash identifier: ry9/A/nbAKE44Ka0VfEjeI1D4GWy8mP6TMwK636/7js= Subject key identifier: 8E:10:E9:35:56:C5:86:71:09:5C:95:18:13:94:AA:F0:06:48:A4:85 Authority key identifier: 17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 Certificate issuer: /CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Certificate serial: 019B42EE97279067B4FF9EDF387AD18B7798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft Manifest number: 0E98 Signing time: Sun 21 Dec 2025 22:01:31 +0000 Manifest this update: Sun 21 Dec 2025 22:01:31 +0000 Manifest next update: Mon 22 Dec 2025 22:01:31 +0000 Files and hashes: 1: F9uL3_IuGjew9KaVNCS2UWmwNCk.crl (hash: FOAMiAXFAVAaTUaVX2I40lM93a18EXRHkHnZETaxY3E=) 2: KNcCODBaDX2MFgjxBHddnmeDs1w.roa (hash: v5RHpNNKwnL8+b9d7xhZwKkWy+NYX2Itp+tps9r7KV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:97:27:90:67:b4:ff:9e:df:38:7a:d1:8b:77:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17db8bdff22e1a37b0f4a6953424b65169b03429 Validity Not Before: Dec 21 22:01:31 2025 GMT Not After : Dec 22 22:01:31 2025 GMT Subject: CN=8e10e93556c58671095c95181394aaf00648a485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:78:5b:db:85:81:76:33:1a:e5:22:25:7e:27: a7:a2:54:9c:a1:a6:8d:20:d8:da:78:b7:1c:0a:8c: 08:75:0b:6a:d1:0d:b6:d2:e1:9e:bb:b8:8e:0c:d6: 5e:44:4c:51:d3:18:7f:d5:0f:ab:d7:d9:54:da:e0: c0:b1:b8:91:68:0f:dd:ec:2d:c8:b2:d6:63:2c:81: 00:df:58:c2:e1:82:f8:a1:66:8b:f9:e5:3b:8b:06: a0:89:e0:18:81:a3:d6:46:70:43:32:b2:cc:bd:a0: 70:6c:65:13:53:95:6f:94:70:07:a5:59:e9:8e:e8: 64:e3:d3:a9:56:90:13:1c:27:b6:f0:6b:9b:7f:e9: 6f:b3:12:a2:75:bd:e0:f6:bc:d8:94:63:40:71:6f: 1b:59:43:6a:9e:01:6d:9c:21:3c:ed:c8:ff:ba:6b: ff:5c:e0:2c:7b:93:ee:ea:e8:68:e7:fb:65:7f:0b: d0:28:da:93:ba:3b:b7:b8:d3:72:4d:1e:f1:97:c3: ac:3b:87:7d:6b:68:18:e8:57:77:cd:5d:ac:63:a3: 1e:47:69:3d:67:46:d0:a8:f6:b1:7f:8a:db:e4:89: 76:f7:d8:1d:dd:73:c7:35:c3:78:4d:b2:26:61:ce: db:6f:65:bd:af:0c:e8:db:9c:81:12:2d:53:1b:3c: 62:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:10:E9:35:56:C5:86:71:09:5C:95:18:13:94:AA:F0:06:48:A4:85 X509v3 Authority Key Identifier: keyid:17:DB:8B:DF:F2:2E:1A:37:B0:F4:A6:95:34:24:B6:51:69:B0:34:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9uL3_IuGjew9KaVNCS2UWmwNCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5a3e08-ed41-4d0e-a6e0-32702dbd4bc7/1/F9uL3_IuGjew9KaVNCS2UWmwNCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:f4:a4:47:a3:8e:e4:a6:a7:cf:82:d2:a2:62:69:78:14:63: 8b:8a:97:ff:ac:c3:94:95:7b:2b:cb:1d:15:48:23:06:b2:5d: 6a:64:48:25:26:28:e7:a9:7d:16:8b:c6:0e:e4:66:0a:89:e0: 42:e8:78:65:d9:92:6d:1e:41:32:38:c6:81:07:ec:8b:f2:b8: 86:69:e2:79:44:52:c9:64:67:dc:2a:da:27:23:d5:e5:ba:49: b1:92:8e:30:46:c2:5f:67:5d:c8:bf:c4:3c:93:9c:fd:6e:5a: d1:e3:98:f8:19:e8:30:c9:7d:a7:42:bb:9b:76:eb:2d:36:44: f3:37:e4:84:8b:f1:9e:75:85:c1:ba:a7:14:c6:44:ff:4c:97: 0e:c6:91:db:64:b9:1c:b8:df:b0:67:41:75:38:42:ec:02:a3: 07:3f:6f:46:74:51:6e:45:9b:af:62:89:28:2f:f0:b0:8b:cb: 4a:3a:90:85:71:73:57:2e:eb:50:df:6a:17:86:a1:3a:3c:a0: 47:0d:b1:98:34:b1:23:e0:4c:fb:c1:07:c5:7e:1e:17:21:ea: 11:25:0d:e3:5b:ed:bb:46:ef:0c:60:54:a0:c9:a8:02:e5:a9: 1e:91:da:40:84:b2:06:c1:0b:07:9a:f7:2b:cb:9f:db:8b:12: b4:9b:76:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7pcnkGe0/57fOHrRi3eYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZGI4YmRmZjIyZTFhMzdiMGY0YTY5NTM0MjRiNjUxNjli MDM0MjkwHhcNMjUxMjIxMjIwMTMxWhcNMjUxMjIyMjIwMTMxWjAzMTEwLwYDVQQD Eyg4ZTEwZTkzNTU2YzU4NjcxMDk1Yzk1MTgxMzk0YWFmMDA2NDhhNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHhb24WBdjMa5SIlfienolScoaaN INjaeLccCowIdQtq0Q220uGeu7iODNZeRExR0xh/1Q+r19lU2uDAsbiRaA/d7C3I stZjLIEA31jC4YL4oWaL+eU7iwagieAYgaPWRnBDMrLMvaBwbGUTU5VvlHAHpVnp juhk49OpVpATHCe28Gubf+lvsxKidb3g9rzYlGNAcW8bWUNqngFtnCE87cj/umv/ XOAse5Pu6uho5/tlfwvQKNqTuju3uNNyTR7xl8OsO4d9a2gY6Fd3zV2sY6MeR2k9 Z0bQqPaxf4rb5Il299gd3XPHNcN4TbImYc7bb2W9rwzo25yBEi1TGzxiHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4Q6TVWxYZxCVyVGBOUqvAGSKSFMB8GA1UdIwQY MBaAFBfbi9/yLho3sPSmlTQktlFpsDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAt MzI3MDJkYmQ0YmM3LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi81YTNlMDgtZWQ0MS00ZDBlLWE2ZTAtMzI3MDJkYmQ0YmM3 LzEvRjl1TDNfSXVHamV3OUthVk5DUzJVV213TkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/SkR6OO 5Kanz4LSomJpeBRji4qX/6zDlJV7K8sdFUgjBrJdamRIJSYo56l9FovGDuRmCong Quh4ZdmSbR5BMjjGgQfsi/K4hmnieURSyWRn3CraJyPV5bpJsZKOMEbCX2ddyL/E PJOc/W5a0eOY+BnoMMl9p0K7m3brLTZE8zfkhIvxnnWFwbqnFMZE/0yXDsaR22S5 HLjfsGdBdThC7AKjBz9vRnRRbkWbr2KJKC/wsIvLSjqQhXFzVy7rUN9qF4ahOjyg Rw2xmDSxI+BM+8EHxX4eFyHqESUN41vtu0bvDGBUoMmoAuWpHpHaQISyBsELB5r3 K8uf24sStJt2hQ== -----END CERTIFICATE-----Generated at Mon Dec 22 07:51:25 2025 by rpki-client