This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: z21QetfnvD1NYISN3r22fg0JN/c7utL65griqXZRVDY= Subject key identifier: 04:5E:4C:53:BA:B9:0E:A6:8A:E1:C5:C8:09:27:8D:47:98:62:FA:DC Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019B397DDBE41AD2E7817285FB343E7EA852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 1629 Signing time: Sat 20 Dec 2025 02:01:48 +0000 Manifest this update: Sat 20 Dec 2025 02:01:48 +0000 Manifest next update: Sun 21 Dec 2025 02:01:48 +0000 Files and hashes: 1: 1-IwPe-i1cPF2UOTcwnAaTafkpKE.roa (hash: C+s08kE7H/iYDOi2RIoW/em2Fwc3Cw5Ncha5/IZtNds=) 2: 2I_gyEpNZ4JuV81yJRUXBVu-KOA.roa (hash: r49ywNskr+Vb41Ou7x0XARQgE2G5ZH5biPRfE9u4cAc=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: qZS+rg4hCoTr9ahxg6Md6l4UkpjEG/t6EHRc5sx7IF4=) 4: Cqe38rpbTYcW3IBIj3GE-axW20k.roa (hash: rFb4HKGqgMrSh0TmO+Kz12Dni5W90nAeu/GsQNE5QbI=) 5: RW6wxE8PmfS_l7583dlKYTuULiM.roa (hash: NA5N2aFRPb0HCLNpvXiULoI8i28V3/zHm+oTFj2hW9U=) 6: SK64q6IOo6mWG6GKDJh2tKc5K6o.roa (hash: qgKUE1YLTRWnqfYllOlTbd1qqKiMATJhnj7zQQUJZ7A=) 7: XViXWtM4Qca08fEngqnKAjV8_6k.roa (hash: FX1LXPYDV9yZbUiSRuPd/ffSUdla1CU7pMstvEpaovA=) 8: jHB-BKtE4yS4EdAExDjqPYKQ1qE.roa (hash: RrABUIpu4ptZlczjH/fM2s5sz3fOdOO4fUwiVsgsKxY=) 9: pYT69ekFAz6AyMxjupc4L7m_By4.roa (hash: Cer1nHXkBg7TmA4VluMF+Bs6hly21XolmwIlPkVMAss=) 10: plT9sGpYwtx51hS52NQppAnrW3E.roa (hash: s6yoUoG4+g3SpuQlWtBKVieuVvU6+S/6oM2dAh1J0BI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:db:e4:1a:d2:e7:81:72:85:fb:34:3e:7e:a8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Dec 20 02:01:48 2025 GMT Not After : Dec 21 02:01:48 2025 GMT Subject: CN=045e4c53bab90ea68ae1c5c809278d479862fadc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ef:b5:ce:a2:24:40:76:7c:fa:1c:e6:31:f6: 93:f1:70:00:1c:43:8c:5e:55:f2:9c:5c:c7:c8:d3: 4f:36:a7:8e:03:b8:e1:4b:63:75:c0:aa:04:d5:49: b5:4c:39:9a:d2:62:85:53:94:57:a9:87:d8:58:20: 76:83:b6:b2:3b:98:72:16:56:a1:c8:40:fa:f2:f0: 65:94:32:85:fc:eb:bc:16:3f:2c:6f:69:02:ca:3d: 6c:eb:95:7e:5a:41:89:0c:fb:b0:e0:5d:72:84:db: 9f:d9:f5:e8:4d:89:bb:9b:1c:dc:b9:6c:e8:8b:84: 90:c0:d2:31:88:c8:ce:3e:91:6d:07:24:81:cb:94: 0f:2c:90:f8:c1:f2:12:15:a0:86:ea:05:f2:b7:f9: ba:95:d5:e7:66:7b:70:4a:c9:21:19:23:5e:69:39: 41:af:50:20:49:53:19:bc:f1:62:28:0b:ab:2b:f3: 73:f4:bb:00:f3:ad:c4:e8:c3:d5:67:2d:27:ab:49: 8a:15:0b:8c:31:0b:c8:64:d6:7a:6c:96:ea:e1:6a: 53:00:ab:da:14:b7:06:ff:c0:f9:74:84:08:6e:ab: 35:1e:33:17:bb:30:6a:f9:9b:19:d8:9f:0e:10:a6: 2a:8d:4f:d9:ac:5a:27:d9:d5:7a:46:4c:49:f3:92: a6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5E:4C:53:BA:B9:0E:A6:8A:E1:C5:C8:09:27:8D:47:98:62:FA:DC X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9c:d3:a6:2e:65:19:93:4c:57:d0:8d:78:8a:12:02:16:86: a7:72:de:50:7b:68:07:d9:40:af:e0:e0:fb:bb:8c:36:56:31: 0a:67:dd:1c:e2:3e:42:13:9e:e5:2a:55:19:a1:cc:ad:94:51: a5:7e:81:e9:61:29:c7:61:0a:27:7a:b3:e0:83:67:33:35:4d: 77:e9:92:e9:35:2b:f9:8c:16:7f:5b:d9:e1:ef:62:39:a0:e5: c5:bc:35:9b:f7:01:8b:5f:b8:1b:1f:bd:20:cb:4e:55:58:71: 54:fd:51:8d:e4:83:9c:d7:d0:89:3e:d8:f2:2e:2b:24:e6:6c: cb:e9:07:9c:f7:e7:4c:28:5a:0a:09:77:25:80:45:ce:ea:15: 4e:99:b7:c5:4b:82:23:ed:24:b8:d7:5e:67:24:4f:79:2e:93: 14:00:68:0d:f2:dd:b2:f7:ec:f0:81:ac:9e:17:08:ea:29:e0: 10:80:ab:5d:59:60:ea:26:63:92:8d:11:52:08:18:d5:2d:cc: 3f:4d:c4:e2:6c:be:de:e4:75:0f:ef:4f:c3:f2:79:5b:7a:ad: fe:d7:3a:6e:49:2b:bf:68:19:d4:44:3c:67:40:c0:f3:37:19: 65:21:27:8e:1b:58:d6:b1:c3:0a:28:ac:09:66:e5:48:22:4e: c7:32:6d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fdvkGtLngXKF+zQ+fqhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjUxMjIwMDIwMTQ4WhcNMjUxMjIxMDIwMTQ4WjAzMTEwLwYDVQQD EygwNDVlNGM1M2JhYjkwZWE2OGFlMWM1YzgwOTI3OGQ0Nzk4NjJmYWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++1zqIkQHZ8+hzmMfaT8XAAHEOM XlXynFzHyNNPNqeOA7jhS2N1wKoE1Um1TDma0mKFU5RXqYfYWCB2g7ayO5hyFlah yED68vBllDKF/Ou8Fj8sb2kCyj1s65V+WkGJDPuw4F1yhNuf2fXoTYm7mxzcuWzo i4SQwNIxiMjOPpFtBySBy5QPLJD4wfISFaCG6gXyt/m6ldXnZntwSskhGSNeaTlB r1AgSVMZvPFiKAurK/Nz9LsA863E6MPVZy0nq0mKFQuMMQvIZNZ6bJbq4WpTAKva FLcG/8D5dIQIbqs1HjMXuzBq+ZsZ2J8OEKYqjU/ZrFon2dV6RkxJ85KmNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAReTFO6uQ6miuHFyAknjUeYYvrcMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5zTpi5l GZNMV9CNeIoSAhaGp3LeUHtoB9lAr+Dg+7uMNlYxCmfdHOI+QhOe5SpVGaHMrZRR pX6B6WEpx2EKJ3qz4INnMzVNd+mS6TUr+YwWf1vZ4e9iOaDlxbw1m/cBi1+4Gx+9 IMtOVVhxVP1RjeSDnNfQiT7Y8i4rJOZsy+kHnPfnTChaCgl3JYBFzuoVTpm3xUuC I+0kuNdeZyRPeS6TFABoDfLdsvfs8IGsnhcI6ingEICrXVlg6iZjko0RUggY1S3M P03E4my+3uR1D+9Pw/J5W3qt/tc6bkkrv2gZ1EQ8Z0DA8zcZZSEnjhtY1rHDCiis CWblSCJOxzJtmQ== -----END CERTIFICATE-----Generated at Sat Dec 20 05:01:57 2025 by rpki-client