This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json) Hash identifier: 9msssgTVLhlAMbi/5iwUjhYdTMsIHcj5Dv7g5rRq0ao= Subject key identifier: 7A:94:19:C4:55:C6:F6:76:BD:19:CF:19:77:47:EA:27:7E:C2:1E:E6 Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Certificate serial: 019B4DDF2D9EEF9CC9791D392DAF270405D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft Manifest number: 1721 Signing time: Wed 24 Dec 2025 01:00:30 +0000 Manifest this update: Wed 24 Dec 2025 01:00:30 +0000 Manifest next update: Thu 25 Dec 2025 01:00:30 +0000 Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: +q0fePuoTifecr1dP7l0Alyf0Va1jYdb8AgfA7TGHc0=) 2: xsMFnUirGLrsIHVnOE89k-g_TNQ.roa (hash: +kCjATrNGMNDq1U+j1qAO+cqX9M0j46A6h5U99mLaHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:2d:9e:ef:9c:c9:79:1d:39:2d:af:27:04:05:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Validity Not Before: Dec 24 01:00:30 2025 GMT Not After : Dec 25 01:00:30 2025 GMT Subject: CN=7a9419c455c6f676bd19cf197747ea277ec21ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:dc:1b:b2:20:70:e0:df:ba:f5:c6:7a:37: da:49:e0:39:55:cf:b2:41:83:4c:7b:d4:eb:b1:19: 4a:35:22:59:43:63:d1:02:93:1c:99:2f:db:f6:e4: 31:f3:66:f3:b7:02:b6:aa:b2:c5:ce:cc:8d:5f:71: b1:af:e9:34:47:82:5c:72:e7:64:83:a6:2b:fe:25: 0e:b0:e7:5e:7d:53:e5:22:e8:c5:70:d9:1e:fd:e8: c5:5c:71:bf:b1:7a:97:4f:01:da:cd:90:0b:9e:ee: 83:49:02:bd:fb:b8:21:b5:84:3e:66:8f:4c:34:b8: 6b:b8:9e:30:de:d6:d0:1c:78:fa:a4:d8:67:e7:16: 9a:bc:f0:5c:48:af:b7:c6:9a:36:a3:a5:31:46:b1: 1e:fd:d9:6b:c3:e2:ab:eb:7c:3d:ce:7a:a5:60:67: 9e:fa:c0:46:8b:7f:b6:88:21:e3:93:a9:ea:97:41: 9e:af:5f:69:f3:ef:39:71:95:5b:59:18:99:98:ec: f7:b6:f4:01:2e:3d:27:a7:f5:ad:73:fa:7d:28:a8: 2a:8b:28:35:d1:14:3c:09:ee:8a:80:4f:d3:77:9a: 23:4c:5d:25:67:f8:e4:78:fa:1c:94:d7:ad:48:12: b8:f2:df:23:38:7b:db:1d:64:97:4e:09:01:83:34: 4e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:94:19:C4:55:C6:F6:76:BD:19:CF:19:77:47:EA:27:7E:C2:1E:E6 X509v3 Authority Key Identifier: keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:0f:68:3a:ea:dc:ae:3b:fa:d3:87:f9:a8:04:37:bc:45:2e: e8:2a:19:16:0d:28:0e:9f:8e:10:0e:ec:8d:4d:9d:a8:e0:8c: 53:0d:f4:e4:31:45:41:5c:3e:8a:a0:a7:d2:82:f5:76:cb:a2: 7f:02:6a:59:7d:e4:b9:a6:75:34:ae:ca:08:68:1b:bf:36:a3: 05:63:d1:9f:e2:59:e6:f0:ca:fd:ed:39:d1:f6:84:f8:f0:53: cf:32:0a:bc:78:e9:f0:e5:ef:4a:df:ce:e3:85:e2:05:37:a0: c6:4d:da:49:5c:aa:3b:b2:77:2d:35:d5:3b:df:76:a5:26:63: cc:dd:7c:3e:b1:10:a4:cb:d6:db:67:51:29:37:5e:a7:40:14: 70:64:d1:d5:84:2c:29:93:6e:2a:9f:b7:3e:6d:5d:ba:5e:97: d5:02:43:3b:e8:a7:cd:ae:bf:b2:d2:4d:88:39:a6:4d:ad:04: e6:a6:fd:42:bb:e5:91:d1:7f:82:c2:d7:fe:3f:a4:8d:b3:db: 1c:ef:c7:4c:9c:cf:56:e8:86:25:65:28:d5:d1:24:78:aa:13: be:8b:22:16:55:ad:53:1d:b4:aa:1f:48:52:f4:94:a6:a9:12: d2:16:b5:68:99:c0:b9:62:e1:1f:a0:6a:71:07:de:4c:e6:14: 91:1e:d9:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN3y2e75zJeR05La8nBAXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx NzkyM2EwHhcNMjUxMjI0MDEwMDMwWhcNMjUxMjI1MDEwMDMwWjAzMTEwLwYDVQQD Eyg3YTk0MTljNDU1YzZmNjc2YmQxOWNmMTk3NzQ3ZWEyNzdlYzIxZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+3cG7IgcODfuvXGejfaSeA5Vc+y QYNMe9TrsRlKNSJZQ2PRApMcmS/b9uQx82bztwK2qrLFzsyNX3Gxr+k0R4Jccudk g6Yr/iUOsOdefVPlIujFcNke/ejFXHG/sXqXTwHazZALnu6DSQK9+7ghtYQ+Zo9M NLhruJ4w3tbQHHj6pNhn5xaavPBcSK+3xpo2o6UxRrEe/dlrw+Kr63w9znqlYGee +sBGi3+2iCHjk6nql0Ger19p8+85cZVbWRiZmOz3tvQBLj0np/Wtc/p9KKgqiyg1 0RQ8Ce6KgE/Td5ojTF0lZ/jkePoclNetSBK48t8jOHvbHWSXTgkBgzROyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqUGcRVxvZ2vRnPGXdH6id+wh7mMB8GA1UdIwQY MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5 LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWA9oOurc rjv604f5qAQ3vEUu6CoZFg0oDp+OEA7sjU2dqOCMUw305DFFQVw+iqCn0oL1dsui fwJqWX3kuaZ1NK7KCGgbvzajBWPRn+JZ5vDK/e050faE+PBTzzIKvHjp8OXvSt/O 44XiBTegxk3aSVyqO7J3LTXVO992pSZjzN18PrEQpMvW22dRKTdep0AUcGTR1YQs KZNuKp+3Pm1dul6X1QJDO+inza6/stJNiDmmTa0E5qb9QrvlkdF/gsLX/j+kjbPb HO/HTJzPVuiGJWUo1dEkeKoTvosiFlWtUx20qh9IUvSUpqkS0ha1aJnAuWLhH6Bq cQfeTOYUkR7ZgA== -----END CERTIFICATE-----Generated at Wed Dec 24 08:48:02 2025 by rpki-client