This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft File: 9iwrcwAEBoJN-8euOIbreGf47G4.mft (raw, json) Hash identifier: JRzmSjx8r4rJhWyTZdiywgKNgmbKau/1YLn/uJjCzJQ= Subject key identifier: EF:75:FE:45:1E:FC:D8:50:D2:13:79:0F:E1:F7:4E:13:18:6F:EF:56 Authority key identifier: F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E Certificate issuer: /CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Certificate serial: 019B7523AE2A59F4D0EDDB96DCAE0A7B7C15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 16:00:31 +0000 Manifest this update: Wed 31 Dec 2025 16:00:31 +0000 Manifest next update: Thu 01 Jan 2026 16:00:31 +0000 Files and hashes: 1: 9iwrcwAEBoJN-8euOIbreGf47G4.crl (hash: cWTdyaRnYgIwjKlxerVeXh4cxeQ1MR+8ddhTv36CBf0=) 2: ceDg72YenqK4_dFvq8QBAcGglOc.roa (hash: Zws7AOUBGinLUnjZoVBw7x3JkyX35Jt03arL9swrd5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:ae:2a:59:f4:d0:ed:db:96:dc:ae:0a:7b:7c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62c2b73000406824dfbc7ae3886eb7867f8ec6e Validity Not Before: Dec 31 16:00:31 2025 GMT Not After : Jan 1 16:00:31 2026 GMT Subject: CN=ef75fe451efcd850d213790fe1f74e13186fef56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f2:1c:55:c5:ee:d1:99:cb:3e:3f:f7:74:52: 65:bd:ce:c4:ae:df:68:0d:b7:0d:08:a2:24:0a:f0: 60:18:cb:aa:ba:ee:05:56:4e:75:5e:7b:cb:3a:c2: 20:30:f7:ae:da:ae:73:b2:83:0d:eb:96:0a:75:14: 27:75:4c:c4:69:c3:29:9b:2c:af:16:6d:58:b6:59: 65:40:87:7a:72:88:9d:51:85:45:9d:e2:b7:29:4e: 38:d0:1e:c6:f9:4b:d6:a6:fb:af:3d:cf:64:e8:f2: 30:ea:f4:2c:c4:cc:09:12:da:52:59:ae:1d:cb:bb: 7d:35:8a:e0:fd:c8:0b:03:c0:dc:08:13:e5:b3:cb: 37:44:17:a3:4f:3f:d2:d9:fd:d7:93:9e:75:ec:0a: 8a:9a:e3:4b:33:5e:e9:88:65:91:93:3c:9d:23:bc: 4c:1d:8c:f9:c3:27:8c:f8:88:77:11:0a:d2:1d:8b: 9f:2c:15:4d:65:5e:63:5e:5b:91:7a:50:92:d2:33: 52:c3:fd:71:0f:18:08:7d:06:a0:5a:29:12:04:b4: 88:6a:cf:a0:1e:b7:9e:30:1b:1c:7b:33:2f:d5:2d: 52:41:9e:96:81:15:8d:a7:87:3e:70:6e:68:32:8d: 50:0f:20:a8:8e:56:db:69:92:33:86:34:74:dc:66: 32:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:75:FE:45:1E:FC:D8:50:D2:13:79:0F:E1:F7:4E:13:18:6F:EF:56 X509v3 Authority Key Identifier: keyid:F6:2C:2B:73:00:04:06:82:4D:FB:C7:AE:38:86:EB:78:67:F8:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9iwrcwAEBoJN-8euOIbreGf47G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6829aa-11a5-42e7-9f96-56ebf829d6b2/1/9iwrcwAEBoJN-8euOIbreGf47G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9c:f7:f4:c5:fc:ed:15:ea:14:eb:6f:b5:0d:7c:fc:82:88: 4f:27:7d:12:ab:75:2c:9d:8b:b9:e8:11:d5:a9:4b:1b:d9:45: cc:a6:db:70:58:e9:f1:b7:84:d8:22:d2:82:b9:0b:05:de:c2: 99:4f:73:9e:79:d5:2c:e0:0b:ca:cd:a2:42:52:bb:ba:47:e3: b8:36:7b:94:f9:ff:88:4d:ba:c7:5f:3b:a7:12:b7:22:f1:a9: 0a:67:23:ae:72:6f:c4:39:10:b8:77:d3:c8:0a:b1:28:0e:da: 07:c7:5d:3b:a9:c0:09:73:f9:4a:3b:5e:07:76:3f:62:11:6c: d6:31:48:dc:d8:5f:ae:70:3c:e9:2f:cb:7b:a4:f7:61:43:21: e5:5b:8d:41:71:40:b1:40:3c:1c:30:a1:02:d7:be:61:f9:3e: 6b:83:c1:c0:a9:4c:7c:94:44:d7:b9:a3:62:31:98:8c:1d:72: 01:c3:2c:17:43:59:14:ff:e3:52:96:9a:c6:87:ca:c3:4d:0a: 4b:0d:79:ce:2f:d0:91:e8:e8:27:25:f9:26:0b:db:4e:61:48: aa:b8:ea:71:0a:0d:4a:d8:d2:63:22:f1:a3:da:f1:68:5e:a9: 55:2d:c7:f2:ec:5d:df:72:5e:aa:05:b1:be:eb:1c:92:14:17: b4:fd:45:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I64qWfTQ7duW3K4Ke3wVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmMyYjczMDAwNDA2ODI0ZGZiYzdhZTM4ODZlYjc4Njdm OGVjNmUwHhcNMjUxMjMxMTYwMDMxWhcNMjYwMTAxMTYwMDMxWjAzMTEwLwYDVQQD EyhlZjc1ZmU0NTFlZmNkODUwZDIxMzc5MGZlMWY3NGUxMzE4NmZlZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvIcVcXu0ZnLPj/3dFJlvc7Ert9o DbcNCKIkCvBgGMuquu4FVk51XnvLOsIgMPeu2q5zsoMN65YKdRQndUzEacMpmyyv Fm1YtlllQId6coidUYVFneK3KU440B7G+UvWpvuvPc9k6PIw6vQsxMwJEtpSWa4d y7t9NYrg/cgLA8DcCBPls8s3RBejTz/S2f3Xk5517AqKmuNLM17piGWRkzydI7xM HYz5wyeM+Ih3EQrSHYufLBVNZV5jXluRelCS0jNSw/1xDxgIfQagWikSBLSIas+g HreeMBscezMv1S1SQZ6WgRWNp4c+cG5oMo1QDyCojlbbaZIzhjR03GYydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO91/kUe/NhQ0hN5D+H3ThMYb+9WMB8GA1UdIwQY MBaAFPYsK3MABAaCTfvHrjiG63hn+OxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYt NTZlYmY4MjlkNmIyLzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS82ODI5YWEtMTFhNS00MmU3LTlmOTYtNTZlYmY4MjlkNmIy LzEvOWl3cmN3QUVCb0pOLThldU9JYnJlR2Y0N0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJz39MX8 7RXqFOtvtQ18/IKITyd9Eqt1LJ2LuegR1alLG9lFzKbbcFjp8beE2CLSgrkLBd7C mU9znnnVLOALys2iQlK7ukfjuDZ7lPn/iE26x187pxK3IvGpCmcjrnJvxDkQuHfT yAqxKA7aB8ddO6nACXP5SjteB3Y/YhFs1jFI3NhfrnA86S/Le6T3YUMh5VuNQXFA sUA8HDChAte+Yfk+a4PBwKlMfJRE17mjYjGYjB1yAcMsF0NZFP/jUpaaxofKw00K Sw15zi/QkejoJyX5JgvbTmFIqrjqcQoNStjSYyLxo9rxaF6pVS3H8uxd33JeqgWx vusckhQXtP1Fuw== -----END CERTIFICATE-----Generated at Thu Jan 1 01:07:03 2026 by rpki-client