This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json) Hash identifier: OWRhhbD/k52vUbrzvkqFbX3OIXymh0GfIeVHHq/nChU= Subject key identifier: 3B:4C:8C:99:0C:85:93:58:C7:44:23:43:A7:9A:5B:67:3C:06:77:AD Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6 Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6 Certificate serial: 019B69FB22686FCF1A02EA095C5ECA047A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 12:00:24 +0000 Manifest this update: Mon 29 Dec 2025 12:00:24 +0000 Manifest next update: Tue 30 Dec 2025 12:00:24 +0000 Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=) 2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: 8i6O6u3jxhMsLr4IwvCeC6UEOKi7BBjUj6QPzyP2/P8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:22:68:6f:cf:1a:02:ea:09:5c:5e:ca:04:7a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6 Validity Not Before: Dec 29 12:00:24 2025 GMT Not After : Dec 30 12:00:24 2025 GMT Subject: CN=3b4c8c990c859358c7442343a79a5b673c0677ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:94:19:07:bb:21:aa:35:40:1d:d1:3b:56:a2: 7f:fb:af:f2:ae:fb:bd:3a:b4:c0:f5:25:32:4f:f4: 93:14:60:70:17:6b:91:7d:1b:01:63:d8:2f:d0:bc: 22:86:2f:38:c0:b2:be:42:8e:b8:0a:16:11:8c:2c: 2b:9c:a5:44:b4:f9:19:88:7e:ce:c8:a9:cd:91:2b: 04:e5:db:2b:f9:9f:aa:2b:0a:39:c9:3c:4d:d2:1a: 8e:4a:fd:aa:79:d5:ec:ba:46:16:ee:5e:3c:30:45: 9d:da:75:21:63:4a:17:d4:64:dc:45:e6:fa:d7:f6: 05:4a:2b:f1:01:01:70:1d:88:1c:95:e1:b6:13:89: e0:83:6d:91:ef:59:a9:02:03:ea:20:af:7f:a9:b4: ec:19:51:3e:7c:03:6c:fb:93:7f:f2:51:8b:42:58: c1:e0:d6:d6:c7:86:44:74:fa:d7:2f:b8:6f:41:1d: 6a:07:c3:a4:80:f6:46:b6:07:94:56:97:4f:c1:63: 51:9c:50:d5:da:33:a9:bd:4b:66:ea:7a:80:1b:dc: 5e:6c:72:2d:0b:db:c6:10:d8:92:3c:80:72:f0:c1: 12:77:55:aa:73:cc:db:7c:24:cf:c1:a8:c6:f3:15: 9e:42:f7:f4:e7:b5:33:20:98:8c:20:54:f5:87:8f: b2:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:4C:8C:99:0C:85:93:58:C7:44:23:43:A7:9A:5B:67:3C:06:77:AD X509v3 Authority Key Identifier: keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:50:ad:5a:ce:47:a0:b7:27:c6:4d:61:db:a1:32:b9:55:29: 65:e2:1b:98:ea:1b:66:b2:d5:5f:1e:fb:4a:76:29:46:44:52: 24:dc:43:08:ef:de:e6:03:19:49:a4:6d:23:66:be:b8:86:4f: d7:89:fa:50:2d:7b:87:a5:e2:6e:25:ea:c2:e8:27:e3:b3:24: bb:e4:4a:a4:42:09:f6:2f:d9:c1:be:53:67:40:70:45:12:62: b5:d6:36:2a:d3:2e:8d:79:6e:79:60:57:20:ef:5c:07:1e:c1: 00:03:87:17:94:52:09:8b:e8:5f:a9:1d:c4:db:3b:b1:7b:68: 50:1c:38:10:70:77:44:eb:8f:54:ba:58:5d:58:be:43:f2:1e: 00:63:9a:00:1b:cd:ca:47:d1:1f:4c:b2:fb:4f:7c:be:a8:2c: 20:b8:7f:a3:00:f9:2c:9e:99:1a:eb:8f:8f:46:a2:fc:fe:3f: 55:db:7c:d1:79:71:30:e6:93:41:87:02:e7:a2:fc:8e:0f:c5: ac:cb:62:0a:32:46:25:13:4c:3c:6c:3f:9f:16:76:71:a7:e1: 1e:f8:3a:4a:d4:74:89:22:8a:8b:7a:9b:be:e2:37:d3:d5:59: d6:36:c7:9c:83:87:37:5d:99:18:8b:55:81:bc:78:93:62:5b: 23:78:7d:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+yJob88aAuoJXF7KBHpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1 YzFkZDYwHhcNMjUxMjI5MTIwMDI0WhcNMjUxMjMwMTIwMDI0WjAzMTEwLwYDVQQD EygzYjRjOGM5OTBjODU5MzU4Yzc0NDIzNDNhNzlhNWI2NzNjMDY3N2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZQZB7shqjVAHdE7VqJ/+6/yrvu9 OrTA9SUyT/STFGBwF2uRfRsBY9gv0Lwihi84wLK+Qo64ChYRjCwrnKVEtPkZiH7O yKnNkSsE5dsr+Z+qKwo5yTxN0hqOSv2qedXsukYW7l48MEWd2nUhY0oX1GTcReb6 1/YFSivxAQFwHYgcleG2E4ngg22R71mpAgPqIK9/qbTsGVE+fANs+5N/8lGLQljB 4NbWx4ZEdPrXL7hvQR1qB8OkgPZGtgeUVpdPwWNRnFDV2jOpvUtm6nqAG9xebHIt C9vGENiSPIBy8MESd1Wqc8zbfCTPwajG8xWeQvf057UzIJiMIFT1h4+yBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtMjJkMhZNYx0QjQ6eaW2c8BnetMB8GA1UdIwQY MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5 LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0FCtWs5H oLcnxk1h26EyuVUpZeIbmOobZrLVXx77SnYpRkRSJNxDCO/e5gMZSaRtI2a+uIZP 14n6UC17h6XibiXqwugn47Mku+RKpEIJ9i/Zwb5TZ0BwRRJitdY2KtMujXlueWBX IO9cBx7BAAOHF5RSCYvoX6kdxNs7sXtoUBw4EHB3ROuPVLpYXVi+Q/IeAGOaABvN ykfRH0yy+098vqgsILh/owD5LJ6ZGuuPj0ai/P4/Vdt80XlxMOaTQYcC56L8jg/F rMtiCjJGJRNMPGw/nxZ2cafhHvg6StR0iSKKi3qbvuI309VZ1jbHnIOHN12ZGItV gbx4k2JbI3h9vw== -----END CERTIFICATE-----Generated at Mon Dec 29 18:01:01 2025 by rpki-client