This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft File: _9v7226XXdyo9t2WjDen1VYOaR0.mft (raw, json) Hash identifier: WYrIDrJsWPJJP+i1fwp0hYTLCiimXasEoBsSf4NN7oA= Subject key identifier: F2:65:07:07:A8:58:2D:57:76:13:61:D6:37:CF:D8:17:81:BF:5B:60 Authority key identifier: FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D Certificate issuer: /CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Certificate serial: 019B3AC6692950D43D96BE3FF1B07DCA07A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft Manifest number: 072B Signing time: Sat 20 Dec 2025 08:00:40 +0000 Manifest this update: Sat 20 Dec 2025 08:00:40 +0000 Manifest next update: Sun 21 Dec 2025 08:00:40 +0000 Files and hashes: 1: JPk8qHaA0VqJJwM_cRiEk2hiNN4.roa (hash: UcrJOHgb+5M2bbcwOpZ1qAySq77AEN4vifocol3LdDU=) 2: MaON6tltdE_nNRyafDLxcoztK6E.roa (hash: Sb8QCt7PRXcCVTxqpNcJ/gxYw3sApRrWPJqKe86QFYM=) 3: OI1uK9LvyBYMrxZk6Wtsms4rrxQ.roa (hash: r4xm6yQr/cgOXWzX1uA52pwqnclq3721sVsfso5FXPI=) 4: SWZ731YmHf9GvH8Lkc-8awFctFs.roa (hash: YMn4x1FGAr61bxn/Z7AB4iuUFTZ6bShjnEOsfqmAjsc=) 5: XtH0htLAKG6Q5dcfnWZEaEHDokg.roa (hash: 6hipGrL8gPx/AA1jsYDtYKkvzd7jAI7crI4ZoMmJgjA=) 6: _9v7226XXdyo9t2WjDen1VYOaR0.crl (hash: w0DBKY7V5VWIYDN9nx9+If9i6p9VChlldo95sjXBR18=) 7: jEuhOWOO-QlWKQlP_vQxpSPLQb4.roa (hash: T76BJeDOcF7APO1x6/gqGhi/5iskR6Zu3KBZKjePpuU=) 8: kcjKO-XNcfcf0HE07ydEx_8jZZQ.roa (hash: XSr7PWK3S9KkuhbDIITLfu7M17ePupmiUKsFvQ7vymo=) 9: pADzcECo2Yf0nO80duEMuDGh3X8.roa (hash: /D3kHt6hhWjXdSU0si9ABN/nIQHXorfwBvY2dwdWWD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:69:29:50:d4:3d:96:be:3f:f1:b0:7d:ca:07:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdbfbdb6e975ddca8f6dd968c37a7d5560e691d Validity Not Before: Dec 20 08:00:40 2025 GMT Not After : Dec 21 08:00:40 2025 GMT Subject: CN=f2650707a8582d57761361d637cfd81781bf5b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:bf:3f:f5:ad:3f:13:e8:70:6d:09:47:60:e7: e0:b7:d8:ca:77:c9:e1:f2:3b:25:c8:15:cf:bb:cb: 72:05:17:7f:44:a5:19:c5:98:97:09:01:54:83:c7: 79:4e:65:07:f9:88:6c:64:51:a6:26:93:a9:39:4a: 5f:b5:af:35:75:a6:f0:47:94:fb:50:ce:40:40:9c: 6f:d9:bb:b9:4c:b2:26:d5:80:21:05:cc:a8:0b:b6: 36:ac:30:3e:ab:09:bc:12:7b:e7:1f:d8:61:2b:8e: 07:4f:e7:7f:07:0c:04:39:b7:82:28:d6:ba:62:2a: af:60:6f:72:e1:71:5c:e7:52:4b:03:68:19:64:61: 11:f6:96:16:13:25:87:4b:0d:2d:45:82:3a:09:1a: b2:9b:59:1a:d1:b3:dd:b9:cf:97:47:2e:8b:35:b7: a2:9b:ea:a8:20:01:46:0b:c8:b9:1a:c9:74:51:01: 5a:cd:1e:36:2b:6e:c7:3b:54:26:8f:93:da:34:48: 3e:39:97:c0:37:98:4b:91:f6:51:62:6f:ad:d1:32: ad:62:d1:e0:90:89:53:72:bf:5d:69:f3:94:99:5a: 32:f5:14:30:ee:bd:67:b5:9f:5d:70:cc:9e:bd:77: 04:0d:59:61:6f:de:5d:be:8f:1c:58:0e:ce:34:38: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:65:07:07:A8:58:2D:57:76:13:61:D6:37:CF:D8:17:81:BF:5B:60 X509v3 Authority Key Identifier: keyid:FF:DB:FB:DB:6E:97:5D:DC:A8:F6:DD:96:8C:37:A7:D5:56:0E:69:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_9v7226XXdyo9t2WjDen1VYOaR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/66fff3-bfa9-4732-b4b5-19769f578efd/1/_9v7226XXdyo9t2WjDen1VYOaR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:fb:02:70:04:0a:94:99:57:e5:f0:50:3d:aa:e5:6a:ae:06: 03:7e:af:62:8e:0b:f2:06:7e:95:e1:e1:73:7d:a4:ed:07:b7: 5a:2b:2f:e6:8b:4d:97:c6:82:fb:4d:f4:36:55:c7:af:39:1a: 6e:de:9d:95:68:8a:d2:6f:d8:ce:5b:ef:df:e7:f6:72:0c:e8: 42:85:45:7b:4d:f1:81:0a:51:84:00:fd:5b:b8:86:2d:85:20: 8d:98:04:70:99:f3:8f:46:69:e6:a9:d7:84:43:5e:2d:c9:75: 3d:96:c1:d7:a2:f2:57:14:ab:dc:70:3e:7a:36:74:eb:cd:81: 99:2c:3a:70:96:4b:f3:91:92:4e:6b:7b:c9:6b:91:c7:04:ff: 14:01:c3:2a:25:7e:de:09:8c:58:60:61:d0:f7:c3:2b:c1:0b: 73:58:57:48:a4:90:b7:7e:d5:40:da:1f:e0:f4:50:8f:14:16: 3d:dd:ca:ff:d7:85:c3:5e:08:50:de:f5:57:b9:7f:79:da:a8: 9d:b1:80:e8:1d:5f:82:bb:60:1e:ef:c4:fa:e2:1f:ac:2f:34: cf:2a:90:49:be:54:87:98:1f:52:e2:3e:c4:b9:bb:ba:f0:46: a7:59:6b:e8:d4:56:46:5b:0e:d4:07:7d:bf:ec:cf:e3:ec:0f: 90:c8:ea:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xmkpUNQ9lr4/8bB9ygepMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGJmYmRiNmU5NzVkZGNhOGY2ZGQ5NjhjMzdhN2Q1NTYw ZTY5MWQwHhcNMjUxMjIwMDgwMDQwWhcNMjUxMjIxMDgwMDQwWjAzMTEwLwYDVQQD EyhmMjY1MDcwN2E4NTgyZDU3NzYxMzYxZDYzN2NmZDgxNzgxYmY1YjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlL8/9a0/E+hwbQlHYOfgt9jKd8nh 8jslyBXPu8tyBRd/RKUZxZiXCQFUg8d5TmUH+YhsZFGmJpOpOUpfta81dabwR5T7 UM5AQJxv2bu5TLIm1YAhBcyoC7Y2rDA+qwm8EnvnH9hhK44HT+d/BwwEObeCKNa6 YiqvYG9y4XFc51JLA2gZZGER9pYWEyWHSw0tRYI6CRqym1ka0bPduc+XRy6LNbei m+qoIAFGC8i5Gsl0UQFazR42K27HO1Qmj5PaNEg+OZfAN5hLkfZRYm+t0TKtYtHg kIlTcr9dafOUmVoy9RQw7r1ntZ9dcMyevXcEDVlhb95dvo8cWA7ONDjPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJlBweoWC1XdhNh1jfP2BeBv1tgMB8GA1UdIwQY MBaAFP/b+9tul13cqPbdlow3p9VWDmkdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUt MTk3NjlmNTc4ZWZkLzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi82NmZmZjMtYmZhOS00NzMyLWI0YjUtMTk3NjlmNTc4ZWZk LzEvXzl2NzIyNlhYZHlvOXQyV2pEZW4xVllPYVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlPsCcAQK lJlX5fBQParlaq4GA36vYo4L8gZ+leHhc32k7Qe3Wisv5otNl8aC+030NlXHrzka bt6dlWiK0m/Yzlvv3+f2cgzoQoVFe03xgQpRhAD9W7iGLYUgjZgEcJnzj0Zp5qnX hENeLcl1PZbB16LyVxSr3HA+ejZ0682BmSw6cJZL85GSTmt7yWuRxwT/FAHDKiV+ 3gmMWGBh0PfDK8ELc1hXSKSQt37VQNof4PRQjxQWPd3K/9eFw14IUN71V7l/edqo nbGA6B1fgrtgHu/E+uIfrC80zyqQSb5Uh5gfUuI+xLm7uvBGp1lr6NRWRlsO1Ad9 v+zP4+wPkMjqtw== -----END CERTIFICATE-----Generated at Sat Dec 20 14:10:53 2025 by rpki-client