This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft File: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft (raw, json) Hash identifier: c5gKNUsaLFCL4HDGTiPs5rhUUSugeQLqvlrKUIx56L4= Subject key identifier: AF:DC:EC:71:8D:10:5F:8A:EF:09:AB:12:59:26:DF:26:84:0C:EB:00 Authority key identifier: F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D Certificate issuer: /CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Certificate serial: 019B5486BC939FC3651825E9161D57FD6DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft Manifest number: 1794 Signing time: Thu 25 Dec 2025 08:01:14 +0000 Manifest this update: Thu 25 Dec 2025 08:01:14 +0000 Manifest next update: Fri 26 Dec 2025 08:01:14 +0000 Files and hashes: 1: 9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl (hash: oopYEn0kriSODvg+H4QhQM8fwqXwctOcw83R5NSQC0M=) 2: gGwKnYfvhCn5nwp-acIqahsS3nA.roa (hash: Rj4EAnxstBQ29bzxEKAGqDAmg0fXQP5ck4gqOBpaqb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:bc:93:9f:c3:65:18:25:e9:16:1d:57:fd:6d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6954d0103a7a3e652354a74489f86daf9a1a59d Validity Not Before: Dec 25 08:01:14 2025 GMT Not After : Dec 26 08:01:14 2025 GMT Subject: CN=afdcec718d105f8aef09ab125926df26840ceb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:cc:db:da:57:42:18:48:6b:56:49:df:df:6c: 68:7f:67:e3:65:ae:14:83:74:5f:86:59:e9:1c:0f: de:76:76:fc:2b:0b:4c:42:2e:29:84:44:22:87:28: b2:6e:1b:ff:11:5d:54:5e:12:6d:4a:ab:4a:b1:13: b1:b1:cf:1b:09:0d:18:90:84:11:f5:ba:72:59:b6: f1:b8:53:0f:ff:19:4f:06:ff:15:5e:61:8e:ba:d6: 61:a1:82:65:f3:81:ce:ab:18:2a:d1:f8:23:65:5e: 70:90:d8:db:47:18:c0:15:ee:2a:c1:ff:2d:36:f1: 32:8d:46:64:eb:4b:8a:ee:31:b3:4c:a9:4f:2f:e3: 72:4c:3d:66:b9:97:bc:f0:fc:14:54:9e:42:0b:0a: 15:66:10:13:a8:01:e1:15:fd:83:73:75:8e:8a:b1: 08:20:63:0a:de:e0:80:f1:e3:3a:6a:c6:30:34:4f: 54:ec:52:56:68:d3:0a:5d:50:b3:e0:bb:dc:90:f5: 06:48:a7:b0:52:d9:62:1f:a5:40:c1:cd:9f:3d:56: 63:bf:4a:bc:f1:fb:d0:05:2c:c5:1e:71:ff:37:bf: e1:ad:1a:68:c1:5c:42:9d:d5:9c:7a:cf:b1:77:af: 67:60:bd:40:89:53:17:1e:c2:9c:24:eb:ca:ff:ab: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DC:EC:71:8D:10:5F:8A:EF:09:AB:12:59:26:DF:26:84:0C:EB:00 X509v3 Authority Key Identifier: keyid:F6:95:4D:01:03:A7:A3:E6:52:35:4A:74:48:9F:86:DA:F9:A1:A5:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/940550-daab-4c9d-8440-f8c9e0962354/1/9pVNAQOno-ZSNUp0SJ-G2vmhpZ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:53:2c:14:c0:10:c0:62:76:8a:2d:d4:86:3c:58:ee:a1:f6: 83:23:10:54:f7:c0:dd:c2:05:ca:91:77:c0:86:6a:c9:55:08: 93:33:32:87:37:d7:c1:76:2b:76:66:14:c9:3b:4c:cb:9e:9e: 82:27:5d:bd:e8:9e:f3:e6:d7:97:ea:59:9f:c5:25:19:29:99: 70:29:49:26:de:95:df:97:7f:cc:91:14:61:8d:5a:f2:df:63: f1:6f:4a:46:3f:c9:69:de:28:d8:4b:11:13:28:aa:5f:8e:4a: 00:1a:d1:c9:a5:bf:e6:9e:65:49:85:ef:e6:4e:48:83:8b:9c: b1:c7:08:da:b2:93:29:8c:e0:87:12:22:82:e2:c9:84:0f:40: c0:48:5d:a0:99:bd:fc:27:53:db:aa:ef:19:29:da:de:cc:ef: 6f:4a:ee:88:91:ed:45:36:c3:d6:01:bb:8f:d1:75:27:f6:cc: ae:e0:30:79:fc:52:da:2e:7e:a0:53:94:3c:ae:22:8a:5c:e5: ce:6c:4a:e7:56:49:0d:5c:c7:51:1c:74:4c:70:3a:62:fe:1d: 87:a2:97:9c:2c:19:74:7d:01:08:f2:01:2c:23:ff:f6:51:8c: f9:36:63:1e:b1:d8:aa:fa:0c:f5:b6:be:6b:ea:d1:70:ac:2b: 07:fa:ae:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhryTn8NlGCXpFh1X/W23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTU0ZDAxMDNhN2EzZTY1MjM1NGE3NDQ4OWY4NmRhZjlh MWE1OWQwHhcNMjUxMjI1MDgwMTE0WhcNMjUxMjI2MDgwMTE0WjAzMTEwLwYDVQQD EyhhZmRjZWM3MThkMTA1ZjhhZWYwOWFiMTI1OTI2ZGYyNjg0MGNlYjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4szb2ldCGEhrVknf32xof2fjZa4U g3RfhlnpHA/ednb8KwtMQi4phEQihyiybhv/EV1UXhJtSqtKsROxsc8bCQ0YkIQR 9bpyWbbxuFMP/xlPBv8VXmGOutZhoYJl84HOqxgq0fgjZV5wkNjbRxjAFe4qwf8t NvEyjUZk60uK7jGzTKlPL+NyTD1muZe88PwUVJ5CCwoVZhATqAHhFf2Dc3WOirEI IGMK3uCA8eM6asYwNE9U7FJWaNMKXVCz4LvckPUGSKewUtliH6VAwc2fPVZjv0q8 8fvQBSzFHnH/N7/hrRpowVxCndWces+xd69nYL1AiVMXHsKcJOvK/6t5uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/c7HGNEF+K7wmrElkm3yaEDOsAMB8GA1UdIwQY MBaAFPaVTQEDp6PmUjVKdEifhtr5oaWdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAt ZjhjOWUwOTYyMzU0LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NDA1NTAtZGFhYi00YzlkLTg0NDAtZjhjOWUwOTYyMzU0 LzEvOXBWTkFRT25vLVpTTlVwMFNKLUcydm1ocFowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlMsFMAQ wGJ2ii3UhjxY7qH2gyMQVPfA3cIFypF3wIZqyVUIkzMyhzfXwXYrdmYUyTtMy56e giddveie8+bXl+pZn8UlGSmZcClJJt6V35d/zJEUYY1a8t9j8W9KRj/Jad4o2EsR EyiqX45KABrRyaW/5p5lSYXv5k5Ig4ucsccI2rKTKYzghxIiguLJhA9AwEhdoJm9 /CdT26rvGSna3szvb0ruiJHtRTbD1gG7j9F1J/bMruAwefxS2i5+oFOUPK4iilzl zmxK51ZJDVzHURx0THA6Yv4dh6KXnCwZdH0BCPIBLCP/9lGM+TZjHrHYqvoM9ba+ a+rRcKwrB/qujw== -----END CERTIFICATE-----Generated at Thu Dec 25 14:34:19 2025 by rpki-client