This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json) Hash identifier: ywiVYpApH1YY5UsSLShHGhk4N+goZ4gl/C69qzQAgqw= Subject key identifier: 08:92:70:9E:9D:49:B1:C9:4F:E0:91:B9:55:A6:BE:83:56:26:71:96 Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47 Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247 Certificate serial: 019B31FA518D737E626544A09BC46DC610FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 15:00:46 +0000 Manifest this update: Thu 18 Dec 2025 15:00:46 +0000 Manifest next update: Fri 19 Dec 2025 15:00:46 +0000 Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: l4UVUaeVe2V0/DT9M7JZ8N3qDZTIW+7t+gHx8Gre1Fg=) 2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 15:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:51:8d:73:7e:62:65:44:a0:9b:c4:6d:c6:10:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247 Validity Not Before: Dec 18 15:00:46 2025 GMT Not After : Dec 19 15:00:46 2025 GMT Subject: CN=0892709e9d49b1c94fe091b955a6be8356267196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:83:d5:de:00:3c:13:64:00:15:55:91:ca:14: c1:73:85:64:af:e6:e5:37:9b:e7:49:d2:fa:0e:83: 49:59:65:6d:3a:0f:d4:86:f1:f5:c9:e9:2d:61:43: 4f:04:05:02:c3:ab:91:b9:01:9f:10:74:27:17:93: 97:2f:07:6d:a5:aa:c3:93:73:13:34:b8:43:4b:bb: 29:ab:21:62:ef:ad:59:94:03:e6:5b:e5:65:3f:d9: 81:fa:d4:f1:7d:67:5c:d0:79:6b:6d:e9:8b:f1:33: fc:20:b8:d4:8b:4d:a0:09:2f:4d:53:90:ce:c9:bd: bf:f5:31:4d:f7:3a:e4:05:6e:17:7b:8f:10:fb:c0: 77:ec:9d:bb:82:2a:c6:d8:84:69:2c:9f:fe:0e:a0: 1c:d7:34:07:61:9b:9e:78:b2:52:66:1b:44:0c:8d: 1e:28:f1:b0:37:65:b2:6b:3e:bd:22:0d:23:73:b8: 6b:99:ff:ac:b8:05:c5:23:be:4e:44:9a:3e:8f:e6: 94:f8:15:fa:55:ab:24:fc:43:05:35:e5:2d:96:7a: fa:81:3d:e9:b0:6b:55:d7:4c:70:b2:46:8a:39:5e: ae:8d:35:71:f4:54:c5:a8:d2:4d:fa:8c:67:22:3b: 75:36:d6:47:c6:5e:fe:1c:0e:ca:73:95:d4:16:07: 4f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:92:70:9E:9D:49:B1:C9:4F:E0:91:B9:55:A6:BE:83:56:26:71:96 X509v3 Authority Key Identifier: keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b9:cd:2d:a1:89:c4:73:0c:1e:3e:f4:f0:d5:9d:3e:0e:e2: 11:5c:20:b4:bd:c7:25:3b:42:a8:af:24:8a:2d:08:5a:a3:75: a7:09:e5:79:88:9a:66:29:db:0c:25:01:58:1e:10:43:d3:45: 2f:8d:74:a4:f4:46:1d:65:32:02:00:28:32:db:d5:54:30:15: 23:61:72:f2:12:52:cd:c6:d1:81:73:42:c7:0a:5d:0f:b0:5a: d1:7c:2a:68:45:2f:55:42:b4:e1:47:d3:f1:b2:ba:68:46:b2: f1:a4:db:86:8f:4e:7e:c8:0d:4d:a7:b1:cf:59:56:e2:ef:e5: 13:10:9b:b6:de:09:26:fc:a9:d1:ed:93:86:23:e0:b2:93:ff: 20:05:2b:1f:ee:80:02:80:21:2d:fb:f3:89:96:05:5e:2e:98: af:55:77:95:0f:c4:92:b1:c3:97:16:c2:1f:17:82:9e:12:b1: 0a:43:c6:a2:34:96:48:aa:69:28:f9:f9:b4:86:d2:39:76:7a: 65:f2:75:1e:64:81:b5:f2:3d:6b:28:f8:0a:53:4e:a9:ad:6c: 75:89:c6:0a:0f:0b:09:8f:46:9f:5e:cf:df:26:61:71:13:75: ad:67:e0:cb:62:45:35:ad:5c:ab:51:67:f9:22:25:80:66:ea: c1:06:bb:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+lGNc35iZUSgm8RtxhD/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0 YjAyNDcwHhcNMjUxMjE4MTUwMDQ2WhcNMjUxMjE5MTUwMDQ2WjAzMTEwLwYDVQQD EygwODkyNzA5ZTlkNDliMWM5NGZlMDkxYjk1NWE2YmU4MzU2MjY3MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoPV3gA8E2QAFVWRyhTBc4Vkr+bl N5vnSdL6DoNJWWVtOg/UhvH1yektYUNPBAUCw6uRuQGfEHQnF5OXLwdtparDk3MT NLhDS7spqyFi761ZlAPmW+VlP9mB+tTxfWdc0HlrbemL8TP8ILjUi02gCS9NU5DO yb2/9TFN9zrkBW4Xe48Q+8B37J27girG2IRpLJ/+DqAc1zQHYZueeLJSZhtEDI0e KPGwN2Wyaz69Ig0jc7hrmf+suAXFI75ORJo+j+aU+BX6Vask/EMFNeUtlnr6gT3p sGtV10xwskaKOV6ujTVx9FTFqNJN+oxnIjt1NtZHxl7+HA7Kc5XUFgdPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiScJ6dSbHJT+CRuVWmvoNWJnGWMB8GA1UdIwQY MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADbnNLaGJ xHMMHj708NWdPg7iEVwgtL3HJTtCqK8kii0IWqN1pwnleYiaZinbDCUBWB4QQ9NF L410pPRGHWUyAgAoMtvVVDAVI2Fy8hJSzcbRgXNCxwpdD7Ba0XwqaEUvVUK04UfT 8bK6aEay8aTbho9OfsgNTaexz1lW4u/lExCbtt4JJvyp0e2ThiPgspP/IAUrH+6A AoAhLfvziZYFXi6Yr1V3lQ/EkrHDlxbCHxeCnhKxCkPGojSWSKppKPn5tIbSOXZ6 ZfJ1HmSBtfI9ayj4ClNOqa1sdYnGCg8LCY9Gn17P3yZhcRN1rWfgy2JFNa1cq1Fn +SIlgGbqwQa7QA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:53 2025 by rpki-client