This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft File: 9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json) Hash identifier: HcT0X1AKKbRBZkJO0iAkO33xsIjBoy9P3fP/dWZfhpw= Subject key identifier: 56:7E:40:B6:DC:63:45:15:87:F4:4D:41:44:C4:CA:95:72:8E:75:A3 Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c Certificate serial: 019B3BA2286AB11682C8E03362C281A512F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 12:00:41 +0000 Manifest this update: Sat 20 Dec 2025 12:00:41 +0000 Manifest next update: Sun 21 Dec 2025 12:00:41 +0000 Files and hashes: 1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: UdcIk6VSXQTDDOP7KTjgcn2aL6ljYCNZsmBO8Fzm+1I=) 2: BGu53Mnt6YnfcS4G3l8YVZ-mfTw.roa (hash: QzO5j9RPktNq5NXFjAY7mK7/e0HDOPdGV4+293fHloM=) 3: br5LvPAh3qC25uv5le-_vMirU9E.roa (hash: d5eKzHAQ2jh203ot8SX9ieqegHwAZyoAukOsm+PkxYo=) 4: keFbyWRx9CXFGktePoeob--QEYA.roa (hash: iRz71Y07r23FnbminnQhY3v7rzlViMoRNVr4WwEmWj0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:28:6a:b1:16:82:c8:e0:33:62:c2:81:a5:12:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c Validity Not Before: Dec 20 12:00:41 2025 GMT Not After : Dec 21 12:00:41 2025 GMT Subject: CN=567e40b6dc63451587f44d4144c4ca95728e75a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bc:d1:39:1d:a0:e6:d3:4f:a3:0d:00:e7:31: f3:ec:c1:fe:fe:5a:c6:b1:a9:38:0b:cb:33:5d:7a: eb:78:e6:96:ba:46:f2:fc:df:24:fc:0f:c9:94:a7: 08:6d:f0:88:a7:30:77:62:08:c1:25:ec:83:15:94: 13:e9:65:f8:57:16:6e:42:90:47:06:29:c0:c1:c2: 4f:28:88:05:c4:b4:e4:f6:ba:1a:fd:9e:22:76:b9: c3:2e:2b:42:e6:9e:8f:c5:c6:12:fb:d5:85:13:7a: bc:c2:9c:67:9e:33:e8:10:4e:56:92:2c:d6:1f:96: b7:4d:4c:57:a4:5a:1d:6c:06:d0:8e:de:77:85:23: 52:61:94:5b:fb:82:82:e0:21:d0:6d:c8:80:d7:c0: 88:9d:89:55:9d:3e:56:f3:1a:86:d0:3a:c3:23:ac: 02:3c:54:03:3f:f8:e8:5e:95:35:4e:b6:3f:30:2f: 07:99:9f:f2:ea:d5:c8:6a:ed:59:4f:01:e0:08:49: 07:a7:d5:db:53:1d:87:a5:fa:fc:65:46:49:27:bc: 17:3c:84:f0:8b:c4:39:d5:da:3e:03:e2:c6:37:0d: 08:03:2e:47:05:e8:58:0e:c2:af:af:92:42:4f:37: e8:5b:95:fd:fc:e0:dc:88:4b:b5:3b:e7:90:67:55: ee:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:7E:40:B6:DC:63:45:15:87:F4:4D:41:44:C4:CA:95:72:8E:75:A3 X509v3 Authority Key Identifier: keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:97:15:51:70:9e:45:02:6d:7f:53:7c:f8:1c:e0:4b:d5:5b: 76:cc:1a:0d:23:38:1c:f4:3b:76:02:cf:b7:1e:ee:c2:19:89: 5e:84:4b:0a:b6:a7:ba:4a:ad:bf:ec:79:38:fc:4f:67:e2:ef: 30:ce:c5:aa:29:d3:19:6b:42:a4:cf:0d:64:99:f2:34:c9:09: 42:0d:f8:6b:e5:3b:ed:b6:70:3c:2c:0a:9a:81:25:f3:7f:33: ff:8b:7e:85:57:80:68:e5:cd:29:53:fc:f7:25:2d:9a:94:01: 24:5b:88:ca:2a:f4:9f:d6:e1:eb:24:d0:db:d6:63:ce:cc:e7: 58:05:be:4d:f6:89:91:48:5d:eb:fd:10:f0:a1:40:3c:76:e7: dc:ff:cb:44:3f:c0:93:57:d2:1f:c7:66:f9:cc:96:c6:62:ca: 59:c5:1b:cf:72:84:f7:d0:fd:89:69:fe:d9:1c:85:73:79:71: 91:4b:8b:05:eb:ed:d2:7f:19:71:94:4e:bb:b6:eb:f4:52:4c: 32:37:31:9d:8e:da:90:c5:1e:45:22:4d:1b:47:9d:8c:93:62: 63:5f:9a:10:13:f2:d2:9c:8f:0a:8c:ae:0b:1a:9e:8c:42:7e: 2a:1e:80:5f:85:df:09:c4:5c:bf:e4:28:82:04:a4:6f:2b:3a: 5a:b6:b9:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oihqsRaCyOAzYsKBpRLzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NTRmODRmNzgwODVmOGVhMDNhNDk2ODljYmUzNzJlNzRh YzE1M2MwHhcNMjUxMjIwMTIwMDQxWhcNMjUxMjIxMTIwMDQxWjAzMTEwLwYDVQQD Eyg1NjdlNDBiNmRjNjM0NTE1ODdmNDRkNDE0NGM0Y2E5NTcyOGU3NWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7zROR2g5tNPow0A5zHz7MH+/lrG sak4C8szXXrreOaWukby/N8k/A/JlKcIbfCIpzB3YgjBJeyDFZQT6WX4VxZuQpBH BinAwcJPKIgFxLTk9roa/Z4idrnDLitC5p6PxcYS+9WFE3q8wpxnnjPoEE5WkizW H5a3TUxXpFodbAbQjt53hSNSYZRb+4KC4CHQbciA18CInYlVnT5W8xqG0DrDI6wC PFQDP/joXpU1TrY/MC8HmZ/y6tXIau1ZTwHgCEkHp9XbUx2Hpfr8ZUZJJ7wXPITw i8Q51do+A+LGNw0IAy5HBehYDsKvr5JCTzfoW5X9/ODciEu1O+eQZ1XuQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZ+QLbcY0UVh/RNQUTEypVyjnWjMB8GA1UdIwQY MBaAFPRU+E94CF+OoDpJaJy+Ny50rBU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wM2EwYWEtMmI2OS00YTk4LWE2MWIt NjBiOTg4Yzk1MjMwLzEvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8wM2EwYWEtMmI2OS00YTk4LWE2MWItNjBiOTg4Yzk1MjMw LzEvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZcVUXCe RQJtf1N8+BzgS9VbdswaDSM4HPQ7dgLPtx7uwhmJXoRLCranukqtv+x5OPxPZ+Lv MM7FqinTGWtCpM8NZJnyNMkJQg34a+U77bZwPCwKmoEl838z/4t+hVeAaOXNKVP8 9yUtmpQBJFuIyir0n9bh6yTQ29ZjzsznWAW+TfaJkUhd6/0Q8KFAPHbn3P/LRD/A k1fSH8dm+cyWxmLKWcUbz3KE99D9iWn+2RyFc3lxkUuLBevt0n8ZcZROu7br9FJM MjcxnY7akMUeRSJNG0edjJNiY1+aEBPy0pyPCoyuCxqejEJ+Kh6AX4XfCcRcv+Qo ggSkbys6Wra5Vw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:38:07 2025 by rpki-client