This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft File: 9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json) Hash identifier: g9nd0dPN0fYejRmaCnebM722JAkuZ6Ygxc/AKnQMDnQ= Subject key identifier: 41:81:61:71:52:06:F7:F2:B3:6C:A4:67:7C:B5:CA:8A:5C:1C:0B:53 Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 Certificate issuer: /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Certificate serial: 019B3E6D064459E201BA59495A55FB7CDCE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft Manifest number: 17CB Signing time: Sun 21 Dec 2025 01:01:30 +0000 Manifest this update: Sun 21 Dec 2025 01:01:30 +0000 Manifest next update: Mon 22 Dec 2025 01:01:30 +0000 Files and hashes: 1: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: sxIbWkXzoIRT3IUPxDn4sgTSMSjZdHYN2buaRkK+R18=) 2: FZ0KknIhlejaSfjNGQ9RwBcWEtI.roa (hash: EXRrJEXVP7rdDwQuvA0Wxw32aRD+U0gT9dH37IYXXsA=) 3: PcLN4OCrAYo7gp9-LrNRS28FuGA.roa (hash: 4PVTYuLNKNpIeRdCU1ysaHpHPoiG6A7KV2YGI8bMc1w=) 4: Rowc--7buNg_Ew_zrmynFHimxmQ.roa (hash: tRqjTRWW7K8WV4ruLRwNapxECkPe5ofBmkCYh5TfGtI=) 5: dHl1LQzEJUpKi2KNatIsOTvown8.roa (hash: iN9UZITbk8Ct82GnunVun5xdzK17nQf8SgPjAvRak5s=) 6: yWWoay0ayleQau0Xgx1nrUGIKj0.roa (hash: 5Hs7Smq+GKOGNzQZoeccE5rQAWaXTAj4CCluIzt4Tck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:06:44:59:e2:01:ba:59:49:5a:55:fb:7c:dc:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02 Validity Not Before: Dec 21 01:01:30 2025 GMT Not After : Dec 22 01:01:30 2025 GMT Subject: CN=418161715206f7f2b36ca4677cb5ca8a5c1c0b53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:23:f5:a9:f5:44:47:0d:cf:02:a4:cf:38:82: 28:9d:94:40:3e:45:ac:b2:fd:99:bd:31:60:9e:8f: a1:cf:80:66:59:4b:a7:38:1d:4a:fb:f8:0b:7b:25: 66:d9:84:84:17:18:75:fc:7a:11:d8:a2:a2:1f:93: 2d:dc:1d:e1:5b:ea:34:bb:42:8f:1a:a4:56:41:36: 50:83:81:3c:90:88:c6:21:5f:89:a2:c3:76:56:44: 54:bb:30:2c:f7:8b:bd:af:be:6a:b3:d5:9c:be:ee: 8a:f5:e1:f3:c6:77:46:5b:25:b4:f3:a7:f0:00:f6: ee:64:8c:d5:f1:7b:79:78:3c:85:35:18:24:67:f6: 3d:e5:80:a1:f7:6a:55:5d:f6:9e:0d:62:c0:4f:fa: 49:4c:8c:64:8c:67:c4:3f:28:b6:4f:41:ad:35:4f: 71:bf:96:63:1a:b1:ae:4a:cc:31:24:9e:18:6f:53: 8c:a0:8f:b3:06:a7:e7:f4:d0:59:94:a9:95:72:3d: ef:c3:76:de:2a:f7:06:b9:5e:79:38:84:33:7e:bc: 4a:01:99:c1:12:43:bd:c6:90:06:98:0a:30:aa:fa: b6:09:a7:48:30:10:f3:a1:6f:f7:a4:8d:ed:22:95: 81:a2:3e:4b:be:2f:0e:3c:2b:9c:da:a4:48:90:88: 95:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:81:61:71:52:06:F7:F2:B3:6C:A4:67:7C:B5:CA:8A:5C:1C:0B:53 X509v3 Authority Key Identifier: keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:30:45:d3:8e:90:c2:d1:17:fe:ce:eb:e2:7f:ca:92:5e:81: 02:ea:4f:78:df:b5:55:64:ab:78:e5:54:a1:c9:40:84:a1:93: 87:d3:50:39:25:a9:65:97:da:92:94:99:ad:06:33:77:ab:c3: 2a:5a:4d:a3:2e:3f:95:bc:67:57:99:a9:22:a2:43:6b:cb:55: 88:5d:4e:55:8c:47:51:2f:54:db:ea:5e:d1:cc:ef:2d:d1:4a: 1a:61:21:8a:0e:37:30:04:15:4b:fd:8a:d7:b8:18:4e:78:d3: e4:50:ef:0f:ca:f7:9f:cd:0b:14:bc:e8:43:64:40:c6:82:c8: e4:c2:5d:cb:c0:c7:4b:a3:1a:4c:f2:d0:f9:27:3c:6a:09:3c: d7:1d:ae:42:da:b9:49:69:4b:ca:e7:fb:5d:ed:0c:14:2f:e5: ee:d7:9f:3b:aa:c4:50:c8:4f:8d:a6:f1:8d:e7:8c:ac:bd:04: c8:33:a8:46:99:f0:11:ce:86:24:c7:b4:e7:41:f5:66:79:ce: fd:c9:2f:d1:0c:15:0a:5a:43:94:a2:63:1f:09:e8:90:77:46: 7f:c0:3c:90:23:07:a4:3a:5a:85:15:b4:17:c5:7b:9b:02:7e: 7a:b3:24:08:b2:71:10:48:bc:41:f2:95:c2:7e:1e:8b:be:b0: ce:2f:60:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bQZEWeIBullJWlX7fNzhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1YzM3MWYzYTM0YWJmMTk1N2QxODk1ZGY4MDYzZjRkNjIw N2VjMDIwHhcNMjUxMjIxMDEwMTMwWhcNMjUxMjIyMDEwMTMwWjAzMTEwLwYDVQQD Eyg0MTgxNjE3MTUyMDZmN2YyYjM2Y2E0Njc3Y2I1Y2E4YTVjMWMwYjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSP1qfVERw3PAqTPOIIonZRAPkWs sv2ZvTFgno+hz4BmWUunOB1K+/gLeyVm2YSEFxh1/HoR2KKiH5Mt3B3hW+o0u0KP GqRWQTZQg4E8kIjGIV+JosN2VkRUuzAs94u9r75qs9Wcvu6K9eHzxndGWyW086fw APbuZIzV8Xt5eDyFNRgkZ/Y95YCh92pVXfaeDWLAT/pJTIxkjGfEPyi2T0GtNU9x v5ZjGrGuSswxJJ4Yb1OMoI+zBqfn9NBZlKmVcj3vw3beKvcGuV55OIQzfrxKAZnB EkO9xpAGmAowqvq2CadIMBDzoW/3pI3tIpWBoj5Lvi8OPCuc2qRIkIiVaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGBYXFSBvfys2ykZ3y1yopcHAtTMB8GA1UdIwQY MBaAFPXDcfOjSr8ZV9GJXfgGP01iB+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEt MWJiMTdhOGIyNmZlLzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81YjBjZDktZTI3OS00NmFhLTgxZGEtMWJiMTdhOGIyNmZl LzEvOWNOeDg2Tkt2eGxYMFlsZC1BWV9UV0lIN0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADBF046Q wtEX/s7r4n/Kkl6BAupPeN+1VWSreOVUoclAhKGTh9NQOSWpZZfakpSZrQYzd6vD KlpNoy4/lbxnV5mpIqJDa8tViF1OVYxHUS9U2+pe0czvLdFKGmEhig43MAQVS/2K 17gYTnjT5FDvD8r3n80LFLzoQ2RAxoLI5MJdy8DHS6MaTPLQ+Sc8agk81x2uQtq5 SWlLyuf7Xe0MFC/l7tefO6rEUMhPjabxjeeMrL0EyDOoRpnwEc6GJMe050H1ZnnO /ckv0QwVClpDlKJjHwnokHdGf8A8kCMHpDpahRW0F8V7mwJ+erMkCLJxEEi8QfKV wn4ei76wzi9g1g== -----END CERTIFICATE-----Generated at Sun Dec 21 05:53:00 2025 by rpki-client