This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json) Hash identifier: bmOGo3cXu6eKJH8xSFBN6PmViKSocIXmdfcJR0vWeVk= Subject key identifier: 93:63:8D:40:EF:8A:DE:D2:3E:9A:D4:03:BE:21:25:FD:B7:DE:EB:AE Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624 Certificate serial: 019B32684E7892DB180E51C5F3BA665BD840 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft Manifest number: 06FA Signing time: Thu 18 Dec 2025 17:00:55 +0000 Manifest this update: Thu 18 Dec 2025 17:00:55 +0000 Manifest next update: Fri 19 Dec 2025 17:00:55 +0000 Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=) 2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: RiHyuYlwqZPF6WKRaINVtUgZ3bPShsG+FMZpOl4lj30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 17:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:68:4e:78:92:db:18:0e:51:c5:f3:ba:66:5b:d8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624 Validity Not Before: Dec 18 17:00:55 2025 GMT Not After : Dec 19 17:00:55 2025 GMT Subject: CN=93638d40ef8aded23e9ad403be2125fdb7deebae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1c:72:e7:3e:10:4b:6b:55:7d:5e:f9:e2:53: 5d:89:f4:a5:f7:fe:1b:45:b4:8b:47:6d:9e:bf:39: 07:92:ed:02:06:8e:53:e7:89:af:eb:53:62:2a:a0: f3:a5:59:da:b2:80:e6:80:a9:c4:57:c6:81:62:9c: 2f:ee:56:5e:f6:69:07:ed:13:8a:70:d2:d0:7f:3e: 6e:7c:05:9a:c2:96:7a:46:c9:90:5c:df:5d:3d:75: 9a:fe:ed:11:68:03:2d:4b:22:87:ca:70:e8:e7:b6: d6:c2:1a:3c:70:f7:32:c8:db:54:d8:02:74:d4:7d: e7:6c:51:4b:1b:d4:1d:b9:79:a3:80:7c:eb:1c:b7: c4:ba:15:59:35:f8:11:67:2d:c2:7a:eb:70:30:00: f1:e7:78:8c:a3:90:90:d1:eb:18:12:d0:53:b3:fb: 98:4b:40:94:89:1a:0b:05:bc:4b:26:f1:cf:bd:22: eb:42:17:bf:f2:0f:0f:44:f1:19:ca:e8:b6:dc:ae: 18:f6:e8:df:06:18:0e:c6:a1:8a:d7:54:c9:b3:67: 23:28:12:02:94:07:db:35:64:4c:ff:f7:cb:9f:eb: 13:8c:c0:6d:a4:b1:3b:a3:c8:00:5a:6a:cc:67:14: 5f:85:ce:a3:15:ae:43:3e:d7:5b:9c:da:af:11:cb: a1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:63:8D:40:EF:8A:DE:D2:3E:9A:D4:03:BE:21:25:FD:B7:DE:EB:AE X509v3 Authority Key Identifier: keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e1:71:02:4d:64:5b:b3:62:39:d1:c3:20:53:be:7b:d5:64: 15:99:20:63:6c:aa:d4:dd:3c:b6:7a:25:67:fb:f2:bd:5c:4b: e4:35:f1:55:96:75:88:fe:d4:56:7d:61:5a:03:cc:f1:83:3f: 84:cd:06:5b:bd:8b:5f:07:e7:ae:f0:25:68:b0:89:39:73:8d: 4d:09:a5:3c:bb:34:15:0b:13:0e:8b:ba:b4:ba:cf:63:31:8c: 71:92:77:7f:0d:3a:6a:bb:be:31:f1:63:88:a0:22:6b:97:7b: 5e:70:e6:f2:94:30:17:df:54:f6:ac:ca:8e:45:91:af:be:3e: ae:65:ed:a2:aa:5e:7a:5d:76:e4:02:e2:9f:61:a1:57:db:2b: f9:1a:1c:23:cd:be:a1:5e:5a:0c:85:d9:8a:32:da:9a:15:30: ae:f3:bb:10:85:2e:48:2f:e2:59:c7:dd:9c:8f:df:e9:10:f1: 11:d6:3a:c0:0b:b1:87:19:3c:8e:23:ce:71:84:3b:c0:aa:82: 3f:25:dd:f9:91:07:b1:2c:e6:b5:31:9e:eb:44:ba:b0:2d:ca: 56:71:45:e4:3e:04:28:f2:05:81:0e:56:cd:7c:ea:ba:64:5b: 5c:29:c7:48:4f:8b:24:0f:3a:39:34:0e:13:83:d2:5e:77:48: f2:1b:42:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsyaE54ktsYDlHF87pmW9hAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjIwN2VmODAyNDI0NGJiYjRhMDEwNmFmMTkyNzAxNTBj OWY2MjQwHhcNMjUxMjE4MTcwMDU1WhcNMjUxMjE5MTcwMDU1WjAzMTEwLwYDVQQD Eyg5MzYzOGQ0MGVmOGFkZWQyM2U5YWQ0MDNiZTIxMjVmZGI3ZGVlYmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBxy5z4QS2tVfV754lNdifSl9/4b RbSLR22evzkHku0CBo5T54mv61NiKqDzpVnasoDmgKnEV8aBYpwv7lZe9mkH7ROK cNLQfz5ufAWawpZ6RsmQXN9dPXWa/u0RaAMtSyKHynDo57bWwho8cPcyyNtU2AJ0 1H3nbFFLG9QduXmjgHzrHLfEuhVZNfgRZy3CeutwMADx53iMo5CQ0esYEtBTs/uY S0CUiRoLBbxLJvHPvSLrQhe/8g8PRPEZyui23K4Y9ujfBhgOxqGK11TJs2cjKBIC lAfbNWRM//fLn+sTjMBtpLE7o8gAWmrMZxRfhc6jFa5DPtdbnNqvEcuh1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJNjjUDvit7SPprUA74hJf233uuuMB8GA1UdIwQY MBaAFPSyB++AJCRLu0oBBq8ZJwFQyfYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2Mt MzVlMDY5MzQ4ZWIzLzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2MtMzVlMDY5MzQ4ZWIz LzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieFxAk1k W7NiOdHDIFO+e9VkFZkgY2yq1N08tnolZ/vyvVxL5DXxVZZ1iP7UVn1hWgPM8YM/ hM0GW72LXwfnrvAlaLCJOXONTQmlPLs0FQsTDou6tLrPYzGMcZJ3fw06aru+MfFj iKAia5d7XnDm8pQwF99U9qzKjkWRr74+rmXtoqpeel125ALin2GhV9sr+RocI82+ oV5aDIXZijLamhUwrvO7EIUuSC/iWcfdnI/f6RDxEdY6wAuxhxk8jiPOcYQ7wKqC PyXd+ZEHsSzmtTGe60S6sC3KVnFF5D4EKPIFgQ5WzXzqumRbXCnHSE+LJA86OTQO E4PSXndI8htCgg== -----END CERTIFICATE-----Generated at Fri Dec 19 02:24:29 2025 by rpki-client