This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft File: 9U47eX9Lo36_cYmkwU8FINfPMNc.mft (raw, json) Hash identifier: 0mLkmlWokG7MkgYgKkwzrg7WW+PX46XvUgrkPzWmWqQ= Subject key identifier: A2:96:BD:4A:B6:3C:A5:4D:59:04:2A:C1:21:B5:95:B3:17:31:93:51 Authority key identifier: F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7 Certificate issuer: /CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7 Certificate serial: 019B3F118644AECD9157CAB55F7DF29B0C5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft Manifest number: 04A2 Signing time: Sun 21 Dec 2025 04:01:11 +0000 Manifest this update: Sun 21 Dec 2025 04:01:11 +0000 Manifest next update: Mon 22 Dec 2025 04:01:11 +0000 Files and hashes: 1: 9U47eX9Lo36_cYmkwU8FINfPMNc.crl (hash: JCYL8UlxoJCBk1I97EkU6TZ5h0Rgy2fQLW3lV4dTOts=) 2: UmpOhRez3moOZWrjBKIN45JkCE8.roa (hash: rPkye9amYErKpRGECf5NJc6OYwjs4QcPoervOMLXjak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:86:44:ae:cd:91:57:ca:b5:5f:7d:f2:9b:0c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f54e3b797f4ba37ebf7189a4c14f0520d7cf30d7 Validity Not Before: Dec 21 04:01:11 2025 GMT Not After : Dec 22 04:01:11 2025 GMT Subject: CN=a296bd4ab63ca54d59042ac121b595b317319351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:83:a2:c5:c5:d2:9a:f2:89:bc:0b:b0:a7:e2: 2c:d3:1e:e1:87:84:b4:b4:ac:0a:ac:eb:a7:e9:4d: 52:80:e7:52:29:a9:5d:fc:06:85:10:4c:3d:0e:f6: 81:70:8e:20:81:1b:5d:78:7b:fd:bc:10:1d:ac:7a: 5f:fd:2d:e7:be:a6:87:37:13:29:e0:98:b4:d7:3f: 17:94:04:50:8c:0f:f0:3e:d2:16:f8:ea:23:b2:86: 9f:15:89:d7:e0:bf:5e:cf:32:b0:6a:57:6f:7c:b6: fb:ad:2f:e4:1c:e1:91:d0:c1:e1:8c:b8:bb:53:57: 28:1b:9c:be:1e:c0:f7:07:8e:99:90:80:12:52:0d: 21:e0:10:43:2d:06:e9:3e:fe:63:fe:e4:f7:79:f0: 5b:90:1e:63:a6:06:bc:9d:81:29:40:3e:1e:28:d1: 30:5b:20:a1:21:0a:38:f0:8f:5a:9d:5a:a4:58:60: 21:47:72:84:63:2f:15:60:a1:58:aa:dd:c5:52:e5: c7:d6:39:31:76:fe:d0:6c:46:28:e9:50:8f:0d:83: 6c:f9:7e:75:33:18:d1:ca:15:c7:66:b6:2e:58:bd: a4:0f:ec:29:dc:00:eb:10:58:c4:c7:67:08:8b:73: fe:aa:d9:e8:c9:e1:75:4e:5a:cd:e7:f5:a8:f8:13: 7c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:96:BD:4A:B6:3C:A5:4D:59:04:2A:C1:21:B5:95:B3:17:31:93:51 X509v3 Authority Key Identifier: keyid:F5:4E:3B:79:7F:4B:A3:7E:BF:71:89:A4:C1:4F:05:20:D7:CF:30:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9U47eX9Lo36_cYmkwU8FINfPMNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/259879-7b1e-4544-8013-15e41c40aec9/1/9U47eX9Lo36_cYmkwU8FINfPMNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:6a:a6:4e:7a:31:c4:71:af:1d:14:a2:aa:e6:e3:0c:e4:3f: f2:fe:d1:14:3c:0a:d4:e2:f4:17:0c:89:27:c1:27:88:1d:d3: 2c:65:8d:5b:39:92:4e:96:ad:89:06:6b:d9:6d:2b:26:74:b4: 4e:48:1b:92:5b:83:68:08:f2:8a:8a:bf:f8:21:6c:81:6b:e0: f6:f3:76:b5:a5:05:a1:4c:51:7d:ea:81:bb:53:79:ed:4d:a7: 3b:5c:ef:51:7d:15:61:a9:5b:66:34:25:f2:38:63:ca:b0:85: 29:cb:7b:78:e6:f0:bf:47:62:0b:1e:c0:f8:68:50:18:51:68: 2a:c1:eb:36:b0:5e:58:a0:8d:d7:23:6c:58:f0:91:d2:c7:b2: 6f:22:c5:a1:9b:d4:3f:39:c1:b0:1c:c6:a8:91:52:61:a4:3d: 9d:09:5e:02:40:2f:99:70:65:8f:8a:cc:80:f0:d5:c7:07:23: 02:74:63:94:32:12:fb:a0:37:f8:16:bb:76:ff:41:34:a8:46: b6:4f:9a:13:e3:be:12:c4:5b:44:3a:6b:7e:8c:ac:5c:27:86: ae:9a:5f:62:06:50:66:ec:46:e1:00:08:d2:b7:b9:45:ae:89: 16:df:96:6c:f0:50:93:54:3b:4a:ad:4b:c1:70:64:a8:4a:5c: 3e:6c:a5:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EYZErs2RV8q1X33ymwxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NGUzYjc5N2Y0YmEzN2ViZjcxODlhNGMxNGYwNTIwZDdj ZjMwZDcwHhcNMjUxMjIxMDQwMTExWhcNMjUxMjIyMDQwMTExWjAzMTEwLwYDVQQD EyhhMjk2YmQ0YWI2M2NhNTRkNTkwNDJhYzEyMWI1OTViMzE3MzE5MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4OixcXSmvKJvAuwp+Is0x7hh4S0 tKwKrOun6U1SgOdSKald/AaFEEw9DvaBcI4ggRtdeHv9vBAdrHpf/S3nvqaHNxMp 4Ji01z8XlARQjA/wPtIW+OojsoafFYnX4L9ezzKwaldvfLb7rS/kHOGR0MHhjLi7 U1coG5y+HsD3B46ZkIASUg0h4BBDLQbpPv5j/uT3efBbkB5jpga8nYEpQD4eKNEw WyChIQo48I9anVqkWGAhR3KEYy8VYKFYqt3FUuXH1jkxdv7QbEYo6VCPDYNs+X51 MxjRyhXHZrYuWL2kD+wp3ADrEFjEx2cIi3P+qtnoyeF1TlrN5/Wo+BN8+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKKWvUq2PKVNWQQqwSG1lbMXMZNRMB8GA1UdIwQY MBaAFPVOO3l/S6N+v3GJpMFPBSDXzzDXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMt MTVlNDFjNDBhZWM5LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yNTk4NzktN2IxZS00NTQ0LTgwMTMtMTVlNDFjNDBhZWM5 LzEvOVU0N2VYOUxvMzZfY1lta3dVOEZJTmZQTU5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmqmTnox xHGvHRSiqubjDOQ/8v7RFDwK1OL0FwyJJ8EniB3TLGWNWzmSTpatiQZr2W0rJnS0 TkgbkluDaAjyioq/+CFsgWvg9vN2taUFoUxRfeqBu1N57U2nO1zvUX0VYalbZjQl 8jhjyrCFKct7eObwv0diCx7A+GhQGFFoKsHrNrBeWKCN1yNsWPCR0seybyLFoZvU PznBsBzGqJFSYaQ9nQleAkAvmXBlj4rMgPDVxwcjAnRjlDIS+6A3+Ba7dv9BNKhG tk+aE+O+EsRbRDprfoysXCeGrppfYgZQZuxG4QAI0re5Ra6JFt+WbPBQk1Q7Sq1L wXBkqEpcPmylFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 06:20:56 2025 by rpki-client