This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft File: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft (raw, json) Hash identifier: OrG4o3LleFRevss8HNM0IL571ZS9qNNpKzBd2EZnayM= Subject key identifier: 60:C6:59:B2:9D:94:1D:B2:CF:57:3D:E9:48:25:0E:87:E3:EF:14:D5 Authority key identifier: F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 Certificate issuer: /CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Certificate serial: 019B37FC792760EE45D66BECD7FDC08AEAFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 19:00:51 +0000 Manifest this update: Fri 19 Dec 2025 19:00:51 +0000 Manifest next update: Sat 20 Dec 2025 19:00:51 +0000 Files and hashes: 1: 1-qQeR-EbZDs_qM5ldnB8c124Szc.roa (hash: ofMkv+rY3TqWIfaJFchO8QPgkzQdWyH95GmuYP6Ctek=) 2: 1GAA9RXUZFiO200bDHHgj0azbq4.roa (hash: tS4ee1uFzhVa+UdElOzwvh+A6ENy1LuuOQxxEe9qEtY=) 3: 9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl (hash: I4CKCjvUhFes/CLoKTh8bpDdVDk77cRVhHodZj5JuVE=) 4: S8bkAVPKOZ-Wv8bcLyLv58IY5XI.roa (hash: WjxXP1OmvNWD7wvgFTcDicv8zRYqIUNqNm/DyzGISFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:79:27:60:ee:45:d6:6b:ec:d7:fd:c0:8a:ea:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6de346b5805327bbc9df5e49b16c997ea3a1254 Validity Not Before: Dec 19 19:00:51 2025 GMT Not After : Dec 20 19:00:51 2025 GMT Subject: CN=60c659b29d941db2cf573de948250e87e3ef14d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:e1:2b:4f:01:80:93:65:22:05:fc:1e:41: 74:8a:38:7b:96:38:77:26:bf:07:ad:cd:f9:a3:97: 53:b7:e3:6f:b8:a0:cb:f8:9b:40:d0:ae:65:fd:ed: 0c:8c:00:7e:43:e5:36:a4:ae:c7:0b:b7:ee:83:bb: af:2c:f4:22:e7:e1:c0:ce:40:b0:e5:bb:07:9e:70: 92:4c:ef:8e:26:9b:cf:07:a4:3e:f7:47:7e:56:10: bb:fe:18:e2:7b:e8:66:79:4c:e7:8e:92:5a:15:20: 93:a7:6f:40:d6:03:eb:7d:b8:49:52:2e:ae:cb:d4: 84:14:7e:bc:ab:f8:37:93:f9:c5:9a:69:f4:a6:56: 7e:98:b2:04:3a:2e:1f:0f:37:79:64:61:5b:1c:fe: 8f:b0:04:8c:ff:92:99:b5:6f:ab:04:09:c9:c5:bb: 39:9d:19:f1:a7:d4:c8:59:e9:43:31:ea:2e:d2:f7: 25:73:d5:eb:fb:9d:73:5a:3b:99:7d:a4:c8:86:42: 31:25:01:65:26:15:0e:c4:e7:2d:05:39:f0:f1:a4: a4:df:94:84:a1:35:36:12:81:fb:55:be:f4:f0:47: 05:a6:24:b1:27:ec:58:9b:bb:88:77:74:29:07:e2: 4b:d2:4c:08:6e:51:15:70:c0:6f:ca:a1:90:cf:da: 09:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C6:59:B2:9D:94:1D:B2:CF:57:3D:E9:48:25:0E:87:E3:EF:14:D5 X509v3 Authority Key Identifier: keyid:F6:DE:34:6B:58:05:32:7B:BC:9D:F5:E4:9B:16:C9:97:EA:3A:12:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9t40a1gFMnu8nfXkmxbJl-o6ElQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/3a8464-0727-4d1c-8925-73ab8564b9ca/1/9t40a1gFMnu8nfXkmxbJl-o6ElQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:82:c0:c0:a8:1a:2a:9c:5c:3d:d9:7a:80:8d:df:24:4b:02: 3c:35:18:ee:de:ad:29:7b:09:b8:44:13:73:58:92:e4:8c:94: b0:d9:57:16:17:ae:08:51:5b:7f:69:85:b8:fb:26:07:05:26: 75:42:b7:82:e5:bd:48:26:db:9f:f8:e4:bd:94:fe:e4:d8:b7: b7:f0:82:a6:52:c4:e2:97:63:b1:87:5c:b3:ff:39:80:22:66: a6:7d:68:47:b3:e4:64:dc:e1:3f:bb:78:00:93:80:02:b5:c0: 21:28:81:fb:5a:ae:8a:9e:2e:dc:bc:c9:83:00:b5:02:b9:03: 61:99:a4:09:55:61:31:58:2b:a5:d3:85:29:91:7c:0a:d8:f9: 5f:1d:da:d5:ab:8a:9d:7c:94:06:3f:97:b0:45:5e:59:ea:e0: ff:91:78:6d:08:c7:54:55:aa:34:db:1b:20:57:cc:87:85:b3: 93:5c:fa:27:d8:35:7f:4b:7c:06:d4:74:7a:6d:8d:02:7c:46: 36:9a:9a:b5:ca:62:85:34:66:4c:59:e0:94:c8:d8:98:21:a6: 1c:16:f9:91:9a:30:dc:c6:50:4b:e8:dd:5b:86:aa:47:2a:17: 40:e8:19:c0:47:1a:49:80:1e:14:90:88:27:d4:12:49:66:35: 21:c0:92:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/HknYO5F1mvs1/3Aiur8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZGUzNDZiNTgwNTMyN2JiYzlkZjVlNDliMTZjOTk3ZWEz YTEyNTQwHhcNMjUxMjE5MTkwMDUxWhcNMjUxMjIwMTkwMDUxWjAzMTEwLwYDVQQD Eyg2MGM2NTliMjlkOTQxZGIyY2Y1NzNkZTk0ODI1MGU4N2UzZWYxNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsrhK08BgJNlIgX8HkF0ijh7ljh3 Jr8Hrc35o5dTt+NvuKDL+JtA0K5l/e0MjAB+Q+U2pK7HC7fug7uvLPQi5+HAzkCw 5bsHnnCSTO+OJpvPB6Q+90d+VhC7/hjie+hmeUznjpJaFSCTp29A1gPrfbhJUi6u y9SEFH68q/g3k/nFmmn0plZ+mLIEOi4fDzd5ZGFbHP6PsASM/5KZtW+rBAnJxbs5 nRnxp9TIWelDMeou0vclc9Xr+51zWjuZfaTIhkIxJQFlJhUOxOctBTnw8aSk35SE oTU2EoH7Vb708EcFpiSxJ+xYm7uId3QpB+JL0kwIblEVcMBvyqGQz9oJFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDGWbKdlB2yz1c96UglDofj7xTVMB8GA1UdIwQY MBaAFPbeNGtYBTJ7vJ315JsWyZfqOhJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUt NzNhYjg1NjRiOWNhLzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8zYTg0NjQtMDcyNy00ZDFjLTg5MjUtNzNhYjg1NjRiOWNh LzEvOXQ0MGExZ0ZNbnU4bmZYa214YkpsLW82RWxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGILAwKga KpxcPdl6gI3fJEsCPDUY7t6tKXsJuEQTc1iS5IyUsNlXFheuCFFbf2mFuPsmBwUm dUK3guW9SCbbn/jkvZT+5Ni3t/CCplLE4pdjsYdcs/85gCJmpn1oR7PkZNzhP7t4 AJOAArXAISiB+1quip4u3LzJgwC1ArkDYZmkCVVhMVgrpdOFKZF8Ctj5Xx3a1auK nXyUBj+XsEVeWerg/5F4bQjHVFWqNNsbIFfMh4Wzk1z6J9g1f0t8BtR0em2NAnxG NpqatcpihTRmTFnglMjYmCGmHBb5kZow3MZQS+jdW4aqRyoXQOgZwEcaSYAeFJCI J9QSSWY1IcCSmg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:44:00 2025 by rpki-client