This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json) Hash identifier: 14BJtD0vckJgSp5a/kG63Gmidvx++T3JIhBQoJPvCJ8= Subject key identifier: FE:88:C2:2B:F5:E3:32:09:9B:8F:96:BC:E2:E4:F0:AA:02:F8:97:22 Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Certificate serial: 019B69C46FB2348D4A1561993AAFC2EB88EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft Manifest number: 1546 Signing time: Mon 29 Dec 2025 11:00:39 +0000 Manifest this update: Mon 29 Dec 2025 11:00:39 +0000 Manifest next update: Tue 30 Dec 2025 11:00:39 +0000 Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=) 2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: E8LcwS8/iF2CWbdJwNCQfLp1YPJUKpwrKkTf64CMTdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 11:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:c4:6f:b2:34:8d:4a:15:61:99:3a:af:c2:eb:88:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Validity Not Before: Dec 29 11:00:39 2025 GMT Not After : Dec 30 11:00:39 2025 GMT Subject: CN=fe88c22bf5e332099b8f96bce2e4f0aa02f89722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:a4:22:dc:40:c8:5a:4e:9e:cd:59:a0:dc: d5:ca:8f:26:9e:52:ad:57:96:65:3b:ad:58:c8:d3: 43:91:5f:b5:38:11:c6:6f:dc:ca:96:b3:b0:cc:24: 34:c1:dd:0e:dd:76:cb:be:d9:87:aa:69:18:9a:29: a8:0b:e2:2c:aa:0b:fe:a7:8d:19:f3:a9:46:95:1c: a4:d3:ed:fc:b0:23:94:63:c5:1b:9c:93:6c:6d:c6: ec:3f:e3:c5:62:0a:86:37:da:09:52:d7:c5:a5:67: 59:c1:f7:ec:07:6a:33:f1:97:e4:da:17:99:32:19: 14:7d:7e:fa:f4:59:22:c8:a9:bf:09:15:ab:1d:44: 8d:b8:95:17:1c:52:b0:5b:7f:16:6e:cc:7c:19:c7: 1e:ff:cf:06:04:f3:49:ea:5f:3d:24:f4:57:32:5b: f8:64:79:74:e8:6a:b1:c9:67:b8:5b:15:d4:b0:21: ed:17:a3:8e:16:ce:02:e4:7e:4e:c4:10:66:8b:dd: 76:87:a3:ad:f8:35:16:4f:71:55:cb:ba:77:f2:5b: 12:0e:9a:c6:35:08:6a:e3:db:c2:cc:d7:3b:9a:43: d7:3b:bc:1d:25:5b:0a:72:1c:83:03:72:39:dc:10: fb:48:4b:3c:87:f1:9e:11:83:80:7c:e1:a3:30:7a: 91:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:88:C2:2B:F5:E3:32:09:9B:8F:96:BC:E2:E4:F0:AA:02:F8:97:22 X509v3 Authority Key Identifier: keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:0f:3e:37:e4:c8:b1:13:83:cb:4e:83:d2:0d:17:8c:a4:16: 5d:47:7d:1a:b5:0f:cc:99:25:b7:60:a4:99:59:32:8a:a5:cc: af:2a:b8:ba:b0:46:84:46:76:29:78:94:97:ef:95:e4:40:20: 3e:f0:ce:31:f1:91:0c:96:e5:2e:a1:be:cf:5f:98:d9:54:80: 08:94:c4:c1:98:43:9a:88:0d:40:01:3a:56:77:43:8a:57:f8: f7:ad:c2:11:ed:52:49:09:34:b2:de:a4:8d:3f:31:04:f5:46: 4c:a3:8b:27:28:bc:be:7c:74:05:e5:ff:0a:4c:3d:ed:cc:b4: 21:8a:8e:f0:0b:c5:bf:b0:2e:6e:34:a2:d5:ad:36:08:a3:a9: 63:df:2b:06:79:1e:b9:d0:d5:d8:75:7f:85:28:44:e1:89:65: 1b:24:e4:0e:d3:ce:bb:18:65:83:8e:5f:c9:e0:fa:42:d0:35: 7d:02:af:3d:d6:ec:7f:0e:dd:9d:8e:06:4f:3b:76:ca:e0:5c: 5d:d4:41:b8:2e:60:d3:f9:49:e1:9b:7c:78:78:05:6b:50:9d: 0e:26:da:3e:81:2d:c0:9a:41:a9:19:34:67:0c:2b:6d:19:5f: 0f:14:ac:a9:f9:a8:57:1e:1d:ca:bd:16:6f:60:b8:fb:e7:6b: 6a:95:c7:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtpxG+yNI1KFWGZOq/C64jvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDZjODYwMzQyY2M3OTljMjgwNzRmNjk5NzY4YThlY2Jk YWE1MmUwHhcNMjUxMjI5MTEwMDM5WhcNMjUxMjMwMTEwMDM5WjAzMTEwLwYDVQQD EyhmZTg4YzIyYmY1ZTMzMjA5OWI4Zjk2YmNlMmU0ZjBhYTAyZjg5NzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7qkItxAyFpOns1ZoNzVyo8mnlKt V5ZlO61YyNNDkV+1OBHGb9zKlrOwzCQ0wd0O3XbLvtmHqmkYmimoC+Isqgv+p40Z 86lGlRyk0+38sCOUY8UbnJNsbcbsP+PFYgqGN9oJUtfFpWdZwffsB2oz8Zfk2heZ MhkUfX769FkiyKm/CRWrHUSNuJUXHFKwW38Wbsx8Gcce/88GBPNJ6l89JPRXMlv4 ZHl06GqxyWe4WxXUsCHtF6OOFs4C5H5OxBBmi912h6Ot+DUWT3FVy7p38lsSDprG NQhq49vCzNc7mkPXO7wdJVsKchyDA3I53BD7SEs8h/GeEYOAfOGjMHqRQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6Iwiv14zIJm4+WvOLk8KoC+JciMB8GA1UdIwQY MBaAFJvWyGA0LMeZwoB09pl2io7L2qUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMt NDJlM2VmNGY4YjkxLzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMtNDJlM2VmNGY4Yjkx LzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHg8+N+TI sRODy06D0g0XjKQWXUd9GrUPzJklt2CkmVkyiqXMryq4urBGhEZ2KXiUl++V5EAg PvDOMfGRDJblLqG+z1+Y2VSACJTEwZhDmogNQAE6VndDilf4963CEe1SSQk0st6k jT8xBPVGTKOLJyi8vnx0BeX/Ckw97cy0IYqO8AvFv7AubjSi1a02CKOpY98rBnke udDV2HV/hShE4YllGyTkDtPOuxhlg45fyeD6QtA1fQKvPdbsfw7dnY4GTzt2yuBc XdRBuC5g0/lJ4Zt8eHgFa1CdDibaPoEtwJpBqRk0ZwwrbRlfDxSsqfmoVx4dyr0W b2C4++drapXHlQ== -----END CERTIFICATE-----Generated at Mon Dec 29 17:59:43 2025 by rpki-client