This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft File: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft (raw, json) Hash identifier: Q6f0fMBEK9u5adMW0SC0lx87IUphOOqySCXVk44vDVk= Subject key identifier: E0:EB:E1:DE:DE:82:7D:CE:2C:49:5B:37:A4:12:31:28:82:72:9A:07 Authority key identifier: F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F Certificate issuer: /CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Certificate serial: 019B3D236827E223C37571EFD0BF92E35961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft Manifest number: 1794 Signing time: Sat 20 Dec 2025 19:01:29 +0000 Manifest this update: Sat 20 Dec 2025 19:01:29 +0000 Manifest next update: Sun 21 Dec 2025 19:01:29 +0000 Files and hashes: 1: 9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl (hash: 6mNARqT8RuUDVWhvnyE8ELvK7fQT4Sn1Z2BKo+SPPTA=) 2: ZSBBy6W5L8TTtnlSf_uUrt4Z7AI.roa (hash: jFdtASpUm3buRvq9o0f0zIeX/wlw5jgk9wy5omlh1/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:68:27:e2:23:c3:75:71:ef:d0:bf:92:e3:59:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5daf0ba21e90202597ee47e09f6877fe23c2a9f Validity Not Before: Dec 20 19:01:29 2025 GMT Not After : Dec 21 19:01:29 2025 GMT Subject: CN=e0ebe1dede827dce2c495b37a412312882729a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1e:ca:7e:46:b5:67:9a:ff:ef:20:40:6b:b7: 2f:6f:15:b4:cc:6d:5e:78:a5:38:2d:a6:c5:37:ff: 27:e6:08:dc:9c:7f:8d:ef:47:80:3b:bd:bf:a7:f3: 31:96:ee:0d:f0:37:9a:78:94:31:fe:99:bb:4c:0d: 89:96:9f:59:3f:c5:26:95:32:8a:3f:b5:36:66:22: d3:d6:ce:e0:db:17:fd:19:13:4f:42:58:a9:92:16: 6b:b5:dc:ef:77:ba:9c:8c:87:35:f5:36:51:e1:85: 1d:57:0b:5a:ed:8d:d6:4c:5a:6a:7f:60:83:0f:d6: e1:79:50:7e:b4:a6:05:94:0c:2b:2f:66:20:80:0e: 32:91:14:b8:93:6b:6f:96:98:5d:00:53:0e:d7:3e: e3:62:b3:a0:aa:83:35:eb:d5:29:e0:a4:52:7d:a0: d0:e9:ff:75:c4:ab:10:56:30:14:ce:af:97:3d:5f: 0c:3b:0d:3f:24:5f:ec:a9:fd:09:f1:a6:ef:b4:0b: 98:01:0a:10:6c:59:ef:17:97:f2:a1:20:2d:76:e4: ed:1e:ba:4d:a8:02:c2:27:0a:d9:5a:9b:b1:10:96: fc:62:2d:e7:6a:8d:fc:eb:83:74:25:96:1d:21:37: f7:94:59:01:fd:e1:97:ef:88:28:91:c9:8d:13:f3: 05:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EB:E1:DE:DE:82:7D:CE:2C:49:5B:37:A4:12:31:28:82:72:9A:07 X509v3 Authority Key Identifier: keyid:F5:DA:F0:BA:21:E9:02:02:59:7E:E4:7E:09:F6:87:7F:E2:3C:2A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9drwuiHpAgJZfuR-CfaHf-I8Kp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9068a5-7979-4f8c-bf82-cfe2a9657c26/1/9drwuiHpAgJZfuR-CfaHf-I8Kp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:7e:0b:0a:99:43:3d:9e:87:ac:d2:2f:e9:55:80:9c:29:2f: 26:39:71:f9:1b:7e:26:e6:ab:c9:41:72:61:7f:fe:0e:aa:a2: 4c:25:05:3c:a1:5b:80:6b:98:30:13:87:83:95:0f:2a:5d:14: 6d:cc:45:ba:34:17:9a:18:6b:bd:b3:5d:22:0f:21:6d:62:82: ba:ca:9d:fd:bb:a6:ec:4c:81:a3:f7:64:d6:43:c6:d9:7f:bf: 79:a1:3a:35:f0:2c:6e:92:28:74:01:81:8d:5b:1e:ff:02:65: 73:8a:bf:a3:65:d4:db:15:33:e4:85:bd:9b:a1:28:90:d4:58: 13:98:d5:ed:c3:3c:3a:b6:e5:60:fa:4d:6d:fa:6a:31:42:60: 67:be:ed:8a:07:fa:5b:ca:73:24:f6:74:85:0a:56:53:41:b8: 16:c2:11:47:88:9d:77:89:af:af:f6:4c:29:9b:8d:24:00:56: a9:e7:93:e1:af:4b:fb:47:dc:71:0e:51:aa:60:fd:cb:4b:f0: bd:2d:c2:16:86:3f:59:da:00:82:92:91:74:72:45:18:7a:18: 24:49:df:29:3c:92:c6:d5:ff:47:f5:80:bf:25:37:22:f0:36: f2:d2:4e:3c:ab:bb:af:59:d0:49:f2:bc:b9:86:8d:ce:d3:ac: 22:81:c9:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I2gn4iPDdXHv0L+S41lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZGFmMGJhMjFlOTAyMDI1OTdlZTQ3ZTA5ZjY4NzdmZTIz YzJhOWYwHhcNMjUxMjIwMTkwMTI5WhcNMjUxMjIxMTkwMTI5WjAzMTEwLwYDVQQD EyhlMGViZTFkZWRlODI3ZGNlMmM0OTViMzdhNDEyMzEyODgyNzI5YTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB7Kfka1Z5r/7yBAa7cvbxW0zG1e eKU4LabFN/8n5gjcnH+N70eAO72/p/Mxlu4N8DeaeJQx/pm7TA2Jlp9ZP8UmlTKK P7U2ZiLT1s7g2xf9GRNPQlipkhZrtdzvd7qcjIc19TZR4YUdVwta7Y3WTFpqf2CD D9bheVB+tKYFlAwrL2YggA4ykRS4k2tvlphdAFMO1z7jYrOgqoM169Up4KRSfaDQ 6f91xKsQVjAUzq+XPV8MOw0/JF/sqf0J8abvtAuYAQoQbFnvF5fyoSAtduTtHrpN qALCJwrZWpuxEJb8Yi3nao3864N0JZYdITf3lFkB/eGX74gokcmNE/MF6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODr4d7egn3OLElbN6QSMSiCcpoHMB8GA1UdIwQY MBaAFPXa8Loh6QICWX7kfgn2h3/iPCqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODIt Y2ZlMmE5NjU3YzI2LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MDY4YTUtNzk3OS00ZjhjLWJmODItY2ZlMmE5NjU3YzI2 LzEvOWRyd3VpSHBBZ0paZnVSLUNmYUhmLUk4S3A4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXH4LCplD PZ6HrNIv6VWAnCkvJjlx+Rt+JuaryUFyYX/+DqqiTCUFPKFbgGuYMBOHg5UPKl0U bcxFujQXmhhrvbNdIg8hbWKCusqd/bum7EyBo/dk1kPG2X+/eaE6NfAsbpIodAGB jVse/wJlc4q/o2XU2xUz5IW9m6EokNRYE5jV7cM8OrblYPpNbfpqMUJgZ77tigf6 W8pzJPZ0hQpWU0G4FsIRR4idd4mvr/ZMKZuNJABWqeeT4a9L+0fccQ5RqmD9y0vw vS3CFoY/WdoAgpKRdHJFGHoYJEnfKTySxtX/R/WAvyU3IvA28tJOPKu7r1nQSfK8 uYaNztOsIoHJSw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:22 2025 by rpki-client