This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft File: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft (raw, json) Hash identifier: lSWUvgg8tYOnUwXlN/dxexvtQwjBpDbt9eiNvrSx7gM= Subject key identifier: F6:E0:15:F4:1D:31:48:E1:54:96:4A:4B:75:E6:57:D9:85:51:02:38 Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9 Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9 Certificate serial: 019B435B8B717BE690286A1E663AAD1B6E1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft Manifest number: 13A1 Signing time: Mon 22 Dec 2025 00:00:31 +0000 Manifest this update: Mon 22 Dec 2025 00:00:31 +0000 Manifest next update: Tue 23 Dec 2025 00:00:31 +0000 Files and hashes: 1: 1-SAfEHIPvpIzjeCy5Q8AoZxny3k.roa (hash: B/T0TK6WDLMTtz5a/Y6n6GO2yVmrFuy+pcNqZ8mftfA=) 2: KaQg1luFqQeXclQWU31ivATaEMk.roa (hash: bbZb4Op2H462Hn18DoohrEF0+UuFJwTPdqnyeROhfe8=) 3: P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl (hash: wXF3XwjwWDt6lBJ0D3tfjo7ZKwiO5cNI/PI78AG/eRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5b:8b:71:7b:e6:90:28:6a:1e:66:3a:ad:1b:6e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9 Validity Not Before: Dec 22 00:00:31 2025 GMT Not After : Dec 23 00:00:31 2025 GMT Subject: CN=f6e015f41d3148e154964a4b75e657d985510238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:12:8c:9e:f7:b7:b6:50:b8:5f:72:5f:70: 9d:0b:1f:0a:d9:68:d2:b6:f1:a6:34:58:66:5b:b7: 9a:41:3b:02:aa:fe:aa:5e:5d:d3:95:9f:64:94:23: 3c:5b:f1:2f:8b:e6:82:c6:a7:3d:ca:34:b9:03:2c: 65:51:8d:c0:d7:df:6c:3d:a6:22:46:b8:5c:3a:d3: a5:a2:7f:01:e7:d9:6b:66:17:4e:b2:19:ae:ad:dd: d9:84:47:4d:7e:ce:aa:12:8b:22:cb:63:0d:b7:33: be:36:68:ab:54:3a:bc:07:b6:2f:09:7d:63:ac:dd: e1:12:4e:9b:ef:7c:05:2e:d0:8e:42:48:cf:02:0b: 1f:f1:5c:b5:dc:85:aa:55:11:7c:4b:76:03:9d:23: 08:41:41:e0:7b:0c:6e:6f:4a:98:f2:b1:be:0f:94: ca:5a:3d:8d:ae:76:94:37:fd:c0:c0:b3:59:bf:ea: 36:62:19:4e:2f:6a:bb:f1:e6:37:6a:1b:ad:5c:e7: 5c:3e:dc:20:15:9d:0b:5a:48:f2:99:9e:85:e7:70: 12:61:f2:b8:3a:5d:9a:48:fe:6b:20:02:1b:2d:f1: 84:99:c4:1a:01:ce:91:ad:f9:70:d2:53:84:24:15: 89:b1:52:97:b7:e5:cd:ff:a8:ac:06:c3:c1:ed:a7: bb:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E0:15:F4:1D:31:48:E1:54:96:4A:4B:75:E6:57:D9:85:51:02:38 X509v3 Authority Key Identifier: keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e4:f5:ab:4a:ba:5c:b7:e1:3f:85:c2:66:7b:43:7c:d7:9a: b0:45:df:01:8c:aa:aa:36:f8:12:1d:de:e1:9b:6b:0a:a3:2e: b2:64:62:4d:27:8c:17:94:52:b7:db:82:c3:99:e7:d1:50:c2: 82:2f:a9:b0:4e:21:21:18:0c:01:d2:04:56:75:fd:c4:9a:01: 88:6b:1d:6b:6c:bc:c7:4c:40:82:67:5d:02:47:d4:30:ea:77: 76:ae:a5:38:5d:3e:1b:74:2b:3b:d0:95:0f:c4:89:7c:d1:8b: 70:29:55:34:a3:d2:ee:9d:63:22:50:4d:73:12:82:f8:43:4a: bf:b8:74:f9:16:b3:3e:b7:bd:3f:36:12:8f:cd:23:dc:78:63: f3:d9:a8:d9:7d:9a:dc:1e:b5:86:93:33:d2:07:89:cf:a0:24: 14:7f:f0:ec:4b:e8:e2:6c:82:27:31:91:77:5e:e6:25:83:6a: 1a:bb:f5:42:0f:b1:7a:d1:41:91:e0:a0:27:89:f3:c7:d1:41: d2:2d:ba:86:b4:6c:b9:70:42:fb:10:0d:57:d6:53:d4:d1:aa: fe:3d:ee:a4:e5:01:3a:01:ef:53:88:0e:6c:00:2c:a6:60:b4: 57:b2:bf:d4:11:3b:05:2b:92:a2:db:76:e2:95:0a:57:75:f3: 7e:d5:b7:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDW4txe+aQKGoeZjqtG24eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDRkMmZkYmVlM2FhM2UxMjE0MjhlYTcwNTBjOTQzOWQ4 ODg2YTkwHhcNMjUxMjIyMDAwMDMxWhcNMjUxMjIzMDAwMDMxWjAzMTEwLwYDVQQD EyhmNmUwMTVmNDFkMzE0OGUxNTQ5NjRhNGI3NWU2NTdkOTg1NTEwMjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohYSjJ73t7ZQuF9yX3CdCx8K2WjS tvGmNFhmW7eaQTsCqv6qXl3TlZ9klCM8W/Evi+aCxqc9yjS5AyxlUY3A199sPaYi RrhcOtOlon8B59lrZhdOshmurd3ZhEdNfs6qEosiy2MNtzO+NmirVDq8B7YvCX1j rN3hEk6b73wFLtCOQkjPAgsf8Vy13IWqVRF8S3YDnSMIQUHgewxub0qY8rG+D5TK Wj2NrnaUN/3AwLNZv+o2YhlOL2q78eY3ahutXOdcPtwgFZ0LWkjymZ6F53ASYfK4 Ol2aSP5rIAIbLfGEmcQaAc6Rrflw0lOEJBWJsVKXt+XN/6isBsPB7ae7gwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPbgFfQdMUjhVJZKS3XmV9mFUQI4MB8GA1UdIwQY MBaAFD/U0v2+46o+EhQo6nBQyUOdiIapMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMt NjI2MWU1YjFmYzIwLzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi82NmI2OTItNGJiMy00NzNlLTk0MTMtNjI2MWU1YjFmYzIw LzEvUDlUU19iN2pxajRTRkNqcWNGREpRNTJJaHFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACuT1q0q6 XLfhP4XCZntDfNeasEXfAYyqqjb4Eh3e4ZtrCqMusmRiTSeMF5RSt9uCw5nn0VDC gi+psE4hIRgMAdIEVnX9xJoBiGsda2y8x0xAgmddAkfUMOp3dq6lOF0+G3QrO9CV D8SJfNGLcClVNKPS7p1jIlBNcxKC+ENKv7h0+RazPre9PzYSj80j3Hhj89mo2X2a 3B61hpMz0geJz6AkFH/w7Evo4myCJzGRd17mJYNqGrv1Qg+xetFBkeCgJ4nzx9FB 0i26hrRsuXBC+xANV9ZT1NGq/j3upOUBOgHvU4gObAAspmC0V7K/1BE7BSuSott2 4pUKV3XzftW3Jg== -----END CERTIFICATE-----Generated at Mon Dec 22 03:46:54 2025 by rpki-client