This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json) Hash identifier: bilPAjSyANbA0IRRM3FJK3mbZI7Bvp8eM1Lhn5PZrmc= Subject key identifier: 45:EE:B1:D3:9B:44:94:1E:CB:0B:D7:D1:0A:ED:AA:3C:E1:F6:FF:86 Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Certificate serial: 019B679FB440C2EEA591B035DCD4694ED25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft Manifest number: 1363 Signing time: Mon 29 Dec 2025 01:01:18 +0000 Manifest this update: Mon 29 Dec 2025 01:01:18 +0000 Manifest next update: Tue 30 Dec 2025 01:01:18 +0000 Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: PzSJbqADkXi+NPlGJRLDxhLVJ4t8CQkqsA8S7/PlDEs=) 2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:9f:b4:40:c2:ee:a5:91:b0:35:dc:d4:69:4e:d2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Validity Not Before: Dec 29 01:01:18 2025 GMT Not After : Dec 30 01:01:18 2025 GMT Subject: CN=45eeb1d39b44941ecb0bd7d10aedaa3ce1f6ff86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d0:5f:51:7c:7d:71:ab:7a:78:61:2d:7d:2f: 9f:ea:9d:5f:09:0e:1b:26:0e:37:01:9f:06:5f:b6: 71:f3:60:93:6b:24:52:fc:dd:9d:fc:6f:84:a3:13: 69:4e:ef:85:c6:29:20:60:73:c9:d2:ae:ea:ba:d4: 45:37:c7:1f:2a:48:fc:0d:e1:4c:b5:87:2a:f5:0c: d9:cc:8e:ea:96:37:44:63:5d:2e:af:ce:f3:c4:e9: b5:cd:9e:79:fc:a4:af:0b:f2:9c:41:6c:53:03:32: e9:7d:d5:f9:e4:bd:49:45:34:c1:00:ea:f0:40:18: 26:8b:7d:26:0b:23:d1:23:5b:ea:28:77:fa:90:fc: e9:fc:14:9c:22:b4:4c:04:87:72:01:8d:fb:94:93: 7b:ac:60:97:bf:40:cf:b0:91:94:6f:88:45:7d:43: 0e:41:73:e5:fe:fc:c4:e2:a8:f7:a8:bf:3c:79:07: f3:69:d1:b9:68:39:22:a2:c6:41:f6:3c:c4:fa:a0: b0:a3:6e:eb:bb:9b:c4:8c:a7:93:47:3d:8b:34:e7: 5b:ea:79:e0:43:60:85:95:2a:52:cd:07:ca:ae:66: fe:01:91:22:13:60:f6:e2:6c:47:d2:b7:c0:f0:d9: 53:cb:7c:59:9e:68:d2:57:93:e8:aa:50:85:34:b9: 75:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EE:B1:D3:9B:44:94:1E:CB:0B:D7:D1:0A:ED:AA:3C:E1:F6:FF:86 X509v3 Authority Key Identifier: keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:62:4e:75:82:a4:fc:9b:e7:6e:b1:05:dd:6f:73:b2:c5:3c: 4c:92:df:38:f7:43:da:45:ee:7d:80:d8:1c:49:2e:64:49:4f: dd:cd:68:69:b3:82:40:88:57:26:0d:80:30:d4:19:a9:3a:f1: 0e:f2:a0:15:66:68:8f:50:91:65:85:e7:06:b2:cd:d3:8b:96: 53:de:f7:cc:48:ee:34:bf:70:b1:70:6f:f3:58:4e:12:72:ea: 6c:61:f3:39:ab:de:50:83:15:37:b7:bb:75:d3:20:ba:a8:59: 15:53:d4:0b:12:7f:5f:9d:e5:20:1e:13:1d:c5:92:04:5b:1a: 83:92:9f:40:cd:a1:b8:5c:eb:69:b5:c6:b5:f8:c8:5a:b0:82: 50:dc:3a:22:f1:6e:ef:f9:41:e8:74:c6:0c:61:68:62:90:9a: aa:24:e1:1d:f0:b7:d7:58:61:a6:97:ec:f8:fd:e0:62:ef:da: 5e:b4:1e:d8:29:1d:88:90:8a:5f:b0:f9:83:05:6e:8d:8a:0a: da:39:49:f4:1f:c0:0c:8f:91:6b:48:c1:3b:f8:1b:43:3c:c7: 68:fb:d8:08:83:d1:ab:15:36:d6:ff:37:e2:00:43:3e:b4:6c: fa:9f:30:19:a5:c9:9a:48:9a:26:91:ab:7f:e5:8e:eb:cd:47: de:45:6b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnn7RAwu6lkbA13NRpTtJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw MzM2ZWUwHhcNMjUxMjI5MDEwMTE4WhcNMjUxMjMwMDEwMTE4WjAzMTEwLwYDVQQD Eyg0NWVlYjFkMzliNDQ5NDFlY2IwYmQ3ZDEwYWVkYWEzY2UxZjZmZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNBfUXx9cat6eGEtfS+f6p1fCQ4b Jg43AZ8GX7Zx82CTayRS/N2d/G+EoxNpTu+FxikgYHPJ0q7qutRFN8cfKkj8DeFM tYcq9QzZzI7qljdEY10ur87zxOm1zZ55/KSvC/KcQWxTAzLpfdX55L1JRTTBAOrw QBgmi30mCyPRI1vqKHf6kPzp/BScIrRMBIdyAY37lJN7rGCXv0DPsJGUb4hFfUMO QXPl/vzE4qj3qL88eQfzadG5aDkiosZB9jzE+qCwo27ru5vEjKeTRz2LNOdb6nng Q2CFlSpSzQfKrmb+AZEiE2D24mxH0rfA8NlTy3xZnmjSV5PoqlCFNLl1GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXusdObRJQeywvX0Qrtqjzh9v+GMB8GA1UdIwQY MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt MDBhNzcwNDc3NGUxLzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEtMDBhNzcwNDc3NGUx LzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmJOdYKk /JvnbrEF3W9zssU8TJLfOPdD2kXufYDYHEkuZElP3c1oabOCQIhXJg2AMNQZqTrx DvKgFWZoj1CRZYXnBrLN04uWU973zEjuNL9wsXBv81hOEnLqbGHzOaveUIMVN7e7 ddMguqhZFVPUCxJ/X53lIB4THcWSBFsag5KfQM2huFzrabXGtfjIWrCCUNw6IvFu 7/lB6HTGDGFoYpCaqiThHfC311hhppfs+P3gYu/aXrQe2CkdiJCKX7D5gwVujYoK 2jlJ9B/ADI+Ra0jBO/gbQzzHaPvYCIPRqxU21v834gBDPrRs+p8wGaXJmkiaJpGr f+WO681H3kVrlA== -----END CERTIFICATE-----Generated at Mon Dec 29 08:31:39 2025 by rpki-client