This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json) Hash identifier: u6rU/z/z+hUOOv8U+Y2bynKdRHzlxzJzP36b4RyzhfE= Subject key identifier: C7:4F:AF:28:BF:5F:E9:F0:EC:F2:66:27:79:58:EB:85:AF:C5:F5:BE Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Certificate serial: 019B42EED88975EAFEF87F5C36E84CBAF14F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft Manifest number: 1350 Signing time: Sun 21 Dec 2025 22:01:47 +0000 Manifest this update: Sun 21 Dec 2025 22:01:47 +0000 Manifest next update: Mon 22 Dec 2025 22:01:47 +0000 Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: y4/mafOPbI71m48/uX/3HExC4Iyb7l45qMBXVlCStz0=) 2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:d8:89:75:ea:fe:f8:7f:5c:36:e8:4c:ba:f1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Validity Not Before: Dec 21 22:01:47 2025 GMT Not After : Dec 22 22:01:47 2025 GMT Subject: CN=c74faf28bf5fe9f0ecf266277958eb85afc5f5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:e4:f1:fb:41:12:96:d9:cd:e5:44:16:d6: 5e:b7:da:b7:4b:35:0d:6f:39:c0:d5:9d:fc:b4:0b: ed:b5:11:f7:ea:ca:c1:97:53:f7:4a:9f:17:c0:78: 90:ce:a9:a2:32:51:65:9c:dc:e2:a3:77:79:c2:c0: f4:f3:81:09:f1:f5:22:fa:0c:1e:2e:85:4a:a1:83: ee:cc:c4:ce:43:e3:34:5b:fd:29:25:6c:48:f2:71: 20:b8:a0:e6:ba:4a:91:6f:44:52:b0:da:06:8c:c3: f9:c2:03:18:c3:e4:cc:ab:6a:40:8a:7c:ec:b4:d2: e9:73:c5:91:5b:93:6a:c9:7a:df:76:3a:8d:82:e1: ea:1d:3c:9e:e5:11:2d:a5:5a:44:c4:ba:d0:ea:43: 9c:e5:94:dd:ae:a5:96:ef:4f:b4:6a:8d:e2:84:21: 3e:62:2b:df:ee:aa:42:5f:41:b0:1b:40:79:73:be: 86:c5:6c:6c:34:32:34:3b:8a:ed:75:e8:98:47:8c: 9f:62:30:59:7b:83:5d:61:dc:f9:94:45:27:c2:b8: 6a:95:1f:a0:57:6c:5f:a8:77:4d:a5:8f:8c:8f:81: 0a:1c:7a:4c:c7:8b:3e:e0:29:a2:12:11:c7:ee:ae: b3:27:88:a1:7a:3f:25:e8:9b:8a:c6:73:af:28:96: 27:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4F:AF:28:BF:5F:E9:F0:EC:F2:66:27:79:58:EB:85:AF:C5:F5:BE X509v3 Authority Key Identifier: keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:89:4c:a9:2a:f0:12:72:10:86:b7:73:36:12:d0:d2:2a:db: 52:af:33:f6:51:d7:f4:32:2b:93:a4:2c:5b:9a:6e:a7:2a:6d: 74:c3:eb:44:be:58:e0:9e:eb:d3:b9:18:65:90:72:23:1f:5e: c2:f9:9a:ad:ad:5a:bf:d7:2f:d4:7c:ca:41:bc:27:97:23:95: 1c:13:ab:42:5c:fa:c1:9d:25:c4:b2:67:5d:1c:3a:20:5a:e8: 65:83:a0:05:d5:73:d3:c9:44:be:3b:6a:17:94:08:a6:5b:06: 99:64:76:c1:ce:61:2d:5e:ab:0d:be:99:45:8a:bd:68:67:28: b1:c1:79:7a:7a:9f:b3:bc:11:ed:4d:47:99:ab:2d:67:e0:30: ce:d8:7c:a9:3a:56:d1:7b:fb:93:cf:19:48:d2:d1:52:c4:49: 40:44:8c:d7:ae:cc:40:1d:98:a0:88:28:16:d0:55:a8:19:00: 08:e1:24:60:ca:37:c5:e3:2e:6f:fd:e9:94:98:34:ef:a0:5f: 4f:61:67:b3:5f:83:29:0e:1e:af:a8:5b:52:06:5b:66:c7:54: 21:c0:50:bd:55:e1:ba:b5:d4:d5:2e:7e:7a:8c:39:0a:0d:af: 3a:16:4c:fa:49:d1:c4:ae:d5:5d:07:95:fa:3e:08:ab:f9:1e: 6d:30:a8:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtC7tiJder++H9cNuhMuvFPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw MzM2ZWUwHhcNMjUxMjIxMjIwMTQ3WhcNMjUxMjIyMjIwMTQ3WjAzMTEwLwYDVQQD EyhjNzRmYWYyOGJmNWZlOWYwZWNmMjY2Mjc3OTU4ZWI4NWFmYzVmNWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5zk8ftBEpbZzeVEFtZet9q3SzUN bznA1Z38tAvttRH36srBl1P3Sp8XwHiQzqmiMlFlnNzio3d5wsD084EJ8fUi+gwe LoVKoYPuzMTOQ+M0W/0pJWxI8nEguKDmukqRb0RSsNoGjMP5wgMYw+TMq2pAinzs tNLpc8WRW5NqyXrfdjqNguHqHTye5REtpVpExLrQ6kOc5ZTdrqWW70+0ao3ihCE+ Yivf7qpCX0GwG0B5c76GxWxsNDI0O4rtdeiYR4yfYjBZe4NdYdz5lEUnwrhqlR+g V2xfqHdNpY+Mj4EKHHpMx4s+4CmiEhHH7q6zJ4ihej8l6JuKxnOvKJYn6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdPryi/X+nw7PJmJ3lY64WvxfW+MB8GA1UdIwQY MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt MDBhNzcwNDc3NGUxLzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEtMDBhNzcwNDc3NGUx LzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4lMqSrw EnIQhrdzNhLQ0irbUq8z9lHX9DIrk6QsW5pupyptdMPrRL5Y4J7r07kYZZByIx9e wvmara1av9cv1HzKQbwnlyOVHBOrQlz6wZ0lxLJnXRw6IFroZYOgBdVz08lEvjtq F5QIplsGmWR2wc5hLV6rDb6ZRYq9aGcoscF5enqfs7wR7U1HmastZ+Awzth8qTpW 0Xv7k88ZSNLRUsRJQESM167MQB2YoIgoFtBVqBkACOEkYMo3xeMub/3plJg076Bf T2Fns1+DKQ4er6hbUgZbZsdUIcBQvVXhurXU1S5+eow5Cg2vOhZM+knRxK7VXQeV +j4Iq/kebTCoiA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:26:37 2025 by rpki-client