This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft File: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json) Hash identifier: xjmNwXwaQCm5HlUEVAXl6tZyVS9/KzIUcFybiwsYmc0= Subject key identifier: 57:AE:7B:AD:F2:45:89:59:4D:AC:11:DD:67:23:CD:6B:63:FA:E4:4F Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE Certificate issuer: /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Certificate serial: 019B752380BE3EE825C148D0880946C55600 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft Manifest number: 136A Signing time: Wed 31 Dec 2025 16:00:19 +0000 Manifest this update: Wed 31 Dec 2025 16:00:19 +0000 Manifest next update: Thu 01 Jan 2026 16:00:19 +0000 Files and hashes: 1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: iCV+rkxGigZ771qg47tTC86+NKINSxmaqJ/98mn5Z9k=) 2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:80:be:3e:e8:25:c1:48:d0:88:09:46:c5:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee Validity Not Before: Dec 31 16:00:19 2025 GMT Not After : Jan 1 16:00:19 2026 GMT Subject: CN=57ae7badf24589594dac11dd6723cd6b63fae44f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:37:75:ee:b8:1f:21:c4:9c:92:67:50:14:30: 52:56:19:fc:df:3d:fe:13:f1:a6:dc:5e:b1:e5:ff: dc:77:54:a5:45:f5:56:77:34:3e:c9:6e:d7:e2:fd: 81:b8:27:df:fc:37:81:54:36:ca:99:26:c6:b1:18: 79:2b:8a:05:6e:7c:5a:4e:62:bd:c6:c6:e2:1e:44: e4:a2:f3:0c:a6:49:0c:65:0f:a3:6a:8e:03:fb:00: a2:58:a6:6f:8f:9c:69:21:0f:87:6b:a6:eb:03:93: d6:a2:ec:d6:6f:e2:e2:57:50:a6:2d:0f:61:57:e0: 3b:d8:14:05:2c:bd:88:30:03:9f:12:a1:a9:0b:1d: 09:37:47:37:60:f3:f4:a1:35:d6:31:8e:61:dc:b1: 7f:62:ad:c8:a2:c7:43:06:ee:e2:67:f8:12:08:1a: fb:56:4d:27:d6:c4:92:e0:17:b6:de:4c:d9:b2:0f: ee:f7:4d:65:a7:25:e7:c4:c3:54:7c:8b:0a:da:7c: ed:44:27:b4:0f:50:3b:98:03:b1:4c:5a:3e:57:38: 06:e8:bf:2c:2e:b2:82:94:38:89:97:ac:e8:c6:2e: f1:32:57:35:e8:b9:93:a2:68:31:d6:bc:f2:a3:98: fd:b8:f2:9e:a7:1e:4d:5f:cc:56:7f:f5:a0:f0:2f: 71:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AE:7B:AD:F2:45:89:59:4D:AC:11:DD:67:23:CD:6B:63:FA:E4:4F X509v3 Authority Key Identifier: keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8a:dc:cb:ec:f5:cd:5d:76:2b:61:7d:c8:41:32:bb:fc:5b: 0a:38:1d:d9:d4:02:d7:5e:48:d9:0b:42:6b:29:77:2b:ba:79: 29:8a:ac:84:26:b4:0b:7c:6c:b5:71:f6:a5:b4:e3:6d:d8:19: e6:0f:48:9c:d7:64:6b:f8:3a:5b:70:8b:48:2e:7d:ab:c4:00: 6b:a4:20:cb:50:4b:8b:75:be:2a:25:cf:75:55:02:fb:c4:45: b8:d7:1b:e5:c4:77:4f:f0:e8:64:97:8e:2e:cb:02:ca:1f:c1: f8:95:90:fb:65:db:5b:94:9a:fd:31:aa:44:50:79:bb:fe:af: cc:58:2b:ca:db:93:1d:fa:5c:24:6e:b5:21:00:01:2f:97:65: aa:c3:31:c2:07:d2:7b:67:cc:cb:e5:95:3a:14:57:9e:b8:a2: e3:c9:12:73:c3:8e:6d:74:4f:11:a9:e7:93:39:2b:ed:8e:a7: 08:40:ae:d1:b0:7e:51:7b:ff:a3:d2:5b:5e:3f:db:58:2d:dd: 6b:22:a1:12:8c:bb:86:33:36:db:4f:cd:0e:3c:61:5e:e4:71: ac:ac:b6:04:fd:26:de:53:c7:54:bd:e3:ad:b9:5b:93:b1:83: 2e:bd:a9:4a:9f:d0:23:9e:10:b7:7f:34:db:bd:78:53:c0:cd: 0c:eb:e9:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I4C+PuglwUjQiAlGxVYAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWY4YmNmMmEyZWMxMGY5ZTRiNjMwMmUxYjM1MDlmM2Qw MzM2ZWUwHhcNMjUxMjMxMTYwMDE5WhcNMjYwMTAxMTYwMDE5WjAzMTEwLwYDVQQD Eyg1N2FlN2JhZGYyNDU4OTU5NGRhYzExZGQ2NzIzY2Q2YjYzZmFlNDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzd17rgfIcSckmdQFDBSVhn83z3+ E/Gm3F6x5f/cd1SlRfVWdzQ+yW7X4v2BuCff/DeBVDbKmSbGsRh5K4oFbnxaTmK9 xsbiHkTkovMMpkkMZQ+jao4D+wCiWKZvj5xpIQ+Ha6brA5PWouzWb+LiV1CmLQ9h V+A72BQFLL2IMAOfEqGpCx0JN0c3YPP0oTXWMY5h3LF/Yq3IosdDBu7iZ/gSCBr7 Vk0n1sSS4Be23kzZsg/u901lpyXnxMNUfIsK2nztRCe0D1A7mAOxTFo+VzgG6L8s LrKClDiJl6zoxi7xMlc16LmTomgx1rzyo5j9uPKepx5NX8xWf/Wg8C9xawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeue63yRYlZTawR3WcjzWtj+uRPMB8GA1UdIwQY MBaAFPafi88qLsEPnktjAuGzUJ89AzbuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEt MDBhNzcwNDc3NGUxLzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YzhiYTEtODQwNy00YzJhLTkxMmEtMDBhNzcwNDc3NGUx LzEvOXAtTHp5b3V3US1lUzJNQzRiTlFuejBETnU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm4rcy+z1 zV12K2F9yEEyu/xbCjgd2dQC115I2QtCayl3K7p5KYqshCa0C3xstXH2pbTjbdgZ 5g9InNdka/g6W3CLSC59q8QAa6Qgy1BLi3W+KiXPdVUC+8RFuNcb5cR3T/DoZJeO LssCyh/B+JWQ+2XbW5Sa/TGqRFB5u/6vzFgrytuTHfpcJG61IQABL5dlqsMxwgfS e2fMy+WVOhRXnrii48kSc8OObXRPEannkzkr7Y6nCECu0bB+UXv/o9JbXj/bWC3d ayKhEoy7hjM220/NDjxhXuRxrKy2BP0m3lPHVL3jrblbk7GDLr2pSp/QI54Qt380 2714U8DNDOvplA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:44:44 2025 by rpki-client