This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft File: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft (raw, json) Hash identifier: 8VymSH0VXFVZX4nFG9OLx+LQnCwRQnZXrp1LDgfQ8Rc= Subject key identifier: 99:F8:6A:09:BA:34:10:1C:D9:1A:C6:BC:C3:77:C1:7A:D8:07:DD:F9 Authority key identifier: 77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 Certificate issuer: /CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Certificate serial: 019B3F4802F606C2E01F6C80320F08905CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft Manifest number: 105B Signing time: Sun 21 Dec 2025 05:00:42 +0000 Manifest this update: Sun 21 Dec 2025 05:00:42 +0000 Manifest next update: Mon 22 Dec 2025 05:00:42 +0000 Files and hashes: 1: cV_xuUl9XuNAw2Is6z6ZV4oiM48.roa (hash: +2riVPNmAsQH9xrBeRoOTXvYeuCg2sjzB0s7i/rn9hw=) 2: d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl (hash: 2reZFwTLn9Bnd81zuf410CvBs7DUwOJJeiyCB5DGo9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:48:02:f6:06:c2:e0:1f:6c:80:32:0f:08:90:5c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77d18b0f6535fcbbb492f606cb880be7a26efcc2 Validity Not Before: Dec 21 05:00:42 2025 GMT Not After : Dec 22 05:00:42 2025 GMT Subject: CN=99f86a09ba34101cd91ac6bcc377c17ad807ddf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a3:1d:ff:94:1e:9f:ce:bf:53:35:e1:f3:77: 8e:c1:21:fc:c6:c9:89:e0:fc:b1:98:96:79:b0:bb: 6a:68:d6:95:7b:2e:ca:48:a7:f1:69:d1:57:ed:3e: 13:22:71:3d:3e:5e:68:00:72:8e:5f:a4:40:85:d2: 26:8a:a7:d7:cb:e9:b1:27:d2:41:f5:c4:46:d7:2e: f0:00:1d:1f:01:34:30:8c:48:c4:7e:50:d0:81:1c: d6:42:80:9c:cf:b1:ae:a4:f8:53:6e:ae:7c:d6:6f: c0:10:92:9b:65:8b:dd:85:b3:97:14:2a:86:c2:74: 6c:71:32:94:0d:f8:af:31:b2:ba:55:87:ce:77:02: 26:d0:96:2e:95:f1:b5:94:34:6f:02:db:3c:1e:12: 95:c5:c1:17:1d:93:10:63:2d:a0:7b:2c:68:01:2a: 93:eb:69:25:4e:de:c9:2f:91:70:8e:2a:4f:27:19: 25:62:42:55:d2:20:38:71:58:b1:7b:ed:76:ec:46: f8:fc:ef:25:db:5f:58:59:4d:ff:b5:3d:c7:70:2f: a7:ee:cc:40:80:27:48:14:29:df:06:35:98:c4:c4: fb:c3:56:d1:b9:ee:b4:67:65:bc:ac:1e:e0:d7:79: 50:23:fb:ac:43:6c:d8:6c:c1:09:42:ae:f4:26:37: 84:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F8:6A:09:BA:34:10:1C:D9:1A:C6:BC:C3:77:C1:7A:D8:07:DD:F9 X509v3 Authority Key Identifier: keyid:77:D1:8B:0F:65:35:FC:BB:B4:92:F6:06:CB:88:0B:E7:A2:6E:FC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b7873e-2475-471d-b039-18ecd04a7b5e/1/d9GLD2U1_Lu0kvYGy4gL56Ju_MI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5a:05:58:11:5d:a8:3c:03:d7:7c:61:57:f8:7d:14:12:7d: ec:13:36:04:d9:3d:61:b0:88:5e:7d:66:3a:cf:f8:07:a4:76: a8:72:2f:e7:49:8a:be:76:c4:7d:b4:76:4c:f1:f1:41:4c:26: c3:1c:40:60:de:84:a9:28:69:f1:a7:2a:2d:a1:b4:65:6f:62: 8e:aa:a4:4f:95:bf:9c:5d:a7:95:91:0f:8e:05:35:82:ca:09: 51:1b:12:44:25:14:d4:ca:c8:37:86:bf:02:6d:94:fd:90:56: 64:d4:6c:58:6f:33:62:58:43:c1:9f:72:b8:46:b9:eb:91:48: ad:50:99:16:3c:e7:a1:74:4b:50:be:24:77:52:cd:6e:1d:2a: 6f:94:80:59:c0:e4:77:d6:8d:c1:b7:75:99:44:0e:c8:40:e8: 51:6a:a9:3e:06:64:a6:ac:80:16:be:fe:90:55:25:0e:2d:d2: 1d:db:d6:1e:ca:f2:c5:88:d1:fb:fd:91:f9:f0:ce:ad:16:e0: 86:a0:7a:7a:d1:69:58:c8:19:96:96:ee:33:03:d7:dd:fa:4b: 9d:3d:61:cb:29:7f:a8:0b:5c:fa:0b:a3:29:7e:cc:04:cd:b6: 9d:91:3a:c1:e6:5c:d4:48:9c:3f:7f:c5:c7:d5:78:31:db:6b: 82:e8:f3:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/SAL2BsLgH2yAMg8IkFy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3ZDE4YjBmNjUzNWZjYmJiNDkyZjYwNmNiODgwYmU3YTI2 ZWZjYzIwHhcNMjUxMjIxMDUwMDQyWhcNMjUxMjIyMDUwMDQyWjAzMTEwLwYDVQQD Eyg5OWY4NmEwOWJhMzQxMDFjZDkxYWM2YmNjMzc3YzE3YWQ4MDdkZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96Md/5Qen86/UzXh83eOwSH8xsmJ 4PyxmJZ5sLtqaNaVey7KSKfxadFX7T4TInE9Pl5oAHKOX6RAhdImiqfXy+mxJ9JB 9cRG1y7wAB0fATQwjEjEflDQgRzWQoCcz7GupPhTbq581m/AEJKbZYvdhbOXFCqG wnRscTKUDfivMbK6VYfOdwIm0JYulfG1lDRvAts8HhKVxcEXHZMQYy2geyxoASqT 62klTt7JL5FwjipPJxklYkJV0iA4cVixe+127Eb4/O8l219YWU3/tT3HcC+n7sxA gCdIFCnfBjWYxMT7w1bRue60Z2W8rB7g13lQI/usQ2zYbMEJQq70JjeEzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJn4agm6NBAc2RrGvMN3wXrYB935MB8GA1UdIwQY MBaAFHfRiw9lNfy7tJL2BsuIC+eibvzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzkt MThlY2QwNGE3YjVlLzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iNzg3M2UtMjQ3NS00NzFkLWIwMzktMThlY2QwNGE3YjVl LzEvZDlHTEQyVTFfTHUwa3ZZR3k0Z0w1Nkp1X01JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1oFWBFd qDwD13xhV/h9FBJ97BM2BNk9YbCIXn1mOs/4B6R2qHIv50mKvnbEfbR2TPHxQUwm wxxAYN6EqShp8acqLaG0ZW9ijqqkT5W/nF2nlZEPjgU1gsoJURsSRCUU1MrIN4a/ Am2U/ZBWZNRsWG8zYlhDwZ9yuEa565FIrVCZFjznoXRLUL4kd1LNbh0qb5SAWcDk d9aNwbd1mUQOyEDoUWqpPgZkpqyAFr7+kFUlDi3SHdvWHsryxYjR+/2R+fDOrRbg hqB6etFpWMgZlpbuMwPX3fpLnT1hyyl/qAtc+gujKX7MBM22nZE6weZc1EicP3/F x9V4MdtrgujzKw== -----END CERTIFICATE-----Generated at Sun Dec 21 07:02:38 2025 by rpki-client