This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft File: 9Il_29x9JQjfzRTP9gCtQ7knkks.mft (raw, json) Hash identifier: LR+Wb6J7+iLxJ4dmpXWD3W2TEFmi/Kc1pZA+Ob0Xt1o= Subject key identifier: 5E:5F:48:F9:22:78:3B:12:6F:DC:3C:4B:50:57:FE:0D:97:CB:21:B4 Authority key identifier: F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B Certificate issuer: /CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Certificate serial: 019B3EA307220C23FC8332BBCCEF02A71C42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft Manifest number: 0CBB Signing time: Sun 21 Dec 2025 02:00:30 +0000 Manifest this update: Sun 21 Dec 2025 02:00:30 +0000 Manifest next update: Mon 22 Dec 2025 02:00:30 +0000 Files and hashes: 1: 9Il_29x9JQjfzRTP9gCtQ7knkks.crl (hash: 2vYeRrDStNo4xwILgMcHzgCkRcJUrsOHtmroXPcXJ3s=) 2: goWXgCcrT8sdpWvs98SjkshS1QQ.roa (hash: pL/QBtJXrUgZbyv/2j+3PUPuF0UtD1Pg09swJJxayTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:07:22:0c:23:fc:83:32:bb:cc:ef:02:a7:1c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4897fdbdc7d2508dfcd14cff600ad43b927924b Validity Not Before: Dec 21 02:00:30 2025 GMT Not After : Dec 22 02:00:30 2025 GMT Subject: CN=5e5f48f922783b126fdc3c4b5057fe0d97cb21b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:d4:05:f8:01:b4:19:1c:33:df:b8:bb:12: bb:ea:24:9e:93:39:29:70:0f:7a:0a:aa:d4:00:f2: ab:bd:f9:d0:41:5f:21:f0:7d:5c:d1:2c:bd:9b:21: 8c:83:55:fd:af:52:41:e2:48:55:f3:8e:32:de:a2: f1:3f:aa:33:a8:17:87:bc:98:68:58:4b:46:d4:02: 54:db:66:80:ac:ba:4f:86:67:de:32:00:94:71:fc: c5:13:76:a5:4b:4e:35:b9:44:f8:2d:34:bd:d3:f7: f4:e7:aa:c3:ef:c5:c2:42:0a:1a:fc:8c:4f:ab:2e: 25:b2:27:3e:12:83:9a:19:e5:55:b8:c4:2e:48:a4: 08:47:19:24:62:01:9f:fe:0a:ca:14:e2:4f:13:77: 6b:40:80:db:7e:04:8b:f2:ae:ee:45:49:41:69:c0: 3d:f1:1f:05:53:3d:e0:da:4b:93:93:33:60:a5:23: 3c:17:a8:34:c3:73:a1:53:97:0e:b6:0f:ef:67:4d: 56:c8:29:24:a0:95:d5:08:17:dc:23:5c:c4:4d:e9: e5:9f:ee:31:f9:3a:b1:4e:b0:c7:9c:e3:56:9b:75: 4e:d1:aa:7f:79:2f:85:5d:b3:cc:36:58:be:14:83: 05:52:03:1f:2a:85:eb:21:4e:7c:1b:94:2a:7d:f5: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5F:48:F9:22:78:3B:12:6F:DC:3C:4B:50:57:FE:0D:97:CB:21:B4 X509v3 Authority Key Identifier: keyid:F4:89:7F:DB:DC:7D:25:08:DF:CD:14:CF:F6:00:AD:43:B9:27:92:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Il_29x9JQjfzRTP9gCtQ7knkks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/7b997b-bea6-4891-95d1-94c6f744de46/1/9Il_29x9JQjfzRTP9gCtQ7knkks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b4:98:11:d2:a7:6f:36:1d:74:16:2b:5b:94:c6:b7:a7:98: 2d:2b:4c:36:f6:98:91:56:7d:ee:14:f6:d5:09:70:56:82:f4: ac:0e:ec:87:21:3d:5e:34:be:b8:42:00:e5:40:4f:3a:a1:fa: 9a:07:3c:c6:b6:12:6e:23:a0:10:52:7a:6a:4b:5e:c4:68:c2: 51:33:3c:ea:b8:30:75:94:11:1b:10:83:8e:be:59:e9:21:7c: 08:58:d0:ac:a4:39:2a:c7:f8:00:b6:91:d1:4f:da:60:49:9f: 76:18:39:7b:c6:01:00:59:96:61:ab:00:0b:0d:d1:6a:d7:fd: 8c:b5:e9:bb:8a:4e:84:9f:a1:97:27:86:13:18:88:2c:a8:ab: 0d:f6:08:31:58:75:96:e9:d0:07:2c:79:90:f3:d8:fc:5f:86: 49:1f:54:a3:24:25:78:06:ad:3a:ed:be:39:72:76:07:1e:e2: 8d:1a:18:ff:5c:54:ff:7f:7e:9f:f8:9c:18:76:2d:15:9f:44: 99:10:61:b0:47:ec:94:b3:1a:8b:e3:27:75:50:92:4d:3a:b8: 5a:01:ce:18:e8:53:60:8a:a7:4d:65:f8:2c:1d:34:01:6b:2a: 5a:22:48:96:f0:d2:25:01:25:7e:e9:7e:14:64:e3:55:22:ba: b5:ea:78:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+owciDCP8gzK7zO8CpxxCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ODk3ZmRiZGM3ZDI1MDhkZmNkMTRjZmY2MDBhZDQzYjky NzkyNGIwHhcNMjUxMjIxMDIwMDMwWhcNMjUxMjIyMDIwMDMwWjAzMTEwLwYDVQQD Eyg1ZTVmNDhmOTIyNzgzYjEyNmZkYzNjNGI1MDU3ZmUwZDk3Y2IyMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/UBfgBtBkcM9+4uxK76iSekzkp cA96CqrUAPKrvfnQQV8h8H1c0Sy9myGMg1X9r1JB4khV844y3qLxP6ozqBeHvJho WEtG1AJU22aArLpPhmfeMgCUcfzFE3alS041uUT4LTS90/f056rD78XCQgoa/IxP qy4lsic+EoOaGeVVuMQuSKQIRxkkYgGf/grKFOJPE3drQIDbfgSL8q7uRUlBacA9 8R8FUz3g2kuTkzNgpSM8F6g0w3OhU5cOtg/vZ01WyCkkoJXVCBfcI1zETenln+4x +TqxTrDHnONWm3VO0ap/eS+FXbPMNli+FIMFUgMfKoXrIU58G5QqffVsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5fSPkieDsSb9w8S1BX/g2XyyG0MB8GA1UdIwQY MBaAFPSJf9vcfSUI380Uz/YArUO5J5JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEt OTRjNmY3NDRkZTQ2LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC83Yjk5N2ItYmVhNi00ODkxLTk1ZDEtOTRjNmY3NDRkZTQ2 LzEvOUlsXzI5eDlKUWpmelJUUDlnQ3RRN2tua2tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLSYEdKn bzYddBYrW5TGt6eYLStMNvaYkVZ97hT21QlwVoL0rA7shyE9XjS+uEIA5UBPOqH6 mgc8xrYSbiOgEFJ6aktexGjCUTM86rgwdZQRGxCDjr5Z6SF8CFjQrKQ5Ksf4ALaR 0U/aYEmfdhg5e8YBAFmWYasACw3Ratf9jLXpu4pOhJ+hlyeGExiILKirDfYIMVh1 lunQByx5kPPY/F+GSR9UoyQleAatOu2+OXJ2Bx7ijRoY/1xU/39+n/icGHYtFZ9E mRBhsEfslLMai+MndVCSTTq4WgHOGOhTYIqnTWX4LB00AWsqWiJIlvDSJQElful+ FGTjVSK6tep4/w== -----END CERTIFICATE-----Generated at Sun Dec 21 03:55:26 2025 by rpki-client