This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json) Hash identifier: ZUN1K6qHK6Q8MLY/nGQEcb2mAS2ygpjzkpbkF/UFw04= Subject key identifier: C2:50:67:05:99:4F:65:08:04:F1:3C:DE:E7:8E:A9:CA:0C:62:6D:55 Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982 Certificate serial: 019B3BD95616AA435E11F68E3F9E8A075CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft Manifest number: 20 Signing time: Sat 20 Dec 2025 13:00:57 +0000 Manifest this update: Sat 20 Dec 2025 13:00:57 +0000 Manifest next update: Sun 21 Dec 2025 13:00:57 +0000 Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: anN0sGXAmQDaI0tkCddnN5llILsjCJCTrw5PHLZ4Xl8=) 2: WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa (hash: vp1azStFxo+mPInlylvmSemgZa94N6epgGUZezt+m8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:56:16:aa:43:5e:11:f6:8e:3f:9e:8a:07:5c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Validity Not Before: Dec 20 13:00:57 2025 GMT Not After : Dec 21 13:00:57 2025 GMT Subject: CN=c2506705994f650804f13cdee78ea9ca0c626d55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:f7:26:87:2b:f9:82:d0:87:11:ab:98:3d: 67:6a:2a:63:30:65:76:71:45:1a:7a:05:01:e4:e4: 86:4a:6f:c2:a5:8b:e3:a9:7d:dd:90:40:1b:03:cf: d5:6a:ab:6e:a1:ca:dd:d0:47:60:28:dd:c1:9f:59: 08:4e:c3:64:46:a6:85:54:02:32:ba:0e:d4:84:2f: 66:f1:8d:27:fe:d8:f0:8b:59:4e:03:02:64:ee:ce: 09:3d:98:14:f8:09:20:a8:ed:aa:90:7c:45:0f:19: 26:a9:1d:10:48:e0:c9:fa:20:fd:51:8a:dc:2f:96: c5:4a:2a:01:85:d4:e4:c4:77:6f:30:e3:d2:c7:38: d7:fd:37:8c:49:3b:6a:73:1e:d1:e9:d5:b0:9e:b6: f4:06:34:e6:af:4a:17:d1:63:02:03:55:1a:49:ea: 07:a9:62:84:ed:a6:a5:10:c4:14:e5:08:7b:6e:de: cd:42:2e:66:fa:74:5d:f4:f1:f3:aa:0f:7f:df:c3: 7a:28:c7:27:fa:b2:8c:42:fc:61:d1:47:d1:ab:b8: b8:1c:f3:c7:9e:02:9e:98:1c:72:15:21:25:a8:b1: 16:63:b1:04:ad:70:1b:fb:96:bd:51:9b:53:f7:8d: 3c:89:80:8f:17:3f:b1:49:58:d4:6f:3a:60:b1:e9: 6b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:50:67:05:99:4F:65:08:04:F1:3C:DE:E7:8E:A9:CA:0C:62:6D:55 X509v3 Authority Key Identifier: keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f3:85:f4:8b:c0:f4:15:77:00:f6:35:e7:ba:2b:68:de:0b: fa:d0:e1:bc:6f:d6:af:8f:dd:aa:8e:7e:e4:7c:53:e0:9b:93: fc:29:9f:a8:90:e1:96:fa:27:cd:93:76:58:12:8e:c2:aa:a5: 66:99:c4:2f:d1:ca:6a:b7:4a:9f:bb:40:0b:aa:33:66:67:e5: 02:ed:bc:1d:71:06:76:90:1a:74:a7:94:4a:9d:4f:b0:8e:ae: ba:a5:ed:73:72:04:30:87:d5:3c:22:94:54:e5:3b:4d:39:7b: 95:ad:4e:aa:02:a8:9d:b1:f3:bd:31:09:01:00:d8:da:de:0a: 02:2a:4d:d3:5d:61:0c:70:6d:90:fa:49:60:f5:a9:3c:cf:b9: fb:65:6b:73:61:69:7e:72:a9:fa:e5:94:4c:45:26:f0:45:b2: fc:b7:9b:35:91:2e:56:17:6c:88:f0:40:23:98:ce:4b:12:3d: b9:8b:7d:f9:ff:fa:13:e8:9e:fb:cf:b6:a3:02:25:f6:6f:f5: f2:e1:3e:8b:52:d3:75:36:5e:04:f9:c7:61:b9:ee:4c:64:06: 91:be:63:3a:e0:50:ec:2e:81:9f:9c:e2:b4:9d:a3:e3:cd:3a: 58:01:8a:cb:a8:e7:3e:b6:d7:b6:ad:b5:a0:e6:4a:e1:96:9a: 3e:b7:ed:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72VYWqkNeEfaOP56KB1y+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl MjU5ODIwHhcNMjUxMjIwMTMwMDU3WhcNMjUxMjIxMTMwMDU3WjAzMTEwLwYDVQQD EyhjMjUwNjcwNTk5NGY2NTA4MDRmMTNjZGVlNzhlYTljYTBjNjI2ZDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5D3Jocr+YLQhxGrmD1naipjMGV2 cUUaegUB5OSGSm/CpYvjqX3dkEAbA8/Vaqtuocrd0EdgKN3Bn1kITsNkRqaFVAIy ug7UhC9m8Y0n/tjwi1lOAwJk7s4JPZgU+AkgqO2qkHxFDxkmqR0QSODJ+iD9UYrc L5bFSioBhdTkxHdvMOPSxzjX/TeMSTtqcx7R6dWwnrb0BjTmr0oX0WMCA1UaSeoH qWKE7aalEMQU5Qh7bt7NQi5m+nRd9PHzqg9/38N6KMcn+rKMQvxh0UfRq7i4HPPH ngKemBxyFSElqLEWY7EErXAb+5a9UZtT9408iYCPFz+xSVjUbzpgselrSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJQZwWZT2UIBPE83ueOqcoMYm1VMB8GA1UdIwQY MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPOF9IvA 9BV3APY157oraN4L+tDhvG/Wr4/dqo5+5HxT4JuT/CmfqJDhlvonzZN2WBKOwqql ZpnEL9HKardKn7tAC6ozZmflAu28HXEGdpAadKeUSp1PsI6uuqXtc3IEMIfVPCKU VOU7TTl7la1OqgKonbHzvTEJAQDY2t4KAipN011hDHBtkPpJYPWpPM+5+2Vrc2Fp fnKp+uWUTEUm8EWy/LebNZEuVhdsiPBAI5jOSxI9uYt9+f/6E+ie+8+2owIl9m/1 8uE+i1LTdTZeBPnHYbnuTGQGkb5jOuBQ7C6Bn5zitJ2j4806WAGKy6jnPrbXtq21 oOZK4ZaaPrftRw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:42:44 2025 by rpki-client