This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft File: B9PAwRUyjD0owPVyGwCYKyzUIV4.mft (raw, json) Hash identifier: k1y+IL8q+/hgZ06H2dI+mOXU5urpZrdQTEmKQasAYak= Subject key identifier: 92:FB:9F:60:FE:D7:9E:81:0B:65:DA:91:04:DC:A1:FA:14:93:2D:3E Authority key identifier: 07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E Certificate issuer: /CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Certificate serial: 019B3D231BE0A10CE04218A7E49B05DE3B5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft Manifest number: 165F Signing time: Sat 20 Dec 2025 19:01:09 +0000 Manifest this update: Sat 20 Dec 2025 19:01:09 +0000 Manifest next update: Sun 21 Dec 2025 19:01:09 +0000 Files and hashes: 1: 1-uN15WooRn1ILKR5q1XNAneYJkk.roa (hash: ceG95NNBWipckiQC0zFJWFVKiWVKgIWhdLvt9vkMIUA=) 2: B9PAwRUyjD0owPVyGwCYKyzUIV4.crl (hash: BRO0UUNDqo/ALl4DQoIZjRKG9kGUsS7qhdnUNu534Cs=) 3: rNO8o619Q5SFsmTVHI_QY1wyUDE.roa (hash: Hb7rXVkAK9PEfMPmQwPGTYXFwRIopAaJ4bo+hnJHqKU=) 4: ymgejZXQAFGY4W5XJssEnhi7B6U.roa (hash: 6jBjJYjwNGCZyUd70W3B/Q80kGLCgiNFZzX5URwj3Fo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1b:e0:a1:0c:e0:42:18:a7:e4:9b:05:de:3b:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07d3c0c115328c3d28c0f5721b00982b2cd4215e Validity Not Before: Dec 20 19:01:09 2025 GMT Not After : Dec 21 19:01:09 2025 GMT Subject: CN=92fb9f60fed79e810b65da9104dca1fa14932d3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:34:b6:47:ee:5d:7f:26:14:61:3d:a3:1f: a8:40:06:b9:38:85:37:06:5e:aa:9e:a7:1d:50:b4: c5:52:d9:d1:8a:3e:ad:51:8f:45:ce:94:da:ad:e8: 8c:84:d8:fa:8f:ee:1b:55:11:04:07:33:38:b0:d8: cc:84:f3:2a:00:cc:b8:ba:59:cc:00:28:b7:ac:f6: ea:7b:17:21:75:a0:97:e8:56:60:4a:18:11:ba:63: e9:5b:53:d8:4c:03:16:e5:86:a7:f9:07:26:52:d1: 72:be:37:bb:73:da:a4:0c:19:d1:27:79:a2:24:0c: 60:09:6a:5c:92:92:8e:c0:d8:41:58:73:0e:8a:11: 36:c9:0f:8c:aa:b3:93:4f:3b:c7:ef:50:43:55:7f: 5c:d4:2e:08:f5:8d:cb:f3:e2:df:02:0e:07:f2:f8: 9e:aa:96:25:cf:b7:58:99:9f:f8:b7:74:c3:66:ad: 38:6a:29:a3:5c:7f:9e:49:ec:db:b5:e3:21:9e:b6: 14:ab:01:e2:19:a5:54:1e:2c:f1:d6:39:77:38:d8: ab:af:65:87:ba:1a:3e:28:d5:01:85:18:ee:51:19: 48:43:19:71:7c:0d:cf:2c:29:cb:62:76:69:51:32: f3:12:60:16:b2:be:e0:49:bc:3e:8c:a5:71:bf:03: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FB:9F:60:FE:D7:9E:81:0B:65:DA:91:04:DC:A1:FA:14:93:2D:3E X509v3 Authority Key Identifier: keyid:07:D3:C0:C1:15:32:8C:3D:28:C0:F5:72:1B:00:98:2B:2C:D4:21:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9PAwRUyjD0owPVyGwCYKyzUIV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/376f5a-c026-4bae-8847-2b1d439b2227/1/B9PAwRUyjD0owPVyGwCYKyzUIV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:be:c3:45:6a:9f:84:43:00:88:9d:2b:7f:f5:7e:14:78:d0: 46:6b:23:63:3a:41:68:28:ab:75:3c:56:95:94:42:f8:b5:89: 09:7e:a4:f1:ba:65:18:89:20:b7:9c:97:db:f3:94:ad:03:ae: eb:28:1c:aa:92:f8:bd:d7:b9:24:6b:b0:8a:5f:98:da:ed:e3: 7c:80:e3:07:d4:28:44:e4:df:3d:bb:35:fb:a6:d0:db:31:cf: 50:8b:a5:19:77:1e:56:c9:c2:2e:90:10:35:6a:89:77:1d:b4: e9:da:b6:5d:69:28:08:5a:d0:9e:40:14:b3:a3:79:b7:70:8a: 41:e4:0d:88:17:f5:fe:72:0e:a6:17:8e:26:53:2d:2c:3f:7b: ea:56:3a:3b:09:8f:10:6b:c1:e8:d7:b0:e0:e2:ec:20:11:4e: 45:9d:db:42:de:f6:24:0f:d8:09:22:8f:9c:99:ce:3b:de:85: 7c:74:09:33:b3:9b:eb:35:0d:f0:a9:73:4e:87:d3:f1:3f:b5: fb:76:94:cb:ae:f0:be:17:7d:6d:89:0f:48:da:1f:e7:3e:0f: fb:33:25:91:7f:35:ce:31:70:8b:18:63:e6:43:f9:0c:99:35: 89:94:cf:31:a1:7c:1c:e0:31:05:9d:24:6f:e6:4e:89:44:0d: 5e:79:94:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxvgoQzgQhin5JsF3jtdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZDNjMGMxMTUzMjhjM2QyOGMwZjU3MjFiMDA5ODJiMmNk NDIxNWUwHhcNMjUxMjIwMTkwMTA5WhcNMjUxMjIxMTkwMTA5WjAzMTEwLwYDVQQD Eyg5MmZiOWY2MGZlZDc5ZTgxMGI2NWRhOTEwNGRjYTFmYTE0OTMyZDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDE0tkfuXX8mFGE9ox+oQAa5OIU3 Bl6qnqcdULTFUtnRij6tUY9FzpTareiMhNj6j+4bVREEBzM4sNjMhPMqAMy4ulnM ACi3rPbqexchdaCX6FZgShgRumPpW1PYTAMW5Yan+QcmUtFyvje7c9qkDBnRJ3mi JAxgCWpckpKOwNhBWHMOihE2yQ+MqrOTTzvH71BDVX9c1C4I9Y3L8+LfAg4H8vie qpYlz7dYmZ/4t3TDZq04aimjXH+eSezbteMhnrYUqwHiGaVUHizx1jl3ONirr2WH uho+KNUBhRjuURlIQxlxfA3PLCnLYnZpUTLzEmAWsr7gSbw+jKVxvwNkJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL7n2D+156BC2XakQTcofoUky0+MB8GA1UdIwQY MBaAFAfTwMEVMow9KMD1chsAmCss1CFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDct MmIxZDQzOWIyMjI3LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zNzZmNWEtYzAyNi00YmFlLTg4NDctMmIxZDQzOWIyMjI3 LzEvQjlQQXdSVXlqRDBvd1BWeUd3Q1lLeXpVSVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT77DRWqf hEMAiJ0rf/V+FHjQRmsjYzpBaCirdTxWlZRC+LWJCX6k8bplGIkgt5yX2/OUrQOu 6ygcqpL4vde5JGuwil+Y2u3jfIDjB9QoROTfPbs1+6bQ2zHPUIulGXceVsnCLpAQ NWqJdx206dq2XWkoCFrQnkAUs6N5t3CKQeQNiBf1/nIOpheOJlMtLD976lY6OwmP EGvB6New4OLsIBFORZ3bQt72JA/YCSKPnJnOO96FfHQJM7Ob6zUN8KlzTofT8T+1 +3aUy67wvhd9bYkPSNof5z4P+zMlkX81zjFwixhj5kP5DJk1iZTPMaF8HOAxBZ0k b+ZOiUQNXnmUHg== -----END CERTIFICATE-----Generated at Sun Dec 21 01:35:40 2025 by rpki-client