This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft File: 0R9tkk1vbMDpQIN9kwH85zIGV3E.mft (raw, json) Hash identifier: uMv+xt5rSGu7V9iKekHT+ISTDlWLz+KfAm1A/nD8RVA= Subject key identifier: 6B:21:47:02:03:08:69:72:80:5D:37:3F:4D:04:73:04:0F:4A:92:7D Authority key identifier: D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71 Certificate issuer: /CN=d11f6d924d6f6cc0e940837d9301fce732065771 Certificate serial: 019B300C05105FD8D140D52699BAA753F286 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft Manifest number: 05DA Signing time: Thu 18 Dec 2025 06:00:52 +0000 Manifest this update: Thu 18 Dec 2025 06:00:52 +0000 Manifest next update: Fri 19 Dec 2025 06:00:52 +0000 Files and hashes: 1: 0R9tkk1vbMDpQIN9kwH85zIGV3E.crl (hash: VPUu5p77wUFIm3Oo/AfSoAgmMpTKDcb7PjtZojPjZ4I=) 2: iJSQx0f1nTa0-CmNbadm7Gos7IA.roa (hash: LXabEDWzH1fx8QmFW8g5Pa/8Oh8pnxFijMUOQc1WwTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:0c:05:10:5f:d8:d1:40:d5:26:99:ba:a7:53:f2:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d11f6d924d6f6cc0e940837d9301fce732065771 Validity Not Before: Dec 18 06:00:52 2025 GMT Not After : Dec 19 06:00:52 2025 GMT Subject: CN=6b21470203086972805d373f4d0473040f4a927d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:14:ae:fb:f0:7a:95:e2:30:aa:a7:71:a5:c6: 28:1a:84:62:5a:69:55:2c:de:8e:66:14:20:a5:86: f3:98:9f:93:cc:fe:65:c4:47:42:02:6e:21:34:e4: 63:cb:d1:df:f2:ab:0b:94:fe:99:9d:c6:3e:3d:7a: b7:47:e3:ac:99:c4:6e:f6:5c:d7:97:90:e2:03:e8: f6:c6:8f:5d:54:7b:16:b2:0e:ca:d9:8f:0e:ff:f2: cc:da:5f:b8:6b:9b:94:c1:31:12:e0:37:c7:2c:cf: 7b:9d:17:35:1b:29:e2:16:1b:46:ef:17:7e:80:65: fa:17:bc:fe:73:bb:9b:eb:84:93:e4:09:75:e5:92: 5c:84:e9:f4:80:43:3b:b5:1c:12:3d:ec:d8:5f:75: dd:0a:47:18:9f:f9:de:10:3c:18:96:31:ee:6a:0e: 20:50:bb:6b:b8:dd:df:f0:6b:1c:7d:7d:7e:12:90: 05:3b:37:0e:0a:87:c0:c8:24:8c:e8:f5:05:90:43: f8:2b:da:14:bb:0e:61:ad:93:7d:dd:c0:84:52:07: 48:8a:97:e2:dc:55:b8:86:1c:84:0f:5b:a6:43:a5: b4:21:c0:7d:14:79:29:1e:a5:99:83:bc:91:4e:a6: 37:4e:4f:75:2b:34:0e:85:cf:8a:1b:6d:c7:97:5e: c0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:21:47:02:03:08:69:72:80:5D:37:3F:4D:04:73:04:0F:4A:92:7D X509v3 Authority Key Identifier: keyid:D1:1F:6D:92:4D:6F:6C:C0:E9:40:83:7D:93:01:FC:E7:32:06:57:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0R9tkk1vbMDpQIN9kwH85zIGV3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/83c9b9-a1ac-4516-abe8-9ed9710d6ea2/1/0R9tkk1vbMDpQIN9kwH85zIGV3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:9e:04:ca:14:12:b2:b0:7f:74:45:6e:26:74:aa:a6:95:0c: c0:1b:0d:8d:3e:76:ba:1e:bf:dd:28:5b:6c:98:f9:f8:7b:58: c5:0c:38:2e:0c:db:a1:e0:98:f0:37:b1:33:8d:c6:55:b0:2f: 11:32:4d:ad:38:53:db:cb:e5:14:1b:41:7b:b6:65:1d:14:dd: 15:a3:9c:60:48:8a:73:4a:71:b4:f6:f5:f5:0c:b3:78:3a:29: 23:5e:a6:10:63:42:ba:e9:43:25:38:28:bf:2a:7a:7a:29:d0: b6:8a:bf:36:34:de:04:f4:84:c9:d5:66:46:41:4e:7b:85:2a: 41:12:db:83:47:b8:7e:b1:fb:f4:ac:2b:6f:0a:e9:50:09:2e: a0:ec:5f:bc:fe:7a:44:9c:7c:8c:e2:5f:0d:e7:29:03:91:1d: 05:a3:0f:7e:be:b7:63:c5:82:8a:46:10:20:91:58:e0:9c:78: cb:37:70:be:6d:f5:bd:b4:64:3d:b7:59:b6:bb:c4:42:1e:c2: e4:a9:51:be:75:fd:ae:c4:24:e8:4d:ea:48:76:8e:a0:1c:e9: 17:94:2e:6c:44:fb:28:1f:72:4b:e4:09:14:61:80:91:84:2d: bf:8c:fa:cf:8d:53:aa:16:7b:c1:53:bc:fe:6a:c0:fa:00:3d: 53:be:e2:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswDAUQX9jRQNUmmbqnU/KGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMWY2ZDkyNGQ2ZjZjYzBlOTQwODM3ZDkzMDFmY2U3MzIw NjU3NzEwHhcNMjUxMjE4MDYwMDUyWhcNMjUxMjE5MDYwMDUyWjAzMTEwLwYDVQQD Eyg2YjIxNDcwMjAzMDg2OTcyODA1ZDM3M2Y0ZDA0NzMwNDBmNGE5MjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRSu+/B6leIwqqdxpcYoGoRiWmlV LN6OZhQgpYbzmJ+TzP5lxEdCAm4hNORjy9Hf8qsLlP6ZncY+PXq3R+OsmcRu9lzX l5DiA+j2xo9dVHsWsg7K2Y8O//LM2l+4a5uUwTES4DfHLM97nRc1GyniFhtG7xd+ gGX6F7z+c7ub64ST5Al15ZJchOn0gEM7tRwSPezYX3XdCkcYn/neEDwYljHuag4g ULtruN3f8GscfX1+EpAFOzcOCofAyCSM6PUFkEP4K9oUuw5hrZN93cCEUgdIipfi 3FW4hhyED1umQ6W0IcB9FHkpHqWZg7yRTqY3Tk91KzQOhc+KG23Hl17AsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGshRwIDCGlygF03P00EcwQPSpJ9MB8GA1UdIwQY MBaAFNEfbZJNb2zA6UCDfZMB/OcyBldxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgt OWVkOTcxMGQ2ZWEyLzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84M2M5YjktYTFhYy00NTE2LWFiZTgtOWVkOTcxMGQ2ZWEy LzEvMFI5dGtrMXZiTURwUUlOOWt3SDg1eklHVjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHp4EyhQS srB/dEVuJnSqppUMwBsNjT52uh6/3ShbbJj5+HtYxQw4LgzboeCY8DexM43GVbAv ETJNrThT28vlFBtBe7ZlHRTdFaOcYEiKc0pxtPb19QyzeDopI16mEGNCuulDJTgo vyp6einQtoq/NjTeBPSEydVmRkFOe4UqQRLbg0e4frH79KwrbwrpUAkuoOxfvP56 RJx8jOJfDecpA5EdBaMPfr63Y8WCikYQIJFY4Jx4yzdwvm31vbRkPbdZtrvEQh7C 5KlRvnX9rsQk6E3qSHaOoBzpF5QubET7KB9yS+QJFGGAkYQtv4z6z41TqhZ7wVO8 /mrA+gA9U77iyw== -----END CERTIFICATE-----Generated at Thu Dec 18 14:14:54 2025 by rpki-client