This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft File: s9FM4YqPHQWmo1OQr0rsjObMVuw.mft (raw, json) Hash identifier: O9fZ3/zun0uspG1x4jL/DUUWpMIDqzXtEjal2SohRVw= Subject key identifier: 23:13:F0:68:C5:3B:44:02:54:E6:7C:BE:2E:A7:E3:D8:6B:F7:F1:45 Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Certificate serial: 019B3F114915FFF5B39B95730DB2B20B37F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 04:00:55 +0000 Manifest this update: Sun 21 Dec 2025 04:00:55 +0000 Manifest next update: Mon 22 Dec 2025 04:00:55 +0000 Files and hashes: 1: jQsHaj5ydFI2fziM46K4sV8khMM.roa (hash: /VZu49ELcVRt0AgBq70u1HUIw5xDpnWHzAN7Dc2pulg=) 2: s9FM4YqPHQWmo1OQr0rsjObMVuw.crl (hash: oIm9F9MXpOdmTL8Tym2yLqQc/ahj/8Hqf1jx/wLrRO8=) 3: tRz8tYUpxwf8wN4GeTnH5f0QQNU.roa (hash: lo7qT/3mV2HNXlaDbWGrnZSKU8gfCipkct2DwMPEdOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:49:15:ff:f5:b3:9b:95:73:0d:b2:b2:0b:37:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Validity Not Before: Dec 21 04:00:55 2025 GMT Not After : Dec 22 04:00:55 2025 GMT Subject: CN=2313f068c53b440254e67cbe2ea7e3d86bf7f145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:04:95:37:c7:09:ce:e3:dd:52:5c:d5:8a:f2: e7:0d:fd:07:98:e4:52:8a:f1:ac:ec:c6:1d:2f:18: ec:ae:56:93:3a:0b:53:6a:ce:5e:1a:c1:ef:ea:54: 78:18:7e:2a:61:f0:2b:29:b7:63:10:d7:7f:d8:a7: 5c:df:9f:f9:f5:f4:f0:23:15:e1:d7:ff:a8:2e:e3: 12:53:f4:e4:03:84:3e:fa:da:09:7f:38:ff:b9:e2: ba:8c:2f:11:7f:99:47:56:62:6c:48:00:d6:0a:08: 76:b1:90:87:f5:c4:02:a0:de:fd:fe:75:f2:71:d8: 73:9d:c1:f8:cf:06:fd:ca:47:52:3a:f8:3d:8e:5f: cd:7f:8f:13:a7:70:b0:a3:c2:29:e8:04:18:7c:4e: 70:8e:a1:41:27:b2:78:8a:2a:59:67:4d:c9:2a:76: cd:9e:3b:eb:7a:29:18:84:22:71:f4:d7:a3:4e:dd: 96:ab:38:92:c1:2a:a9:08:a6:68:19:bf:e4:f2:d5: b3:9b:8c:22:c8:50:a5:c8:e3:ea:ac:48:6e:91:78: de:c6:90:6c:b3:f7:e6:2b:ab:32:ff:26:5b:93:37: 93:c6:e4:34:c6:8b:b2:0b:fa:06:98:54:5a:b9:96: 69:a2:39:2b:68:6c:c3:be:63:ba:25:c8:e6:21:e6: 4d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:13:F0:68:C5:3B:44:02:54:E6:7C:BE:2E:A7:E3:D8:6B:F7:F1:45 X509v3 Authority Key Identifier: keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:15:1f:72:6b:e3:23:81:df:e0:f8:fb:e4:ac:24:c1:8b:8c: e8:79:9b:33:03:5d:db:1e:ff:da:38:44:7f:b2:30:62:1a:8b: 74:a9:a4:6f:63:02:3d:9b:de:e4:c2:e5:dc:5b:82:96:3a:df: d7:1b:6f:56:49:6d:d8:bd:6f:20:9d:a2:fb:17:4f:37:8d:88: b2:36:80:ab:b2:61:74:c0:e5:00:af:46:ac:08:46:68:17:6f: d9:6d:90:a0:c0:0c:10:01:a6:77:3e:8f:9b:0f:f1:df:d9:2d: e1:c6:85:5b:d5:32:0b:4b:0d:c0:82:11:86:df:b9:32:88:04: 3e:26:b4:4b:04:30:8b:80:59:67:c5:8c:f0:e4:56:60:bc:36: 80:6d:d7:1c:95:09:ec:c3:63:20:7d:7d:9c:97:29:28:19:a3: 48:e7:71:50:b2:65:f3:39:73:4c:c4:84:a9:30:7d:a1:fd:29: 45:43:13:d1:0f:ff:b4:a5:4a:58:c6:af:ca:e8:fc:e1:3b:74: e1:12:9a:a6:f5:cc:02:25:fc:43:43:46:10:85:04:88:4c:0b: 63:c6:20:00:89:91:42:d4:55:26:ae:60:e8:cc:90:11:f9:0b: d5:5d:1f:c8:22:a7:f4:82:6d:19:7c:87:3a:f2:da:5f:76:d1: ba:9a:9c:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/EUkV//Wzm5VzDbKyCzfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj YzU2ZWMwHhcNMjUxMjIxMDQwMDU1WhcNMjUxMjIyMDQwMDU1WjAzMTEwLwYDVQQD EygyMzEzZjA2OGM1M2I0NDAyNTRlNjdjYmUyZWE3ZTNkODZiZjdmMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wSVN8cJzuPdUlzVivLnDf0HmORS ivGs7MYdLxjsrlaTOgtTas5eGsHv6lR4GH4qYfArKbdjENd/2Kdc35/59fTwIxXh 1/+oLuMSU/TkA4Q++toJfzj/ueK6jC8Rf5lHVmJsSADWCgh2sZCH9cQCoN79/nXy cdhzncH4zwb9ykdSOvg9jl/Nf48Tp3Cwo8Ip6AQYfE5wjqFBJ7J4iipZZ03JKnbN njvreikYhCJx9NejTt2WqziSwSqpCKZoGb/k8tWzm4wiyFClyOPqrEhukXjexpBs s/fmK6sy/yZbkzeTxuQ0xouyC/oGmFRauZZpojkraGzDvmO6JcjmIeZNkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMT8GjFO0QCVOZ8vi6n49hr9/FFMB8GA1UdIwQY MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt NTJjNjk5ZDM4NmNkLzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBUfcmvj I4Hf4Pj75KwkwYuM6HmbMwNd2x7/2jhEf7IwYhqLdKmkb2MCPZve5MLl3FuCljrf 1xtvVklt2L1vIJ2i+xdPN42IsjaAq7JhdMDlAK9GrAhGaBdv2W2QoMAMEAGmdz6P mw/x39kt4caFW9UyC0sNwIIRht+5MogEPia0SwQwi4BZZ8WM8ORWYLw2gG3XHJUJ 7MNjIH19nJcpKBmjSOdxULJl8zlzTMSEqTB9of0pRUMT0Q//tKVKWMavyuj84Tt0 4RKapvXMAiX8Q0NGEIUEiEwLY8YgAImRQtRVJq5g6MyQEfkL1V0fyCKn9IJtGXyH OvLaX3bRupqcLw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:41:38 2025 by rpki-client