This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json) Hash identifier: kdVk3zx3YpG+BgmmDXD3kemdiZgMaYl+dSCnwCxyZu8= Subject key identifier: 13:8F:77:82:22:6E:40:6B:3E:D2:DD:07:C1:F8:B3:02:D8:45:EA:91 Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Certificate serial: 019B33E8E7DA12C1C0ED5686AD26BCBD6A96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft Manifest number: 1471 Signing time: Fri 19 Dec 2025 00:01:00 +0000 Manifest this update: Fri 19 Dec 2025 00:01:00 +0000 Manifest next update: Sat 20 Dec 2025 00:01:00 +0000 Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: jG4J2Q7nL0mM6B8qPKoj/urwWVFR8bj2OTBDaG4mLN8=) 2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:e7:da:12:c1:c0:ed:56:86:ad:26:bc:bd:6a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Validity Not Before: Dec 19 00:01:00 2025 GMT Not After : Dec 20 00:01:00 2025 GMT Subject: CN=138f7782226e406b3ed2dd07c1f8b302d845ea91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:35:a2:38:15:4d:e5:7e:0f:4a:27:96:24:e1: 8d:7a:98:4c:b9:f9:84:b4:c2:3d:2f:94:34:69:e7: 0f:3b:e0:05:f6:aa:cc:7a:85:2e:54:65:98:a4:18: 3d:15:5f:30:25:89:ab:bb:2f:16:6e:eb:3a:fe:a7: 2d:0c:b4:1a:a5:dc:7c:4f:a4:1a:82:96:2f:84:d5: a7:89:ac:7e:a5:2e:88:a9:1e:ef:87:03:49:73:89: e0:e0:94:5f:e8:3d:68:91:6f:c3:ed:c2:ff:25:43: f4:2b:62:ec:cf:95:09:8d:b8:fa:96:0c:41:21:bf: 04:ad:77:37:42:d8:c0:be:78:16:5e:ad:cc:d0:8b: 0e:90:d8:99:7c:75:a2:5d:11:84:6b:0a:0b:5d:1c: ba:65:0b:3f:05:bf:28:31:a9:e2:4b:8d:38:ff:14: d8:d4:b3:e8:75:0c:13:9f:40:4e:0d:b1:75:31:77: 1e:c9:db:19:7d:b1:fe:60:3c:eb:18:79:77:1a:d2: 5a:70:ee:2b:9d:bb:12:cf:23:30:0f:ba:97:5c:43: c4:01:11:19:61:2d:04:f2:14:07:2f:ac:a8:5b:e8: 22:21:0a:a3:28:2a:4a:8a:30:0a:c3:28:31:c3:42: ca:47:66:5f:8d:2b:ff:ae:bf:51:82:c5:41:76:f4: e0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8F:77:82:22:6E:40:6B:3E:D2:DD:07:C1:F8:B3:02:D8:45:EA:91 X509v3 Authority Key Identifier: keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:dc:fc:54:e0:f7:43:52:19:66:3f:68:14:c0:4e:5b:20: 41:19:f2:c4:f9:8d:2f:0a:05:fa:1b:80:c2:b4:f7:bf:42:39: 71:95:7e:f0:71:6c:aa:3b:ba:51:26:17:a4:2c:7e:e5:d2:aa: ab:8b:8e:48:be:6a:5d:ed:ed:76:20:20:aa:9b:92:99:7e:d4: f8:ee:1d:81:4e:64:92:73:54:d3:76:16:2e:e6:cd:9f:62:fa: 16:55:3b:06:ac:28:2c:3b:28:31:16:7d:2a:bf:99:c4:ab:e3: 86:3e:8c:95:e0:ac:27:0a:c5:78:49:78:31:dd:74:36:19:6f: ef:61:52:32:dc:29:e0:6a:02:9d:d6:3f:e8:fc:d4:e8:c7:b1: 8b:e6:0c:72:6d:b7:d1:f2:32:d2:e2:4b:fc:ba:6f:21:61:b0: da:24:c8:22:f6:b6:d5:4c:0a:e2:62:d8:c2:ea:23:2f:cd:2f: 69:38:54:38:f1:dc:a8:f7:3b:96:f5:6c:47:62:15:32:36:40: 42:42:17:32:e8:03:e4:ab:dc:8e:ab:a7:62:82:e6:d0:e6:4e: 18:95:cf:16:3b:a7:72:d0:d2:c2:2e:7d:c5:63:6d:c2:53:44: 9e:5a:ee:19:fa:ec:35:7a:2a:3d:f0:47:dd:c1:bd:33:63:97: 08:06:82:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6OfaEsHA7VaGrSa8vWqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz MmMxZTgwHhcNMjUxMjE5MDAwMTAwWhcNMjUxMjIwMDAwMTAwWjAzMTEwLwYDVQQD EygxMzhmNzc4MjIyNmU0MDZiM2VkMmRkMDdjMWY4YjMwMmQ4NDVlYTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TWiOBVN5X4PSieWJOGNephMufmE tMI9L5Q0aecPO+AF9qrMeoUuVGWYpBg9FV8wJYmruy8Wbus6/qctDLQapdx8T6Qa gpYvhNWniax+pS6IqR7vhwNJc4ng4JRf6D1okW/D7cL/JUP0K2Lsz5UJjbj6lgxB Ib8ErXc3QtjAvngWXq3M0IsOkNiZfHWiXRGEawoLXRy6ZQs/Bb8oManiS404/xTY 1LPodQwTn0BODbF1MXceydsZfbH+YDzrGHl3GtJacO4rnbsSzyMwD7qXXEPEAREZ YS0E8hQHL6yoW+giIQqjKCpKijAKwygxw0LKR2ZfjSv/rr9RgsVBdvTgzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOPd4IibkBrPtLdB8H4swLYReqRMB8GA1UdIwQY MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1 LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeQDc/FTg 90NSGWY/aBTATlsgQRnyxPmNLwoF+huAwrT3v0I5cZV+8HFsqju6USYXpCx+5dKq q4uOSL5qXe3tdiAgqpuSmX7U+O4dgU5kknNU03YWLubNn2L6FlU7BqwoLDsoMRZ9 Kr+ZxKvjhj6MleCsJwrFeEl4Md10Nhlv72FSMtwp4GoCndY/6PzU6Mexi+YMcm23 0fIy0uJL/LpvIWGw2iTIIva21UwK4mLYwuojL80vaThUOPHcqPc7lvVsR2IVMjZA QkIXMugD5KvcjqunYoLm0OZOGJXPFjunctDSwi59xWNtwlNEnlruGfrsNXoqPfBH 3cG9M2OXCAaCNQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:01:06 2025 by rpki-client