This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json) Hash identifier: TrOO2fKFR8GOTSykuY45m2WPTktZ9dNE8LBSssc8Mhc= Subject key identifier: 79:A1:46:84:B0:B4:4B:7B:5A:2F:F4:DF:3A:31:52:CD:60:3A:A4:C8 Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Certificate serial: 019B35D765D74A99BFCF481B402DBB66532B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft Manifest number: 1472 Signing time: Fri 19 Dec 2025 09:01:07 +0000 Manifest this update: Fri 19 Dec 2025 09:01:07 +0000 Manifest next update: Sat 20 Dec 2025 09:01:07 +0000 Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: r5q03pW9qgkZTGnUbgQ55RmFg23YH2KU4I5x0G/v/CE=) 2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:65:d7:4a:99:bf:cf:48:1b:40:2d:bb:66:53:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Validity Not Before: Dec 19 09:01:07 2025 GMT Not After : Dec 20 09:01:07 2025 GMT Subject: CN=79a14684b0b44b7b5a2ff4df3a3152cd603aa4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:c0:37:6f:c1:61:33:ba:7e:5a:27:27:f1: b9:2c:01:c2:64:1a:dc:e5:f3:cf:c4:e3:71:63:f4: 09:04:8e:01:3e:1d:e4:cb:94:b7:24:91:d9:53:da: cc:d4:b9:29:b2:70:9b:d1:5f:f5:9b:4e:b4:06:81: e4:03:a7:22:d3:7c:d2:52:8d:e1:6f:09:b5:fd:16: fa:a9:b5:3f:bf:a1:71:28:d6:31:3c:20:58:71:b0: 99:d7:9e:2d:f4:6d:4e:8a:ae:f7:78:8d:39:18:da: e2:1f:d7:8d:6e:7a:76:16:23:be:dc:91:b9:04:7b: ff:a4:60:48:d4:49:a3:ac:4b:58:98:9a:23:65:7e: 2e:8f:fb:e9:5c:da:0b:a6:75:6e:7c:65:b4:e7:e6: e5:27:0f:0b:de:4f:24:e5:c6:12:9e:48:97:83:eb: be:ed:30:da:5f:a3:d4:2e:37:04:8d:83:52:85:06: ef:db:38:75:af:f7:8a:2f:e4:da:d3:ae:8a:5c:bc: 70:f8:10:a1:50:bf:c0:19:21:62:ee:10:a4:02:bc: 1f:9a:1e:ec:73:02:24:96:1b:8a:99:af:c5:40:af: 2a:e8:fc:2f:29:4b:32:96:64:6f:2d:a4:b3:23:02: f9:77:47:c1:02:0a:02:fb:2f:02:68:1d:47:08:5d: 1e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A1:46:84:B0:B4:4B:7B:5A:2F:F4:DF:3A:31:52:CD:60:3A:A4:C8 X509v3 Authority Key Identifier: keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:54:e8:66:ed:f6:80:55:d7:28:d8:98:5a:78:bb:b2:7f:b1: 3d:86:49:4c:cc:6d:34:53:17:00:87:53:39:9c:78:78:1d:04: 2e:5c:24:df:b2:6b:41:79:ea:c1:09:a8:87:75:9e:8a:72:15: a2:cc:df:84:35:e3:38:4d:2e:4e:9d:52:b7:71:6f:80:b3:ca: 24:d3:79:6c:37:1c:e0:cd:2b:0a:11:40:32:95:17:a8:07:30: 4f:62:fd:c3:f8:72:19:d4:16:70:35:2b:4a:bb:5f:a6:59:83: 76:9b:5d:01:c5:89:49:a5:3e:09:25:43:2e:41:1a:c7:88:43: e1:29:03:08:b2:3c:ae:cc:b4:c9:a9:e3:4b:f5:ec:db:13:4c: 04:27:d4:ca:c0:e7:48:ff:5e:d0:f1:87:82:01:74:07:43:7e: 12:cb:13:1b:77:13:a5:ad:70:57:24:9a:ac:43:d9:a2:b6:a8: 2c:bf:96:9d:35:98:94:cc:5f:ee:65:30:59:cd:90:34:f5:cc: 38:41:c7:ed:63:df:96:58:57:23:ed:4d:21:29:c5:62:bd:08: 34:a6:74:67:09:de:25:be:c2:c1:c8:70:07:45:28:c6:01:ee: b9:87:9a:f7:de:17:ff:68:0b:10:1c:b5:0e:84:da:19:f8:b4: 87:6c:db:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs112XXSpm/z0gbQC27ZlMrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz MmMxZTgwHhcNMjUxMjE5MDkwMTA3WhcNMjUxMjIwMDkwMTA3WjAzMTEwLwYDVQQD Eyg3OWExNDY4NGIwYjQ0YjdiNWEyZmY0ZGYzYTMxNTJjZDYwM2FhNGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT3AN2/BYTO6flonJ/G5LAHCZBrc 5fPPxONxY/QJBI4BPh3ky5S3JJHZU9rM1LkpsnCb0V/1m060BoHkA6ci03zSUo3h bwm1/Rb6qbU/v6FxKNYxPCBYcbCZ154t9G1Oiq73eI05GNriH9eNbnp2FiO+3JG5 BHv/pGBI1EmjrEtYmJojZX4uj/vpXNoLpnVufGW05+blJw8L3k8k5cYSnkiXg+u+ 7TDaX6PULjcEjYNShQbv2zh1r/eKL+Ta066KXLxw+BChUL/AGSFi7hCkArwfmh7s cwIklhuKma/FQK8q6PwvKUsylmRvLaSzIwL5d0fBAgoC+y8CaB1HCF0e7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmhRoSwtEt7Wi/03zoxUs1gOqTIMB8GA1UdIwQY MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1 LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlToZu32 gFXXKNiYWni7sn+xPYZJTMxtNFMXAIdTOZx4eB0ELlwk37JrQXnqwQmoh3WeinIV oszfhDXjOE0uTp1St3FvgLPKJNN5bDcc4M0rChFAMpUXqAcwT2L9w/hyGdQWcDUr SrtfplmDdptdAcWJSaU+CSVDLkEax4hD4SkDCLI8rsy0yanjS/Xs2xNMBCfUysDn SP9e0PGHggF0B0N+EssTG3cTpa1wVySarEPZoraoLL+WnTWYlMxf7mUwWc2QNPXM OEHH7WPfllhXI+1NISnFYr0INKZ0ZwneJb7CwchwB0UoxgHuuYea994X/2gLEBy1 DoTaGfi0h2zbyQ== -----END CERTIFICATE-----Generated at Fri Dec 19 17:21:40 2025 by rpki-client