This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft File: 9qFyLout3DWKFYdCZbRmdD5wNlY.mft (raw, json) Hash identifier: +UaqhWjViz/U+OXxW7cEC7k9e8JVjHEIq/W6XLootuQ= Subject key identifier: 64:DE:A3:F2:A6:6D:4D:98:75:A5:AE:79:C1:84:AF:9F:39:D2:40:ED Authority key identifier: F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56 Certificate issuer: /CN=f6a1722e8baddc358a15874265b466743e703656 Certificate serial: 019B5CAD8D38CFD9BAC13E3908E55EB1498E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 22:00:36 +0000 Manifest this update: Fri 26 Dec 2025 22:00:36 +0000 Manifest next update: Sat 27 Dec 2025 22:00:36 +0000 Files and hashes: 1: 3gQqwuDknMD1by1_10QyLFjqTSQ.roa (hash: 7rS6ATpFIQATm/1nB63KRTZ9v2IEBgVrsScfZWZHuYo=) 2: 9qFyLout3DWKFYdCZbRmdD5wNlY.crl (hash: sAcKcsUe3O0tEyRu4a+bD3K7jwJrcEDA4SjrQanJRjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:ad:8d:38:cf:d9:ba:c1:3e:39:08:e5:5e:b1:49:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a1722e8baddc358a15874265b466743e703656 Validity Not Before: Dec 26 22:00:36 2025 GMT Not After : Dec 27 22:00:36 2025 GMT Subject: CN=64dea3f2a66d4d9875a5ae79c184af9f39d240ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4a:fe:db:11:65:b0:6b:26:ca:57:81:78:ac: 87:41:38:55:7c:0b:0b:2c:3e:32:bf:37:1b:f6:ad: 39:3e:7d:53:b4:94:3d:27:29:c6:49:5e:be:12:ff: 17:7a:85:e2:54:70:2e:88:c3:54:5d:7c:d7:1d:58: ee:a9:44:55:0e:fe:f6:bc:69:01:c9:a9:cd:38:32: 9e:4f:b6:6e:e8:8e:67:7d:06:5b:87:2f:4b:bc:c1: 4d:2f:0a:c3:5b:84:79:b8:08:49:8e:10:12:5e:dd: 5a:57:3f:62:bf:ea:37:cf:42:9f:16:48:2a:ad:fb: d2:12:e2:46:57:1b:1a:4a:a3:98:68:d0:fb:ec:5d: a4:44:00:f4:e0:4c:d8:95:c4:fb:68:5b:65:de:47: 35:4e:82:87:f7:88:10:cc:e9:a6:ec:fe:d9:54:2e: 66:56:31:22:52:30:c2:f0:6f:a4:e2:8c:47:d8:4b: 89:b8:9d:54:67:2e:4d:2c:73:4c:a8:a2:0e:11:61: 69:c2:ea:47:35:07:5a:bf:05:ef:29:e9:aa:42:c7: 52:9b:a3:7c:e1:8d:21:a7:51:99:63:6e:62:d6:5c: c6:8e:aa:32:9f:27:da:db:d3:d6:1d:0c:8f:e5:82: 7e:f4:c8:06:b3:b6:7e:9d:ee:65:73:7d:ca:9b:e8: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:DE:A3:F2:A6:6D:4D:98:75:A5:AE:79:C1:84:AF:9F:39:D2:40:ED X509v3 Authority Key Identifier: keyid:F6:A1:72:2E:8B:AD:DC:35:8A:15:87:42:65:B4:66:74:3E:70:36:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qFyLout3DWKFYdCZbRmdD5wNlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/9ccf72-f2df-45b6-937b-6e079069b65b/1/9qFyLout3DWKFYdCZbRmdD5wNlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:0d:dd:a2:c0:d7:08:38:99:9b:3f:86:95:e0:7a:af:66:09: f9:0c:81:47:bd:30:8f:50:0e:2d:5a:07:ac:80:af:23:40:15: 2e:23:09:76:6b:a3:e6:8c:d8:25:54:33:80:ed:61:1c:f7:b0: cc:fd:93:ac:fa:dd:18:7a:7f:2d:53:69:a2:48:a7:48:02:d2: 91:95:ce:97:eb:ca:c4:56:41:f1:9c:41:64:08:f4:14:fa:3d: 64:f5:0f:7b:4b:03:cc:ff:e9:5b:c9:53:8b:20:b0:44:b1:f9: 6a:d6:74:0a:2c:17:b3:42:a1:11:37:87:c6:63:22:b9:99:2e: 47:12:aa:d1:d0:98:40:2f:a6:b6:99:22:8d:da:c8:2b:36:69: 23:59:27:cc:8b:6d:37:84:f5:39:72:72:fb:7a:ce:7a:9a:27: 62:ed:89:7c:a8:98:e4:fa:28:b2:20:97:ce:03:72:48:a4:5a: 47:ba:eb:39:17:2d:62:26:27:c4:1f:5d:0d:31:e1:66:f2:b2: 08:56:ff:31:ba:d7:3a:28:a4:15:64:54:c9:be:7b:98:7d:ba: 2a:67:35:91:5f:d0:e6:25:05:78:7b:e9:b8:bc:90:7b:cf:33: 21:3f:bc:f3:ef:ae:c8:f7:64:5b:ff:e5:9d:4e:44:b7:77:8c: 70:ca:a8:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtcrY04z9m6wT45COVesUmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YTE3MjJlOGJhZGRjMzU4YTE1ODc0MjY1YjQ2Njc0M2U3 MDM2NTYwHhcNMjUxMjI2MjIwMDM2WhcNMjUxMjI3MjIwMDM2WjAzMTEwLwYDVQQD Eyg2NGRlYTNmMmE2NmQ0ZDk4NzVhNWFlNzljMTg0YWY5ZjM5ZDI0MGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0r+2xFlsGsmyleBeKyHQThVfAsL LD4yvzcb9q05Pn1TtJQ9JynGSV6+Ev8XeoXiVHAuiMNUXXzXHVjuqURVDv72vGkB yanNODKeT7Zu6I5nfQZbhy9LvMFNLwrDW4R5uAhJjhASXt1aVz9iv+o3z0KfFkgq rfvSEuJGVxsaSqOYaND77F2kRAD04EzYlcT7aFtl3kc1ToKH94gQzOmm7P7ZVC5m VjEiUjDC8G+k4oxH2EuJuJ1UZy5NLHNMqKIOEWFpwupHNQdavwXvKemqQsdSm6N8 4Y0hp1GZY25i1lzGjqoynyfa29PWHQyP5YJ+9MgGs7Z+ne5lc33Km+jLqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGTeo/KmbU2YdaWuecGEr5850kDtMB8GA1UdIwQY MBaAFPahci6Lrdw1ihWHQmW0ZnQ+cDZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2It NmUwNzkwNjliNjViLzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy85Y2NmNzItZjJkZi00NWI2LTkzN2ItNmUwNzkwNjliNjVi LzEvOXFGeUxvdXQzRFdLRllkQ1piUm1kRDV3TmxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADw3dosDX CDiZmz+GleB6r2YJ+QyBR70wj1AOLVoHrICvI0AVLiMJdmuj5ozYJVQzgO1hHPew zP2TrPrdGHp/LVNpokinSALSkZXOl+vKxFZB8ZxBZAj0FPo9ZPUPe0sDzP/pW8lT iyCwRLH5atZ0CiwXs0KhETeHxmMiuZkuRxKq0dCYQC+mtpkijdrIKzZpI1knzItt N4T1OXJy+3rOeponYu2JfKiY5PoosiCXzgNySKRaR7rrORctYiYnxB9dDTHhZvKy CFb/MbrXOiikFWRUyb57mH26Kmc1kV/Q5iUFeHvpuLyQe88zIT+88++uyPdkW//l nU5Et3eMcMqohA== -----END CERTIFICATE-----Generated at Sat Dec 27 08:10:46 2025 by rpki-client