This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: AzAN6s0lbxvDCuaxaixmwT8mjRXZ249G8j72/Gz1Ie0= Subject key identifier: 93:EA:89:E7:B1:79:93:B2:0E:C7:41:BE:C7:23:63:3A:C7:58:9D:B0 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B3C102F81282929D68283D4E03EFD715C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1790 Signing time: Sat 20 Dec 2025 14:00:52 +0000 Manifest this update: Sat 20 Dec 2025 14:00:52 +0000 Manifest next update: Sun 21 Dec 2025 14:00:52 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: wh8tQUDuGSK+swr2m+xvm2jjzbvgBfZ4glBgimMy+cA=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: b405QCs1aUgpVCYR4Gaf0mhpXUg.roa (hash: vr3hh37YG76cIiO+7+0A0llwbOl+y0kE8NKxOJZ/Pus=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:2f:81:28:29:29:d6:82:83:d4:e0:3e:fd:71:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Dec 20 14:00:52 2025 GMT Not After : Dec 21 14:00:52 2025 GMT Subject: CN=93ea89e7b17993b20ec741bec723633ac7589db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:37:0e:3e:0b:47:27:5b:8d:ad:25:9d:c8:6c: 1d:d7:fb:b1:8d:d3:c9:a6:13:68:3a:51:e6:11:dd: c4:14:2c:3f:12:43:9e:8c:6f:69:d4:40:9e:15:2d: d4:50:9a:28:f9:c5:9b:6c:da:48:af:43:01:18:f7: 3e:0a:93:ff:ab:3c:49:0b:98:17:9c:23:57:80:d8: 87:93:6c:81:24:e3:94:94:b0:27:f0:67:f7:71:17: eb:39:dc:46:6c:fe:b9:97:72:5e:72:b4:69:d4:24: 9a:c9:b1:20:1c:aa:e2:07:27:2d:51:f6:88:30:5e: f0:f1:08:73:3a:53:64:34:67:5d:f2:83:62:8f:8a: f9:50:0d:1b:ba:d6:d0:5e:64:b1:7f:ff:ce:4a:53: cc:0a:17:6a:33:98:5a:0f:1f:1b:b5:e8:b6:08:1a: e4:70:cb:f7:87:61:20:74:0a:d5:5d:9b:58:e8:12: d9:36:89:93:f2:17:a3:ff:8b:a1:8d:0d:fc:83:9a: e7:74:8e:df:57:f4:9e:7e:94:2b:65:84:69:4f:00: 04:58:20:4a:f0:88:28:59:93:1e:c3:d4:d8:9c:ac: e1:47:7b:82:9e:83:99:1c:26:7f:20:37:02:76:2c: f8:5d:54:66:16:e2:b3:d6:ad:b6:ee:de:9a:05:bd: 21:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EA:89:E7:B1:79:93:B2:0E:C7:41:BE:C7:23:63:3A:C7:58:9D:B0 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:ee:0e:f3:fa:f1:a1:58:c7:4e:63:ac:24:00:cf:24:c6:d6: 44:78:77:ea:e3:17:a6:e4:56:8f:af:38:92:43:e3:6e:2a:56: 37:0f:e5:eb:31:2a:e5:14:fd:f8:0e:d5:6c:6c:39:23:b1:d7: f0:49:0f:1e:fe:f7:6e:a7:ee:49:f6:6d:a2:4e:5d:80:f0:82: 8d:84:8f:b2:1d:6b:6f:77:e6:95:51:60:30:3a:d9:c4:f2:22: 83:c2:cc:0e:c8:d8:71:e6:3a:d9:a9:dd:7b:b2:9b:9e:6b:98: dc:9a:13:c4:fb:04:b9:bc:81:e1:ae:bd:2a:33:4c:d6:26:2c: e0:d0:7d:8f:1b:cd:45:8b:85:07:e5:1f:7b:9b:a7:01:97:6e: f5:50:17:e7:ce:b0:66:b4:68:35:a6:a6:ba:aa:02:ec:2d:86: 50:8a:fd:79:c4:ff:1f:69:e3:c1:97:e5:5b:0f:7f:fe:f6:57: 9b:3f:fb:dd:90:51:c8:ef:ef:51:32:29:9e:6b:d1:58:3c:9d: 44:81:79:14:d9:91:69:74:20:58:9b:9d:98:9d:c2:e7:94:2d: 2e:26:28:ef:9f:c1:e6:17:07:70:87:8d:20:cd:21:ab:50:87: fb:ea:b7:d7:5b:cf:f6:8f:ec:f5:15:da:98:cc:e6:0e:eb:c2: dd:2b:35:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EC+BKCkp1oKD1OA+/XFcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUxMjIwMTQwMDUyWhcNMjUxMjIxMTQwMDUyWjAzMTEwLwYDVQQD Eyg5M2VhODllN2IxNzk5M2IyMGVjNzQxYmVjNzIzNjMzYWM3NTg5ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DcOPgtHJ1uNrSWdyGwd1/uxjdPJ phNoOlHmEd3EFCw/EkOejG9p1ECeFS3UUJoo+cWbbNpIr0MBGPc+CpP/qzxJC5gX nCNXgNiHk2yBJOOUlLAn8Gf3cRfrOdxGbP65l3JecrRp1CSaybEgHKriByctUfaI MF7w8QhzOlNkNGdd8oNij4r5UA0butbQXmSxf//OSlPMChdqM5haDx8btei2CBrk cMv3h2EgdArVXZtY6BLZNomT8hej/4uhjQ38g5rndI7fV/SefpQrZYRpTwAEWCBK 8IgoWZMew9TYnKzhR3uCnoOZHCZ/IDcCdiz4XVRmFuKz1q227t6aBb0hKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPqieexeZOyDsdBvscjYzrHWJ2wMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+4O8/rx oVjHTmOsJADPJMbWRHh36uMXpuRWj684kkPjbipWNw/l6zEq5RT9+A7VbGw5I7HX 8EkPHv73bqfuSfZtok5dgPCCjYSPsh1rb3fmlVFgMDrZxPIig8LMDsjYceY62and e7KbnmuY3JoTxPsEubyB4a69KjNM1iYs4NB9jxvNRYuFB+Ufe5unAZdu9VAX586w ZrRoNaamuqoC7C2GUIr9ecT/H2njwZflWw9//vZXmz/73ZBRyO/vUTIpnmvRWDyd RIF5FNmRaXQgWJudmJ3C55QtLiYo75/B5hcHcIeNIM0hq1CH++q311vP9o/s9RXa mMzmDuvC3Ss1Dw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:25:17 2025 by rpki-client