This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft File: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft (raw, json) Hash identifier: vqRLpZ24WnE+MPxXF+rpi7OxLFIb/MmWY15KbgOtDZY= Subject key identifier: 99:EF:F0:D0:C1:54:ED:C2:2E:0A:CF:FA:56:B5:D8:A4:59:D6:91:87 Authority key identifier: F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93 Certificate issuer: /CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593 Certificate serial: 019B3C7E6D106FB58EAECC36E7382460E4AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft Manifest number: 0BD2 Signing time: Sat 20 Dec 2025 16:01:16 +0000 Manifest this update: Sat 20 Dec 2025 16:01:16 +0000 Manifest next update: Sun 21 Dec 2025 16:01:16 +0000 Files and hashes: 1: 9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl (hash: MrUvaBHhzNpjIyXN4sKrpfhFYtwJC0buIHBEwLHWFh4=) 2: Ecb-mPJB0EgEtmCxBO-R8Q4l8Pc.roa (hash: gJwQTQJlZO5UonEbd+MqbZuAtcvQedjepcRUTfg3vec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:6d:10:6f:b5:8e:ae:cc:36:e7:38:24:60:e4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fac2c21b2dbc812dd25d1cb79c3fba5419e593 Validity Not Before: Dec 20 16:01:16 2025 GMT Not After : Dec 21 16:01:16 2025 GMT Subject: CN=99eff0d0c154edc22e0acffa56b5d8a459d69187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:25:dd:62:93:57:02:72:fa:14:a0:38:c1: 13:66:3e:59:de:b8:e4:74:a4:ca:3b:14:e8:48:71: 8d:88:62:9c:e0:20:52:8d:a4:00:56:d5:df:fd:ec: a2:f1:e4:0f:15:0b:c8:ea:76:ad:30:39:da:e1:e0: 70:af:d1:93:1e:50:d7:f6:19:1c:17:60:ef:08:b7: 04:50:01:c1:85:0f:2d:7e:a3:c1:38:6c:18:de:d7: bd:25:54:da:d8:0d:9f:ee:38:a5:d1:7b:48:21:f4: e1:9a:00:8e:d3:78:08:ba:c4:b4:12:d4:91:34:a2: 47:b3:ef:76:85:27:4c:f2:32:cb:4f:69:6f:18:81: f6:3d:9a:20:2f:31:43:c8:7e:fe:6c:cf:5d:7e:40: 5f:f9:3e:17:9e:4a:31:3e:19:b1:70:76:e9:fa:ca: 4f:86:24:0e:bf:a2:f2:5e:74:3c:4c:16:78:88:c8: c5:47:b2:25:27:ac:af:47:17:a8:44:5b:1b:8f:6c: c1:42:fc:4c:f6:27:48:8d:cc:3a:29:f0:91:f5:58: c0:a0:57:06:55:01:73:ff:6c:bb:95:94:fd:c0:5b: 47:83:34:4c:ea:5f:8c:ad:a3:79:d9:c3:a1:dd:70: 22:05:9a:fd:82:7c:08:7b:7c:2b:7a:de:d7:4d:ca: c5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:EF:F0:D0:C1:54:ED:C2:2E:0A:CF:FA:56:B5:D8:A4:59:D6:91:87 X509v3 Authority Key Identifier: keyid:F7:FA:C2:C2:1B:2D:BC:81:2D:D2:5D:1C:B7:9C:3F:BA:54:19:E5:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6af6b2-578c-4a25-a2cc-ffad4fb0a713/1/9_rCwhstvIEt0l0ct5w_ulQZ5ZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a1:5a:ae:48:ae:2a:c2:07:1a:4e:cd:02:79:ab:1b:81:4a: 59:d4:1a:6b:d1:2a:9d:20:24:27:83:74:d9:8e:f3:ff:84:07: 4f:92:4d:1c:93:f2:94:8b:e5:ff:15:62:92:4b:35:10:77:e9: 54:14:7a:57:16:ee:7b:08:5d:1e:b8:a7:f4:1a:6a:3d:7b:92: 0e:b9:16:c3:5b:e8:d1:6c:55:31:a0:9b:31:48:ce:24:f2:cc: ad:4e:d9:be:61:3b:e0:18:a1:cf:bc:e8:ea:f1:a1:cd:ea:e4: 53:09:17:ef:44:0b:18:84:f4:1a:dd:13:aa:2b:6d:ef:bb:7a: bd:0e:74:87:2e:2a:50:26:23:f7:a9:23:90:a9:1e:76:42:98: f4:10:a6:f6:e3:9e:4f:5f:8c:0d:42:c5:c4:70:e6:f9:7c:ae: ce:61:b2:29:6f:38:3a:c2:f9:45:3f:00:f2:ad:d1:a6:60:76: 43:bb:b9:28:53:10:c0:43:d8:fc:68:88:6b:64:e5:29:9d:e7: 31:a9:12:f4:6f:29:55:92:3c:2f:94:96:a2:7f:c0:05:75:72: ef:86:b7:2d:99:6d:16:bf:00:da:d9:a5:b2:61:70:eb:38:48: 15:78:b3:a4:19:b4:1e:0c:83:44:af:1a:a5:9b:1a:69:f3:1e: be:9d:69:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fm0Qb7WOrsw25zgkYOSuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmFjMmMyMWIyZGJjODEyZGQyNWQxY2I3OWMzZmJhNTQx OWU1OTMwHhcNMjUxMjIwMTYwMTE2WhcNMjUxMjIxMTYwMTE2WjAzMTEwLwYDVQQD Eyg5OWVmZjBkMGMxNTRlZGMyMmUwYWNmZmE1NmI1ZDhhNDU5ZDY5MTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Hol3WKTVwJy+hSgOMETZj5Z3rjk dKTKOxToSHGNiGKc4CBSjaQAVtXf/eyi8eQPFQvI6natMDna4eBwr9GTHlDX9hkc F2DvCLcEUAHBhQ8tfqPBOGwY3te9JVTa2A2f7jil0XtIIfThmgCO03gIusS0EtSR NKJHs+92hSdM8jLLT2lvGIH2PZogLzFDyH7+bM9dfkBf+T4XnkoxPhmxcHbp+spP hiQOv6LyXnQ8TBZ4iMjFR7IlJ6yvRxeoRFsbj2zBQvxM9idIjcw6KfCR9VjAoFcG VQFz/2y7lZT9wFtHgzRM6l+MraN52cOh3XAiBZr9gnwIe3wret7XTcrFEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJnv8NDBVO3CLgrP+la12KRZ1pGHMB8GA1UdIwQY MBaAFPf6wsIbLbyBLdJdHLecP7pUGeWTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2Mt ZmZhZDRmYjBhNzEzLzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS82YWY2YjItNTc4Yy00YTI1LWEyY2MtZmZhZDRmYjBhNzEz LzEvOV9yQ3doc3R2SUV0MGwwY3Q1d191bFFaNVpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Farkiu KsIHGk7NAnmrG4FKWdQaa9EqnSAkJ4N02Y7z/4QHT5JNHJPylIvl/xVikks1EHfp VBR6VxbuewhdHrin9BpqPXuSDrkWw1vo0WxVMaCbMUjOJPLMrU7ZvmE74Bihz7zo 6vGhzerkUwkX70QLGIT0Gt0Tqitt77t6vQ50hy4qUCYj96kjkKkedkKY9BCm9uOe T1+MDULFxHDm+XyuzmGyKW84OsL5RT8A8q3RpmB2Q7u5KFMQwEPY/GiIa2TlKZ3n MakS9G8pVZI8L5SWon/ABXVy74a3LZltFr8A2tmlsmFw6zhIFXizpBm0HgyDRK8a pZsaafMevp1piw== -----END CERTIFICATE-----Generated at Sun Dec 21 00:54:48 2025 by rpki-client