This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft File: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft (raw, json) Hash identifier: DAzEgzYvFQFunkmDLhJBYWG7mKXUty32p6Sp4/U2xJg= Subject key identifier: 21:64:0A:78:F2:0C:B8:8F:DB:2F:E4:24:CF:E4:FD:0E:FF:77:80:DB Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Certificate serial: 019B4701AF8C51F6D7BE10DBEDD0664B6F97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft Manifest number: 03E1 Signing time: Mon 22 Dec 2025 17:00:51 +0000 Manifest this update: Mon 22 Dec 2025 17:00:51 +0000 Manifest next update: Tue 23 Dec 2025 17:00:51 +0000 Files and hashes: 1: 9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl (hash: ycWJsu2AfADoDw7BBSzsxdXEUg14Ekx/LCmLDl+W0UU=) 2: QYL-bJP18_uE1vIYufetQA8LNBw.roa (hash: 5iykeFNsIB7WkpEwkyxi6tSK6cOuYKMgbt5OfyYFMpc=) 3: mfDwEiGRmiWMmFDQIE-xmSECzg8.roa (hash: iS/PokmAhVq2sVGbLhXCo+Ur9JIXXT1eTOi1veSDLr4=) 4: mfVSR44fIY6bkhiOSueC1ITxv6w.roa (hash: xZqOi81DoSglCV29EBbiUSqFQDxJr7C1mJvYXhv2Pug=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:af:8c:51:f6:d7:be:10:db:ed:d0:66:4b:6f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a Validity Not Before: Dec 22 17:00:51 2025 GMT Not After : Dec 23 17:00:51 2025 GMT Subject: CN=21640a78f20cb88fdb2fe424cfe4fd0eff7780db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:10:00:57:a5:9e:cc:6e:72:94:99:19:41:b3: 33:d0:3e:6c:d7:0e:39:ed:4e:85:ec:4d:d3:f5:7b: a2:c2:9b:70:8f:c0:fc:1d:3f:16:10:e0:ee:fd:da: 09:5e:18:e2:bf:9c:24:53:08:8c:4a:2e:39:76:01: d6:9f:80:1b:49:cc:16:cf:a7:39:4f:4c:7c:b9:4e: 9e:fb:f6:1f:ea:6c:26:45:f5:50:0b:e6:be:89:22: 71:84:12:17:98:c7:77:cb:a5:dd:5f:10:ce:ab:40: e3:51:f5:82:fb:66:fe:f8:39:96:70:9c:31:b7:0b: 28:c1:88:fa:39:24:99:60:f6:de:a0:94:0d:40:a9: db:a7:07:89:be:d0:55:a4:1d:bd:3f:94:6d:10:03: 59:01:21:6e:93:8a:a0:e4:f8:aa:a1:9d:75:a9:15: a5:57:12:7b:04:9f:74:96:67:2c:bc:bd:48:ab:e9: 17:9b:1d:fe:8a:f7:07:1d:92:e8:02:77:62:2e:b9: 04:b7:ba:3d:5d:ec:cb:06:f5:5d:8b:0b:21:5a:32: 44:8d:bb:5a:65:77:af:50:9a:22:4f:b4:f0:59:9f: 23:e9:e2:cb:35:50:eb:da:3d:ca:ff:98:fa:3d:98: f5:bb:38:d3:2c:31:93:db:07:d8:67:4f:7d:71:14: a4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:64:0A:78:F2:0C:B8:8F:DB:2F:E4:24:CF:E4:FD:0E:FF:77:80:DB X509v3 Authority Key Identifier: keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e7:8c:a0:e8:10:ff:4d:f5:32:38:7b:ed:a2:16:05:27:e8:92: 54:b1:c2:c2:9d:18:0c:cf:1b:43:0a:9f:18:d4:12:97:bf:fb: 3f:26:e4:e4:ae:48:51:f7:85:1f:32:ba:f9:47:35:41:98:0c: e0:ed:d2:24:88:3c:f3:0e:b9:54:49:6a:22:3d:bd:34:49:47: 82:b6:d4:47:a6:0c:71:2c:e5:6a:47:ce:df:8c:aa:0d:33:2e: d0:04:f1:b3:e3:a4:b3:b2:14:64:8f:95:da:65:a1:9d:bd:8c: ab:f6:43:a9:05:6f:59:4d:7c:7a:49:64:cf:96:ad:df:45:3f: aa:95:c9:01:52:15:ea:f4:76:91:a3:87:7f:69:10:6a:f4:65: 69:e9:f2:ad:38:81:80:a1:50:15:94:c3:5a:6d:97:ac:d7:49: a8:fd:b1:ce:3b:91:c3:da:3b:37:ca:84:b1:b7:e0:b5:b4:bd: a2:cc:a9:28:db:96:7a:25:d2:be:22:79:2d:12:46:a9:4a:b5: 0f:6a:ce:c9:cc:b2:0c:44:71:37:37:6d:5a:ab:b2:2b:3c:74: 87:42:81:03:88:03:94:03:fc:3d:70:06:4b:5d:65:06:2e:46: 8c:cf:8e:a5:5d:7c:e0:90:88:95:44:e8:56:8c:ff:62:2d:1c: 29:8c:a2:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAa+MUfbXvhDb7dBmS2+XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OGUwYzNiOTMzM2NiNmZkNDEzOWU0NTVhNWFiYmFmZDU2 OTUzMmEwHhcNMjUxMjIyMTcwMDUxWhcNMjUxMjIzMTcwMDUxWjAzMTEwLwYDVQQD EygyMTY0MGE3OGYyMGNiODhmZGIyZmU0MjRjZmU0ZmQwZWZmNzc4MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhAAV6WezG5ylJkZQbMz0D5s1w45 7U6F7E3T9Xuiwptwj8D8HT8WEODu/doJXhjiv5wkUwiMSi45dgHWn4AbScwWz6c5 T0x8uU6e+/Yf6mwmRfVQC+a+iSJxhBIXmMd3y6XdXxDOq0DjUfWC+2b++DmWcJwx twsowYj6OSSZYPbeoJQNQKnbpweJvtBVpB29P5RtEANZASFuk4qg5PiqoZ11qRWl VxJ7BJ90lmcsvL1Iq+kXmx3+ivcHHZLoAndiLrkEt7o9XezLBvVdiwshWjJEjbta ZXevUJoiT7TwWZ8j6eLLNVDr2j3K/5j6PZj1uzjTLDGT2wfYZ099cRSk5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFkCnjyDLiP2y/kJM/k/Q7/d4DbMB8GA1UdIwQY MBaAFPWODDuTM8tv1BOeRVpau6/VaVMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQt MmJjMWFlM2RiZGJlLzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9iMWNhNTEtNzVkZC00MWM5LTk0ODQtMmJjMWFlM2RiZGJl LzEvOVk0TU81TXp5Ml9VRTU1RldscTdyOVZwVXlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA54yg6BD/ TfUyOHvtohYFJ+iSVLHCwp0YDM8bQwqfGNQSl7/7Pybk5K5IUfeFHzK6+Uc1QZgM 4O3SJIg88w65VElqIj29NElHgrbUR6YMcSzlakfO34yqDTMu0ATxs+Oks7IUZI+V 2mWhnb2Mq/ZDqQVvWU18eklkz5at30U/qpXJAVIV6vR2kaOHf2kQavRlaenyrTiB gKFQFZTDWm2XrNdJqP2xzjuRw9o7N8qEsbfgtbS9osypKNuWeiXSviJ5LRJGqUq1 D2rOycyyDERxNzdtWquyKzx0h0KBA4gDlAP8PXAGS11lBi5GjM+OpV184JCIlUTo Voz/Yi0cKYyizw== -----END CERTIFICATE-----Generated at Tue Dec 23 02:52:38 2025 by rpki-client