This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft File: 9kUa8REg2PqJjLYhLOqMph3Fm5I.mft (raw, json) Hash identifier: n1C1vGKM2p0cR+iKv8Kwi2uXQLLvALzM5iQ/+IynUmQ= Subject key identifier: 1C:18:4B:CC:13:E8:CA:27:43:FF:C8:8E:AD:AF:84:7F:4A:86:B5:7A Authority key identifier: F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 Certificate issuer: /CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Certificate serial: 019AF23F9134525463E21881BC8E05F1FFA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft Manifest number: 0B8B Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 9jRjdTO7fBkjcFHt1fnUnaX_T3k.roa (hash: 3WY7AgxSwDZyrJrZX0H0mFMYrwb18tzFjzAuAbCSY+Q=) 2: 9kUa8REg2PqJjLYhLOqMph3Fm5I.crl (hash: 5VRVyE0qPDYgHJAoG0dgfi30cTs5R0ly8xexfwF4V5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:91:34:52:54:63:e2:18:81:bc:8e:05:f1:ff:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6451af11120d8fa898cb6212cea8ca61dc59b92 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=1c184bcc13e8ca2743ffc88eadaf847f4a86b57a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:e0:0a:61:bf:a9:1e:df:0a:b3:3d:b4:0e: d6:38:6a:88:95:25:eb:39:cc:d9:b6:3f:86:67:01: 5e:4d:1c:b6:06:cf:8b:76:a8:be:87:ad:aa:87:15: 79:43:5d:f2:af:f0:d7:05:65:81:a0:5f:82:89:4d: 1a:61:ad:e5:29:c8:83:98:be:fb:38:0b:fe:e1:3c: 3e:b0:24:34:f1:8b:3f:36:77:be:46:be:48:78:ec: 8c:28:3b:e1:dc:38:54:bd:bd:c5:45:6f:2f:ad:c7: 4f:72:04:87:c2:a8:c3:c7:e0:29:72:e5:02:cc:d6: e7:39:99:81:ff:50:e8:ab:d5:05:54:46:f1:a9:4e: a9:60:ba:b2:b9:f4:50:07:ef:99:06:20:3c:2a:82: c1:b1:fb:49:5e:1b:a3:49:2a:66:97:f2:76:48:ed: 88:ed:68:ce:9e:b0:fa:34:b2:b1:47:9e:d1:8f:18: 39:73:3d:a1:4d:e1:69:14:bc:0e:fe:d5:2b:79:12: 43:79:9b:3b:e9:9f:54:72:28:0b:3b:61:5b:4a:82: 7a:14:5c:f9:c9:14:5e:b7:59:65:23:ba:11:38:a8: a3:d5:0b:13:57:5e:04:58:1a:1f:41:16:c0:3f:b4: db:35:82:e5:2f:7b:5b:53:cb:80:0a:e0:25:1f:c1: 57:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:18:4B:CC:13:E8:CA:27:43:FF:C8:8E:AD:AF:84:7F:4A:86:B5:7A X509v3 Authority Key Identifier: keyid:F6:45:1A:F1:11:20:D8:FA:89:8C:B6:21:2C:EA:8C:A6:1D:C5:9B:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kUa8REg2PqJjLYhLOqMph3Fm5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/3b65ab-a0e2-4684-b981-a86a7af368da/1/9kUa8REg2PqJjLYhLOqMph3Fm5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:de:af:d2:73:37:3f:9c:9d:a8:b6:aa:8b:fe:77:39:5a:54: da:15:bd:d9:93:c8:9e:07:ee:1e:52:e4:59:89:a5:07:52:65: 5b:e5:04:0a:32:0f:87:12:51:97:51:f8:20:e4:59:b3:76:68: dd:6b:23:b1:ce:7c:97:b6:2a:cf:fe:2d:d1:4e:2d:50:80:c2: 0c:11:06:4f:71:3f:8b:6f:62:8e:e8:82:92:d9:e6:88:f8:81: 78:89:87:59:f0:7c:3c:4d:9a:84:a6:48:a4:58:3f:66:94:b2: 64:a9:11:3b:54:50:b8:a4:7e:b2:7b:90:5f:1d:6a:8a:b4:9c: 30:a0:36:c1:5d:49:4d:b4:15:fd:5c:84:f4:fc:96:9b:fb:92: e1:70:54:5d:30:f7:9c:e9:24:16:df:58:ec:13:0d:47:93:1d: 94:3b:13:db:3c:17:33:cd:a1:bb:2a:0b:7d:00:72:b2:21:57: 41:d3:59:c4:49:43:28:f0:be:2f:28:df:50:69:f7:18:eb:83: 34:d1:9e:39:38:fa:2b:49:ce:df:d0:16:ca:a8:99:97:89:48: f3:b0:81:33:32:87:72:5b:df:b2:3b:a7:47:a6:50:03:6c:98: 4d:34:6e:c6:33:88:dc:38:83:2f:d6:a6:ef:c7:15:44:7f:5c: 3a:bd:46:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5E0UlRj4hiBvI4F8f+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NDUxYWYxMTEyMGQ4ZmE4OThjYjYyMTJjZWE4Y2E2MWRj NTliOTIwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EygxYzE4NGJjYzEzZThjYTI3NDNmZmM4OGVhZGFmODQ3ZjRhODZiNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKvgCmG/qR7fCrM9tA7WOGqIlSXr OczZtj+GZwFeTRy2Bs+Ldqi+h62qhxV5Q13yr/DXBWWBoF+CiU0aYa3lKciDmL77 OAv+4Tw+sCQ08Ys/Nne+Rr5IeOyMKDvh3DhUvb3FRW8vrcdPcgSHwqjDx+ApcuUC zNbnOZmB/1Doq9UFVEbxqU6pYLqyufRQB++ZBiA8KoLBsftJXhujSSpml/J2SO2I 7WjOnrD6NLKxR57Rjxg5cz2hTeFpFLwO/tUreRJDeZs76Z9UcigLO2FbSoJ6FFz5 yRRet1llI7oROKij1QsTV14EWBofQRbAP7TbNYLlL3tbU8uACuAlH8FXqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwYS8wT6MonQ//Ijq2vhH9KhrV6MB8GA1UdIwQY MBaAFPZFGvERINj6iYy2ISzqjKYdxZuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEt YTg2YTdhZjM2OGRhLzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8zYjY1YWItYTBlMi00Njg0LWI5ODEtYTg2YTdhZjM2OGRh LzEvOWtVYThSRWcyUHFKakxZaExPcU1waDNGbTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyt6v0nM3 P5ydqLaqi/53OVpU2hW92ZPIngfuHlLkWYmlB1JlW+UECjIPhxJRl1H4IORZs3Zo 3Wsjsc58l7Yqz/4t0U4tUIDCDBEGT3E/i29ijuiCktnmiPiBeImHWfB8PE2ahKZI pFg/ZpSyZKkRO1RQuKR+snuQXx1qirScMKA2wV1JTbQV/VyE9PyWm/uS4XBUXTD3 nOkkFt9Y7BMNR5MdlDsT2zwXM82huyoLfQBysiFXQdNZxElDKPC+LyjfUGn3GOuD NNGeOTj6K0nO39AWyqiZl4lI87CBMzKHclvfsjunR6ZQA2yYTTRuxjOI3DiDL9am 78cVRH9cOr1Gag== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:57 2025 by rpki-client