This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft File: 9QVXghWs7nPBf6MNApXg2N176J0.mft (raw, json) Hash identifier: GzNb/dA1A+NcftHCcVcQKwRxw1FMBYyrxrLJHF7VplA= Subject key identifier: D2:78:8A:DF:74:86:B2:AE:2D:78:14:8A:5D:E0:BF:50:6D:C6:AF:28 Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d Certificate serial: 019AF23F6F36360B5B9554E3C6DD9FBBD8BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft Manifest number: 06EA Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: 1-Lbg3ThJkSQ5UEB1CC2J6SJYq7I.roa (hash: MQY60dXinW2RjKa/YH49asbDcYbOnLmhhQbRiFehf0Q=) 2: 9EsFTJPfhrHzuggwv3Tacy86NPc.roa (hash: g+7gpPPFmcqEG/1q7hm3OgzhQxlfCVb68SP9jb1P1Q4=) 3: 9QVXghWs7nPBf6MNApXg2N176J0.crl (hash: 7shiBBZya4Qjv4iy3hTXuR3Krr4O7FsEasM1m3uu6WE=) 4: Pam-mYZhUPxumLyTa-d41AOp2eI.roa (hash: aCi8Qzgn/82AxyGXcRCZJe9cgue7YAZPk3yXhgftdGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6f:36:36:0b:5b:95:54:e3:c6:dd:9f:bb:d8:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=d2788adf7486b2ae2d78148a5de0bf506dc6af28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d0:8e:fa:e3:87:3e:da:1b:6f:19:b8:76:30: d3:d9:5e:f7:9e:56:13:60:e0:83:07:3a:5b:bf:5d: 64:82:b5:ea:70:62:0e:c3:10:c4:ba:9e:f8:9a:8c: 6a:2b:6b:45:14:33:1c:c1:3a:21:1b:a4:e8:c2:f9: 44:81:d5:42:7f:d7:85:fb:7d:01:80:b0:fd:ea:00: c8:aa:7d:91:d6:c9:e1:d5:a3:d3:69:d4:80:6b:c8: a0:fc:22:d6:98:b8:ca:24:ff:85:95:9c:37:c9:14: fe:0d:fd:91:5a:b9:5d:a1:32:21:67:d1:ec:46:ea: 7a:02:7e:15:72:aa:3a:70:ad:bd:a9:53:47:71:a5: 96:43:3b:36:e4:ac:26:d6:66:7f:51:2c:00:bb:f3: bf:29:71:d2:91:70:49:2f:ec:40:28:cb:30:7c:92: 6c:90:76:91:8b:25:7f:25:69:30:8a:f2:df:60:22: 66:3d:58:f9:bf:e7:e2:8e:68:93:37:ce:45:69:e1: 97:ad:24:26:92:ca:1f:84:52:21:d4:71:df:cc:be: 22:27:f9:e8:e6:c5:29:38:ae:a9:12:ea:84:60:c5: 3e:fa:53:fa:9d:d3:38:73:ac:76:99:86:49:9b:48: 25:93:c8:d1:f1:09:9c:d3:46:27:e2:fd:55:e6:4d: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:78:8A:DF:74:86:B2:AE:2D:78:14:8A:5D:E0:BF:50:6D:C6:AF:28 X509v3 Authority Key Identifier: keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c7:ce:2a:c3:b8:50:3a:85:0f:53:09:0c:9a:cb:4c:86:b3: df:03:3d:86:b5:3d:76:17:bf:99:c0:8d:e3:75:66:bf:ae:12: 5c:26:4d:da:94:ed:16:9e:bf:30:85:6e:00:de:8e:7e:27:bc: c4:fd:5f:d1:87:00:50:e1:84:54:ed:a6:30:89:89:12:1b:26: 1d:66:a7:14:67:8c:4e:85:37:1b:53:f2:b0:1f:7c:b6:92:c5: 12:f6:72:2d:ca:40:9d:08:bb:2d:00:d9:de:b5:13:b1:f9:c7: 43:91:d6:34:c1:ca:41:b3:31:d4:07:c2:f5:b8:93:8d:e8:4b: ed:8f:f0:c9:2e:ab:57:4b:fc:a0:71:0a:8e:e6:d2:53:61:17: 0c:3e:3d:1a:de:ca:70:04:04:da:a7:92:15:22:d2:fc:cb:bc: 1d:82:17:bd:54:99:af:8c:06:4b:c9:0c:02:7f:93:51:52:21: d6:33:e1:d7:b1:9c:53:2c:e9:1c:4f:a1:53:4b:32:1a:98:b7: 77:ea:6f:47:7f:75:78:cc:cb:98:d7:13:ff:a7:22:71:eb:ab: 96:2b:7d:c7:75:c3:f9:ba:c7:87:c3:04:a1:9b:e7:3c:f0:42: 90:1f:c2:b2:c4:ea:7d:4b:2e:3e:36:58:e8:79:93:4b:20:c5: ff:fd:37:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP282NgtblVTjxt2fu9i8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MDU1NzgyMTVhY2VlNzNjMTdmYTMwZDAyOTVlMGQ4ZGQ3 YmU4OWQwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EyhkMjc4OGFkZjc0ODZiMmFlMmQ3ODE0OGE1ZGUwYmY1MDZkYzZhZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dCO+uOHPtobbxm4djDT2V73nlYT YOCDBzpbv11kgrXqcGIOwxDEup74moxqK2tFFDMcwTohG6TowvlEgdVCf9eF+30B gLD96gDIqn2R1snh1aPTadSAa8ig/CLWmLjKJP+FlZw3yRT+Df2RWrldoTIhZ9Hs Rup6An4Vcqo6cK29qVNHcaWWQzs25Kwm1mZ/USwAu/O/KXHSkXBJL+xAKMswfJJs kHaRiyV/JWkwivLfYCJmPVj5v+fijmiTN85FaeGXrSQmksofhFIh1HHfzL4iJ/no 5sUpOK6pEuqEYMU++lP6ndM4c6x2mYZJm0glk8jR8Qmc00Yn4v1V5k3DEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ4it90hrKuLXgUil3gv1Btxq8oMB8GA1UdIwQY MBaAFPUFV4IVrO5zwX+jDQKV4Njde+idMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQt ZjBjOWQ2NDE3ZWU3LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy80OWU5NzQtZDcyNC00Y2FmLTlhMDQtZjBjOWQ2NDE3ZWU3 LzEvOVFWWGdoV3M3blBCZjZNTkFwWGcyTjE3NkowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssfOKsO4 UDqFD1MJDJrLTIaz3wM9hrU9dhe/mcCN43Vmv64SXCZN2pTtFp6/MIVuAN6Ofie8 xP1f0YcAUOGEVO2mMImJEhsmHWanFGeMToU3G1PysB98tpLFEvZyLcpAnQi7LQDZ 3rUTsfnHQ5HWNMHKQbMx1AfC9biTjehL7Y/wyS6rV0v8oHEKjubSU2EXDD49Gt7K cAQE2qeSFSLS/Mu8HYIXvVSZr4wGS8kMAn+TUVIh1jPh17GcUyzpHE+hU0syGpi3 d+pvR391eMzLmNcT/6ciceurlit9x3XD+brHh8MEoZvnPPBCkB/CssTqfUsuPjZY 6HmTSyDF//03hQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:55 2025 by rpki-client