This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft (raw, json) Hash identifier: a+eb2q8wuMlvc4ZWGvae+93ca2JXZUqP5dppMCpTbtw= Subject key identifier: 1A:7F:1C:0D:1D:88:E7:D4:C6:E4:D7:3F:D3:A7:BD:EE:94:5A:28:DB Authority key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 Certificate issuer: /CN=f541d46893aaa164fe2673990d07aa6c071003c0 Certificate serial: 019AF653AEA7545599C683EFF125EB3B4E03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft Manifest number: 150B Signing time: Sun 07 Dec 2025 01:01:10 +0000 Manifest this update: Sun 07 Dec 2025 01:01:10 +0000 Manifest next update: Mon 08 Dec 2025 01:01:10 +0000 Files and hashes: 1: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl (hash: 7Dk6cpmTlRdZ6CkeCnwLd5eUeHgDqj9Gv2dD+Far99E=) 2: JYVK5YIo9oFduSfdge32BhR1llk.roa (hash: MLgxgkj7xVD4j08JzP+4k7sw1diRLF6XHz+tW1zn9ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:ae:a7:54:55:99:c6:83:ef:f1:25:eb:3b:4e:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f541d46893aaa164fe2673990d07aa6c071003c0 Validity Not Before: Dec 7 01:01:10 2025 GMT Not After : Dec 8 01:01:10 2025 GMT Subject: CN=1a7f1c0d1d88e7d4c6e4d73fd3a7bdee945a28db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ba:78:9b:89:78:90:ae:19:f3:e4:9b:d1:d0: 51:52:65:e1:b9:a9:d4:21:40:7e:a5:3a:a8:e1:10: d0:70:d0:32:7c:9c:09:1d:be:e0:23:61:e7:3a:e8: 33:8e:09:91:6e:bd:b9:26:b3:45:29:34:e5:a4:df: 39:b0:3f:07:47:9a:b9:35:eb:82:97:15:2e:ec:2b: c2:5d:5d:a2:99:6f:ca:2e:93:6d:84:32:b6:ad:a3: 27:37:6f:cb:4e:81:bf:d7:be:19:ea:60:1d:fc:0b: ba:0c:38:f5:29:88:16:2f:e5:60:4b:31:11:07:34: 3d:6f:ab:a8:b1:02:ed:bf:3f:90:5c:72:9e:a0:7c: 93:98:ed:d2:3d:4c:99:7b:02:48:f8:0a:0c:9b:f0: 6e:5f:6b:d4:82:66:48:a3:a5:93:2a:ad:ca:c7:da: b1:71:a7:4f:cd:ac:a7:c0:18:67:c0:19:f0:dd:c5: 8e:76:8b:26:8d:3b:c9:7a:ce:c7:06:5a:93:9a:d2: ff:2c:67:e2:ba:75:cc:aa:9f:a3:12:02:83:0b:a9: 6e:82:dd:d3:55:4d:43:9f:68:f4:64:1c:2d:af:9d: 07:cb:e1:92:a9:14:ce:0e:8f:4f:d4:0d:31:4c:ed: 51:36:1d:31:fe:4b:5c:aa:bc:e2:9a:22:36:4a:0f: 1a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:7F:1C:0D:1D:88:E7:D4:C6:E4:D7:3F:D3:A7:BD:EE:94:5A:28:DB X509v3 Authority Key Identifier: keyid:F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:4d:a7:98:27:fc:34:a2:ea:09:c5:5c:59:b3:9b:ae:26:6e: 73:be:ca:03:9c:e0:22:30:88:26:1a:a8:a6:95:95:89:7b:67: 0e:89:31:89:4d:30:76:99:26:00:17:7d:67:f9:b2:46:c6:a9: cc:83:68:3d:41:27:a6:51:2f:26:e4:59:c7:ff:1f:e8:50:cf: 3e:99:a1:4c:24:ed:b8:a3:4f:ec:7a:91:fd:5e:26:3e:b7:33: 82:ae:d4:a6:69:40:37:88:ca:a5:83:68:88:f7:e0:03:50:e9: 09:31:eb:c4:f3:3f:64:2c:27:32:0c:ce:b5:b5:1c:c4:05:84: 26:83:83:0f:4e:f6:cd:5f:dc:35:a7:72:de:6f:63:b6:e0:94: 1c:80:0b:43:46:ee:0a:59:37:5d:69:81:8f:19:5d:66:93:dd: cd:db:df:b4:0f:e4:88:42:76:71:23:ea:ce:74:3a:53:d4:35: 3d:76:4f:e7:69:98:a4:64:26:94:ba:d4:6b:5c:84:4c:d8:42: e4:b7:e6:a2:29:00:b3:8a:2c:b4:83:83:6a:13:10:b4:46:2e: c6:28:39:17:27:f2:08:fc:79:bb:01:e4:f2:88:cf:9f:e1:4e: 26:24:8e:69:93:6c:72:4c:93:be:2c:79:5d:2c:45:09:cc:c5: af:42:24:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U66nVFWZxoPv8SXrO04DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDFkNDY4OTNhYWExNjRmZTI2NzM5OTBkMDdhYTZjMDcx MDAzYzAwHhcNMjUxMjA3MDEwMTEwWhcNMjUxMjA4MDEwMTEwWjAzMTEwLwYDVQQD EygxYTdmMWMwZDFkODhlN2Q0YzZlNGQ3M2ZkM2E3YmRlZTk0NWEyOGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7p4m4l4kK4Z8+Sb0dBRUmXhuanU IUB+pTqo4RDQcNAyfJwJHb7gI2HnOugzjgmRbr25JrNFKTTlpN85sD8HR5q5NeuC lxUu7CvCXV2imW/KLpNthDK2raMnN2/LToG/174Z6mAd/Au6DDj1KYgWL+VgSzER BzQ9b6uosQLtvz+QXHKeoHyTmO3SPUyZewJI+AoMm/BuX2vUgmZIo6WTKq3Kx9qx cadPzaynwBhnwBnw3cWOdosmjTvJes7HBlqTmtL/LGfiunXMqp+jEgKDC6lugt3T VU1Dn2j0ZBwtr50Hy+GSqRTODo9P1A0xTO1RNh0x/ktcqrzimiI2Sg8a0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBp/HA0diOfUxuTXP9Onve6UWijbMB8GA1UdIwQY MBaAFPVB1GiTqqFk/iZzmQ0HqmwHEAPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMt Mzk4YzA0NTE4OWViLzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yZTk1ZTctNTY0NC00NmYyLThmYTMtMzk4YzA0NTE4OWVi LzEvOVVIVWFKT3FvV1QtSm5PWkRRZXFiQWNRQThBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEU2nmCf8 NKLqCcVcWbObriZuc77KA5zgIjCIJhqoppWViXtnDokxiU0wdpkmABd9Z/myRsap zINoPUEnplEvJuRZx/8f6FDPPpmhTCTtuKNP7HqR/V4mPrczgq7UpmlAN4jKpYNo iPfgA1DpCTHrxPM/ZCwnMgzOtbUcxAWEJoODD072zV/cNady3m9jtuCUHIALQ0bu Clk3XWmBjxldZpPdzdvftA/kiEJ2cSPqznQ6U9Q1PXZP52mYpGQmlLrUa1yETNhC 5LfmoikAs4ostIODahMQtEYuxig5FyfyCPx5uwHk8ojPn+FOJiSOaZNsckyTvix5 XSxFCczFr0Ikuw== -----END CERTIFICATE-----Generated at Sun Dec 7 08:45:17 2025 by rpki-client