This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft File: n9mIbi2ycJ2yI2TjNNOeLuSI024.mft (raw, json) Hash identifier: Bx+ZWa0JKC6bJipMIdSKIt5qijekAx2asGoLSSW49hQ= Subject key identifier: 1C:D2:D7:E8:E6:06:F1:FF:B9:DB:30:64:DB:77:5D:C1:B1:A1:8A:00 Authority key identifier: 9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E Certificate issuer: /CN=9fd9886e2db2709db22364e334d39e2ee488d36e Certificate serial: 019B3A9006AE626A350B94C68AAC0A6D3B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft Manifest number: 0545 Signing time: Sat 20 Dec 2025 07:01:15 +0000 Manifest this update: Sat 20 Dec 2025 07:01:15 +0000 Manifest next update: Sun 21 Dec 2025 07:01:15 +0000 Files and hashes: 1: Rjc45YVuDrAMQdY8qgjKUXqz9To.roa (hash: VkM0hIqEPGBmrXo8E00kzKR2aWKMeDBdfCqKvjZR58E=) 2: n9mIbi2ycJ2yI2TjNNOeLuSI024.crl (hash: 5A6cHWj5Wa/4C4GGKiasWz0IledACLfMsWUH0k82xUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:90:06:ae:62:6a:35:0b:94:c6:8a:ac:0a:6d:3b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fd9886e2db2709db22364e334d39e2ee488d36e Validity Not Before: Dec 20 07:01:15 2025 GMT Not After : Dec 21 07:01:15 2025 GMT Subject: CN=1cd2d7e8e606f1ffb9db3064db775dc1b1a18a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:21:e1:1e:67:cb:7b:b5:78:01:0b:0c:db:31: 96:f2:ea:aa:a2:84:fa:22:ae:ba:cf:36:89:bd:c8: 8c:13:15:8c:3d:12:15:05:60:13:fc:3a:52:ba:e0: 96:a7:a9:e1:8d:e3:7c:f3:5a:aa:9d:78:75:2c:7e: f3:89:cc:d4:de:e2:e3:3c:5f:6b:f2:78:5d:d9:7c: 15:62:07:f8:eb:d4:3d:0c:cd:07:5a:5d:b2:54:7c: 18:29:47:bc:b0:b6:4a:c1:57:83:65:4c:10:c6:05: 58:1b:69:b5:f9:42:1e:fd:83:ea:ff:ec:32:d4:6e: 5f:e3:d4:c6:10:88:bd:70:03:8c:63:a3:8b:07:83: 8c:9c:a4:28:3c:7a:f3:9c:74:cd:be:be:bd:b7:93: 12:6e:34:8f:06:4a:83:61:5f:10:14:5b:5b:91:f9: d9:77:b0:99:97:45:b9:0c:01:33:df:0a:5a:10:39: f7:91:87:15:31:ad:9b:2f:d6:8e:fa:b5:c4:74:a3: a8:07:37:7d:8a:6a:82:c2:a6:03:1b:10:a3:8d:14: 86:e7:7f:57:ff:59:a5:6f:81:7e:3c:43:66:a6:d1: 4c:11:72:60:7d:fd:9e:22:22:ce:54:09:6c:ce:36: c4:81:19:c9:e8:b1:f2:80:15:ef:8a:53:ab:5d:29: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:D2:D7:E8:E6:06:F1:FF:B9:DB:30:64:DB:77:5D:C1:B1:A1:8A:00 X509v3 Authority Key Identifier: keyid:9F:D9:88:6E:2D:B2:70:9D:B2:23:64:E3:34:D3:9E:2E:E4:88:D3:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9mIbi2ycJ2yI2TjNNOeLuSI024.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f6872-581b-4d47-bc6a-eba0cd57c020/1/n9mIbi2ycJ2yI2TjNNOeLuSI024.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:49:15:e5:99:fe:51:62:b6:de:03:3c:0a:b7:c6:e7:aa:a9: cf:c6:0a:ce:7f:2a:4c:c1:80:fb:d5:79:98:cc:d6:10:2c:07: 71:cb:6b:21:5f:a2:03:b6:5d:17:2f:74:73:f4:a1:63:3d:70: 7b:1a:66:da:29:1e:e6:96:63:48:4f:14:c8:07:24:66:bc:da: 36:7d:42:11:ae:2b:9d:ac:43:88:fb:f8:3e:25:fb:cd:66:95: 59:f0:eb:2f:a0:de:38:6c:ff:75:a0:40:d4:96:14:55:70:80: 3b:9b:de:3b:50:79:82:9d:7e:a0:4e:59:d6:9d:ee:70:4d:6c: 15:3c:14:d5:92:8b:89:76:1f:08:91:85:0e:f9:ce:d6:9c:16: 9d:e1:8e:ad:fa:08:58:bd:09:f3:84:15:a3:2d:97:97:af:31: da:8a:a6:2f:87:c2:9e:69:37:1e:18:ed:54:98:e8:a6:9a:16: 0f:5b:1b:0f:e4:42:26:6a:ec:30:6c:57:c7:ce:68:c4:3f:e5: cf:d7:1c:51:de:b6:0b:d3:ca:7c:12:40:e6:c4:e1:98:38:da: ee:08:20:2d:26:98:05:81:09:95:2c:1e:1c:34:5b:d8:db:85: ba:f2:ed:e8:20:2f:e3:b6:00:f5:77:93:ad:c8:d5:79:36:63: 3c:49:70:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6kAauYmo1C5TGiqwKbTuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZDk4ODZlMmRiMjcwOWRiMjIzNjRlMzM0ZDM5ZTJlZTQ4 OGQzNmUwHhcNMjUxMjIwMDcwMTE1WhcNMjUxMjIxMDcwMTE1WjAzMTEwLwYDVQQD EygxY2QyZDdlOGU2MDZmMWZmYjlkYjMwNjRkYjc3NWRjMWIxYTE4YTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SHhHmfLe7V4AQsM2zGW8uqqooT6 Iq66zzaJvciMExWMPRIVBWAT/DpSuuCWp6nhjeN881qqnXh1LH7ziczU3uLjPF9r 8nhd2XwVYgf469Q9DM0HWl2yVHwYKUe8sLZKwVeDZUwQxgVYG2m1+UIe/YPq/+wy 1G5f49TGEIi9cAOMY6OLB4OMnKQoPHrznHTNvr69t5MSbjSPBkqDYV8QFFtbkfnZ d7CZl0W5DAEz3wpaEDn3kYcVMa2bL9aO+rXEdKOoBzd9imqCwqYDGxCjjRSG539X /1mlb4F+PENmptFMEXJgff2eIiLOVAlszjbEgRnJ6LHygBXvilOrXSnvswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBzS1+jmBvH/udswZNt3XcGxoYoAMB8GA1UdIwQY MBaAFJ/ZiG4tsnCdsiNk4zTTni7kiNNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEt ZWJhMGNkNTdjMDIwLzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS85ZjY4NzItNTgxYi00ZDQ3LWJjNmEtZWJhMGNkNTdjMDIw LzEvbjltSWJpMnljSjJ5STJUak5OT2VMdVNJMDI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUkV5Zn+ UWK23gM8CrfG56qpz8YKzn8qTMGA+9V5mMzWECwHcctrIV+iA7ZdFy90c/ShYz1w expm2ike5pZjSE8UyAckZrzaNn1CEa4rnaxDiPv4PiX7zWaVWfDrL6DeOGz/daBA 1JYUVXCAO5veO1B5gp1+oE5Z1p3ucE1sFTwU1ZKLiXYfCJGFDvnO1pwWneGOrfoI WL0J84QVoy2Xl68x2oqmL4fCnmk3HhjtVJjoppoWD1sbD+RCJmrsMGxXx85oxD/l z9ccUd62C9PKfBJA5sThmDja7gggLSaYBYEJlSweHDRb2NuFuvLt6CAv47YA9XeT rcjVeTZjPElwAA== -----END CERTIFICATE-----Generated at Sat Dec 20 09:55:45 2025 by rpki-client