This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft File: 9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json) Hash identifier: v3TP85f8IHw5vfgH3Ks2BK3IerywuuB6SZzLjuJhCbQ= Subject key identifier: C3:D5:D7:51:2A:C9:1A:19:47:68:66:3E:F3:B8:BA:21:B6:FD:9E:4F Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Certificate serial: 019AF31B2E5184D10A25CDA0CD7567CC819B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft Manifest number: 1556 Signing time: Sat 06 Dec 2025 10:00:36 +0000 Manifest this update: Sat 06 Dec 2025 10:00:36 +0000 Manifest next update: Sun 07 Dec 2025 10:00:36 +0000 Files and hashes: 1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: aAD1Obk5PH8LIbNHf9MeAuvecy93sVf1A/mT3rzqkIM=) 2: BiMv8HqHvhESPjdfNiZspDWMcck.roa (hash: VDtYCMJvov6A+4AQvfrZcV5PKPedCXfg7qI6T/gVIIY=) 3: Ss5v8qqCfPgnwpyM50tDxRLgrEE.roa (hash: hD0+G5MXyDM1luyb7ODeIqLQR1bD/LfiGebJK14aPaI=) 4: id6tq9B8Miy7wJM6L5HxddzH87k.roa (hash: oCe30Ut+jcQoEpHEArIn6mGQ5oeRKOfvgjQV4Jelj2s=) 5: ySaeFcHOtz6rH7T-LHaZk4KLgY4.roa (hash: kRBm8C5K+JyK4jIZs00HDTzQAvxAZ6ZeitYKBzGUqMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2e:51:84:d1:0a:25:cd:a0:cd:75:67:cc:81:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a Validity Not Before: Dec 6 10:00:36 2025 GMT Not After : Dec 7 10:00:36 2025 GMT Subject: CN=c3d5d7512ac91a194768663ef3b8ba21b6fd9e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9c:0e:4d:bd:5b:e8:75:c4:1f:de:eb:a6:c7: e5:b8:94:f4:cc:6c:bc:82:f9:e2:8f:f5:24:49:61: a4:a4:4b:0b:77:f1:e4:e2:b9:fa:e7:a6:15:b7:32: 46:50:eb:84:5c:1f:d8:8f:b5:fa:fe:6f:62:b2:48: c9:07:d2:12:67:38:99:61:b4:d6:10:63:66:78:e9: d5:44:55:ad:78:35:02:83:4e:85:4b:58:75:29:53: 76:b5:38:4e:d7:de:9b:37:70:81:98:23:e9:a4:e9: c5:b9:7c:a0:b5:d8:ed:4c:ff:71:cc:f9:60:f8:bb: 2e:33:f7:7c:05:2c:9d:95:84:01:cc:91:d1:75:73: c4:be:4c:d4:7a:d8:8c:39:7e:2d:cc:e7:d9:f5:92: ce:fc:14:a1:bb:34:02:e4:45:fb:6d:41:d1:a2:7a: 1c:60:b2:81:41:e6:3e:a5:6d:8a:c2:ac:fd:48:b3: eb:5d:76:c2:46:88:f9:ee:4f:d9:c2:0d:80:f0:ba: b3:d4:42:55:ac:53:a4:b0:82:9d:57:e7:1d:0a:b9: 83:09:ad:37:2a:45:12:f9:75:ad:da:a4:7d:60:3e: 25:a8:c7:b7:0e:2a:22:e2:3f:d5:47:5f:a0:dd:4f: 55:65:95:fb:3e:c6:87:0e:f3:98:78:5a:ad:cf:df: 91:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:D5:D7:51:2A:C9:1A:19:47:68:66:3E:F3:B8:BA:21:B6:FD:9E:4F X509v3 Authority Key Identifier: keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:f9:84:e5:95:72:7f:2c:40:5b:1d:6a:85:45:93:65:9a: 0f:b0:5a:f2:3f:3d:07:c5:04:4d:04:8f:ce:ed:14:d0:bb:8d: ef:41:2b:a8:2e:60:a6:0e:fb:80:17:82:5a:66:49:a6:ee:11: f0:52:ee:52:e1:a5:e7:8b:56:1c:55:b5:43:e3:2e:9a:d7:8a: 99:1a:17:52:d3:0a:2a:85:c1:0f:e6:7a:eb:f0:cc:51:e3:a8: 3b:b8:96:78:82:b9:e2:39:be:e8:1f:4f:fe:84:b0:3d:28:5c: 57:ad:1c:05:f7:55:62:a7:de:f8:e0:95:2c:fd:5c:49:d2:4a: f8:84:31:5b:e2:ab:05:1e:9f:0a:cf:de:05:ba:72:f0:d1:a0: 69:0c:70:59:6f:f0:1a:2a:9f:29:d6:6a:30:cc:5e:ca:41:b1: dd:73:a7:39:76:33:99:39:3d:5c:f1:7a:dc:5e:73:bb:76:de: 25:9f:92:2f:68:e4:05:89:47:d4:f2:24:21:e1:dc:44:1e:90: b3:d0:1a:b6:a0:a5:91:fb:45:19:a4:c7:17:c8:76:bc:08:f3: 8a:74:32:a7:43:ff:1d:92:47:02:95:17:1b:43:d9:2c:00:a9: f2:5a:43:dc:ee:da:93:70:ee:6f:3f:79:81:df:1f:90:39:35: 2f:42:e0:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGy5RhNEKJc2gzXVnzIGbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk NDE1OGEwHhcNMjUxMjA2MTAwMDM2WhcNMjUxMjA3MTAwMDM2WjAzMTEwLwYDVQQD EyhjM2Q1ZDc1MTJhYzkxYTE5NDc2ODY2M2VmM2I4YmEyMWI2ZmQ5ZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZwOTb1b6HXEH97rpsfluJT0zGy8 gvnij/UkSWGkpEsLd/Hk4rn656YVtzJGUOuEXB/Yj7X6/m9iskjJB9ISZziZYbTW EGNmeOnVRFWteDUCg06FS1h1KVN2tThO196bN3CBmCPppOnFuXygtdjtTP9xzPlg +LsuM/d8BSydlYQBzJHRdXPEvkzUetiMOX4tzOfZ9ZLO/BShuzQC5EX7bUHRonoc YLKBQeY+pW2Kwqz9SLPrXXbCRoj57k/Zwg2A8Lqz1EJVrFOksIKdV+cdCrmDCa03 KkUS+XWt2qR9YD4lqMe3Dioi4j/VR1+g3U9VZZX7PsaHDvOYeFqtz9+RTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPV11EqyRoZR2hmPvO4uiG2/Z5PMB8GA1UdIwQY MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4P5hOWV cn8sQFsdaoVFk2WaD7Ba8j89B8UETQSPzu0U0LuN70ErqC5gpg77gBeCWmZJpu4R 8FLuUuGl54tWHFW1Q+MumteKmRoXUtMKKoXBD+Z66/DMUeOoO7iWeIK54jm+6B9P /oSwPShcV60cBfdVYqfe+OCVLP1cSdJK+IQxW+KrBR6fCs/eBbpy8NGgaQxwWW/w GiqfKdZqMMxeykGx3XOnOXYzmTk9XPF63F5zu3beJZ+SL2jkBYlH1PIkIeHcRB6Q s9AatqClkftFGaTHF8h2vAjzinQyp0P/HZJHApUXG0PZLACp8lpD3O7ak3Dubz95 gd8fkDk1L0LgwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:27:33 2025 by rpki-client