This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft File: 9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json) Hash identifier: I6NcT24MQAJ2toduNOpeHcumefU2AqLqnOBzOC8lyps= Subject key identifier: 77:6A:BB:E5:83:EF:4F:38:46:0B:45:C8:F6:C9:BB:2A:4C:AC:0C:51 Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01 Certificate issuer: /CN=f4e018fddfd422517c3069e75658657b40e73601 Certificate serial: 019B273FDA3B9E84C109EF8264A7D96CACF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft Manifest number: 1780 Signing time: Tue 16 Dec 2025 13:00:54 +0000 Manifest this update: Tue 16 Dec 2025 13:00:54 +0000 Manifest next update: Wed 17 Dec 2025 13:00:54 +0000 Files and hashes: 1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: E0DMjDtJtkcC9KAW3+25qsgXrasOiFBxM9YwDxe67XM=) 2: liKr9r8FMDweCFSU14hBTeBiJGg.roa (hash: yTAfLgiLewRGMW9BR3bDVbC2pPmowcN0vbDNQIsIUcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:3f:da:3b:9e:84:c1:09:ef:82:64:a7:d9:6c:ac:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601 Validity Not Before: Dec 16 13:00:54 2025 GMT Not After : Dec 17 13:00:54 2025 GMT Subject: CN=776abbe583ef4f38460b45c8f6c9bb2a4cac0c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:f0:aa:7e:88:68:2f:d4:e7:95:de:16:43: 53:a6:5a:49:25:fd:0a:a8:7d:2c:10:8c:81:17:7a: fd:53:9c:90:f6:78:0b:17:6d:1b:e6:f0:21:82:02: 56:bb:ff:1c:07:70:26:aa:0f:47:01:2b:ad:0e:c8: 5e:86:ff:df:ef:d3:24:53:46:71:ac:ac:06:e8:51: f3:92:ce:cf:13:03:52:86:1e:5f:2e:92:ed:c2:5c: 5a:5d:27:4b:85:89:7f:70:18:30:a7:c3:35:74:4a: a5:d5:81:56:8e:1e:f6:7a:fc:a6:6c:31:50:43:c6: b3:dc:d5:af:13:f7:2c:85:c9:22:cb:5c:07:63:ee: 10:e3:f0:09:2a:a0:43:cf:1a:ea:5a:bf:c3:de:a2: b0:13:b5:18:e1:57:5d:26:2b:b1:9f:86:a0:63:57: b7:4a:96:fd:a6:f0:cb:28:f0:56:69:84:50:a4:b5: 49:20:72:cc:9e:09:72:6f:ba:70:0d:a1:5d:0d:2c: e9:3e:11:bd:65:20:6c:15:88:9f:80:34:8e:a1:91: bd:51:3c:00:94:bd:19:0c:1a:9c:61:46:f9:f3:4f: 1e:24:0a:76:c0:dc:b4:b9:36:bc:2e:c3:2b:2f:ab: b4:a6:60:fc:a0:fa:08:d8:12:61:1c:e0:06:f8:15: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:6A:BB:E5:83:EF:4F:38:46:0B:45:C8:F6:C9:BB:2A:4C:AC:0C:51 X509v3 Authority Key Identifier: keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:51:81:6a:31:46:df:42:e2:72:35:d9:0a:f9:4e:7e:4e:86: dd:49:aa:9a:5f:b4:1a:b7:95:b7:8f:0d:97:a4:40:ee:e1:e7: 7d:10:e2:e9:f8:6d:40:f1:39:c8:ba:20:7d:0f:74:35:bd:73: 45:7f:28:5e:4d:6e:98:ee:71:79:ce:b9:dd:5e:f8:73:fa:ec: a6:65:95:26:28:63:9a:40:e7:aa:4f:09:5d:8c:a1:7a:ef:ad: 41:49:db:2e:8e:88:32:91:d4:62:a4:b0:ba:1b:3d:ff:00:d8: 1b:b5:31:20:1f:50:93:26:7c:2a:1f:aa:7c:46:35:ae:50:a2: 7f:f5:52:14:65:33:fc:5d:27:46:a1:15:a3:73:90:d5:2c:ab: f3:94:86:b7:1f:c1:19:93:28:57:54:1c:ff:16:d4:47:34:d9: bd:1f:53:dd:84:1c:5f:fc:e9:ae:28:4a:f6:7a:a6:42:d6:40: ce:4a:2f:34:62:dd:09:72:ec:6f:50:a4:8c:d7:c8:df:d3:95: 8e:da:a2:f0:5e:91:7b:d3:2a:2d:20:92:d7:88:cd:ec:94:2a: 2d:ff:2f:7c:7e:99:3b:d9:72:f0:21:94:71:85:44:7f:64:d8: 24:a5:a0:db:9a:6d:36:b2:dc:59:49:7a:cf:e1:49:43:09:f3: 92:93:07:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnP9o7noTBCe+CZKfZbKzyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTAxOGZkZGZkNDIyNTE3YzMwNjllNzU2NTg2NTdiNDBl NzM2MDEwHhcNMjUxMjE2MTMwMDU0WhcNMjUxMjE3MTMwMDU0WjAzMTEwLwYDVQQD Eyg3NzZhYmJlNTgzZWY0ZjM4NDYwYjQ1YzhmNmM5YmIyYTRjYWMwYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9nwqn6IaC/U55XeFkNTplpJJf0K qH0sEIyBF3r9U5yQ9ngLF20b5vAhggJWu/8cB3Amqg9HASutDshehv/f79MkU0Zx rKwG6FHzks7PEwNShh5fLpLtwlxaXSdLhYl/cBgwp8M1dEql1YFWjh72evymbDFQ Q8az3NWvE/cshckiy1wHY+4Q4/AJKqBDzxrqWr/D3qKwE7UY4VddJiuxn4agY1e3 Spb9pvDLKPBWaYRQpLVJIHLMnglyb7pwDaFdDSzpPhG9ZSBsFYifgDSOoZG9UTwA lL0ZDBqcYUb5808eJAp2wNy0uTa8LsMrL6u0pmD8oPoI2BJhHOAG+BXDMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdqu+WD7084RgtFyPbJuypMrAxRMB8GA1UdIwQY MBaAFPTgGP3f1CJRfDBp51ZYZXtA5zYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQt NzBmOTRkNWVlNWZjLzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hZDZmNWYtNTNiNS00ZTA3LTk0YjQtNzBmOTRkNWVlNWZj LzEvOU9BWV9kX1VJbEY4TUdublZsaGxlMERuTmdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFGBajFG 30LicjXZCvlOfk6G3Umqml+0GreVt48Nl6RA7uHnfRDi6fhtQPE5yLogfQ90Nb1z RX8oXk1umO5xec653V74c/rspmWVJihjmkDnqk8JXYyheu+tQUnbLo6IMpHUYqSw uhs9/wDYG7UxIB9QkyZ8Kh+qfEY1rlCif/VSFGUz/F0nRqEVo3OQ1Syr85SGtx/B GZMoV1Qc/xbURzTZvR9T3YQcX/zprihK9nqmQtZAzkovNGLdCXLsb1CkjNfI39OV jtqi8F6Re9MqLSCS14jN7JQqLf8vfH6ZO9ly8CGUcYVEf2TYJKWg25ptNrLcWUl6 z+FJQwnzkpMHfA== -----END CERTIFICATE-----Generated at Tue Dec 16 22:11:57 2025 by rpki-client