This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft File: 9x1KQ3TfIirDI1uWAiBtlr8drII.mft (raw, json) Hash identifier: b10ZSGE6Rx11ASrWxncEU/JEM2I60ldkeEZMIvLtW1M= Subject key identifier: 56:43:81:92:27:31:15:67:A6:7F:BC:C0:B9:43:23:9D:EF:E7:FF:20 Authority key identifier: F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 Certificate issuer: /CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Certificate serial: 019AF23FBDE8A9E1B0C27F717B38629C6DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft Manifest number: 1776 Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: 9x1KQ3TfIirDI1uWAiBtlr8drII.crl (hash: KoU266yIePaRnwVoORCB2HhWcpC+p4QGyCl1NKNyro4=) 2: CegXcjWKkYbf_Mtu-eu8FyZqxu4.roa (hash: JzYcfLcp0NWOaqlj/D/2sPVuBUCIgNaQuV9Yb0hBAUo=) 3: DY7axdNUahmM11yaDw51VfAp67s.roa (hash: bUYyC3SF16Sa424fYOC0qhaN4vyFKANSqCH+D1gEZQg=) 4: HEoZmTdVM-DeFe9X3PrPHHx8iEk.roa (hash: 9udpTWaNqTHQ+GFwYOitrLQw23wqjYK6MW1sHvnpqd4=) 5: iO7A1owMbqCMA0Lg3ovjgVWh5Dg.roa (hash: nx9vqvzmG0weAt/3Wd6gNUhHUSRbH2clt0yaQ7fWpF4=) 6: oAbqR3kG7LoiZXxF1UQ_LftT7BQ.roa (hash: 5h2TCAddmyCEmv2EclM4C4a677ny0YxlmBdSG7ml6N4=) 7: vmadOBoOk6niwocbLQBsll2qRrw.roa (hash: zQDs58AuBVhnIjhnpftladMye3nflU9pDFBdocMEldo=) 8: z2wQNkzDkZfaAKh_ssLZfxbhYgc.roa (hash: ccA776YRey2wE5rLtAhOmx43QdG5Twqc3fRZfQPAbDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bd:e8:a9:e1:b0:c2:7f:71:7b:38:62:9c:6d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f71d4a4374df222ac3235b9602206d96bf1dac82 Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=5643819227311567a67fbcc0b943239defe7ff20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7a:eb:fe:77:cd:69:49:da:9e:00:41:9c:8c: e3:25:33:4c:f7:28:ba:63:65:89:0e:be:13:ab:67: c5:58:ab:47:a7:4f:ac:82:1a:17:02:85:9c:35:e1: da:78:c9:9f:a5:10:13:a5:6d:eb:ac:21:68:c1:b3: 9d:9f:42:cb:a6:c9:d5:e7:4b:a9:5b:da:f6:97:d9: d1:a7:e6:63:77:7b:54:51:ef:3f:b4:55:cf:3b:7a: 18:76:40:00:d4:23:26:ab:4a:17:eb:38:af:87:99: 06:76:c2:66:94:bb:04:bb:3b:f2:e7:33:6f:60:54: d9:85:ac:db:60:9f:46:f7:68:12:de:e5:07:08:06: 69:91:cc:5a:55:57:23:15:b8:7b:6d:2b:e2:42:93: 97:68:41:ba:43:c3:5d:12:e8:2f:7d:1c:fc:03:d5: 7f:df:a9:b8:de:2f:45:82:87:3d:97:90:58:8c:24: 29:0d:84:20:87:64:27:1d:16:af:3a:ed:92:c4:49: e8:77:97:a8:5f:74:07:29:53:53:41:11:4c:fd:4d: ee:62:d5:75:e9:58:d8:a7:18:b7:7c:c2:bd:55:da: c1:c2:a3:1b:60:75:73:16:8c:7e:4d:56:b4:a5:d9: 23:88:08:fd:ff:c6:06:df:3e:88:c2:cc:39:d6:a5: 7f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:43:81:92:27:31:15:67:A6:7F:BC:C0:B9:43:23:9D:EF:E7:FF:20 X509v3 Authority Key Identifier: keyid:F7:1D:4A:43:74:DF:22:2A:C3:23:5B:96:02:20:6D:96:BF:1D:AC:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9x1KQ3TfIirDI1uWAiBtlr8drII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7739dc-1132-4837-9b85-e9ac2b00316a/1/9x1KQ3TfIirDI1uWAiBtlr8drII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e2:f8:7b:8a:4c:1b:69:10:83:15:a2:25:d4:e2:1e:f1:de: a9:09:82:2b:a9:19:e8:2f:2c:c0:72:9a:3a:9b:d8:21:19:0c: ca:f5:44:13:5c:b1:d4:0d:05:58:8d:a3:a6:9d:1f:34:6c:82: 84:9c:71:ab:f7:f2:a3:bf:a9:e7:e3:2a:f7:16:e0:6f:bc:6c: 33:55:78:4a:bc:c6:d8:d3:db:75:ad:8a:f8:52:ad:c0:2b:cc: 6a:e9:ea:f4:b2:19:81:de:42:61:e5:83:04:cb:35:b0:81:95: f3:28:65:fa:ff:4d:d1:01:2a:73:b3:56:9e:19:42:f1:79:69: b2:68:fa:23:d8:aa:09:61:2d:8c:d6:27:e5:42:48:7b:89:05: 54:44:17:67:69:5d:82:30:a0:2a:e4:98:1a:7b:f7:43:1f:91: 8c:e7:4f:11:d2:e4:86:7e:fb:8c:76:b3:7b:e3:46:fd:6e:0c: 45:33:c3:51:d0:1d:6c:95:52:ea:c7:b4:91:f6:75:63:1e:e9: e1:8a:6e:20:17:98:c8:3f:1c:12:9a:00:56:0e:fe:27:25:6d: d2:10:2e:88:13:b8:14:36:34:00:4e:50:c7:59:d2:75:33:5d: 61:fe:e4:4e:fc:96:1d:1f:d3:10:97:45:3e:6c:83:07:39:f9: d0:7f:1a:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP73oqeGwwn9xezhinG2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MWQ0YTQzNzRkZjIyMmFjMzIzNWI5NjAyMjA2ZDk2YmYx ZGFjODIwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD Eyg1NjQzODE5MjI3MzExNTY3YTY3ZmJjYzBiOTQzMjM5ZGVmZTdmZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Xrr/nfNaUnangBBnIzjJTNM9yi6 Y2WJDr4Tq2fFWKtHp0+sghoXAoWcNeHaeMmfpRATpW3rrCFowbOdn0LLpsnV50up W9r2l9nRp+Zjd3tUUe8/tFXPO3oYdkAA1CMmq0oX6zivh5kGdsJmlLsEuzvy5zNv YFTZhazbYJ9G92gS3uUHCAZpkcxaVVcjFbh7bSviQpOXaEG6Q8NdEugvfRz8A9V/ 36m43i9Fgoc9l5BYjCQpDYQgh2QnHRavOu2SxEnod5eoX3QHKVNTQRFM/U3uYtV1 6VjYpxi3fMK9VdrBwqMbYHVzFox+TVa0pdkjiAj9/8YG3z6Iwsw51qV/lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZDgZInMRVnpn+8wLlDI53v5/8gMB8GA1UdIwQY MBaAFPcdSkN03yIqwyNblgIgbZa/HayCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUt ZTlhYzJiMDAzMTZhLzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NzM5ZGMtMTEzMi00ODM3LTliODUtZTlhYzJiMDAzMTZh LzEvOXgxS1EzVGZJaXJESTF1V0FpQnRscjhkcklJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOL4e4pM G2kQgxWiJdTiHvHeqQmCK6kZ6C8swHKaOpvYIRkMyvVEE1yx1A0FWI2jpp0fNGyC hJxxq/fyo7+p5+Mq9xbgb7xsM1V4SrzG2NPbda2K+FKtwCvMaunq9LIZgd5CYeWD BMs1sIGV8yhl+v9N0QEqc7NWnhlC8Xlpsmj6I9iqCWEtjNYn5UJIe4kFVEQXZ2ld gjCgKuSYGnv3Qx+RjOdPEdLkhn77jHaze+NG/W4MRTPDUdAdbJVS6se0kfZ1Yx7p 4YpuIBeYyD8cEpoAVg7+JyVt0hAuiBO4FDY0AE5Qx1nSdTNdYf7kTvyWHR/TEJdF PmyDBzn50H8aqA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:40:01 2025 by rpki-client