This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft File: m9upUpCphaaXdj0wq0L5w3hAeLI.mft (raw, json) Hash identifier: 7kqH7cRZNyuetWKx61I1r/ISb8B/6ErDISk2bcxTq0A= Subject key identifier: 0A:52:FD:88:31:DD:71:1D:DE:2E:9E:46:C9:87:75:1C:A1:10:3A:20 Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2 Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2 Certificate serial: 019AF163F36CF962B37DFD9A391D623DF92D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft Manifest number: 0DDC Signing time: Sat 06 Dec 2025 02:00:50 +0000 Manifest this update: Sat 06 Dec 2025 02:00:50 +0000 Manifest next update: Sun 07 Dec 2025 02:00:50 +0000 Files and hashes: 1: CYD_Z2qF6mHZ92tY0ftxYfveSAQ.roa (hash: IVgjWp28wTnlbtVuEQ1FT4HkeEGAz5yGW6fM8IpM3RI=) 2: m9upUpCphaaXdj0wq0L5w3hAeLI.crl (hash: ar4+pl9Vl4cKOHGsz3OYr9wu2Aa+XiAbbl0n5zinEc8=) 3: tLilW5BDEJTEzIEDh8KmIyaiPZU.roa (hash: vFC4JGd2bQPNjS7TqFQa5G/kgv43UH1kGodWdHda2yA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f3:6c:f9:62:b3:7d:fd:9a:39:1d:62:3d:f9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2 Validity Not Before: Dec 6 02:00:50 2025 GMT Not After : Dec 7 02:00:50 2025 GMT Subject: CN=0a52fd8831dd711dde2e9e46c987751ca1103a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:92:d3:9d:e4:0b:e1:f9:2a:57:30:c7:f3:2d: 50:87:45:b2:d9:35:34:f5:fa:2c:98:87:38:55:f4: c2:a8:ba:ca:8b:e2:28:ad:c4:b7:20:f0:4a:ac:51: 0f:87:4d:7f:d5:6a:4e:c4:58:6a:53:5d:67:1f:4a: 67:dd:38:2c:e1:7e:f7:d5:8b:2d:2c:15:32:1e:d9: 55:74:d1:d2:b9:ff:fa:7f:96:0c:c0:20:00:f9:79: fd:45:51:f9:de:0c:7e:60:15:fa:8d:93:0d:c5:f4: c9:fc:9e:b2:ec:14:55:16:5f:f8:2d:45:ce:80:9b: f3:ad:0a:5a:2e:0e:a5:ef:15:b6:df:a2:48:35:6e: 8d:83:12:1e:64:95:4c:4c:7b:99:b7:63:9b:0c:af: 3d:3a:d0:fe:bd:d3:6d:55:52:0d:82:02:1a:c6:d5: 8e:d5:45:b8:5b:2c:5d:32:0d:4b:7f:28:db:a5:f5: dd:aa:4f:49:fe:aa:14:89:cb:a7:d8:2d:62:cf:8e: 4c:a8:3e:fe:72:cb:3a:eb:9d:ea:b5:f8:68:e3:1c: 29:15:80:50:8c:20:57:8f:27:ed:1a:4a:98:af:b9: 29:40:68:35:6d:e8:c8:ac:f3:d4:7e:8c:3e:af:04: 3f:1c:7a:77:70:23:0e:10:c7:e8:13:70:c5:71:ed: 81:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:FD:88:31:DD:71:1D:DE:2E:9E:46:C9:87:75:1C:A1:10:3A:20 X509v3 Authority Key Identifier: keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:58:6d:f7:29:ae:1f:19:07:d4:38:83:66:65:71:9a:32:8d: 89:a5:f2:de:10:cc:8a:06:70:75:b6:3d:68:c2:ca:c1:57:03: 46:69:5e:4f:21:92:92:57:3a:eb:03:dd:04:2c:79:61:36:b6: e5:c4:c2:6e:4a:2f:a9:30:5c:be:5b:51:a6:9a:3d:4b:d2:94: c1:ab:8b:20:fd:f0:92:da:bc:39:21:56:a4:0f:7a:94:3c:31: 0b:2e:a8:b8:0b:7b:ab:08:e5:84:3c:81:07:ea:38:4e:57:31: 4f:7b:a1:f6:08:f3:c0:63:9a:a7:3d:81:08:83:4e:54:9c:7a: ac:15:3c:38:8a:f2:f3:d9:2a:62:05:e6:ba:22:8a:3e:0a:7d: 4d:19:db:37:bc:3a:82:fd:2f:90:f7:df:2e:aa:87:00:42:fc: 52:7e:14:bd:c0:6f:a5:28:96:84:30:e8:22:48:50:25:1e:ed: 97:41:4c:e2:cb:17:76:91:62:33:ae:49:cd:05:d6:a1:98:80: 47:86:9b:c5:ce:d6:b5:11:af:3a:fb:02:ab:01:65:1b:5f:28: 3a:65:68:f5:d4:8e:77:78:c7:e8:1a:95:ba:47:07:89:81:a4: 0f:7a:82:cd:63:8d:20:cf:10:b9:95:7d:20:47:3a:19:3c:b9: 91:61:d8:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/Ns+WKzff2aOR1iPfktMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0 MDc4YjIwHhcNMjUxMjA2MDIwMDUwWhcNMjUxMjA3MDIwMDUwWjAzMTEwLwYDVQQD EygwYTUyZmQ4ODMxZGQ3MTFkZGUyZTllNDZjOTg3NzUxY2ExMTAzYTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZLTneQL4fkqVzDH8y1Qh0Wy2TU0 9fosmIc4VfTCqLrKi+IorcS3IPBKrFEPh01/1WpOxFhqU11nH0pn3Tgs4X731Yst LBUyHtlVdNHSuf/6f5YMwCAA+Xn9RVH53gx+YBX6jZMNxfTJ/J6y7BRVFl/4LUXO gJvzrQpaLg6l7xW236JINW6NgxIeZJVMTHuZt2ObDK89OtD+vdNtVVINggIaxtWO 1UW4WyxdMg1LfyjbpfXdqk9J/qoUicun2C1iz45MqD7+css6653qtfho4xwpFYBQ jCBXjyftGkqYr7kpQGg1bejIrPPUfow+rwQ/HHp3cCMOEMfoE3DFce2B7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApS/Ygx3XEd3i6eRsmHdRyhEDogMB8GA1UdIwQY MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt ODBhNjZjMGZjODg0LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0 LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh1ht9ymu HxkH1DiDZmVxmjKNiaXy3hDMigZwdbY9aMLKwVcDRmleTyGSklc66wPdBCx5YTa2 5cTCbkovqTBcvltRppo9S9KUwauLIP3wktq8OSFWpA96lDwxCy6ouAt7qwjlhDyB B+o4TlcxT3uh9gjzwGOapz2BCINOVJx6rBU8OIry89kqYgXmuiKKPgp9TRnbN7w6 gv0vkPffLqqHAEL8Un4UvcBvpSiWhDDoIkhQJR7tl0FM4ssXdpFiM65JzQXWoZiA R4abxc7WtRGvOvsCqwFlG18oOmVo9dSOd3jH6BqVukcHiYGkD3qCzWONIM8QuZV9 IEc6GTy5kWHYZw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:47:52 2025 by rpki-client