This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft File: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft (raw, json) Hash identifier: S/aaYJ9kWAjytY1XusNV/lVfEOiZNqR+d93mZZWnn28= Subject key identifier: 03:85:FD:0D:1B:FB:71:21:78:D3:9C:0F:FF:B9:F1:C8:33:99:DD:6A Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Certificate serial: 019AF23F849676757382C3A14FC4A4F411F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft Manifest number: 08DD Signing time: Sat 06 Dec 2025 06:00:40 +0000 Manifest this update: Sat 06 Dec 2025 06:00:40 +0000 Manifest next update: Sun 07 Dec 2025 06:00:40 +0000 Files and hashes: 1: 9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl (hash: TmkEVWMd4llNYfwslANryRFX0SW7zRWJbGzcY9qRIKA=) 2: UDIr7Vq2PCUxH-_0XwBbpbKATWw.roa (hash: UYUs+F/DqN2VeFPscjP3XMb/LrOdKx6NTNq37FV037I=) 3: jPbAHMtRmOOxtXFxyDN1-qXJjZI.roa (hash: rubF/nUj1Sxv+4U25Wjdi1dZZsv1ydBfmLAqRQsECUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:84:96:76:75:73:82:c3:a1:4f:c4:a4:f4:11:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Validity Not Before: Dec 6 06:00:40 2025 GMT Not After : Dec 7 06:00:40 2025 GMT Subject: CN=0385fd0d1bfb712178d39c0fffb9f1c83399dd6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d4:88:c0:f8:3d:3a:04:67:a1:7c:a1:31:f4: 19:6e:95:be:f6:0d:d4:f0:02:04:22:da:d4:be:e4: 81:4a:65:5d:57:5f:c3:a1:b8:18:dd:7b:dc:dc:c0: 7a:85:fe:ad:8f:5d:08:66:79:92:63:e2:83:e1:57: d9:3f:c7:d3:8d:ea:fe:0f:2b:7f:30:aa:7f:6f:82: 5e:0d:fd:76:a7:d3:bb:56:24:bb:72:7a:a1:3d:7b: fa:8e:9d:7e:64:df:22:16:aa:58:18:de:5b:7b:9b: ae:d1:08:65:47:eb:59:98:56:b1:ed:ae:07:4e:c8: 37:35:e0:60:a4:98:d1:0d:7e:4b:7c:97:cc:48:d6: 5d:d1:1c:1e:5b:7a:c2:77:de:cb:fb:8f:e3:0e:ed: 10:c8:89:9d:d6:65:3d:5c:e2:41:b8:92:86:fe:e9: f5:d2:59:8b:dd:86:60:4f:25:99:b3:57:0d:96:a2: 9e:a3:e6:4f:1b:f4:6c:b1:b1:9c:d1:fd:b5:5d:3d: 47:7a:c9:b6:4c:3c:15:2e:4b:42:1a:2e:a5:d9:19: 5c:73:78:6d:83:3c:14:f6:89:49:36:f0:76:d3:a5: a9:71:6f:45:05:d0:61:92:96:55:c4:1b:ce:5c:6f: e6:1a:a0:75:87:25:c2:18:da:bc:a6:35:56:b7:c1: aa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:85:FD:0D:1B:FB:71:21:78:D3:9C:0F:FF:B9:F1:C8:33:99:DD:6A X509v3 Authority Key Identifier: keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:39:f3:63:39:5f:89:7b:57:9c:3e:24:5e:38:be:66:69:7d: a6:51:75:14:71:99:13:06:65:0d:6b:3b:b4:4a:61:2a:d6:de: ec:f8:d7:03:b7:18:2e:58:85:eb:14:8f:7c:35:a8:e3:fe:5d: c5:9f:ce:cd:ca:2d:02:38:97:a6:25:f3:8f:d5:e7:d7:d1:1e: ed:39:e6:87:dc:57:ea:ab:f6:65:75:83:20:fa:d0:ac:ee:5c: 54:9a:4e:84:73:c8:8c:aa:5f:5f:5c:5e:64:6f:64:7a:4c:9d: 93:a8:35:77:c2:8e:24:ea:6c:23:6f:19:ba:db:36:55:67:f8: 07:51:c2:13:03:25:a8:b5:d8:35:90:59:70:f8:cb:a1:54:91: 60:7b:73:1f:4b:13:29:d5:cd:e6:39:ca:7e:bb:df:43:41:38: 44:fb:6b:74:68:51:e1:5f:1e:6f:39:f4:20:0d:d5:d4:b9:db: aa:f8:c7:c3:67:45:2e:d4:85:6f:1e:80:09:c9:cd:e1:7d:a4: f8:47:ec:e9:94:2c:c3:7d:c8:bb:ac:69:d0:5a:df:a8:08:54: 39:5a:02:c6:25:8c:fb:24:c0:16:ad:82:7e:dd:a4:41:3f:89: 22:8f:5a:ee:ff:be:94:52:de:fc:3f:2a:7a:0f:2e:a6:e0:b3: d8:bb:46:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4SWdnVzgsOhT8Sk9BH0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx MDUwZWUwHhcNMjUxMjA2MDYwMDQwWhcNMjUxMjA3MDYwMDQwWjAzMTEwLwYDVQQD EygwMzg1ZmQwZDFiZmI3MTIxNzhkMzljMGZmZmI5ZjFjODMzOTlkZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tSIwPg9OgRnoXyhMfQZbpW+9g3U 8AIEItrUvuSBSmVdV1/DobgY3Xvc3MB6hf6tj10IZnmSY+KD4VfZP8fTjer+Dyt/ MKp/b4JeDf12p9O7ViS7cnqhPXv6jp1+ZN8iFqpYGN5be5uu0QhlR+tZmFax7a4H Tsg3NeBgpJjRDX5LfJfMSNZd0RweW3rCd97L+4/jDu0QyImd1mU9XOJBuJKG/un1 0lmL3YZgTyWZs1cNlqKeo+ZPG/RssbGc0f21XT1Hesm2TDwVLktCGi6l2Rlcc3ht gzwU9olJNvB206WpcW9FBdBhkpZVxBvOXG/mGqB1hyXCGNq8pjVWt8Gq+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOF/Q0b+3EheNOcD/+58cgzmd1qMB8GA1UdIwQY MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt M2E1YzcxZjg2ODIxLzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjznzYzlf iXtXnD4kXji+Zml9plF1FHGZEwZlDWs7tEphKtbe7PjXA7cYLliF6xSPfDWo4/5d xZ/OzcotAjiXpiXzj9Xn19Ee7Tnmh9xX6qv2ZXWDIPrQrO5cVJpOhHPIjKpfX1xe ZG9kekydk6g1d8KOJOpsI28Zuts2VWf4B1HCEwMlqLXYNZBZcPjLoVSRYHtzH0sT KdXN5jnKfrvfQ0E4RPtrdGhR4V8ebzn0IA3V1LnbqvjHw2dFLtSFbx6ACcnN4X2k +Efs6ZQsw33Iu6xp0FrfqAhUOVoCxiWM+yTAFq2Cft2kQT+JIo9a7v++lFLe/D8q eg8upuCz2LtGcw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:24 2025 by rpki-client