This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft File: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft (raw, json) Hash identifier: ncDtWpfOh/Mj1XamLTC9CCxf2bWFUUmERMob8eiezEA= Subject key identifier: 07:10:63:1E:71:8E:5A:68:E3:23:58:90:57:5B:F7:2C:50:B4:C1:05 Authority key identifier: 0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF Certificate issuer: /CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Certificate serial: 019AF61CE42B38F34537105040AABA873C4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft Manifest number: 0173 Signing time: Sun 07 Dec 2025 00:01:19 +0000 Manifest this update: Sun 07 Dec 2025 00:01:19 +0000 Manifest next update: Mon 08 Dec 2025 00:01:19 +0000 Files and hashes: 1: 249HxpirTi_osbw5WvlBrcgIzks.roa (hash: yk0Ki2ByYsC3iFN0F5s91hPx79cwtd3H/FikkHXhlh8=) 2: D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl (hash: 5CYN5uJPg3mLRRwSjRqu/NviGN/VVhXN5PGmg0T4qGg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:e4:2b:38:f3:45:37:10:50:40:aa:ba:87:3c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fd1d0cc53219b6fe681e189e5e93d6357736ccf Validity Not Before: Dec 7 00:01:19 2025 GMT Not After : Dec 8 00:01:19 2025 GMT Subject: CN=0710631e718e5a68e3235890575bf72c50b4c105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4d:18:c8:7b:17:df:f7:33:46:95:ff:95:5a: 67:2d:a2:17:37:43:7b:e0:4a:e4:f7:aa:f4:83:9a: 42:59:23:cc:14:2a:5f:b5:27:f9:11:26:e0:e8:77: 41:3d:1a:81:bd:29:fa:cd:ec:d6:81:47:30:39:06: 90:22:06:ea:7f:bd:a2:48:d1:c1:3c:eb:b4:14:ce: 98:43:38:7e:72:cc:ce:65:95:4f:83:b8:b7:fe:37: db:25:87:df:0b:d0:77:db:ff:a3:bd:33:61:4f:cd: 52:f6:43:c5:86:0c:c7:55:a4:af:86:3b:12:ee:1b: 98:7f:2e:48:9e:1e:bc:bb:cc:2d:dd:9c:c5:d3:00: d9:cd:a6:26:2b:b4:9a:1b:d6:61:c3:c7:65:0c:3b: 6d:c4:bc:fb:25:ad:09:3a:9f:fa:b2:29:77:e6:cf: 8b:b5:1a:dd:e1:18:21:fc:7c:f8:76:2d:c6:80:f7: e6:ea:eb:12:51:19:ac:6b:cc:94:6d:8d:e0:5e:ce: d5:26:f9:36:a4:fb:ca:d3:77:89:c4:56:49:09:a2: 04:fd:ef:b8:3a:6a:14:c6:6c:df:fb:0f:90:42:cb: 63:53:98:9b:bb:9c:35:b9:ac:ae:fe:1b:dd:3e:1f: c6:89:f9:13:f1:d0:0e:52:26:49:77:53:62:97:7d: 66:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:10:63:1E:71:8E:5A:68:E3:23:58:90:57:5B:F7:2C:50:B4:C1:05 X509v3 Authority Key Identifier: keyid:0F:D1:D0:CC:53:21:9B:6F:E6:81:E1:89:E5:E9:3D:63:57:73:6C:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/7ee442-0ed5-4303-96bd-410b9966e205/1/D9HQzFMhm2_mgeGJ5ek9Y1dzbM8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:f3:9a:ca:0f:b7:1f:cc:13:d8:fe:7f:12:ba:b0:ef:ce:55: 08:5b:22:f3:8a:2f:67:ac:8d:d2:bf:57:cf:2e:f2:b6:5a:d3: d3:1f:e9:d8:5c:57:de:58:27:1b:e6:93:12:63:70:68:a0:86: 95:c3:e9:35:13:b4:96:46:92:9b:b8:2f:69:25:c7:60:d1:d8: f1:fc:b6:10:62:40:9f:98:62:95:e0:ef:6b:cc:57:f3:09:b6: a0:3c:bd:c0:36:34:08:af:5a:23:6f:ab:a8:67:e5:ec:ee:1f: 61:41:85:c0:d4:3d:5a:f8:58:cb:c8:e8:14:eb:07:72:e6:22: 77:9e:55:74:b8:b3:5e:af:56:7a:4a:d3:79:7f:46:48:61:77: a0:e1:d2:00:1b:d1:e7:b9:01:32:53:68:4e:a1:0f:d0:8b:00: 03:e9:53:cc:5f:7a:f4:09:35:63:0d:51:39:d7:b7:c9:23:a4: fa:b0:50:bb:aa:25:27:8f:48:8b:01:8f:fa:fe:d7:8a:24:dc: 54:4b:cc:e5:f7:74:86:f2:dd:6b:f1:59:bc:2a:62:33:f6:71: fe:b8:7f:f2:ec:dc:87:bd:74:55:e5:14:85:06:47:57:30:50: cc:1b:63:97:fc:a7:1a:23:16:16:3c:e2:40:a0:7f:74:64:e8: 2a:2d:3e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HOQrOPNFNxBQQKq6hzxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZDFkMGNjNTMyMTliNmZlNjgxZTE4OWU1ZTkzZDYzNTc3 MzZjY2YwHhcNMjUxMjA3MDAwMTE5WhcNMjUxMjA4MDAwMTE5WjAzMTEwLwYDVQQD EygwNzEwNjMxZTcxOGU1YTY4ZTMyMzU4OTA1NzViZjcyYzUwYjRjMTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE0YyHsX3/czRpX/lVpnLaIXN0N7 4Erk96r0g5pCWSPMFCpftSf5ESbg6HdBPRqBvSn6zezWgUcwOQaQIgbqf72iSNHB POu0FM6YQzh+cszOZZVPg7i3/jfbJYffC9B32/+jvTNhT81S9kPFhgzHVaSvhjsS 7huYfy5Inh68u8wt3ZzF0wDZzaYmK7SaG9Zhw8dlDDttxLz7Ja0JOp/6sil35s+L tRrd4Rgh/Hz4di3GgPfm6usSURmsa8yUbY3gXs7VJvk2pPvK03eJxFZJCaIE/e+4 OmoUxmzf+w+QQstjU5ibu5w1uayu/hvdPh/GifkT8dAOUiZJd1Nil31mUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcQYx5xjlpo4yNYkFdb9yxQtMEFMB8GA1UdIwQY MBaAFA/R0MxTIZtv5oHhieXpPWNXc2zPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQt NDEwYjk5NjZlMjA1LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83ZWU0NDItMGVkNS00MzAzLTk2YmQtNDEwYjk5NjZlMjA1 LzEvRDlIUXpGTWhtMl9tZ2VHSjVlazlZMWR6Yk04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfOayg+3 H8wT2P5/Erqw785VCFsi84ovZ6yN0r9Xzy7ytlrT0x/p2FxX3lgnG+aTEmNwaKCG lcPpNRO0lkaSm7gvaSXHYNHY8fy2EGJAn5hileDva8xX8wm2oDy9wDY0CK9aI2+r qGfl7O4fYUGFwNQ9WvhYy8joFOsHcuYid55VdLizXq9WekrTeX9GSGF3oOHSABvR 57kBMlNoTqEP0IsAA+lTzF969Ak1Yw1ROde3ySOk+rBQu6olJ49IiwGP+v7XiiTc VEvM5fd0hvLda/FZvCpiM/Zx/rh/8uzch710VeUUhQZHVzBQzBtjl/ynGiMWFjzi QKB/dGToKi0+VA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:57:34 2025 by rpki-client