This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft File: V9mTMZ3MkpdpQxiyRus29V_xNw4.mft (raw, json) Hash identifier: ZkXZwpFtQFyncDTThhlUgUtL4o/d4t5d2S335iPQarQ= Subject key identifier: 40:AE:C0:F0:62:B5:65:0E:CF:B3:65:DF:67:14:ED:56:F5:6E:FE:AD Authority key identifier: 57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E Certificate issuer: /CN=57d993319dcc9297694318b246eb36f55ff1370e Certificate serial: 019B2E8B962B3696D4BCC4D900BF3A2D9B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft Manifest number: 1174 Signing time: Wed 17 Dec 2025 23:00:58 +0000 Manifest this update: Wed 17 Dec 2025 23:00:58 +0000 Manifest next update: Thu 18 Dec 2025 23:00:58 +0000 Files and hashes: 1: V9mTMZ3MkpdpQxiyRus29V_xNw4.crl (hash: g7iojTiEWMV7J5UOYkPk/WzxN+7PEw4qroaDGSrPHIs=) 2: VzLG7lyXvVkTshnFEB9kwkc4pkQ.roa (hash: wIvPT3vGaYWNNjOSrAOSHFQIN6FXu9GPlBXc77PLE/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:96:2b:36:96:d4:bc:c4:d9:00:bf:3a:2d:9b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57d993319dcc9297694318b246eb36f55ff1370e Validity Not Before: Dec 17 23:00:58 2025 GMT Not After : Dec 18 23:00:58 2025 GMT Subject: CN=40aec0f062b5650ecfb365df6714ed56f56efead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:78:6b:00:93:50:3c:35:aa:c8:6c:81:21:1f: 11:44:7c:07:34:f0:4c:ed:60:f8:a4:7e:47:96:3c: 3f:0e:e9:58:97:bd:c7:a8:3e:b4:fd:80:e0:01:0f: d7:65:76:ac:e1:71:ff:2d:61:cf:a4:ef:e2:77:8d: 54:70:86:18:63:af:28:59:51:bc:f8:3e:7e:7c:7d: 49:40:42:bf:8e:fe:60:d4:5d:ce:5f:52:71:b8:63: b1:f0:3e:34:86:35:25:3f:cf:48:e2:7d:e8:d4:5a: 93:b9:ed:2f:7c:a1:b3:ac:0f:b5:46:42:60:5a:12: ea:01:6a:2d:6b:e8:c3:8e:79:dc:3d:91:6e:71:95: 0f:6c:19:bd:00:c3:34:3e:4b:a0:db:bd:ea:35:35: 8c:9a:c0:68:66:ac:60:88:7f:53:e7:88:b6:ee:84: c3:9a:11:ac:9b:e5:2f:ac:c9:e9:48:13:34:d1:73: 2a:ff:d6:35:96:85:ab:b4:e1:ec:52:bc:8e:2f:81: a5:04:68:66:50:e4:ec:e1:a3:3c:ba:2a:18:96:dd: f8:1c:bc:8c:3d:29:c4:98:c0:04:86:ba:53:2d:b8: 26:b5:0b:c7:38:0e:9c:34:a0:54:40:ca:cb:d5:9c: 65:10:7a:67:95:a0:e8:35:3d:19:19:bb:a8:76:67: 5f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:AE:C0:F0:62:B5:65:0E:CF:B3:65:DF:67:14:ED:56:F5:6E:FE:AD X509v3 Authority Key Identifier: keyid:57:D9:93:31:9D:CC:92:97:69:43:18:B2:46:EB:36:F5:5F:F1:37:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9mTMZ3MkpdpQxiyRus29V_xNw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0d32fe-c9da-4493-ab8a-03afacea7010/1/V9mTMZ3MkpdpQxiyRus29V_xNw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:20:41:4f:3c:03:af:a3:f7:3b:49:b5:2e:b6:a8:35:7f:f5: 5c:ec:9b:ce:5a:83:82:3e:be:4a:c5:fd:6c:66:bd:eb:e8:fc: 4d:6d:3b:27:7f:67:c3:bf:cb:95:de:0a:c3:6c:b4:3b:b9:97: d5:bf:c6:69:e2:82:f8:23:1b:49:4a:61:c6:b3:be:51:03:eb: f3:68:f0:8e:33:f1:db:5c:34:7f:86:0a:ce:42:15:65:cf:f7: 47:28:ee:34:e1:41:4f:72:80:d6:e5:c7:46:f7:3d:56:a2:fa: 8f:13:22:be:97:41:6f:b3:b8:f5:bd:13:e0:d3:59:73:89:db: f8:d6:dc:ef:c5:e7:6f:5e:02:53:59:8f:eb:fa:27:48:c6:00: 64:77:1e:3b:35:e9:b7:ed:8b:04:95:27:14:38:80:dc:bf:2a: 5a:ba:61:2f:5b:85:5d:89:7f:4e:ec:18:d1:0b:2f:50:22:18: 04:e4:ac:30:08:90:b9:20:d7:7b:9e:20:59:3b:02:64:15:2e: 8d:98:33:3d:75:40:73:3b:9f:b0:55:d1:29:fa:68:00:b8:6c: b7:09:50:f2:9f:c0:dd:f8:14:02:fa:be:0c:86:d6:55:46:18: ca:4e:ee:53:2d:40:ab:8d:8f:b3:fc:72:aa:54:70:75:6d:56: 11:90:38:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui5YrNpbUvMTZAL86LZs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZDk5MzMxOWRjYzkyOTc2OTQzMThiMjQ2ZWIzNmY1NWZm MTM3MGUwHhcNMjUxMjE3MjMwMDU4WhcNMjUxMjE4MjMwMDU4WjAzMTEwLwYDVQQD Eyg0MGFlYzBmMDYyYjU2NTBlY2ZiMzY1ZGY2NzE0ZWQ1NmY1NmVmZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHhrAJNQPDWqyGyBIR8RRHwHNPBM 7WD4pH5Hljw/DulYl73HqD60/YDgAQ/XZXas4XH/LWHPpO/id41UcIYYY68oWVG8 +D5+fH1JQEK/jv5g1F3OX1JxuGOx8D40hjUlP89I4n3o1FqTue0vfKGzrA+1RkJg WhLqAWota+jDjnncPZFucZUPbBm9AMM0Pkug273qNTWMmsBoZqxgiH9T54i27oTD mhGsm+UvrMnpSBM00XMq/9Y1loWrtOHsUryOL4GlBGhmUOTs4aM8uioYlt34HLyM PSnEmMAEhrpTLbgmtQvHOA6cNKBUQMrL1ZxlEHpnlaDoNT0ZGbuodmdftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFECuwPBitWUOz7Nl32cU7Vb1bv6tMB8GA1UdIwQY MBaAFFfZkzGdzJKXaUMYskbrNvVf8TcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEt MDNhZmFjZWE3MDEwLzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8wZDMyZmUtYzlkYS00NDkzLWFiOGEtMDNhZmFjZWE3MDEw LzEvVjltVE1aM01rcGRwUXhpeVJ1czI5Vl94Tnc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeCBBTzwD r6P3O0m1LraoNX/1XOybzlqDgj6+SsX9bGa96+j8TW07J39nw7/Lld4Kw2y0O7mX 1b/GaeKC+CMbSUphxrO+UQPr82jwjjPx21w0f4YKzkIVZc/3RyjuNOFBT3KA1uXH Rvc9VqL6jxMivpdBb7O49b0T4NNZc4nb+Nbc78Xnb14CU1mP6/onSMYAZHceOzXp t+2LBJUnFDiA3L8qWrphL1uFXYl/TuwY0QsvUCIYBOSsMAiQuSDXe54gWTsCZBUu jZgzPXVAczufsFXRKfpoALhstwlQ8p/A3fgUAvq+DIbWVUYYyk7uUy1Aq42Ps/xy qlRwdW1WEZA46A== -----END CERTIFICATE-----Generated at Thu Dec 18 07:06:16 2025 by rpki-client