This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft File: 9naIfyLs2o0HSBWgvPkfr4GUKr0.mft (raw, json) Hash identifier: mrp/IY7iWvoN+0d9hPnT4uiPZu6dkL77vkZNrnVj0SY= Subject key identifier: 34:6F:BA:D1:62:08:06:AC:F7:25:DA:59:A0:33:D1:7F:47:53:C7:62 Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd Certificate serial: 019AF23F68A3E802BBD21BC316AE77BC7417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft Manifest number: 0A2C Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: 1--aJOHbG2HarYQRIFHME9kGdrI8.roa (hash: e0PFqEIF1I8KQrFh+AG+JLWzJuU3cKKiEgrK5TdCBkw=) 2: 9naIfyLs2o0HSBWgvPkfr4GUKr0.crl (hash: FBj8/Fqtn238+SRBPEFbCbp9y7Rid+O9XwuUKKxlq/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:68:a3:e8:02:bb:d2:1b:c3:16:ae:77:bc:74:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=346fbad1620806acf725da59a033d17f4753c762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ac:04:bb:be:fd:b8:9b:cf:78:e0:da:0a:40: ac:af:d3:5c:b1:0a:d8:e4:98:53:bd:2e:8c:12:04: db:7a:08:e7:4f:df:63:30:70:12:7c:ec:5b:c8:e8: d8:32:51:2e:07:73:55:73:d2:4b:e0:20:b1:4c:90: fa:05:3f:24:2a:39:49:9e:d6:0f:18:34:85:0c:9f: 0f:0f:df:e0:c8:01:13:df:aa:29:49:4a:fc:4a:90: 70:89:11:0f:48:7d:8c:17:c7:e0:e9:f0:c8:30:a3: 7b:44:ff:73:95:57:3c:0a:14:66:61:57:d8:cc:6e: 20:0e:6a:a4:de:d3:14:12:62:d9:17:12:e2:63:23: 84:ce:c2:33:15:16:63:30:55:af:99:0f:87:83:bd: 4c:72:00:12:36:73:fb:c6:9e:de:7b:1e:27:35:6d: 9d:86:63:52:8e:7c:49:78:4a:bf:0e:c4:0c:b1:d8: b0:e4:54:4a:e3:62:92:4f:0a:8d:7e:66:d1:86:4a: 1c:af:5c:54:ae:3b:22:a5:78:cd:fe:7d:58:8b:2b: 08:4f:7e:48:ef:4e:b8:0b:96:0d:73:42:e3:ee:2d: 9e:21:c7:15:8a:2a:b5:9e:10:97:89:cd:d0:6c:13: d4:60:bc:e3:de:3c:c1:67:0f:b4:74:a7:10:ed:c9: 89:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:6F:BA:D1:62:08:06:AC:F7:25:DA:59:A0:33:D1:7F:47:53:C7:62 X509v3 Authority Key Identifier: keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:2b:2e:d8:d9:dd:66:57:04:31:0c:55:0f:d8:99:50:df:95: 3e:e5:85:16:58:e1:a1:35:17:1d:42:0d:73:42:a5:d2:ee:6c: de:3d:7d:e3:b5:98:51:d8:86:dc:8d:6b:87:73:39:5c:4b:69: 9f:85:91:e6:4e:5b:c0:7c:b2:fb:b3:75:f8:7c:e9:2c:74:9a: 30:c1:f8:d1:81:85:42:b7:81:88:19:fa:ee:54:23:cc:4e:1a: f0:b7:47:dc:24:17:18:a2:3e:56:93:df:51:43:a2:4c:38:4e: d4:64:4b:87:ca:40:02:34:9f:5f:df:90:29:0b:ec:bb:20:71: a5:ba:5d:69:60:9d:9d:f4:13:1c:56:fd:cd:54:da:ad:ac:bc: fb:75:18:35:31:8f:14:81:2b:6f:85:09:78:4c:ea:b5:ac:10: 47:7b:78:38:dd:ed:a3:77:92:fb:c5:43:02:22:0d:b1:2c:18: 9d:67:8f:a8:79:dc:f0:e9:58:d6:74:1a:ab:61:08:7c:98:ac: ba:e0:df:42:4b:5f:75:49:13:30:15:00:c8:cc:22:aa:f6:4c: 8f:0d:47:43:d1:0f:31:82:ce:7e:06:be:69:44:68:b9:b6:74: 08:dd:b5:9e:0f:b5:88:b4:e6:bf:56:a3:6e:f1:47:17:f2:ed: c6:12:bc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2ij6AK70hvDFq53vHQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5 NDJhYmQwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD EygzNDZmYmFkMTYyMDgwNmFjZjcyNWRhNTlhMDMzZDE3ZjQ3NTNjNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06wEu779uJvPeODaCkCsr9NcsQrY 5JhTvS6MEgTbegjnT99jMHASfOxbyOjYMlEuB3NVc9JL4CCxTJD6BT8kKjlJntYP GDSFDJ8PD9/gyAET36opSUr8SpBwiREPSH2MF8fg6fDIMKN7RP9zlVc8ChRmYVfY zG4gDmqk3tMUEmLZFxLiYyOEzsIzFRZjMFWvmQ+Hg71McgASNnP7xp7eex4nNW2d hmNSjnxJeEq/DsQMsdiw5FRK42KSTwqNfmbRhkocr1xUrjsipXjN/n1YiysIT35I 7064C5YNc0Lj7i2eIccViiq1nhCXic3QbBPUYLzj3jzBZw+0dKcQ7cmJLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRvutFiCAas9yXaWaAz0X9HU8diMB8GA1UdIwQY MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt Y2QyZGNiMzU1NjU1LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1 LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsisu2Nnd ZlcEMQxVD9iZUN+VPuWFFljhoTUXHUINc0Kl0u5s3j1947WYUdiG3I1rh3M5XEtp n4WR5k5bwHyy+7N1+HzpLHSaMMH40YGFQreBiBn67lQjzE4a8LdH3CQXGKI+VpPf UUOiTDhO1GRLh8pAAjSfX9+QKQvsuyBxpbpdaWCdnfQTHFb9zVTaray8+3UYNTGP FIErb4UJeEzqtawQR3t4ON3to3eS+8VDAiINsSwYnWePqHnc8OlY1nQaq2EIfJis uuDfQktfdUkTMBUAyMwiqvZMjw1HQ9EPMYLOfga+aURoubZ0CN21ng+1iLTmv1aj bvFHF/LtxhK8mQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:28:25 2025 by rpki-client