This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft File: 9LndnjT-ZtdROJA3CPjOH700LWQ.mft (raw, json) Hash identifier: iVK8/jGKDpfDWHkHSHtYC2+Qq6ABsKPx9JVaqWXbYo0= Subject key identifier: 7A:3F:2D:CB:FA:BE:5B:32:9B:77:87:74:7D:89:9A:AF:CD:4A:D1:7C Authority key identifier: F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 Certificate issuer: /CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Certificate serial: 019AF50984B6B55EDBED587960994AB20B35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:00:32 +0000 Manifest this update: Sat 06 Dec 2025 19:00:32 +0000 Manifest next update: Sun 07 Dec 2025 19:00:32 +0000 Files and hashes: 1: 9KjqbMoowr4zIwC0vIDCLJx3OPk.roa (hash: P/sEcAl8BwOGFXxtB8+HWMsFUjWpgx7ANde/4kLha4c=) 2: 9LndnjT-ZtdROJA3CPjOH700LWQ.crl (hash: JNjdduvToRh0jLA9ly99W1p4TCjZRpuSgFxS/G17QWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:84:b6:b5:5e:db:ed:58:79:60:99:4a:b2:0b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b9dd9e34fe66d75138903708f8ce1fbd342d64 Validity Not Before: Dec 6 19:00:32 2025 GMT Not After : Dec 7 19:00:32 2025 GMT Subject: CN=7a3f2dcbfabe5b329b7787747d899aafcd4ad17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:8f:a2:28:d6:af:f8:ff:b3:84:76:9b:60: 1a:34:fc:99:f4:17:56:0a:a3:c5:0e:e8:39:c0:27: 10:3b:0d:53:d6:f6:df:a2:59:ca:f3:6a:d5:22:d9: cb:51:88:8f:92:09:67:01:1a:10:82:d8:e4:74:ef: f9:44:71:9d:9d:bb:92:e1:81:32:fe:9e:0b:93:f9: a6:74:35:57:9e:1f:bb:ca:fc:7f:e4:e5:e1:2c:38: 6b:87:67:d1:3f:7f:68:f9:4c:cf:76:f3:2a:5b:b5: 10:a6:5e:3a:e7:94:21:47:c6:d1:5d:c8:91:1b:bf: d3:1a:fc:51:50:9d:3f:34:c4:09:9c:ba:ca:24:78: 66:b6:3c:f5:95:e5:61:3d:62:24:b5:f0:9b:66:be: 87:9b:6e:31:0f:19:8f:0d:86:ae:7c:95:e7:59:0a: eb:24:a2:45:fc:8c:98:74:9f:71:67:39:4c:37:c5: 7d:8c:93:ee:ef:cf:84:a2:00:31:7e:49:d1:b6:50: 78:9b:50:16:e8:e5:98:41:37:6d:90:72:ad:88:d8: 69:ef:2d:1c:34:7f:22:f6:46:42:c7:06:61:18:55: cd:ce:fd:bc:20:44:3c:71:9c:8c:74:c3:a3:9c:47: b9:45:fb:11:ee:83:cc:35:5e:4b:70:17:fc:13:65: 0a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3F:2D:CB:FA:BE:5B:32:9B:77:87:74:7D:89:9A:AF:CD:4A:D1:7C X509v3 Authority Key Identifier: keyid:F4:B9:DD:9E:34:FE:66:D7:51:38:90:37:08:F8:CE:1F:BD:34:2D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LndnjT-ZtdROJA3CPjOH700LWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ecaf44-08cc-41bb-81d3-262bec717b17/1/9LndnjT-ZtdROJA3CPjOH700LWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f0:be:39:96:b8:d6:ce:40:f3:a0:07:7e:f9:5e:fc:5c:0d: 6c:3b:36:a6:e0:f0:09:fc:79:dc:47:8f:de:f5:26:b5:61:56: 52:dd:83:c5:70:75:ca:36:c9:9d:8a:fa:36:71:3f:44:1b:b2: 8e:ae:94:fb:dd:b8:33:28:6b:b7:15:0e:c5:6f:23:f0:f6:69: 29:75:ca:3b:a4:92:67:10:5b:86:3e:60:43:1c:4b:2b:b2:e9: 87:03:d7:74:b6:79:8a:47:fc:5c:f6:a7:ed:af:95:cd:e4:ad: cd:2e:24:27:7a:3d:d7:23:83:04:36:7d:73:b1:4e:7e:98:87: 8d:b1:10:74:8c:08:79:28:21:70:41:67:d4:b2:0a:2c:59:03: ec:36:7a:0a:47:9c:2e:8f:06:3c:e5:64:51:70:4a:93:2d:eb: 28:e6:c2:a2:73:42:dc:3c:36:cf:27:ec:53:a6:c8:1d:e3:cc: 9f:b4:7b:fe:f3:ab:15:54:29:93:99:84:cf:1e:05:cf:0f:db: e1:81:ad:fb:d3:c2:f3:8f:19:69:ae:2f:ea:8a:45:a4:86:5c: 1a:7c:ab:3a:3c:8e:0f:e5:b8:85:79:f8:15:b6:92:8f:76:56: 89:e9:92:25:f7:9a:9c:25:7d:42:af:fe:8b:07:00:ea:a1:84: cc:f1:f5:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CYS2tV7b7Vh5YJlKsgs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjlkZDllMzRmZTY2ZDc1MTM4OTAzNzA4ZjhjZTFmYmQz NDJkNjQwHhcNMjUxMjA2MTkwMDMyWhcNMjUxMjA3MTkwMDMyWjAzMTEwLwYDVQQD Eyg3YTNmMmRjYmZhYmU1YjMyOWI3Nzg3NzQ3ZDg5OWFhZmNkNGFkMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+CPoijWr/j/s4R2m2AaNPyZ9BdW CqPFDug5wCcQOw1T1vbfolnK82rVItnLUYiPkglnARoQgtjkdO/5RHGdnbuS4YEy /p4Lk/mmdDVXnh+7yvx/5OXhLDhrh2fRP39o+UzPdvMqW7UQpl4655QhR8bRXciR G7/TGvxRUJ0/NMQJnLrKJHhmtjz1leVhPWIktfCbZr6Hm24xDxmPDYaufJXnWQrr JKJF/IyYdJ9xZzlMN8V9jJPu78+EogAxfknRtlB4m1AW6OWYQTdtkHKtiNhp7y0c NH8i9kZCxwZhGFXNzv28IEQ8cZyMdMOjnEe5RfsR7oPMNV5LcBf8E2UKcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHo/Lcv6vlsym3eHdH2Jmq/NStF8MB8GA1UdIwQY MBaAFPS53Z40/mbXUTiQNwj4zh+9NC1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMt MjYyYmVjNzE3YjE3LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lY2FmNDQtMDhjYy00MWJiLTgxZDMtMjYyYmVjNzE3YjE3 LzEvOUxuZG5qVC1adGRST0pBM0NQak9INzAwTFdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtPC+OZa4 1s5A86AHfvle/FwNbDs2puDwCfx53EeP3vUmtWFWUt2DxXB1yjbJnYr6NnE/RBuy jq6U+924MyhrtxUOxW8j8PZpKXXKO6SSZxBbhj5gQxxLK7LphwPXdLZ5ikf8XPan 7a+VzeStzS4kJ3o91yODBDZ9c7FOfpiHjbEQdIwIeSghcEFn1LIKLFkD7DZ6Ckec Lo8GPOVkUXBKky3rKObConNC3Dw2zyfsU6bIHePMn7R7/vOrFVQpk5mEzx4Fzw/b 4YGt+9PC848Zaa4v6opFpIZcGnyrOjyOD+W4hXn4FbaSj3ZWiemSJfeanCV9Qq/+ iwcA6qGEzPH13Q== -----END CERTIFICATE-----Generated at Sun Dec 7 00:37:43 2025 by rpki-client