This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft File: 9PerRYfmkCLl4rwkEHtQHQMcNyA.mft (raw, json) Hash identifier: Eb/mjxY0JZNYG/ig0Xb7TM54ZMs+l+BxAh2yMSKxYTY= Subject key identifier: A7:B3:6A:53:31:7B:EF:F4:57:30:BB:15:24:15:C7:BC:DC:F1:AF:A4 Authority key identifier: F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 Certificate issuer: /CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Certificate serial: 019AFBB12FC1316D4D70D6B0A0E91E539A1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft Manifest number: 176F Signing time: Mon 08 Dec 2025 02:01:24 +0000 Manifest this update: Mon 08 Dec 2025 02:01:24 +0000 Manifest next update: Tue 09 Dec 2025 02:01:24 +0000 Files and hashes: 1: 9PerRYfmkCLl4rwkEHtQHQMcNyA.crl (hash: HF+3zIkItsTguJU3x3GHd0eUYfKmjTVX+dbmB6Y6BqU=) 2: HjzoahI6pyoFvP1ahRTakCdHZL4.roa (hash: gQHNv9As0iCn+ZAtcLVQ3zoAJ3Ne/2k5eR6SdkKMktQ=) 3: bH_KNyzPL_yx3OPEWTRFLsAi8nE.roa (hash: 72jCdlITtcwR18704/NTzfyeqmvwBsSw2iB9YQtGN+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:b1:2f:c1:31:6d:4d:70:d6:b0:a0:e9:1e:53:9a:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f7ab4587e69022e5e2bc24107b501d031c3720 Validity Not Before: Dec 8 02:01:24 2025 GMT Not After : Dec 9 02:01:24 2025 GMT Subject: CN=a7b36a53317beff45730bb152415c7bcdcf1afa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:30:2e:3b:44:f7:21:b4:bb:87:b9:18:a4:3b: ee:ff:8f:87:4e:6c:d0:4d:da:0d:13:a2:9e:cd:0a: 4c:e8:de:35:24:e5:55:a0:1a:cd:ca:da:86:e3:35: f8:ad:90:a3:0e:ff:f0:97:51:b8:63:c4:0e:d5:a0: f9:ee:70:11:c0:0b:ff:58:a6:c1:8e:08:b7:c2:24: 91:75:f2:df:35:49:5a:4a:a6:e8:69:c9:d2:a2:e6: 52:91:20:67:56:bf:24:55:9a:2b:4a:f5:f8:dd:42: 21:f5:4e:ba:24:41:56:19:c2:56:43:cb:1d:4a:83: 4d:be:4c:5a:89:1b:c3:dd:0c:07:b1:44:6e:2e:53: 80:2f:d3:a7:be:83:8c:c1:18:b9:e4:42:b5:bd:9c: 46:46:cf:56:c9:40:e8:01:25:b8:f3:13:da:cd:db: 85:5d:70:0b:62:95:df:37:52:10:66:6c:b1:df:e0: 84:69:d8:c6:22:e9:38:cd:cc:4d:61:e3:d9:91:9e: 7e:4f:7f:12:ba:c6:14:7f:75:03:26:c2:11:76:12: ea:3a:05:3b:d4:17:16:85:f9:9f:e1:12:5f:dc:83: 6a:09:21:41:2a:c5:06:82:c8:98:20:8e:a4:f5:b1: 36:29:2e:71:42:41:29:07:1f:16:df:35:9f:88:0c: 76:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:B3:6A:53:31:7B:EF:F4:57:30:BB:15:24:15:C7:BC:DC:F1:AF:A4 X509v3 Authority Key Identifier: keyid:F4:F7:AB:45:87:E6:90:22:E5:E2:BC:24:10:7B:50:1D:03:1C:37:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PerRYfmkCLl4rwkEHtQHQMcNyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/77f4f0-b833-47b7-a3c7-ef710ec7b2fe/1/9PerRYfmkCLl4rwkEHtQHQMcNyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ee:81:f1:5a:b5:c1:2f:78:57:69:6b:d7:98:cc:44:fa:c2: ff:e8:52:4c:e6:5b:ce:57:ab:17:c1:5b:52:d9:0d:b5:a9:5c: 53:67:a3:81:9e:dc:6a:c7:bb:fa:58:56:b4:0b:f7:95:6b:b1: c0:63:c3:fd:88:93:ee:aa:63:2a:d8:e2:e0:c1:39:ed:ce:56: 9b:29:49:8d:e2:6b:09:51:07:33:70:11:c8:9a:69:63:c8:0d: 54:0e:0a:a3:bf:71:69:99:a2:00:fc:2f:93:1a:aa:97:75:31: 64:d4:7c:e6:df:b6:2b:9a:a5:e7:9a:ff:cf:c4:fe:1c:ed:92: 34:6b:d1:bf:91:d7:48:83:f3:c9:44:8e:35:56:50:be:ea:73: 3f:56:54:19:d5:e9:db:c3:43:15:fa:08:03:f6:5c:1e:3e:8e: b8:4d:18:fa:c9:e7:0d:10:db:2e:34:a4:d3:b4:cd:63:d1:6e: e0:7c:34:56:d0:e8:4f:56:bc:41:35:e2:e0:cb:35:b6:8c:18: 24:0c:e3:ec:b1:19:05:16:f0:00:34:59:42:80:4e:b6:59:6f: dd:2b:32:99:d6:47:87:05:a9:00:56:1e:1e:bb:e6:2d:71:3f: e1:b5:1a:d1:5c:56:c0:39:95:97:ff:3d:26:22:bd:88:df:b5: f5:63:4a:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7sS/BMW1NcNawoOkeU5obMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjdhYjQ1ODdlNjkwMjJlNWUyYmMyNDEwN2I1MDFkMDMx YzM3MjAwHhcNMjUxMjA4MDIwMTI0WhcNMjUxMjA5MDIwMTI0WjAzMTEwLwYDVQQD EyhhN2IzNmE1MzMxN2JlZmY0NTczMGJiMTUyNDE1YzdiY2RjZjFhZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojAuO0T3IbS7h7kYpDvu/4+HTmzQ TdoNE6KezQpM6N41JOVVoBrNytqG4zX4rZCjDv/wl1G4Y8QO1aD57nARwAv/WKbB jgi3wiSRdfLfNUlaSqboacnSouZSkSBnVr8kVZorSvX43UIh9U66JEFWGcJWQ8sd SoNNvkxaiRvD3QwHsURuLlOAL9OnvoOMwRi55EK1vZxGRs9WyUDoASW48xPazduF XXALYpXfN1IQZmyx3+CEadjGIuk4zcxNYePZkZ5+T38SusYUf3UDJsIRdhLqOgU7 1BcWhfmf4RJf3INqCSFBKsUGgsiYII6k9bE2KS5xQkEpBx8W3zWfiAx2awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKezalMxe+/0VzC7FSQVx7zc8a+kMB8GA1UdIwQY MBaAFPT3q0WH5pAi5eK8JBB7UB0DHDcgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzct ZWY3MTBlYzdiMmZlLzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83N2Y0ZjAtYjgzMy00N2I3LWEzYzctZWY3MTBlYzdiMmZl LzEvOVBlclJZZm1rQ0xsNHJ3a0VIdFFIUU1jTnlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVe6B8Vq1 wS94V2lr15jMRPrC/+hSTOZbzlerF8FbUtkNtalcU2ejgZ7case7+lhWtAv3lWux wGPD/YiT7qpjKtji4ME57c5WmylJjeJrCVEHM3ARyJppY8gNVA4Ko79xaZmiAPwv kxqql3UxZNR85t+2K5ql55r/z8T+HO2SNGvRv5HXSIPzyUSONVZQvupzP1ZUGdXp 28NDFfoIA/ZcHj6OuE0Y+snnDRDbLjSk07TNY9Fu4Hw0VtDoT1a8QTXi4Ms1towY JAzj7LEZBRbwADRZQoBOtllv3SsymdZHhwWpAFYeHrvmLXE/4bUa0VxWwDmVl/89 JiK9iN+19WNKCQ== -----END CERTIFICATE-----Generated at Mon Dec 8 09:37:58 2025 by rpki-client