This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: rQtf+p1+H3m/AHzlv4TnwJioJLRjSVoXai/yt7vD3MU= Subject key identifier: 25:26:DC:0F:C7:39:BF:6E:47:D6:F1:A8:E7:30:7E:FA:FC:A0:5E:B9 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019AF509F184DCEEC610417016C7A44F3E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 0F7D Signing time: Sat 06 Dec 2025 19:01:00 +0000 Manifest this update: Sat 06 Dec 2025 19:01:00 +0000 Manifest next update: Sun 07 Dec 2025 19:01:00 +0000 Files and hashes: 1: 1-FnvQqT9mIqxipsRqFjYsNQSlBM.roa (hash: +uFY0K06aPvv+IH1erLogXQwEEO2k+DY8eNZLIXFHV4=) 2: 3gHc2sELy-q8GzBNb0pGNEAUeSU.roa (hash: +uoA4jjzPF6dggZHTrB3SBkyhtONGCYmRKaDkDvy7ys=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: H1gqQfeDNAz1yOT15ofzjTp33AFLrZulSB71ygjrpb8=) 4: EpH20P4xP3V2g4vErHJO-EvTAVU.roa (hash: jeooPDRiBjDAUPoIXhITPTt2zTmHZ7KLWf5fCQG5sIo=) 5: RMDB6gMXfrtTmWIrc-eFyDWvjA8.roa (hash: GVzUypSd1fZNP3R7rqeVrhxf+B3I3xeeeYXchU/dNhc=) 6: SI90qQvScrNKS-02paw66Vtte1g.roa (hash: CoRUrg+WB47FS25HKQ2HVa4e+itGukiRC6ZwlYviHec=) 7: VunL007YcgdB0SQwEVqZksZS8Fs.roa (hash: 216WPQB/uK03AqzN7nO6bEUvYIaYzP3vD9//CYpZtZI=) 8: mvmUvaM2JRysTq3IiKyyysU6GY8.roa (hash: dMiGawP2eEnw55fXqAakbpr7IIQ2Da7zAMRfk+xhjuE=) 9: xfkDaLGtqI9S0koDwH1ibKq86PQ.roa (hash: 9SMgRbgNtClui+eod+bviRGqIN366+5FDeHZRxM9wm0=) 10: yIehYePK6tLNgPSevPZc6yI-hyM.roa (hash: b4yVl+3Ck0JmNj4X3LbJqBzo9dAh1Vn8oWFOm89Ahv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:f1:84:dc:ee:c6:10:41:70:16:c7:a4:4f:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Dec 6 19:01:00 2025 GMT Not After : Dec 7 19:01:00 2025 GMT Subject: CN=2526dc0fc739bf6e47d6f1a8e7307efafca05eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:82:31:2d:01:11:75:b5:b4:e7:7f:e2:0c:c3: 76:f9:35:9e:82:be:98:dc:88:bf:5a:c7:76:ed:e1: 7f:93:8a:f3:be:7c:53:c0:72:12:05:3f:a7:68:88: a2:ca:af:41:2c:6b:be:ea:b3:73:44:72:44:9d:23: c9:2b:6d:2a:ce:03:bf:09:68:a2:dd:82:bb:5f:34: cf:41:83:b2:b4:e7:9f:db:d3:54:f1:88:a0:12:e7: af:b8:a7:e6:e0:b8:da:15:c5:15:7f:ab:cb:14:d9: 90:06:0e:85:70:41:3f:0c:51:00:e7:17:be:2c:a1: e8:2b:ae:25:95:fd:61:b0:a1:8c:e6:0b:76:79:2d: cc:5d:f7:ea:48:a1:7a:47:de:b2:e2:86:de:08:59: 19:9b:f6:51:65:c7:05:65:7f:e1:8b:7b:f8:63:a9: 42:bd:3d:a3:d6:2b:12:da:45:6a:95:da:63:03:3c: f1:60:ed:f5:a9:35:11:8c:bd:bb:82:c0:89:3b:19: e8:ef:4c:09:79:10:e9:58:ec:78:d3:fb:58:36:39: 1a:37:ee:b4:8a:a9:2a:3e:f7:d7:0c:ec:67:28:91: 37:3f:45:dd:a3:b7:b5:3c:29:73:93:7b:77:a0:03: f5:8e:e8:a9:3f:10:89:94:32:2b:76:c6:bb:13:bf: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:DC:0F:C7:39:BF:6E:47:D6:F1:A8:E7:30:7E:FA:FC:A0:5E:B9 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:4d:14:70:86:d1:7e:ba:f7:36:4c:5d:bd:97:47:0b:11:9e: ab:7d:93:11:fb:f4:5f:f8:e0:3d:62:ab:ae:51:82:a6:79:d7: f2:7a:74:7e:31:30:bb:3a:14:07:a7:58:a4:b8:f6:2a:48:49: 31:83:d9:0e:8c:43:1d:ee:e2:f9:9a:67:21:25:14:5e:cc:ac: 2a:fc:74:4b:de:b2:53:c2:d1:18:f5:6a:a9:5f:4d:22:84:76: 54:20:18:10:49:7b:de:27:43:3e:75:4a:d1:0d:19:be:87:6c: b3:52:2e:60:2f:0d:50:f9:9d:ad:85:9b:7b:b8:e5:e4:11:2d: 53:a2:4c:b2:a8:33:e2:70:ba:8d:ac:32:49:30:fd:7d:87:5e: 9e:89:2a:b4:d4:53:13:fe:34:86:ef:f9:b4:f0:30:c5:6e:11: 04:c2:95:97:8d:3d:69:ca:8c:8c:6a:43:a1:d6:75:8f:64:18: 53:91:fa:c8:06:5d:43:a1:48:c5:5d:a4:69:1a:df:28:b0:ca: 12:51:a7:53:bb:e7:f9:2b:cb:9e:1b:52:25:59:24:f9:58:77: ba:78:9d:6d:e1:66:b9:5c:db:b7:9a:12:2a:52:98:72:f4:e4: 37:9d:b2:64:cf:54:04:0e:d9:55:d2:f4:4d:cd:dc:28:0c:d4: 49:e5:3c:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CfGE3O7GEEFwFsekTz5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjUxMjA2MTkwMTAwWhcNMjUxMjA3MTkwMTAwWjAzMTEwLwYDVQQD EygyNTI2ZGMwZmM3MzliZjZlNDdkNmYxYThlNzMwN2VmYWZjYTA1ZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4IxLQERdbW053/iDMN2+TWegr6Y 3Ii/Wsd27eF/k4rzvnxTwHISBT+naIiiyq9BLGu+6rNzRHJEnSPJK20qzgO/CWii 3YK7XzTPQYOytOef29NU8YigEuevuKfm4LjaFcUVf6vLFNmQBg6FcEE/DFEA5xe+ LKHoK64llf1hsKGM5gt2eS3MXffqSKF6R96y4obeCFkZm/ZRZccFZX/hi3v4Y6lC vT2j1isS2kVqldpjAzzxYO31qTURjL27gsCJOxno70wJeRDpWOx40/tYNjkaN+60 iqkqPvfXDOxnKJE3P0Xdo7e1PClzk3t3oAP1juipPxCJlDIrdsa7E79e+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUm3A/HOb9uR9bxqOcwfvr8oF65MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX00UcIbR frr3NkxdvZdHCxGeq32TEfv0X/jgPWKrrlGCpnnX8np0fjEwuzoUB6dYpLj2KkhJ MYPZDoxDHe7i+ZpnISUUXsysKvx0S96yU8LRGPVqqV9NIoR2VCAYEEl73idDPnVK 0Q0Zvodss1IuYC8NUPmdrYWbe7jl5BEtU6JMsqgz4nC6jawySTD9fYdenokqtNRT E/40hu/5tPAwxW4RBMKVl409acqMjGpDodZ1j2QYU5H6yAZdQ6FIxV2kaRrfKLDK ElGnU7vn+SvLnhtSJVkk+Vh3unidbeFmuVzbt5oSKlKYcvTkN52yZM9UBA7ZVdL0 Tc3cKAzUSeU8rQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:14:36 2025 by rpki-client