This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft File: 9KWwQv5I7rEjvlbb-ejdogweoR0.mft (raw, json) Hash identifier: IKcGcdSBIqiKKAcsLre8TKk0Z7J73fGvNQ1gyAJN0xI= Subject key identifier: E6:54:8E:F3:38:34:68:2F:43:8B:E6:E4:80:FB:D9:A8:FF:24:4F:C4 Authority key identifier: F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D Certificate issuer: /CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Certificate serial: 019AF276C698307FC8AE3DB296E3D56767DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 07:01:01 +0000 Manifest this update: Sat 06 Dec 2025 07:01:01 +0000 Manifest next update: Sun 07 Dec 2025 07:01:01 +0000 Files and hashes: 1: 9KWwQv5I7rEjvlbb-ejdogweoR0.crl (hash: UO9C2pATQ8vg5VWrDsgV3fX71xYiB1fWgYjym5UYQQU=) 2: BKaKCrIWJLW3Q862BmZ-Z-FQI78.roa (hash: zGv7kfCx9AyBiy/Vt4g16r88DKiDMl7S2RsrkRbPYxA=) 3: U6yxYsRAOLx1rVOUMfl1bHjQTqE.roa (hash: p5afCkYVQi7asNinB13X4z3pkTkHpo8/a9b5lnTy5To=) 4: hlFLNTPKu_nVGF692xwIYmZW2GU.roa (hash: c5Q2Sew+Iis+NOcJWfVvfa4Ocr0QgEd2RYjfl4HhWNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:c6:98:30:7f:c8:ae:3d:b2:96:e3:d5:67:67:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4a5b042fe48eeb123be56dbf9e8dda20c1ea11d Validity Not Before: Dec 6 07:01:01 2025 GMT Not After : Dec 7 07:01:01 2025 GMT Subject: CN=e6548ef33834682f438be6e480fbd9a8ff244fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:88:a5:35:60:b0:b4:80:8e:0e:2b:2d:d6:20: 19:5d:c1:0a:b5:87:e1:df:0f:fc:ce:6c:d6:49:35: 0c:8b:db:ee:dc:aa:50:7e:10:8b:d2:57:4f:cc:cf: 43:3b:fb:14:3d:8f:48:0c:99:9d:9d:26:14:df:01: e2:2c:7e:3a:be:1f:70:7c:b7:77:64:11:b6:f0:18: 75:d3:b7:15:2e:a6:8c:5e:c9:69:8f:a8:d2:7b:40: 7f:72:29:be:e5:cf:12:48:c0:2c:69:77:bc:91:ad: 4e:6b:1a:35:85:e6:34:39:41:65:ca:dd:05:7c:3f: ed:74:da:ae:d3:f8:c7:da:77:29:e6:02:d3:97:b5: 46:ca:98:56:36:c1:aa:6f:ad:0e:00:d1:86:31:38: 12:c5:97:e7:d4:0a:e4:43:b7:d4:05:93:18:37:f5: 3e:4a:d6:43:79:f7:20:aa:62:9c:14:81:26:80:f8: 6e:fe:2e:d4:24:32:ed:37:df:76:62:37:10:0b:1e: 03:b0:db:85:66:a4:8d:9a:fe:32:00:82:8f:9c:e2: cb:1d:d5:9b:95:85:ba:48:bc:f2:70:ce:8b:89:f5: 1f:c5:8e:32:d6:12:f1:65:c6:90:89:a4:00:e9:e5: c9:c5:da:32:71:f9:e0:74:a6:0e:73:ec:15:a9:29: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:54:8E:F3:38:34:68:2F:43:8B:E6:E4:80:FB:D9:A8:FF:24:4F:C4 X509v3 Authority Key Identifier: keyid:F4:A5:B0:42:FE:48:EE:B1:23:BE:56:DB:F9:E8:DD:A2:0C:1E:A1:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KWwQv5I7rEjvlbb-ejdogweoR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/389231-2b5f-4c9e-941d-b4b28437fe6c/1/9KWwQv5I7rEjvlbb-ejdogweoR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f6:8d:72:b4:52:f9:e0:a4:ee:d9:01:c3:67:00:6b:41:a4: 12:5e:5c:a7:8b:19:1f:bf:f1:eb:df:84:b0:4e:ad:21:91:dd: 37:84:6d:85:d2:29:a9:76:c0:41:e7:a2:3e:5e:87:f7:7d:14: 76:d1:30:df:e1:30:d6:8c:d5:89:54:43:5c:00:6d:fa:0f:91: 89:81:3d:f7:f0:bf:26:64:ad:08:b0:3f:60:04:38:63:45:8f: 44:1b:4d:c2:53:7b:a4:51:ef:a2:a0:68:57:e9:64:bc:61:76: 76:c6:66:60:f9:bc:e4:b9:6d:b0:33:cd:ee:c8:46:aa:d9:af: 6f:65:a6:3b:1d:6d:00:46:e1:c5:9d:a2:3d:09:75:4e:9c:a4: a1:ab:9c:fd:47:5a:4a:4c:d3:4c:d7:0b:1d:c9:b7:08:fd:56: b5:bd:dd:75:cb:ff:06:9d:6e:2f:f1:bf:24:0a:34:e1:6d:b5: 38:0a:26:65:93:dc:85:18:ce:d8:07:67:94:5d:b1:67:42:1b: b3:2f:66:2e:b3:27:c4:47:7c:ad:93:24:f6:8e:6e:79:3b:e2: ff:16:61:fb:af:54:90:06:b1:4b:00:d5:17:3f:fc:b7:b2:f0: ab:56:98:a0:38:1f:7f:84:f6:87:ad:23:d6:1d:f9:0d:7e:9b: 46:f6:9c:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydsaYMH/Irj2yluPVZ2ffMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YTViMDQyZmU0OGVlYjEyM2JlNTZkYmY5ZThkZGEyMGMx ZWExMWQwHhcNMjUxMjA2MDcwMTAxWhcNMjUxMjA3MDcwMTAxWjAzMTEwLwYDVQQD EyhlNjU0OGVmMzM4MzQ2ODJmNDM4YmU2ZTQ4MGZiZDlhOGZmMjQ0ZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oilNWCwtICODist1iAZXcEKtYfh 3w/8zmzWSTUMi9vu3KpQfhCL0ldPzM9DO/sUPY9IDJmdnSYU3wHiLH46vh9wfLd3 ZBG28Bh107cVLqaMXslpj6jSe0B/cim+5c8SSMAsaXe8ka1Oaxo1heY0OUFlyt0F fD/tdNqu0/jH2ncp5gLTl7VGyphWNsGqb60OANGGMTgSxZfn1ArkQ7fUBZMYN/U+ StZDefcgqmKcFIEmgPhu/i7UJDLtN992YjcQCx4DsNuFZqSNmv4yAIKPnOLLHdWb lYW6SLzycM6LifUfxY4y1hLxZcaQiaQA6eXJxdoycfngdKYOc+wVqSkESQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZUjvM4NGgvQ4vm5ID72aj/JE/EMB8GA1UdIwQY MBaAFPSlsEL+SO6xI75W2/no3aIMHqEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQt YjRiMjg0MzdmZTZjLzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zODkyMzEtMmI1Zi00YzllLTk0MWQtYjRiMjg0MzdmZTZj LzEvOUtXd1F2NUk3ckVqdmxiYi1lamRvZ3dlb1IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvaNcrRS +eCk7tkBw2cAa0GkEl5cp4sZH7/x69+EsE6tIZHdN4RthdIpqXbAQeeiPl6H930U dtEw3+Ew1ozViVRDXABt+g+RiYE99/C/JmStCLA/YAQ4Y0WPRBtNwlN7pFHvoqBo V+lkvGF2dsZmYPm85LltsDPN7shGqtmvb2WmOx1tAEbhxZ2iPQl1Tpykoauc/Uda SkzTTNcLHcm3CP1Wtb3ddcv/Bp1uL/G/JAo04W21OAomZZPchRjO2AdnlF2xZ0Ib sy9mLrMnxEd8rZMk9o5ueTvi/xZh+69UkAaxSwDVFz/8t7Lwq1aYoDgff4T2h60j 1h35DX6bRvacaw== -----END CERTIFICATE-----Generated at Sat Dec 6 14:46:53 2025 by rpki-client