This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft File: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft (raw, json) Hash identifier: TEZ3MBs06N8/VsNfzn14UZ12q7uIwE5YfqEAWjgRTO8= Subject key identifier: 7C:E9:A5:4E:D7:31:40:52:9A:8A:CB:D5:F7:19:46:DF:B1:D8:B3:71 Authority key identifier: F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04 Certificate issuer: /CN=f5450c6376655eec1dd2da4bd21d5f104a96d904 Certificate serial: 019AF42DD6B08BC11534D74262CB2ED7D255 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft Manifest number: 171F Signing time: Sat 06 Dec 2025 15:00:36 +0000 Manifest this update: Sat 06 Dec 2025 15:00:36 +0000 Manifest next update: Sun 07 Dec 2025 15:00:36 +0000 Files and hashes: 1: 9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl (hash: x/QLSIDrUr7LwZSRdYIaXx0GqpKt2OKafVfkL4VHsWc=) 2: As_EZ-RvP3qi1sws1jil8dnna6k.roa (hash: OtrJo+OCLnikRPWLn5xnNsduIJXUQk6NGSjartknylA=) 3: MSgwMQBVeKrb-aSmClVXWXeIrYA.roa (hash: QNReZgAEU8FQp9RxZ7cqr3S4KzJDn6XR61dqK9DUir4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:d6:b0:8b:c1:15:34:d7:42:62:cb:2e:d7:d2:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5450c6376655eec1dd2da4bd21d5f104a96d904 Validity Not Before: Dec 6 15:00:36 2025 GMT Not After : Dec 7 15:00:36 2025 GMT Subject: CN=7ce9a54ed73140529a8acbd5f71946dfb1d8b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0c:68:63:0b:5e:f4:7a:64:5b:f7:65:f9:42: 3e:8e:05:c5:08:97:c2:96:b8:7d:59:f0:85:54:87: 5c:3b:d0:80:21:0e:6f:78:3c:22:77:fd:06:47:d8: 30:e6:23:01:79:97:18:a7:0d:90:77:0f:ab:18:aa: 19:bb:71:35:03:7e:07:90:e8:e9:61:05:31:2e:fe: a5:6e:eb:a2:15:a6:5a:22:f0:ae:d8:68:13:71:75: 24:b3:39:dd:bb:7f:8d:6e:10:f6:d5:94:1a:ba:e8: b3:6e:32:f3:0a:74:ee:ff:af:b6:30:b6:7c:75:bb: 8e:c3:33:2a:30:da:07:aa:62:b9:6a:1d:6b:9e:e6: 0f:7f:ae:cf:89:3b:cf:53:02:00:17:28:ca:4a:72: be:0c:5a:63:28:08:31:69:86:06:5d:c4:5f:3e:d4: 5b:4a:f4:fc:8e:ae:6a:22:9a:fb:63:cc:06:6c:c3: 25:49:bb:59:3e:6f:8a:97:7d:38:8f:3b:78:f5:7c: 27:7d:84:82:b9:19:f8:3c:d1:ec:19:83:e1:5b:d5: 3f:ed:22:e7:90:0d:5d:d2:84:79:fa:17:bf:d4:5c: b8:d8:35:d6:b4:f8:08:a4:71:e0:c4:fc:f6:9a:75: d1:c6:f3:55:b4:09:bc:a8:22:7c:60:6d:c0:2a:26: 47:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E9:A5:4E:D7:31:40:52:9A:8A:CB:D5:F7:19:46:DF:B1:D8:B3:71 X509v3 Authority Key Identifier: keyid:F5:45:0C:63:76:65:5E:EC:1D:D2:DA:4B:D2:1D:5F:10:4A:96:D9:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b122b0-d461-409d-bbd8-6d1f60543e9c/1/9UUMY3ZlXuwd0tpL0h1fEEqW2QQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a4:d0:01:5b:2a:8e:c9:c2:84:5d:d4:f5:0f:a2:55:3e:b6: a9:59:ab:8d:a2:88:72:2c:f0:d2:39:c7:18:07:47:3a:14:87: 79:ca:68:b3:b4:c3:9b:70:f7:d6:39:62:34:9a:49:62:07:0c: d4:31:d4:20:fd:51:c6:f5:91:83:9c:f3:73:45:f5:fd:cc:80: 00:c7:f1:11:12:26:3c:ae:64:e1:fe:44:f4:d4:57:7f:b8:e5: 5e:64:4f:4f:86:42:8f:f2:81:be:c0:40:5b:fb:67:bc:0a:d6: d7:50:4d:49:d5:18:b3:55:e6:4b:ae:d7:3a:a0:f0:1e:6a:85: 8c:a8:20:d6:f0:f0:07:63:4e:70:e1:54:31:4d:20:1d:c5:97: 36:92:10:2e:25:17:fd:43:c2:38:eb:06:b8:aa:ba:91:7b:2a: 9f:1a:a9:74:0a:e4:65:c2:88:34:8a:e9:e2:79:e8:cc:2b:de: f9:4d:1b:5d:3e:e1:28:51:eb:8a:62:f2:99:07:aa:83:c8:78: e5:09:0c:4c:b5:bd:21:6a:00:a5:5b:b1:21:b3:48:dc:a0:ff: d2:74:3d:ec:4e:0b:e2:9b:e1:eb:65:7e:fc:87:66:18:41:ae: 5b:73:c7:52:80:f2:5e:c0:98:6e:4e:a6:33:b3:cb:3d:8b:97: 15:4c:4a:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Ldawi8EVNNdCYssu19JVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NDUwYzYzNzY2NTVlZWMxZGQyZGE0YmQyMWQ1ZjEwNGE5 NmQ5MDQwHhcNMjUxMjA2MTUwMDM2WhcNMjUxMjA3MTUwMDM2WjAzMTEwLwYDVQQD Eyg3Y2U5YTU0ZWQ3MzE0MDUyOWE4YWNiZDVmNzE5NDZkZmIxZDhiMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwxoYwte9HpkW/dl+UI+jgXFCJfC lrh9WfCFVIdcO9CAIQ5veDwid/0GR9gw5iMBeZcYpw2Qdw+rGKoZu3E1A34HkOjp YQUxLv6lbuuiFaZaIvCu2GgTcXUkszndu3+NbhD21ZQauuizbjLzCnTu/6+2MLZ8 dbuOwzMqMNoHqmK5ah1rnuYPf67PiTvPUwIAFyjKSnK+DFpjKAgxaYYGXcRfPtRb SvT8jq5qIpr7Y8wGbMMlSbtZPm+Kl304jzt49XwnfYSCuRn4PNHsGYPhW9U/7SLn kA1d0oR5+he/1Fy42DXWtPgIpHHgxPz2mnXRxvNVtAm8qCJ8YG3AKiZHqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzppU7XMUBSmorL1fcZRt+x2LNxMB8GA1UdIwQY MBaAFPVFDGN2ZV7sHdLaS9IdXxBKltkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgt NmQxZjYwNTQzZTljLzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iMTIyYjAtZDQ2MS00MDlkLWJiZDgtNmQxZjYwNTQzZTlj LzEvOVVVTVkzWmxYdXdkMHRwTDBoMWZFRXFXMlFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKTQAVsq jsnChF3U9Q+iVT62qVmrjaKIcizw0jnHGAdHOhSHecpos7TDm3D31jliNJpJYgcM 1DHUIP1RxvWRg5zzc0X1/cyAAMfxERImPK5k4f5E9NRXf7jlXmRPT4ZCj/KBvsBA W/tnvArW11BNSdUYs1XmS67XOqDwHmqFjKgg1vDwB2NOcOFUMU0gHcWXNpIQLiUX /UPCOOsGuKq6kXsqnxqpdArkZcKINIrp4nnozCve+U0bXT7hKFHrimLymQeqg8h4 5QkMTLW9IWoApVuxIbNI3KD/0nQ97E4L4pvh62V+/IdmGEGuW3PHUoDyXsCYbk6m M7PLPYuXFUxK6w== -----END CERTIFICATE-----Generated at Sun Dec 7 00:20:10 2025 by rpki-client