This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json) Hash identifier: U9ZqGmQvaKbAURylhrXgdD6JaCAUZGXi6c4+XhUs51E= Subject key identifier: 77:D1:26:D5:53:BF:C8:F7:72:76:30:74:6F:8A:23:5D:BC:DF:62:1D Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Certificate serial: 019B2EC22CE2D542859E2A20179EABF7702F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 00:00:35 +0000 Manifest this update: Thu 18 Dec 2025 00:00:35 +0000 Manifest next update: Fri 19 Dec 2025 00:00:35 +0000 Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=) 2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=) 3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: AWt5ezeUF+Iqr/GKiC6yeeBdj8SQrHoOs9S7xIRz8no=) 4: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (hash: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:2c:e2:d5:42:85:9e:2a:20:17:9e:ab:f7:70:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Validity Not Before: Dec 18 00:00:35 2025 GMT Not After : Dec 19 00:00:35 2025 GMT Subject: CN=77d126d553bfc8f7727630746f8a235dbcdf621d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5d:02:4a:5f:4e:47:21:ee:63:7e:a8:7d:a6: 9a:62:e7:c0:3e:93:e4:d9:cc:f2:50:69:8d:a2:30: c1:8e:74:ea:75:d5:8b:03:57:f4:38:a0:15:5d:9e: 42:bb:69:52:eb:18:b5:68:6a:05:4f:fc:12:1d:c5: 52:78:62:fe:d3:51:49:8d:56:ef:f0:d4:1c:20:a6: e9:a2:8b:f1:e3:69:56:0b:26:89:0c:b0:3c:48:70: 56:d9:2d:3f:4d:e6:8e:93:cf:df:46:f5:ea:0d:78: d2:6f:78:d5:2b:6c:0c:8c:15:ca:b6:95:09:8d:be: 3a:8a:f2:a0:ad:31:2d:6c:b1:82:cb:85:fd:cb:bb: 53:a4:32:6d:8f:49:41:ec:eb:c2:94:a3:a4:89:35: a2:ca:24:62:7d:2d:41:21:f0:1e:3a:59:1c:39:c1: 8f:d5:15:2f:4d:68:a5:05:8b:90:c0:1d:3a:97:fa: f9:c1:37:90:14:45:41:11:82:69:d9:de:46:3a:08: 39:d5:7d:d1:84:29:b7:29:71:0e:7d:88:ea:7e:de: df:17:12:10:ae:4c:6b:06:6d:8b:99:35:69:7f:a9: 10:fb:b9:b4:78:ad:a2:1b:f1:40:93:27:48:1f:c8: 2b:bd:4b:dd:53:be:46:16:5c:f7:c3:08:da:00:39: 34:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:D1:26:D5:53:BF:C8:F7:72:76:30:74:6F:8A:23:5D:BC:DF:62:1D X509v3 Authority Key Identifier: keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:b3:14:6d:93:80:eb:6a:65:ff:ee:f3:79:92:e6:be:cf:34: 64:f3:ab:85:e7:6b:3e:6a:10:2d:b0:55:5d:0f:24:09:63:bf: f2:2b:16:b5:a3:f4:2d:0c:fd:97:b0:69:87:9b:bf:1b:bb:54: 86:84:03:0b:b0:1e:2e:6f:f8:07:74:e0:8a:10:b6:9c:f9:f6: 17:fb:b4:52:f8:db:73:a8:2e:27:f9:ff:35:2e:bf:22:0a:51: d2:bd:48:97:54:73:15:fa:2b:27:2f:ac:ff:36:68:61:58:ae: 03:85:31:fc:f8:d2:76:52:1b:19:37:cf:5e:df:dc:97:56:c8: ea:99:9e:fe:34:f0:74:cf:14:a3:1b:21:da:95:28:71:ed:dc: 12:b1:b2:2e:17:69:65:da:17:b3:9d:f4:fb:2a:c7:e3:86:3b: 89:08:f2:f4:3f:72:6d:f9:87:70:76:64:ea:85:80:de:bb:b2: 6d:58:43:f3:3d:df:4e:ea:92:1e:44:d3:7b:2c:d4:5f:76:ae: 03:21:cd:fb:cd:b3:c4:87:15:5c:1f:7a:30:c8:ab:ba:12:57: ae:3d:33:94:ad:8b:5c:64:a4:aa:66:f3:49:a2:98:dc:a5:80: e9:39:4d:af:ac:73:0e:1e:a5:05:25:7b:c7:fa:3d:eb:9f:2c: d9:82:8e:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwizi1UKFniogF56r93AvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3 NmRhOTUwHhcNMjUxMjE4MDAwMDM1WhcNMjUxMjE5MDAwMDM1WjAzMTEwLwYDVQQD Eyg3N2QxMjZkNTUzYmZjOGY3NzI3NjMwNzQ2ZjhhMjM1ZGJjZGY2MjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V0CSl9ORyHuY36ofaaaYufAPpPk 2czyUGmNojDBjnTqddWLA1f0OKAVXZ5Cu2lS6xi1aGoFT/wSHcVSeGL+01FJjVbv 8NQcIKbpoovx42lWCyaJDLA8SHBW2S0/TeaOk8/fRvXqDXjSb3jVK2wMjBXKtpUJ jb46ivKgrTEtbLGCy4X9y7tTpDJtj0lB7OvClKOkiTWiyiRifS1BIfAeOlkcOcGP 1RUvTWilBYuQwB06l/r5wTeQFEVBEYJp2d5GOgg51X3RhCm3KXEOfYjqft7fFxIQ rkxrBm2LmTVpf6kQ+7m0eK2iG/FAkydIH8grvUvdU75GFlz3wwjaADk09QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHfRJtVTv8j3cnYwdG+KI12832IdMB8GA1UdIwQY MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAubMUbZOA 62pl/+7zeZLmvs80ZPOrhedrPmoQLbBVXQ8kCWO/8isWtaP0LQz9l7Bph5u/G7tU hoQDC7AeLm/4B3TgihC2nPn2F/u0Uvjbc6guJ/n/NS6/IgpR0r1Il1RzFforJy+s /zZoYViuA4Ux/PjSdlIbGTfPXt/cl1bI6pme/jTwdM8Uoxsh2pUoce3cErGyLhdp ZdoXs530+yrH44Y7iQjy9D9ybfmHcHZk6oWA3ruybVhD8z3fTuqSHkTTeyzUX3au AyHN+82zxIcVXB96MMiruhJXrj0zlK2LXGSkqmbzSaKY3KWA6TlNr6xzDh6lBSV7 x/o9658s2YKOoQ== -----END CERTIFICATE-----Generated at Thu Dec 18 05:45:28 2025 by rpki-client