This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json) Hash identifier: SwfhHLXY6h4y/Pl3N3eU4Vnq8I/Ah6IeZFDDFfg5dqk= Subject key identifier: 73:49:7B:93:2B:ED:86:EE:5C:4F:F9:F8:09:88:EA:66:2B:7A:F8:AF Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Certificate serial: 019AF2E42A12EA37D41E4DD1E0C12556B547 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 09:00:30 +0000 Manifest this update: Sat 06 Dec 2025 09:00:30 +0000 Manifest next update: Sun 07 Dec 2025 09:00:30 +0000 Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=) 2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=) 3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: H02Smsf8lpqF5OdfB5Gm8cl4vOlUkGjN152BHiNDgaQ=) 4: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (hash: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2a:12:ea:37:d4:1e:4d:d1:e0:c1:25:56:b5:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Validity Not Before: Dec 6 09:00:30 2025 GMT Not After : Dec 7 09:00:30 2025 GMT Subject: CN=73497b932bed86ee5c4ff9f80988ea662b7af8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1d:5a:ae:39:3d:46:64:1f:12:68:6d:69:49: 37:02:a5:5b:fd:7b:d9:e5:ef:ee:45:45:5c:fc:30: d1:97:90:a6:3a:ea:d3:dc:74:ce:c0:8f:ea:7b:0b: 10:60:77:30:b9:59:91:fc:a6:28:35:96:e4:23:17: d9:45:d6:48:05:70:72:9b:2a:ad:40:97:85:6a:31: cb:c8:48:c4:70:38:da:6e:ed:0f:81:24:f4:f4:27: 89:fa:c1:0d:62:22:d4:1c:67:5b:c6:e9:0b:32:ed: f2:f0:76:fc:4b:5f:9f:19:f2:65:a9:d2:1e:fc:87: a2:5e:7d:9c:7b:77:37:2a:7f:69:4c:c4:99:2d:b8: 08:4f:26:78:57:f7:e2:05:4c:b3:bc:36:1e:38:93: 88:fa:d9:95:c8:4d:8d:1c:06:3a:9f:03:ee:4a:2d: b4:d6:60:f2:b3:d1:f2:06:d7:81:28:4f:31:ee:b2: 7d:68:5b:50:38:95:50:24:2d:49:4e:5f:2d:87:bf: 1b:f3:d5:78:cf:48:80:c0:b9:86:db:9e:2d:4c:af: 36:3a:ef:e8:e5:0b:19:4f:a0:41:36:a4:c0:0e:95: 9d:70:bc:76:22:d9:bf:64:29:02:de:d6:2c:5c:da: 78:dc:f7:aa:34:fd:c6:7b:e5:ab:2e:b0:e2:8e:eb: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:49:7B:93:2B:ED:86:EE:5C:4F:F9:F8:09:88:EA:66:2B:7A:F8:AF X509v3 Authority Key Identifier: keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:3f:a4:b3:f7:5b:1d:53:dc:68:43:f9:48:c7:e1:25:7e:b8: e9:cf:49:1e:ca:74:9d:24:a8:2c:a6:dc:2f:dd:92:96:e7:cf: 71:2e:34:63:d5:ee:e6:8a:36:3d:e6:55:5d:81:ec:66:6c:f8: f2:d6:17:ef:37:a0:a8:ab:72:5a:36:95:f4:ec:19:01:b8:c2: 6d:cd:31:3b:3a:d8:82:83:a5:8a:31:78:58:77:54:dd:39:0c: 5f:c5:9f:a1:af:93:81:b1:86:03:d4:21:36:62:59:e8:2a:97: 2b:86:80:1d:06:83:cf:7c:c3:a7:7e:be:94:c0:38:ba:3f:f0: 41:9f:4a:24:63:74:26:56:42:79:4d:af:7e:8d:34:62:35:6b: 2c:b5:20:e0:09:8b:3b:fc:35:74:e6:82:00:81:c9:c9:86:43: 7c:69:1d:cc:2a:d9:ae:8a:cb:5f:06:33:6e:1f:a2:1d:ee:47: 0a:41:a3:e3:bb:e0:d7:6e:d3:44:ac:29:a8:f2:53:19:89:58: dc:56:53:b1:45:17:15:a6:7e:db:cc:b8:88:4b:07:07:95:9b: f8:19:3c:c9:0f:b9:6b:7e:fa:09:9f:a7:dd:37:00:56:9b:59: c6:eb:bf:6b:bb:a7:3a:52:1c:82:1f:64:eb:6f:95:8e:86:f6: b1:8c:0c:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CoS6jfUHk3R4MElVrVHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3 NmRhOTUwHhcNMjUxMjA2MDkwMDMwWhcNMjUxMjA3MDkwMDMwWjAzMTEwLwYDVQQD Eyg3MzQ5N2I5MzJiZWQ4NmVlNWM0ZmY5ZjgwOTg4ZWE2NjJiN2FmOGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx1arjk9RmQfEmhtaUk3AqVb/XvZ 5e/uRUVc/DDRl5CmOurT3HTOwI/qewsQYHcwuVmR/KYoNZbkIxfZRdZIBXBymyqt QJeFajHLyEjEcDjabu0PgST09CeJ+sENYiLUHGdbxukLMu3y8Hb8S1+fGfJlqdIe /IeiXn2ce3c3Kn9pTMSZLbgITyZ4V/fiBUyzvDYeOJOI+tmVyE2NHAY6nwPuSi20 1mDys9HyBteBKE8x7rJ9aFtQOJVQJC1JTl8th78b89V4z0iAwLmG254tTK82Ou/o 5QsZT6BBNqTADpWdcLx2Itm/ZCkC3tYsXNp43PeqNP3Ge+WrLrDijuslhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNJe5Mr7YbuXE/5+AmI6mYrevivMB8GA1UdIwQY MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwz+ks/db HVPcaEP5SMfhJX646c9JHsp0nSSoLKbcL92SlufPcS40Y9Xu5oo2PeZVXYHsZmz4 8tYX7zegqKtyWjaV9OwZAbjCbc0xOzrYgoOlijF4WHdU3TkMX8Wfoa+TgbGGA9Qh NmJZ6CqXK4aAHQaDz3zDp36+lMA4uj/wQZ9KJGN0JlZCeU2vfo00YjVrLLUg4AmL O/w1dOaCAIHJyYZDfGkdzCrZrorLXwYzbh+iHe5HCkGj47vg127TRKwpqPJTGYlY 3FZTsUUXFaZ+28y4iEsHB5Wb+Bk8yQ+5a376CZ+n3TcAVptZxuu/a7unOlIcgh9k 62+Vjob2sYwMTQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:00:39 2025 by rpki-client