This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft File: 9jiUfduJL186SKaa-XqPtSEDoNY.mft (raw, json) Hash identifier: Rttv2BqSfJTSbDvYp584EzG2G+Qq9GO+8mPZjmKhzls= Subject key identifier: 8C:5F:22:A7:32:11:3D:E9:49:F8:7F:4B:BF:FA:FD:BD:59:84:EF:FE Authority key identifier: F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6 Certificate issuer: /CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6 Certificate serial: 019AF389131469AF95DF8E06185AC3D65632 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft Manifest number: 0719 Signing time: Sat 06 Dec 2025 12:00:38 +0000 Manifest this update: Sat 06 Dec 2025 12:00:38 +0000 Manifest next update: Sun 07 Dec 2025 12:00:38 +0000 Files and hashes: 1: 67zW8t21om1pTXvyuagS0QWX12s.roa (hash: arwG9XkQ/+2dVagELL/zq8/mCR4dYaym8bqyA1sBk4A=) 2: 9jiUfduJL186SKaa-XqPtSEDoNY.crl (hash: b5UnMvZxntTDfTxD2SmJep8ZNNTjxwABJR7JwnNiW2Q=) 3: cCgr35XwpirOi5T2NC-QhUoK0mY.roa (hash: aPFc2y18XhdFxhdVyRug+HbV1BK/ZT7q4hdqYZuvICQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:13:14:69:af:95:df:8e:06:18:5a:c3:d6:56:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f638947ddb892f5f3a48a69af97a8fb52103a0d6 Validity Not Before: Dec 6 12:00:38 2025 GMT Not After : Dec 7 12:00:38 2025 GMT Subject: CN=8c5f22a732113de949f87f4bbffafdbd5984effe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:2f:fa:57:fa:1b:65:9f:5a:13:f8:df:7d: 80:de:eb:32:f8:06:b5:18:b0:d8:30:a6:02:e1:ee: 19:3a:e0:a3:64:e7:c1:2d:b1:06:ad:0b:4e:d8:79: e9:a9:a5:4b:91:ef:8d:e0:c0:be:f2:cd:bd:f6:19: 94:7b:0e:82:c5:f7:53:f6:c2:7e:3e:a0:a8:7e:f0: e0:03:b6:4a:bb:5f:a6:35:13:2e:4b:c2:3b:34:fa: 2f:04:c2:57:3b:d9:5d:91:f9:6e:b8:10:75:c5:f0: 03:41:74:bd:c0:45:3e:de:c2:fe:17:42:dc:1f:3d: d1:19:88:20:e9:2b:c4:19:35:f8:f7:fa:6d:18:7f: 4b:e8:2f:bf:7e:2d:29:17:be:3b:66:5f:fa:b3:17: 69:19:d8:d7:47:1b:73:f5:12:3a:f6:01:d9:cd:0b: 23:7f:92:4d:92:7c:0f:d6:b9:35:c5:04:57:d4:f0: 80:b1:2a:f9:e5:d6:8c:03:24:65:e8:43:12:9c:18: a9:ce:dc:2d:15:c3:96:51:71:45:20:de:c2:63:b0: dc:8a:d7:08:50:c3:f3:1b:74:b1:98:64:e9:d7:a7: cf:73:1c:0c:0a:55:77:ae:68:cc:67:18:44:cd:80: 07:64:29:f6:ce:38:05:5d:c5:b9:dd:e9:5c:0d:fc: c4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5F:22:A7:32:11:3D:E9:49:F8:7F:4B:BF:FA:FD:BD:59:84:EF:FE X509v3 Authority Key Identifier: keyid:F6:38:94:7D:DB:89:2F:5F:3A:48:A6:9A:F9:7A:8F:B5:21:03:A0:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9jiUfduJL186SKaa-XqPtSEDoNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/289b8d-78de-4160-90d3-61d26603c37c/1/9jiUfduJL186SKaa-XqPtSEDoNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a3:cb:2b:b2:51:49:9d:7d:be:33:85:26:54:2b:17:9b:ca: 73:4f:1e:e6:69:6c:9e:7e:a6:58:21:03:fb:e6:f1:fc:85:ef: d3:f5:cd:8f:ec:a2:a3:61:ad:9f:98:e3:b0:ab:0f:d0:2c:48: e8:34:b6:73:7f:e1:13:ab:9f:66:e4:5b:4c:ad:ad:e7:3f:0a: 5c:3c:b7:98:4a:6e:51:3e:a5:5f:2e:bd:69:55:32:cd:7c:8a: ce:ad:31:91:7b:78:c1:f9:f0:c2:c6:a4:57:e2:27:53:ae:14: c3:4f:f1:e3:99:93:32:88:4b:78:27:dd:bd:5c:c5:d4:9a:05: 5c:f0:7b:0f:fa:a5:66:6d:ad:e7:62:77:8e:98:08:20:62:a9: df:a3:56:65:8c:57:0f:8e:da:7b:4d:ff:9b:d7:d8:aa:9e:f0: 0d:ca:68:d1:e2:57:0e:55:a1:f3:ea:d4:c9:5a:26:b0:9f:ed: c5:f9:27:6f:d6:e2:46:6b:9f:6d:d9:87:8c:cf:59:2e:5f:3c: b8:7e:3f:ad:13:b7:62:5f:ad:26:31:e2:c4:2d:c2:02:45:8c: 0a:a5:80:98:53:70:e8:7a:25:6c:00:5a:db:28:89:f7:f5:9c: 19:d0:da:bf:33:20:a2:dd:ea:f0:18:ca:6a:ce:93:71:6e:e7: 2c:a6:2c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRMUaa+V344GGFrD1lYyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2Mzg5NDdkZGI4OTJmNWYzYTQ4YTY5YWY5N2E4ZmI1MjEw M2EwZDYwHhcNMjUxMjA2MTIwMDM4WhcNMjUxMjA3MTIwMDM4WjAzMTEwLwYDVQQD Eyg4YzVmMjJhNzMyMTEzZGU5NDlmODdmNGJiZmZhZmRiZDU5ODRlZmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WUv+lf6G2WfWhP4332A3usy+Aa1 GLDYMKYC4e4ZOuCjZOfBLbEGrQtO2HnpqaVLke+N4MC+8s299hmUew6CxfdT9sJ+ PqCofvDgA7ZKu1+mNRMuS8I7NPovBMJXO9ldkfluuBB1xfADQXS9wEU+3sL+F0Lc Hz3RGYgg6SvEGTX49/ptGH9L6C+/fi0pF747Zl/6sxdpGdjXRxtz9RI69gHZzQsj f5JNknwP1rk1xQRX1PCAsSr55daMAyRl6EMSnBipztwtFcOWUXFFIN7CY7DcitcI UMPzG3SxmGTp16fPcxwMClV3rmjMZxhEzYAHZCn2zjgFXcW53elcDfzEHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxfIqcyET3pSfh/S7/6/b1ZhO/+MB8GA1UdIwQY MBaAFPY4lH3biS9fOkimmvl6j7UhA6DWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMt NjFkMjY2MDNjMzdjLzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8yODliOGQtNzhkZS00MTYwLTkwZDMtNjFkMjY2MDNjMzdj LzEvOWppVWZkdUpMMTg2U0thYS1YcVB0U0VEb05ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKPLK7JR SZ19vjOFJlQrF5vKc08e5mlsnn6mWCED++bx/IXv0/XNj+yio2Gtn5jjsKsP0CxI 6DS2c3/hE6ufZuRbTK2t5z8KXDy3mEpuUT6lXy69aVUyzXyKzq0xkXt4wfnwwsak V+InU64Uw0/x45mTMohLeCfdvVzF1JoFXPB7D/qlZm2t52J3jpgIIGKp36NWZYxX D47ae03/m9fYqp7wDcpo0eJXDlWh8+rUyVomsJ/txfknb9biRmufbdmHjM9ZLl88 uH4/rRO3Yl+tJjHixC3CAkWMCqWAmFNw6HolbABa2yiJ9/WcGdDavzMgot3q8BjK as6TcW7nLKYs5A== -----END CERTIFICATE-----Generated at Sat Dec 6 21:02:06 2025 by rpki-client