This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft File: 9vHFba9wXxLpXUL0d_jgo9hvOZY.mft (raw, json) Hash identifier: eUoNx+KM5+x9vhqcr9x/RMA70YogrN/RGEh3uFxn2fA= Subject key identifier: EC:B2:87:0B:1C:9F:E5:D2:D7:78:EE:15:13:D8:CA:28:8A:99:46:2C Authority key identifier: F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 Certificate issuer: /CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Certificate serial: 019AF31BEB4D578FE9CA044C7580F78BB3D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 10:01:24 +0000 Manifest this update: Sat 06 Dec 2025 10:01:24 +0000 Manifest next update: Sun 07 Dec 2025 10:01:24 +0000 Files and hashes: 1: 9vHFba9wXxLpXUL0d_jgo9hvOZY.crl (hash: 74WH7lYqtaB0FtctwAJaHoFdu2cX/OTDrDNhj2QdyDI=) 2: Img54cKN_P2HeWXe3kxJunOOT3s.roa (hash: ZYdWRN98ug8vbW7f1puvPVmIzjvPFY5NjRNyBZI+eL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:eb:4d:57:8f:e9:ca:04:4c:75:80:f7:8b:b3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6f1c56daf705f12e95d42f477f8e0a3d86f3996 Validity Not Before: Dec 6 10:01:24 2025 GMT Not After : Dec 7 10:01:24 2025 GMT Subject: CN=ecb2870b1c9fe5d2d778ee1513d8ca288a99462c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:68:a2:12:99:51:ae:61:9f:cc:ab:0b:31:f5: fe:aa:59:2b:91:ff:fe:41:c2:1d:ed:42:e8:8a:5c: ba:35:5f:15:e4:8c:89:65:f5:b5:88:54:54:38:30: 4c:7b:81:af:e7:8e:d3:cf:82:a5:ed:6c:a7:5f:db: 0c:29:e0:ec:51:fd:4f:a7:b1:1a:b1:cd:82:d4:95: 64:fc:75:5c:13:c7:f9:2a:1f:b5:d7:dd:71:92:ba: 2c:12:c9:53:90:a9:a6:cb:41:1f:85:9e:0b:9f:d1: 23:c9:c6:92:0b:72:77:db:0d:ec:a5:47:f5:d7:28: 06:93:09:fb:d0:07:c0:55:3e:56:a5:33:3b:fa:09: f9:54:fb:c6:33:2a:dc:1c:6b:cf:f8:71:ee:6b:ff: 44:55:04:88:94:f5:f5:25:91:9a:57:40:2f:47:ba: 02:e9:be:dc:b5:c5:da:ff:7a:de:49:02:42:77:b5: 62:79:12:35:95:68:54:14:0c:57:6c:8f:7c:01:2e: 4e:c9:b5:41:1d:20:1a:79:92:65:aa:fa:a9:d6:73: a2:56:25:d9:47:dd:ad:7f:54:9e:bb:7e:06:ba:a3: da:5d:6c:72:6d:34:e0:b3:f4:e0:4b:62:02:6d:1d: 3f:f5:29:5f:8d:9b:d3:fd:81:c3:cb:bd:8a:2b:b3: 09:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B2:87:0B:1C:9F:E5:D2:D7:78:EE:15:13:D8:CA:28:8A:99:46:2C X509v3 Authority Key Identifier: keyid:F6:F1:C5:6D:AF:70:5F:12:E9:5D:42:F4:77:F8:E0:A3:D8:6F:39:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vHFba9wXxLpXUL0d_jgo9hvOZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/c20ad5-fdfc-4458-85b1-bfacbb1a177d/1/9vHFba9wXxLpXUL0d_jgo9hvOZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:a6:47:7c:00:24:f4:c7:fd:13:21:1a:0c:ae:16:5d:e5:54: 3c:96:d8:fb:04:9d:55:4d:28:8c:44:b7:bf:10:a4:d3:3a:38: ab:01:86:a3:b9:35:37:74:ec:f8:65:3c:a3:67:04:0c:11:8e: 18:f3:b5:6e:c9:f8:8c:86:59:4f:d3:97:91:ff:23:16:17:c0: ce:31:17:f9:21:38:a2:d0:0f:5c:9e:db:55:96:0c:50:00:56: a8:fd:55:d2:8b:b8:a9:06:c0:49:0c:84:c8:ee:c2:0d:3f:48: 61:dc:18:56:f7:7a:4c:d2:b4:9f:04:3a:99:3d:e1:16:ad:29: a1:1b:2b:5c:e0:23:27:97:a7:d0:e8:cb:01:41:7c:8c:1c:74: b8:4d:23:8c:92:d5:ce:2f:92:cd:df:ed:73:4a:43:1e:5e:c1: bb:bd:5d:ec:f3:cf:ab:de:25:49:7e:cc:c6:f7:7e:57:9b:05: 15:43:23:30:a8:8c:d3:e2:c3:2a:20:b6:dd:f7:11:d8:54:8b: ef:42:d6:f6:f8:91:dd:83:28:b9:a9:1e:02:04:df:d4:57:8e: 61:11:c0:20:f8:e8:c4:6b:68:a1:f6:89:4f:90:56:59:7c:db: f7:c5:1c:73:83:cc:d4:c0:cc:93:f6:f6:ca:b7:6b:75:c0:00: 23:40:2a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG+tNV4/pygRMdYD3i7PXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZjFjNTZkYWY3MDVmMTJlOTVkNDJmNDc3ZjhlMGEzZDg2 ZjM5OTYwHhcNMjUxMjA2MTAwMTI0WhcNMjUxMjA3MTAwMTI0WjAzMTEwLwYDVQQD EyhlY2IyODcwYjFjOWZlNWQyZDc3OGVlMTUxM2Q4Y2EyODhhOTk0NjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGiiEplRrmGfzKsLMfX+qlkrkf/+ QcId7ULoily6NV8V5IyJZfW1iFRUODBMe4Gv547Tz4Kl7WynX9sMKeDsUf1Pp7Ea sc2C1JVk/HVcE8f5Kh+1191xkrosEslTkKmmy0EfhZ4Ln9EjycaSC3J32w3spUf1 1ygGkwn70AfAVT5WpTM7+gn5VPvGMyrcHGvP+HHua/9EVQSIlPX1JZGaV0AvR7oC 6b7ctcXa/3reSQJCd7VieRI1lWhUFAxXbI98AS5OybVBHSAaeZJlqvqp1nOiViXZ R92tf1Seu34GuqPaXWxybTTgs/TgS2ICbR0/9SlfjZvT/YHDy72KK7MJ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyyhwscn+XS13juFRPYyiiKmUYsMB8GA1UdIwQY MBaAFPbxxW2vcF8S6V1C9Hf44KPYbzmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEt YmZhY2JiMWExNzdkLzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9jMjBhZDUtZmRmYy00NDU4LTg1YjEtYmZhY2JiMWExNzdk LzEvOXZIRmJhOXdYeExwWFVMMGRfamdvOWh2T1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaZHfAAk 9Mf9EyEaDK4WXeVUPJbY+wSdVU0ojES3vxCk0zo4qwGGo7k1N3Ts+GU8o2cEDBGO GPO1bsn4jIZZT9OXkf8jFhfAzjEX+SE4otAPXJ7bVZYMUABWqP1V0ou4qQbASQyE yO7CDT9IYdwYVvd6TNK0nwQ6mT3hFq0poRsrXOAjJ5en0OjLAUF8jBx0uE0jjJLV zi+Szd/tc0pDHl7Bu71d7PPPq94lSX7Mxvd+V5sFFUMjMKiM0+LDKiC23fcR2FSL 70LW9viR3YMouakeAgTf1FeOYRHAIPjoxGtoofaJT5BWWXzb98Ucc4PM1MDMk/b2 yrdrdcAAI0Aq0g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:36:35 2025 by rpki-client