This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft File: 9_38M32M4OBe9_e3KvJ-thzUcDc.mft (raw, json) Hash identifier: 10f78E58WKRaJAIAb7xw3knsOh1+iSDAWHaYZROb41w= Subject key identifier: 62:7A:35:FA:48:9B:68:EA:4E:DB:10:7B:B0:99:BA:46:59:F7:40:13 Authority key identifier: F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 Certificate issuer: /CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Certificate serial: 019AF3898C2C420D56413775E8EBA2D42CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:01:09 +0000 Manifest this update: Sat 06 Dec 2025 12:01:09 +0000 Manifest next update: Sun 07 Dec 2025 12:01:09 +0000 Files and hashes: 1: 9_38M32M4OBe9_e3KvJ-thzUcDc.crl (hash: XyrDDuwzfnuBfhjtOAWD3uyLxzsaNk9YIumz8AstXGI=) 2: fCHzIX3PF5IX4vTpqhp12B4ANgE.roa (hash: 56hifj5pI9Tipd1DppPjnl4odiFdle6vhykV6J1DFck=) 3: fZI41ms3tzFvI-4Rmi0bivMoobg.roa (hash: mvSKdaR0Cd14+1pWdKPrKKbl4qxiwAO24l5+RIBOEk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:8c:2c:42:0d:56:41:37:75:e8:eb:a2:d4:2c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7fdfc337d8ce0e05ef7f7b72af27eb61cd47037 Validity Not Before: Dec 6 12:01:09 2025 GMT Not After : Dec 7 12:01:09 2025 GMT Subject: CN=627a35fa489b68ea4edb107bb099ba4659f74013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cb:8a:7e:fe:45:0d:db:ac:2f:c8:57:4b:ca: 4e:1a:92:88:3c:2d:58:5c:dd:a1:4b:a2:9f:06:d6: 5a:8b:5d:3c:7f:a8:ab:a3:c2:ef:ed:df:85:c4:65: 0c:df:2f:67:ec:84:c9:bb:b2:bf:2d:ac:bd:81:8b: af:9c:b9:98:0c:cf:12:1b:1f:8f:e5:09:5e:b2:5d: c7:f0:87:62:8e:4f:4f:75:c5:76:f1:06:7e:81:fb: 44:e8:93:c8:f8:c0:ff:f7:e2:a5:36:a2:7e:81:25: 33:76:2d:73:6d:22:df:a7:8b:c8:3f:05:5d:78:1f: 47:ad:30:8b:2b:7e:aa:f9:99:d8:5c:05:92:13:c5: 2e:b6:fd:de:18:70:ac:a6:e6:4a:c5:2e:34:75:09: 13:31:8a:6b:86:5b:d5:ab:b0:5d:17:bd:bf:a8:f4: 3a:e6:c3:b6:ba:69:26:81:52:e4:8f:ea:a5:21:23: 6f:d3:37:b5:b3:4b:da:c4:10:74:79:57:53:9e:5f: 73:75:11:7b:42:7d:48:46:31:26:f7:71:8f:e3:20: 8f:e4:2a:26:58:ac:f6:db:5e:22:8f:52:b4:ac:92: 5e:f4:7f:81:0e:25:89:5d:8e:c7:ea:93:e6:ae:18: 00:f6:87:50:02:94:f2:fd:66:78:0f:cd:40:56:cf: c2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7A:35:FA:48:9B:68:EA:4E:DB:10:7B:B0:99:BA:46:59:F7:40:13 X509v3 Authority Key Identifier: keyid:F7:FD:FC:33:7D:8C:E0:E0:5E:F7:F7:B7:2A:F2:7E:B6:1C:D4:70:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_38M32M4OBe9_e3KvJ-thzUcDc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ca066e-8dca-4d28-944b-f959d4e1f289/1/9_38M32M4OBe9_e3KvJ-thzUcDc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:0b:a5:d4:8b:f0:cd:fc:dc:60:c4:25:e8:02:13:53:7c:60: 6d:53:9d:bc:1b:bd:d9:e9:b5:63:c4:e8:76:28:be:e7:e4:ea: 1c:5e:5e:ae:14:d2:76:78:e4:8a:bf:6f:ed:3b:db:63:9f:1b: 98:fc:20:e5:cf:92:44:87:6d:f0:fc:1c:8a:c3:7e:74:3e:29: 29:02:a9:0a:a6:67:17:a5:93:90:94:78:65:7b:1f:fc:54:bd: a3:43:40:6e:b7:39:c7:42:99:28:71:8a:83:40:33:4c:f6:b1: 56:aa:8b:de:1b:95:f2:8f:cf:e4:55:39:d1:ae:54:fe:95:6a: 7c:0f:aa:52:a5:2d:ec:5f:37:a3:1d:a1:d9:5b:40:6e:6a:5e: 8f:7c:8e:2f:e7:36:31:8b:3d:be:49:60:cd:0c:72:1b:ee:d2: c0:59:71:00:22:a0:42:75:2a:42:da:e7:55:c8:95:dd:c8:bf: 3e:e8:fb:2d:23:d4:cd:73:50:dd:3a:4a:49:02:88:1e:c0:14: 5a:b5:57:6f:fe:3e:83:6e:eb:a6:23:06:28:19:12:41:69:e7: e9:18:33:d8:fa:8c:d6:d2:85:2f:e1:c0:ab:6b:78:80:fb:70: b6:62:94:91:7f:a5:c5:04:88:8a:68:c3:5b:d2:3c:02:77:e7: 52:81:bc:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziYwsQg1WQTd16Oui1Cy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZmRmYzMzN2Q4Y2UwZTA1ZWY3ZjdiNzJhZjI3ZWI2MWNk NDcwMzcwHhcNMjUxMjA2MTIwMTA5WhcNMjUxMjA3MTIwMTA5WjAzMTEwLwYDVQQD Eyg2MjdhMzVmYTQ4OWI2OGVhNGVkYjEwN2JiMDk5YmE0NjU5Zjc0MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsuKfv5FDdusL8hXS8pOGpKIPC1Y XN2hS6KfBtZai108f6iro8Lv7d+FxGUM3y9n7ITJu7K/Lay9gYuvnLmYDM8SGx+P 5Qlesl3H8Idijk9PdcV28QZ+gftE6JPI+MD/9+KlNqJ+gSUzdi1zbSLfp4vIPwVd eB9HrTCLK36q+ZnYXAWSE8Uutv3eGHCspuZKxS40dQkTMYprhlvVq7BdF72/qPQ6 5sO2umkmgVLkj+qlISNv0ze1s0vaxBB0eVdTnl9zdRF7Qn1IRjEm93GP4yCP5Com WKz2214ij1K0rJJe9H+BDiWJXY7H6pPmrhgA9odQApTy/WZ4D81AVs/CbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJ6NfpIm2jqTtsQe7CZukZZ90ATMB8GA1UdIwQY MBaAFPf9/DN9jODgXvf3tyryfrYc1HA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGIt Zjk1OWQ0ZTFmMjg5LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jYTA2NmUtOGRjYS00ZDI4LTk0NGItZjk1OWQ0ZTFmMjg5 LzEvOV8zOE0zMk00T0JlOV9lM0t2Si10aHpVY0RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcwul1Ivw zfzcYMQl6AITU3xgbVOdvBu92em1Y8Todii+5+TqHF5erhTSdnjkir9v7TvbY58b mPwg5c+SRIdt8PwcisN+dD4pKQKpCqZnF6WTkJR4ZXsf/FS9o0NAbrc5x0KZKHGK g0AzTPaxVqqL3huV8o/P5FU50a5U/pVqfA+qUqUt7F83ox2h2VtAbmpej3yOL+c2 MYs9vklgzQxyG+7SwFlxACKgQnUqQtrnVciV3ci/Puj7LSPUzXNQ3TpKSQKIHsAU WrVXb/4+g27rpiMGKBkSQWnn6Rgz2PqM1tKFL+HAq2t4gPtwtmKUkX+lxQSIimjD W9I8AnfnUoG8Xg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:02:15 2025 by rpki-client