This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft File: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft (raw, json) Hash identifier: zMV6bT/O+6xfguEvCGjv7eWVHvQe+NVCmM2HaRYhQ78= Subject key identifier: C2:40:96:7C:7B:B3:1A:20:15:41:0E:4A:4D:41:C6:0A:26:98:7E:65 Authority key identifier: F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F Certificate issuer: /CN=f69fb24ce67c211297b065c67f1b8209b9944b0f Certificate serial: 019AF80AF4F302E57EDD115E9E721010AFDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft Manifest number: 0387 Signing time: Sun 07 Dec 2025 09:00:58 +0000 Manifest this update: Sun 07 Dec 2025 09:00:58 +0000 Manifest next update: Mon 08 Dec 2025 09:00:58 +0000 Files and hashes: 1: 862AzXPpO4q0TZw2prtOswI6C3U.roa (hash: UvMXTudocwR1LdtSYifhkjBcDLnzk1IebtQXMqpmBY0=) 2: 9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl (hash: 7JCcfRkmVyxQLYV5PRI3nM+hIYMzsCN9AkGA5So5Pzw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f8:0a:f4:f3:02:e5:7e:dd:11:5e:9e:72:10:10:af:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69fb24ce67c211297b065c67f1b8209b9944b0f Validity Not Before: Dec 7 09:00:58 2025 GMT Not After : Dec 8 09:00:58 2025 GMT Subject: CN=c240967c7bb31a2015410e4a4d41c60a26987e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:6e:97:be:43:00:d1:a6:60:ab:fe:e9:23: 02:13:c2:b8:03:62:4f:12:cd:a4:f3:54:24:71:63: ec:49:8b:26:f8:20:64:0f:11:b7:58:21:f8:db:56: ca:07:c3:dd:cf:20:eb:ff:ce:ae:d0:a9:ba:60:6d: 6d:36:b5:e4:8b:c5:99:23:3b:28:2d:ee:78:3a:51: 6b:0e:26:69:e5:b7:48:06:47:6d:15:a9:5c:07:db: 5a:dd:c6:dd:0f:90:8a:2e:d2:54:35:54:df:ed:fd: 67:78:c1:f0:2a:4b:7f:12:74:f0:9e:b7:77:07:6e: fa:23:96:c7:68:cb:68:c6:ce:3d:0f:b3:68:f6:ca: 54:77:cd:4c:ab:21:c2:26:a2:85:bd:b0:f6:af:7a: 73:e2:4e:a9:4e:a4:61:c6:c0:9b:1d:b6:15:7c:fb: 9c:c7:c7:5c:4c:6a:7d:6a:50:6b:fd:99:ab:b5:02: 59:60:33:21:c1:ee:57:f0:76:ab:cf:1e:cc:c0:c5: d2:b2:ac:fb:04:59:86:66:a5:25:96:af:9a:c0:ad: 9c:a7:ae:ff:b9:7c:5e:3f:ad:d8:1d:79:b4:3e:89: 9a:2a:0c:5f:17:6c:4c:d6:1b:e0:7e:2d:bb:ed:da: fb:c4:76:6b:4d:7f:67:cc:e3:02:e1:c7:59:5f:90: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:96:7C:7B:B3:1A:20:15:41:0E:4A:4D:41:C6:0A:26:98:7E:65 X509v3 Authority Key Identifier: keyid:F6:9F:B2:4C:E6:7C:21:12:97:B0:65:C6:7F:1B:82:09:B9:94:4B:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3e6b26-a146-42cf-82f3-9e5138e120c9/1/9p-yTOZ8IRKXsGXGfxuCCbmUSw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:61:33:7b:09:08:4e:d3:d1:53:3b:99:49:92:4a:1e:7d:77: 7c:f5:b1:7b:03:4c:94:1e:45:f4:a4:53:f8:5a:66:b2:78:67: 18:07:dc:1f:30:c9:8a:cc:46:19:8e:10:8b:8d:32:03:56:44: df:4c:d6:f2:24:c1:99:34:83:72:bf:4a:b0:02:f6:e0:bd:12: 5f:b2:3d:76:fc:ef:a7:19:b6:c7:63:37:01:94:0c:d2:9f:20: 1c:c0:2b:18:f9:e0:7a:a7:58:2c:57:d9:71:15:fb:83:f6:0f: 6f:a8:06:20:7d:27:86:a1:1d:3e:46:eb:09:2e:3c:ed:4e:d5: fb:c4:a2:e7:2f:e8:d4:43:ad:7c:27:e8:c7:41:fc:9b:30:0b: b8:d7:00:19:33:13:7d:0f:75:bf:9c:57:ff:db:c4:6c:af:ae: b6:bf:25:eb:5b:13:f0:a6:6b:15:2f:99:b5:80:c2:3f:32:9f: 60:09:a5:6f:69:e5:e5:e6:16:70:59:2d:21:26:68:aa:ca:73: 95:f6:08:28:f2:20:f4:fb:b1:a4:7d:6c:6b:8f:db:05:b9:6d: 0e:4a:e7:4f:8b:d3:75:a6:cc:8e:eb:52:99:ab:50:07:e5:7d: e6:95:e4:74:ae:da:c9:21:b4:c5:ac:92:c2:cc:85:a1:e5:79: 53:cc:24:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr4CvTzAuV+3RFennIQEK/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWZiMjRjZTY3YzIxMTI5N2IwNjVjNjdmMWI4MjA5Yjk5 NDRiMGYwHhcNMjUxMjA3MDkwMDU4WhcNMjUxMjA4MDkwMDU4WjAzMTEwLwYDVQQD EyhjMjQwOTY3YzdiYjMxYTIwMTU0MTBlNGE0ZDQxYzYwYTI2OTg3ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo9ul75DANGmYKv+6SMCE8K4A2JP Es2k81QkcWPsSYsm+CBkDxG3WCH421bKB8PdzyDr/86u0Km6YG1tNrXki8WZIzso Le54OlFrDiZp5bdIBkdtFalcB9ta3cbdD5CKLtJUNVTf7f1neMHwKkt/EnTwnrd3 B276I5bHaMtoxs49D7No9spUd81MqyHCJqKFvbD2r3pz4k6pTqRhxsCbHbYVfPuc x8dcTGp9alBr/ZmrtQJZYDMhwe5X8Harzx7MwMXSsqz7BFmGZqUllq+awK2cp67/ uXxeP63YHXm0PomaKgxfF2xM1hvgfi277dr7xHZrTX9nzOMC4cdZX5CZeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJAlnx7sxogFUEOSk1BxgommH5lMB8GA1UdIwQY MBaAFPafskzmfCESl7Blxn8bggm5lEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMt OWU1MTM4ZTEyMGM5LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8zZTZiMjYtYTE0Ni00MmNmLTgyZjMtOWU1MTM4ZTEyMGM5 LzEvOXAteVRPWjhJUktYc0dYR2Z4dUNDYm1VU3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2EzewkI TtPRUzuZSZJKHn13fPWxewNMlB5F9KRT+FpmsnhnGAfcHzDJisxGGY4Qi40yA1ZE 30zW8iTBmTSDcr9KsAL24L0SX7I9dvzvpxm2x2M3AZQM0p8gHMArGPngeqdYLFfZ cRX7g/YPb6gGIH0nhqEdPkbrCS487U7V+8Si5y/o1EOtfCfox0H8mzALuNcAGTMT fQ91v5xX/9vEbK+utr8l61sT8KZrFS+ZtYDCPzKfYAmlb2nl5eYWcFktISZoqspz lfYIKPIg9PuxpH1sa4/bBbltDkrnT4vTdabMjutSmatQB+V95pXkdK7aySG0xayS wsyFoeV5U8wknQ== -----END CERTIFICATE-----Generated at Sun Dec 7 16:35:05 2025 by rpki-client