This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: 3js20ympA2IVlTVN//PDbmSsT/nUp+pw0NPpw1V6oQ4= Subject key identifier: 8C:DB:29:0E:E2:5C:2E:CC:D6:A0:43:D5:02:C6:CA:F8:9F:FD:5E:81 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 019AF3F7FF9604129EC664C2F015DFE44724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1778 Signing time: Sat 06 Dec 2025 14:01:47 +0000 Manifest this update: Sat 06 Dec 2025 14:01:47 +0000 Manifest next update: Sun 07 Dec 2025 14:01:47 +0000 Files and hashes: 1: 8YTLS_1mFrh55A62a2mBS518iAg.roa (hash: b+QiLic550TpA6gu3XGSKkJ7N3n9C2SCnWL5+/s9Vr0=) 2: W7Jge6ghVHbAsdaSdITf8b_3aVQ.roa (hash: eGgmHuw9ea32mMeNaCzUMNBUiaRSSoMmW6d0dFZkj5k=) 3: YEabeKOKfuDoseD09i_AzpuQwDI.roa (hash: cPvPvvgVr6xheeyEqYOGlwuPA4n504eYtVm93wavUOs=) 4: q9IaYjcr5RObBrW7hey_hpAIvpg.roa (hash: 2MfulwyVlfgKmQicfk78T3sq4tPTxMleY1Rp41M0dbI=) 5: rD9vHXlVEIB8M3cZw6Ig3zqOjSY.roa (hash: LqdT+kDN7EAKsUrhE7I32HrIwpzhpfN+fHExPsMZ/NQ=) 6: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: C42m33NiDDNlOSxxD/kruAweXo5Z1xasyJ8thhbbXJk=) 7: vcy7WC8JEz9GH2wrI2xSRGFOQ8M.roa (hash: ppq+e7eDeIpGmxTNUn9DHommsEQqQfIeqXbSiT0TQpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ff:96:04:12:9e:c6:64:c2:f0:15:df:e4:47:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Dec 6 14:01:47 2025 GMT Not After : Dec 7 14:01:47 2025 GMT Subject: CN=8cdb290ee25c2eccd6a043d502c6caf89ffd5e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:94:33:e5:76:7f:6a:19:c9:26:c5:71:25:c0: d2:ec:ba:99:b9:7e:9a:a4:aa:ac:d4:6c:40:91:30: 1a:2f:64:b2:32:9f:da:52:af:8b:89:47:df:d8:b9: 3d:de:2f:ef:0d:3e:be:38:7b:2e:58:a0:55:8b:84: c0:dc:b0:d6:c2:df:44:94:e2:f2:bb:9a:73:fa:07: cb:85:e6:3e:a5:5e:dc:82:78:dd:67:d7:6c:22:d4: 45:cb:bb:e3:5d:27:fd:3f:4a:e5:da:4b:55:4d:6f: ab:b1:98:ea:c2:d2:ba:6e:70:c3:ce:16:d5:10:a1: d4:b8:56:ab:9e:0f:26:ee:e8:b8:d0:34:d7:f7:7e: 94:d3:8e:2f:c6:fd:31:14:18:71:fd:77:ff:d4:c3: 18:36:df:2b:a1:69:a6:1d:a7:7a:f3:63:7c:66:f3: 13:1f:39:16:5e:90:ab:3e:19:3d:61:a6:fc:36:7e: 8f:1d:0d:57:28:f3:73:75:9a:48:17:17:32:81:64: 5d:f6:8c:60:6b:14:b2:4d:db:66:87:17:81:4d:3c: 6d:17:88:d9:d8:e6:ba:bd:28:64:cf:ab:39:fd:e3: d6:12:2c:a0:94:4b:fd:62:98:3c:fc:4c:b0:81:b7: b7:31:ba:1f:b5:08:bf:86:19:8f:19:72:a5:7c:e1: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:DB:29:0E:E2:5C:2E:CC:D6:A0:43:D5:02:C6:CA:F8:9F:FD:5E:81 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:28:7f:a0:22:9f:31:57:9c:7d:ea:cc:5f:20:da:81:5d:51: 51:19:5d:41:b3:c0:ad:70:a6:66:cc:91:24:2f:f0:a7:eb:e0: 82:c7:30:f9:78:65:90:88:60:de:1a:5f:65:81:a2:1b:7f:b2: ed:a8:17:98:b6:87:f6:fa:20:7c:7d:a6:4e:e3:fa:27:86:5c: 2c:0f:9f:b5:69:f4:57:a1:f7:a3:91:8c:be:30:4f:c0:7e:f1: fc:ee:a4:e2:c6:d9:3b:c7:4d:b4:70:7e:be:3a:47:28:30:18: 86:ca:a3:04:fc:55:0d:ff:0b:b4:7b:fd:ae:dc:6e:e7:85:41: 60:44:a0:9f:06:a4:e2:9d:eb:80:0c:80:9c:e7:2a:c4:e1:90: da:f0:78:1d:2f:b0:26:71:7b:e0:c1:ec:17:2e:fe:e9:85:b7: 1e:7f:ef:9e:fb:12:20:51:1f:de:86:07:e9:21:73:32:15:18: a4:fe:cd:6f:91:a7:8a:aa:c0:8a:c2:06:02:df:4f:9a:28:ec: 83:f3:92:f2:92:7a:0d:46:9d:eb:1c:f8:c0:95:c1:fb:36:6e: ac:34:64:4a:39:d8:40:ca:85:6d:bb:64:ba:39:5c:2c:5a:49: bc:4f:53:dc:a5:bb:3b:85:4e:89:9c:7b:b0:29:36:7f:55:88: 76:71:f4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/+WBBKexmTC8BXf5EckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjUxMjA2MTQwMTQ3WhcNMjUxMjA3MTQwMTQ3WjAzMTEwLwYDVQQD Eyg4Y2RiMjkwZWUyNWMyZWNjZDZhMDQzZDUwMmM2Y2FmODlmZmQ1ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5Qz5XZ/ahnJJsVxJcDS7LqZuX6a pKqs1GxAkTAaL2SyMp/aUq+LiUff2Lk93i/vDT6+OHsuWKBVi4TA3LDWwt9ElOLy u5pz+gfLheY+pV7cgnjdZ9dsItRFy7vjXSf9P0rl2ktVTW+rsZjqwtK6bnDDzhbV EKHUuFarng8m7ui40DTX936U044vxv0xFBhx/Xf/1MMYNt8roWmmHad682N8ZvMT HzkWXpCrPhk9Yab8Nn6PHQ1XKPNzdZpIFxcygWRd9oxgaxSyTdtmhxeBTTxtF4jZ 2Oa6vShkz6s5/ePWEiyglEv9Ypg8/Eywgbe3MboftQi/hhmPGXKlfOFRowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzbKQ7iXC7M1qBD1QLGyvif/V6BMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvih/oCKf MVecferMXyDagV1RURldQbPArXCmZsyRJC/wp+vggscw+XhlkIhg3hpfZYGiG3+y 7agXmLaH9vogfH2mTuP6J4ZcLA+ftWn0V6H3o5GMvjBPwH7x/O6k4sbZO8dNtHB+ vjpHKDAYhsqjBPxVDf8LtHv9rtxu54VBYESgnwak4p3rgAyAnOcqxOGQ2vB4HS+w JnF74MHsFy7+6YW3Hn/vnvsSIFEf3oYH6SFzMhUYpP7Nb5GniqrAisIGAt9Pmijs g/OS8pJ6DUad6xz4wJXB+zZurDRkSjnYQMqFbbtkujlcLFpJvE9T3KW7O4VOiZx7 sCk2f1WIdnH0AQ== -----END CERTIFICATE-----Generated at Sun Dec 7 00:13:44 2025 by rpki-client