This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft File: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft (raw, json) Hash identifier: v+Tv/tnQn6SJiscJx+JMVfb0yQz58tWOLvAlMoFVKoE= Subject key identifier: 24:34:46:59:3B:8F:72:07:99:4F:C1:4D:08:EB:7D:A5:69:89:CA:58 Authority key identifier: F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 Certificate issuer: /CN=f4e9d53310243187083fdc9609735465b1089043 Certificate serial: 019AF16479637B81A061B6F1C123AD2DC8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:24 +0000 Manifest this update: Sat 06 Dec 2025 02:01:24 +0000 Manifest next update: Sun 07 Dec 2025 02:01:24 +0000 Files and hashes: 1: 1-q7Os-ag3LFo7MgF8ZfJghgVfgc.roa (hash: AkqR6A52qHHQpKh+paJEwg0UF7zLNR6BUjxPJEPXBuc=) 2: 9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl (hash: WEDQ0KoGnDE6LBX2T3cSW8EJvOBRK1bcmyegW1ieOSk=) 3: X2IXuMlNGoAcrvL_ko43_QrEupI.roa (hash: tb+ePbzsjMAZQXem+oOzrudhMucziUuIqtpyErKmVRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:79:63:7b:81:a0:61:b6:f1:c1:23:ad:2d:c8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4e9d53310243187083fdc9609735465b1089043 Validity Not Before: Dec 6 02:01:24 2025 GMT Not After : Dec 7 02:01:24 2025 GMT Subject: CN=243446593b8f7207994fc14d08eb7da56989ca58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:f6:7f:c3:f2:32:ae:ad:18:f0:1f:a4:c3: 91:91:db:96:0c:de:c8:13:72:cc:20:4d:71:99:81: 45:16:6a:a3:54:fd:ec:a6:38:36:0d:69:c8:df:71: 38:37:e8:b4:1a:41:3d:82:dd:f3:8d:6c:c7:af:fd: df:90:2c:7d:72:4a:9a:69:73:29:58:15:f1:70:53: fb:40:16:cb:e0:e7:2f:be:db:bb:3e:33:7b:1d:14: 74:93:a8:e1:e6:f2:34:5a:ad:b1:cf:69:92:1a:b0: 55:1a:5c:f4:ae:fb:f9:be:52:2a:b9:db:6d:ca:1c: 0b:eb:df:da:7a:11:23:b7:f2:d0:10:85:72:22:f1: 80:f5:94:0c:6b:8e:75:b0:8a:e5:4e:be:f8:b0:56: fc:d9:8a:b9:c5:64:9e:b1:2f:fc:f7:25:43:9d:cd: 90:7b:2c:da:ac:f7:08:66:5e:03:a8:c7:c5:8a:44: c8:6e:d9:13:ab:4a:df:a3:34:8e:c6:e4:17:6d:91: 70:63:7e:3e:23:ee:20:e8:9a:4b:35:3d:ab:76:d4: bc:81:e7:38:0d:64:ce:cf:6e:da:56:08:78:87:1a: d3:17:5b:94:12:23:cc:3f:a9:e7:26:ac:49:c5:06: c9:b5:27:42:60:9e:a4:ea:a7:15:d3:75:e8:6f:e2: 2c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:34:46:59:3B:8F:72:07:99:4F:C1:4D:08:EB:7D:A5:69:89:CA:58 X509v3 Authority Key Identifier: keyid:F4:E9:D5:33:10:24:31:87:08:3F:DC:96:09:73:54:65:B1:08:90:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OnVMxAkMYcIP9yWCXNUZbEIkEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/285f32-03ea-416e-9cb0-7e66648fc264/1/9OnVMxAkMYcIP9yWCXNUZbEIkEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6d:e0:47:27:38:78:4d:3f:c4:e1:2c:d4:6f:97:40:bc:d8: 2d:cc:48:8d:d5:d8:3b:ff:8f:b6:29:cf:e9:27:e2:51:0d:23: 1e:82:7e:ce:ad:48:34:5c:48:c3:3b:02:b5:e5:fa:2b:d8:82: a3:a8:ef:b2:c1:9b:07:9b:fe:9a:4c:2e:df:e9:16:8a:30:65: 07:c9:ad:96:f6:ab:c9:e9:75:ef:4b:d4:a2:2a:0c:81:49:1d: 06:10:91:af:3a:a3:d1:af:cc:9d:be:1f:e5:77:fd:36:8b:2d: 4e:b5:58:3b:25:5f:0e:6e:86:25:1d:4f:64:fe:78:73:cc:05: 20:f2:70:79:13:a9:cc:83:77:5d:66:a3:00:c4:ac:13:f4:57: 5f:d2:0a:0e:34:e8:f1:f9:3d:df:08:2c:bc:b4:f9:a6:99:1d: fe:2a:5e:9e:9c:b1:3a:c5:96:a1:f6:09:de:be:c7:52:26:87: 11:48:04:d7:78:6d:00:0a:17:1b:24:42:a1:a2:c2:1d:68:2e: 55:6c:f2:3a:9a:6c:cb:62:fb:31:16:91:ba:6b:85:68:e2:24: 41:22:57:fe:d5:8c:80:1b:41:5b:53:cf:a7:11:38:93:dd:40: 4a:f6:12:da:35:db:4e:8d:f2:9b:21:72:65:66:b7:c6:f8:cd: 12:90:40:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHlje4GgYbbxwSOtLcisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZTlkNTMzMTAyNDMxODcwODNmZGM5NjA5NzM1NDY1YjEw ODkwNDMwHhcNMjUxMjA2MDIwMTI0WhcNMjUxMjA3MDIwMTI0WjAzMTEwLwYDVQQD EygyNDM0NDY1OTNiOGY3MjA3OTk0ZmMxNGQwOGViN2RhNTY5ODljYTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMX2f8PyMq6tGPAfpMORkduWDN7I E3LMIE1xmYFFFmqjVP3spjg2DWnI33E4N+i0GkE9gt3zjWzHr/3fkCx9ckqaaXMp WBXxcFP7QBbL4Ocvvtu7PjN7HRR0k6jh5vI0Wq2xz2mSGrBVGlz0rvv5vlIqudtt yhwL69/aehEjt/LQEIVyIvGA9ZQMa451sIrlTr74sFb82Yq5xWSesS/89yVDnc2Q eyzarPcIZl4DqMfFikTIbtkTq0rfozSOxuQXbZFwY34+I+4g6JpLNT2rdtS8gec4 DWTOz27aVgh4hxrTF1uUEiPMP6nnJqxJxQbJtSdCYJ6k6qcV03Xob+IswQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQ0Rlk7j3IHmU/BTQjrfaVpicpYMB8GA1UdIwQY MBaAFPTp1TMQJDGHCD/clglzVGWxCJBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAt N2U2NjY0OGZjMjY0LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yODVmMzItMDNlYS00MTZlLTljYjAtN2U2NjY0OGZjMjY0 LzEvOU9uVk14QWtNWWNJUDl5V0NYTlVaYkVJa0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG3gRyc4 eE0/xOEs1G+XQLzYLcxIjdXYO/+PtinP6SfiUQ0jHoJ+zq1INFxIwzsCteX6K9iC o6jvssGbB5v+mkwu3+kWijBlB8mtlvaryel170vUoioMgUkdBhCRrzqj0a/Mnb4f 5Xf9NostTrVYOyVfDm6GJR1PZP54c8wFIPJweROpzIN3XWajAMSsE/RXX9IKDjTo 8fk93wgsvLT5ppkd/ipenpyxOsWWofYJ3r7HUiaHEUgE13htAAoXGyRCoaLCHWgu VWzyOppsy2L7MRaRumuFaOIkQSJX/tWMgBtBW1PPpxE4k91ASvYS2jXbTo3ymyFy ZWa3xvjNEpBAzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:02:54 2025 by rpki-client