This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft File: r9I8xVrurzN-23Pq4ltZCXoneEw.mft (raw, json) Hash identifier: umOzkej7mOffZDi/vXPwwIrJe+h4A+W1tXVRgwal76s= Subject key identifier: 28:09:BA:49:E1:1B:DF:38:2E:98:F6:6B:2F:96:E2:46:D4:EF:0B:D0 Authority key identifier: AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C Certificate issuer: /CN=afd23cc55aeeaf337edb73eae25b59097a27784c Certificate serial: 019AF509DCB5A201EE056153FC76E316CCEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 19:00:55 +0000 Manifest this update: Sat 06 Dec 2025 19:00:55 +0000 Manifest next update: Sun 07 Dec 2025 19:00:55 +0000 Files and hashes: 1: lHwTYMLdPppQjIGCxxbbE7ChdPI.roa (hash: AdFGp8oSyfut37qs3XRrjrGdC0sy7qxul+fWrYsyUd8=) 2: r9I8xVrurzN-23Pq4ltZCXoneEw.crl (hash: Um3ZgNccOqkU7K9zh0q0tY+EYp3iKjoDnpPp6xzuxPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:dc:b5:a2:01:ee:05:61:53:fc:76:e3:16:cc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afd23cc55aeeaf337edb73eae25b59097a27784c Validity Not Before: Dec 6 19:00:55 2025 GMT Not After : Dec 7 19:00:55 2025 GMT Subject: CN=2809ba49e11bdf382e98f66b2f96e246d4ef0bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d5:55:8d:41:60:cf:c6:0f:a2:b7:e1:b9:1d: b5:8a:12:32:a8:8f:40:ba:cd:b7:35:02:f5:bf:68: 81:ec:53:44:78:7b:ac:fd:d7:6c:59:cc:99:13:93: d5:36:0b:1b:80:3a:d3:c6:a9:81:88:96:e0:ca:f2: 8b:5d:d7:57:8c:96:c3:6e:42:b0:87:53:7b:8e:08: 3e:2e:44:d4:39:03:f1:6c:09:7f:31:dc:c7:8b:bc: be:f6:ee:3b:af:ef:e6:c4:11:af:a1:ab:f6:f4:89: 16:d7:6d:92:d8:42:51:44:55:7a:69:fc:5a:c8:f6: 92:2c:e8:33:7a:72:78:8a:9b:cb:8f:f9:03:12:3c: 9e:51:61:c5:ef:48:0e:9a:17:92:13:59:ce:84:ca: 4a:c0:67:13:02:c8:79:28:dd:26:ef:d0:f6:09:16: f7:f5:89:09:2d:8b:c9:b7:bb:59:79:4c:f6:8e:c4: 03:ba:a7:63:0e:4f:7f:de:c9:4c:99:b6:1a:04:ae: 2b:3f:92:a0:84:d5:a5:2a:79:d3:4a:76:23:0b:3c: 72:8a:f5:88:6c:a5:11:16:86:18:86:3b:05:df:11: b4:20:d2:54:1e:30:1b:3e:36:44:3c:07:5d:fd:89: 3c:7b:aa:7a:0e:da:7f:6e:c8:2a:bc:73:a2:87:df: a4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:09:BA:49:E1:1B:DF:38:2E:98:F6:6B:2F:96:E2:46:D4:EF:0B:D0 X509v3 Authority Key Identifier: keyid:AF:D2:3C:C5:5A:EE:AF:33:7E:DB:73:EA:E2:5B:59:09:7A:27:78:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9I8xVrurzN-23Pq4ltZCXoneEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/53f458-761a-4382-827c-494f08c21497/1/r9I8xVrurzN-23Pq4ltZCXoneEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3d:4a:86:48:dd:83:2e:9b:98:f2:cb:d0:2f:4f:ee:ec:ac: b9:ac:2e:7e:d4:66:6f:5d:40:24:d3:ac:01:64:0e:75:89:4a: 5d:2a:47:a6:57:e7:6d:03:31:cf:52:2b:5e:13:20:12:62:61: 21:5c:16:90:d9:45:43:05:55:56:08:f5:3c:0b:f0:e3:99:56: ef:24:32:a5:1f:8c:e3:30:33:7b:2e:35:34:b8:93:a7:a3:2a: 5d:b4:e4:e8:88:88:0f:26:06:6b:b9:ef:6a:41:fc:c8:ce:66: b1:77:5b:a2:e7:d3:17:2e:54:93:ba:0e:00:67:6b:fa:a4:72: 78:3b:a9:38:5c:4e:2e:fd:34:4b:ac:d9:0f:f7:78:a2:8e:ac: 1e:69:9a:fa:d4:3b:56:4a:31:ce:ec:2a:d2:6c:38:dd:0a:04: 7e:b4:47:86:88:7c:8b:2e:66:99:b0:82:f9:57:43:c2:d5:72: 0f:00:bf:a4:21:19:33:58:33:61:3e:54:49:44:d7:26:47:b7: 6a:af:40:4b:8c:ff:78:92:f4:0c:f0:43:49:cd:57:06:dc:a5: 2e:a7:91:61:4e:c5:ff:cc:1d:b0:7e:ff:c4:32:bb:d7:65:9e: 84:ba:17:04:3d:63:b8:45:e6:aa:c8:0b:59:75:88:15:c6:48: fe:c7:b1:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cdy1ogHuBWFT/HbjFszsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZDIzY2M1NWFlZWFmMzM3ZWRiNzNlYWUyNWI1OTA5N2Ey Nzc4NGMwHhcNMjUxMjA2MTkwMDU1WhcNMjUxMjA3MTkwMDU1WjAzMTEwLwYDVQQD EygyODA5YmE0OWUxMWJkZjM4MmU5OGY2NmIyZjk2ZTI0NmQ0ZWYwYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dVVjUFgz8YPorfhuR21ihIyqI9A us23NQL1v2iB7FNEeHus/ddsWcyZE5PVNgsbgDrTxqmBiJbgyvKLXddXjJbDbkKw h1N7jgg+LkTUOQPxbAl/MdzHi7y+9u47r+/mxBGvoav29IkW122S2EJRRFV6afxa yPaSLOgzenJ4ipvLj/kDEjyeUWHF70gOmheSE1nOhMpKwGcTAsh5KN0m79D2CRb3 9YkJLYvJt7tZeUz2jsQDuqdjDk9/3slMmbYaBK4rP5KghNWlKnnTSnYjCzxyivWI bKURFoYYhjsF3xG0INJUHjAbPjZEPAdd/Yk8e6p6Dtp/bsgqvHOih9+k0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgJuknhG984Lpj2ay+W4kbU7wvQMB8GA1UdIwQY MBaAFK/SPMVa7q8zfttz6uJbWQl6J3hMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2Mt NDk0ZjA4YzIxNDk3LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy81M2Y0NTgtNzYxYS00MzgyLTgyN2MtNDk0ZjA4YzIxNDk3 LzEvcjlJOHhWcnVyek4tMjNQcTRsdFpDWG9uZUV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaz1Khkjd gy6bmPLL0C9P7uysuawuftRmb11AJNOsAWQOdYlKXSpHplfnbQMxz1IrXhMgEmJh IVwWkNlFQwVVVgj1PAvw45lW7yQypR+M4zAzey41NLiTp6MqXbTk6IiIDyYGa7nv akH8yM5msXdboufTFy5Uk7oOAGdr+qRyeDupOFxOLv00S6zZD/d4oo6sHmma+tQ7 Vkoxzuwq0mw43QoEfrRHhoh8iy5mmbCC+VdDwtVyDwC/pCEZM1gzYT5USUTXJke3 aq9AS4z/eJL0DPBDSc1XBtylLqeRYU7F/8wdsH7/xDK712WehLoXBD1juEXmqsgL WXWIFcZI/sex/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 04:44:15 2025 by rpki-client