This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft File: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft (raw, json) Hash identifier: UvR2l3vSWX74aWH3Px8No8hZdjb2S7OkUTBVl/+zOmM= Subject key identifier: D1:73:70:C2:60:17:98:43:E2:1D:5E:A3:E5:65:F9:E1:9C:AE:FB:B1 Authority key identifier: F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 Certificate issuer: /CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Certificate serial: 019B3EDA297AF0E15623CD45B2A78A50B7C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft Manifest number: 0674 Signing time: Sun 21 Dec 2025 03:00:43 +0000 Manifest this update: Sun 21 Dec 2025 03:00:43 +0000 Manifest next update: Mon 22 Dec 2025 03:00:43 +0000 Files and hashes: 1: 9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl (hash: ZNsT7MM8IZn2uCqUFwRxVnWRuFzxhnDoz5qNomidmeE=) 2: tjboCeupGoWMhzNMAbe1acyZSfo.roa (hash: 4a1e4ZJ2rm6Y1i2yYMJDPx5U9pmumE35uvRPVX+uXuM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:29:7a:f0:e1:56:23:cd:45:b2:a7:8a:50:b7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f674f0c8d16cbb510bba1fe3ac4685eee356f8e7 Validity Not Before: Dec 21 03:00:43 2025 GMT Not After : Dec 22 03:00:43 2025 GMT Subject: CN=d17370c260179843e21d5ea3e565f9e19caefbb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:71:85:bd:96:d2:c6:aa:95:c6:a9:16:e1:9f: 79:01:3e:07:95:08:b8:00:b6:6a:3a:a0:2c:88:bf: cc:09:99:62:e2:e3:f2:a0:fa:b6:57:ed:24:54:6c: cf:07:ec:f2:2b:af:0a:1c:90:0d:45:00:05:08:cc: c4:d0:82:4d:c0:7b:40:04:e6:20:4a:70:f1:5d:f5: 93:58:30:8d:17:47:d2:12:9c:6b:07:c9:9a:eb:76: 2c:ca:89:cc:5f:8b:44:ab:b3:23:9f:36:65:e5:35: 11:7d:19:02:84:73:ff:5a:0c:25:ae:8f:08:96:35: 6f:08:5c:52:9d:88:f7:3b:42:4b:b9:90:b5:ea:08: 67:e6:cf:21:e5:75:44:1e:f8:57:5a:12:1d:c6:7b: 67:c2:5d:f5:86:93:b9:6b:b1:9a:c7:6b:c2:0b:75: e1:68:b1:33:6e:b7:00:0b:cb:68:c5:78:59:20:07: d0:1c:74:33:21:68:cd:45:c2:8d:b1:52:35:7f:29: af:27:ee:33:8a:2c:8b:89:68:87:49:59:9a:99:92: e0:51:aa:b2:d1:de:af:27:d4:2d:ce:a2:1a:65:09: 41:86:41:10:05:09:19:a4:74:8e:61:48:6f:fe:b7: ef:2e:d0:51:52:e4:61:43:02:a5:9d:41:79:41:d6: f8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:73:70:C2:60:17:98:43:E2:1D:5E:A3:E5:65:F9:E1:9C:AE:FB:B1 X509v3 Authority Key Identifier: keyid:F6:74:F0:C8:D1:6C:BB:51:0B:BA:1F:E3:AC:46:85:EE:E3:56:F8:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/162560-b4c5-4f0d-9c06-18bdf8847418/1/9nTwyNFsu1ELuh_jrEaF7uNW-Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:39:54:44:cd:67:a4:7b:94:bf:a0:7a:f0:cb:df:a2:7e:09: d7:77:b6:c5:b9:db:bb:98:fc:24:e7:0e:38:9f:0b:a4:8d:23: c0:b4:f6:8c:e8:7c:4a:5e:07:fe:ca:b3:37:75:b0:50:ab:68: bd:18:b3:a3:0f:88:0a:3f:d9:cc:0f:8b:ad:9e:a1:28:e0:91: d7:96:d6:f6:c2:57:c1:20:12:f3:29:73:ab:da:6a:16:98:a5: b4:01:1e:6c:73:7b:16:0c:f3:a4:eb:4d:a3:59:ee:37:79:f0: be:5d:e9:16:54:9b:db:6c:68:1e:90:b6:de:4e:ff:1e:91:54: 01:cc:7d:38:a1:c5:9b:f1:c5:d4:de:fe:65:12:91:bf:00:a5: 65:15:70:2f:63:14:4a:3b:33:42:a7:f2:62:6d:c5:e3:ee:5d: 40:78:55:2d:d5:22:9a:af:08:8b:c9:4d:af:19:5b:7f:1e:80: 5c:66:35:ce:45:ea:24:cf:f1:0f:40:61:08:92:4f:e4:d7:4d: da:29:6a:9a:35:17:ac:1a:46:e9:f8:4b:de:e2:19:93:8e:3c: 72:ad:bc:40:75:b6:5c:e3:8c:7f:b8:10:2f:fc:a0:67:bf:57: fd:64:54:bd:b8:e7:ac:ef:5d:f3:b3:a3:da:b8:dc:ec:82:f0: a7:5e:73:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2il68OFWI81FsqeKULfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzRmMGM4ZDE2Y2JiNTEwYmJhMWZlM2FjNDY4NWVlZTM1 NmY4ZTcwHhcNMjUxMjIxMDMwMDQzWhcNMjUxMjIyMDMwMDQzWjAzMTEwLwYDVQQD EyhkMTczNzBjMjYwMTc5ODQzZTIxZDVlYTNlNTY1ZjllMTljYWVmYmIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXGFvZbSxqqVxqkW4Z95AT4HlQi4 ALZqOqAsiL/MCZli4uPyoPq2V+0kVGzPB+zyK68KHJANRQAFCMzE0IJNwHtABOYg SnDxXfWTWDCNF0fSEpxrB8ma63YsyonMX4tEq7MjnzZl5TURfRkChHP/Wgwlro8I ljVvCFxSnYj3O0JLuZC16ghn5s8h5XVEHvhXWhIdxntnwl31hpO5a7Gax2vCC3Xh aLEzbrcAC8toxXhZIAfQHHQzIWjNRcKNsVI1fymvJ+4ziiyLiWiHSVmamZLgUaqy 0d6vJ9QtzqIaZQlBhkEQBQkZpHSOYUhv/rfvLtBRUuRhQwKlnUF5Qdb4KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFzcMJgF5hD4h1eo+Vl+eGcrvuxMB8GA1UdIwQY MBaAFPZ08MjRbLtRC7of46xGhe7jVvjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYt MThiZGY4ODQ3NDE4LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xNjI1NjAtYjRjNS00ZjBkLTljMDYtMThiZGY4ODQ3NDE4 LzEvOW5Ud3lORnN1MUVMdWhfanJFYUY3dU5XLU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDlURM1n pHuUv6B68Mvfon4J13e2xbnbu5j8JOcOOJ8LpI0jwLT2jOh8Sl4H/sqzN3WwUKto vRizow+ICj/ZzA+LrZ6hKOCR15bW9sJXwSAS8ylzq9pqFpiltAEebHN7FgzzpOtN o1nuN3nwvl3pFlSb22xoHpC23k7/HpFUAcx9OKHFm/HF1N7+ZRKRvwClZRVwL2MU SjszQqfyYm3F4+5dQHhVLdUimq8Ii8lNrxlbfx6AXGY1zkXqJM/xD0BhCJJP5NdN 2ilqmjUXrBpG6fhL3uIZk448cq28QHW2XOOMf7gQL/ygZ79X/WRUvbjnrO9d87Oj 2rjc7ILwp15zfQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:39:30 2025 by rpki-client