This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json) Hash identifier: TBjaUaUet0LEF4se3K4fTW+tq/IUPgaDgmPuYGwsrrk= Subject key identifier: D1:68:D8:55:B5:C6:B6:0D:5A:31:9C:D0:CE:10:0E:DC:36:6F:8D:8E Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7 Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7 Certificate serial: 019AF12CB2C14D14DC43391FD84E4A8463B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft Manifest number: 0897 Signing time: Sat 06 Dec 2025 01:00:29 +0000 Manifest this update: Sat 06 Dec 2025 01:00:29 +0000 Manifest next update: Sun 07 Dec 2025 01:00:29 +0000 Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=) 2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: fqvS3HeBSNQZ7h2MjDgr7y8tNlDIefPkEiiG/+B4KNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2c:b2:c1:4d:14:dc:43:39:1f:d8:4e:4a:84:63:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7 Validity Not Before: Dec 6 01:00:29 2025 GMT Not After : Dec 7 01:00:29 2025 GMT Subject: CN=d168d855b5c6b60d5a319cd0ce100edc366f8d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:72:25:dd:9a:81:01:0b:1a:1c:b8:90:c3: ac:8f:ac:b9:47:f1:ae:1d:4c:25:17:f3:65:84:e2: 35:a9:cc:c3:fc:e3:17:21:3d:93:d9:07:a9:21:40: da:23:30:2a:37:ae:b2:54:31:22:d2:b5:5a:2e:56: 2b:87:be:f5:50:34:16:8d:3a:2e:fe:1b:39:f7:18: cf:6a:81:2a:44:00:77:ac:3b:38:10:9a:67:3a:64: 8d:51:d8:31:71:7b:76:aa:d2:c4:93:84:72:f3:35: 51:1d:91:ff:4f:11:90:9f:af:50:49:09:d5:a4:0f: ce:04:b8:5d:fb:29:43:05:14:b4:18:02:da:f7:0c: e7:33:39:3d:32:6f:e1:82:f8:73:75:d7:16:f9:9f: c2:ed:47:b1:79:b5:72:56:89:2d:16:d0:f7:d1:b9: 79:95:11:c0:ff:47:54:00:cd:2a:77:87:30:4c:e5: 0c:aa:d0:e8:4e:93:9e:27:89:52:87:5f:f8:b2:31: d4:df:c4:47:4d:3c:f8:1f:58:20:50:20:f6:95:e9: 92:30:6a:7c:9f:35:72:51:85:56:d7:f9:4c:03:36: b2:51:5d:57:a3:9d:c6:a7:c4:a7:d8:c3:b7:f7:81: a1:91:0c:f9:c3:2f:1c:3d:b8:d4:80:17:85:86:ec: 56:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:D8:55:B5:C6:B6:0D:5A:31:9C:D0:CE:10:0E:DC:36:6F:8D:8E X509v3 Authority Key Identifier: keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:33:76:36:d7:8b:0d:3f:cf:ac:54:cd:2f:74:f7:b0:82:37: 12:04:d2:d4:31:f6:ce:05:51:89:64:37:a3:0d:16:6c:a1:48: 29:4d:8c:19:3b:ad:80:9c:e8:53:33:ba:4e:a7:58:82:38:68: 99:92:b8:d8:70:bf:bf:6c:37:a0:f3:1c:0f:77:2f:ec:75:a3: 23:6b:57:47:3a:28:54:e0:44:fc:34:d6:d0:d9:59:8d:40:8a: 7b:ac:b9:c0:3f:be:cc:c1:33:81:54:91:30:44:5a:71:fb:4b: 60:a6:2f:99:7f:60:d6:dd:39:21:1d:4e:5d:1e:b2:b0:bb:0d: 27:72:fa:53:96:bd:05:4f:ba:dd:c3:04:34:06:f8:28:86:60: 07:e1:dd:4c:82:68:97:31:56:10:5a:90:36:c7:b8:45:5c:5e: ee:fc:d1:c5:b9:53:fd:27:e3:f5:f5:65:c1:b6:bb:55:c1:33: 1f:ad:1b:62:46:08:23:dc:26:0e:f7:e1:4b:3a:3a:82:c7:f7: c4:39:9d:1f:7a:4b:14:10:53:b5:29:06:a4:de:8d:f9:f6:5c: dd:32:84:94:cc:59:98:67:ab:cb:08:8d:f3:a8:e8:de:34:e7: ce:75:06:9a:1d:86:00:2f:9f:75:8e:42:e3:c7:56:fa:77:ca: cd:b3:84:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLLLBTRTcQzkf2E5KhGO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi ZjA1ZjcwHhcNMjUxMjA2MDEwMDI5WhcNMjUxMjA3MDEwMDI5WjAzMTEwLwYDVQQD EyhkMTY4ZDg1NWI1YzZiNjBkNWEzMTljZDBjZTEwMGVkYzM2NmY4ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVdyJd2agQELGhy4kMOsj6y5R/Gu HUwlF/NlhOI1qczD/OMXIT2T2QepIUDaIzAqN66yVDEi0rVaLlYrh771UDQWjTou /hs59xjPaoEqRAB3rDs4EJpnOmSNUdgxcXt2qtLEk4Ry8zVRHZH/TxGQn69QSQnV pA/OBLhd+ylDBRS0GALa9wznMzk9Mm/hgvhzddcW+Z/C7UexebVyVoktFtD30bl5 lRHA/0dUAM0qd4cwTOUMqtDoTpOeJ4lSh1/4sjHU38RHTTz4H1ggUCD2lemSMGp8 nzVyUYVW1/lMAzayUV1Xo53Gp8Sn2MO394GhkQz5wy8cPbjUgBeFhuxWwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFo2FW1xrYNWjGc0M4QDtw2b42OMB8GA1UdIwQY MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1 LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVzN2NteL DT/PrFTNL3T3sII3EgTS1DH2zgVRiWQ3ow0WbKFIKU2MGTutgJzoUzO6TqdYgjho mZK42HC/v2w3oPMcD3cv7HWjI2tXRzooVOBE/DTW0NlZjUCKe6y5wD++zMEzgVSR MERacftLYKYvmX9g1t05IR1OXR6ysLsNJ3L6U5a9BU+63cMENAb4KIZgB+HdTIJo lzFWEFqQNse4RVxe7vzRxblT/Sfj9fVlwba7VcEzH60bYkYII9wmDvfhSzo6gsf3 xDmdH3pLFBBTtSkGpN6N+fZc3TKElMxZmGerywiN86jo3jTnznUGmh2GAC+fdY5C 48dW+nfKzbOEiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:22 2025 by rpki-client