This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft File: 9q2iC9mLq990w9Vs14raZu2HoUg.mft (raw, json) Hash identifier: kZyyEvFsPT6BxJTKcBVXAPnpLCS8UYRdH0857ShnH4Y= Subject key identifier: FF:F2:BE:48:6B:9E:02:F8:F2:6D:AE:D9:05:F5:8E:BC:94:22:92:A0 Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48 Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148 Certificate serial: 019B42B79A6C1B2F858491F2CEEC962BAE63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft Manifest number: 0B52 Signing time: Sun 21 Dec 2025 21:01:27 +0000 Manifest this update: Sun 21 Dec 2025 21:01:27 +0000 Manifest next update: Mon 22 Dec 2025 21:01:27 +0000 Files and hashes: 1: 9q2iC9mLq990w9Vs14raZu2HoUg.crl (hash: 8gErwkk+Ps0yQF07kxCl3mCfGfde1257XuQz0c3Le/E=) 2: s-x7d6jJvL70qmh-6OnRq31TKUk.roa (hash: 2DbOtbQA27lHr7qNRTboKovEtkv/3fhOLEwI/H6E4D4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:9a:6c:1b:2f:85:84:91:f2:ce:ec:96:2b:ae:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148 Validity Not Before: Dec 21 21:01:27 2025 GMT Not After : Dec 22 21:01:27 2025 GMT Subject: CN=fff2be486b9e02f8f26daed905f58ebc942292a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a6:3b:5d:4f:c5:64:68:8a:14:7f:95:f8:9a: 57:5e:91:df:35:88:fc:76:e0:6a:94:4b:7c:4b:0b: b7:ca:97:a3:f4:b0:f4:b2:e4:09:3a:bb:52:75:b3: 70:a8:20:05:c8:27:3e:b3:59:4f:8c:6c:5a:99:f1: 22:77:22:6a:37:a8:74:9a:1e:de:a1:1f:0f:87:98: 74:1a:5e:57:94:34:b1:7d:21:b5:6d:3e:f7:d5:ba: b6:94:67:50:48:9c:ed:f4:73:dc:1c:dd:96:80:63: 4b:0b:11:f3:fd:c5:05:9f:c9:0c:f3:f2:c7:aa:2f: 26:40:f1:55:07:a2:c5:91:2f:7d:b1:0e:2c:b6:79: 8a:e6:83:b3:a9:75:77:fc:09:6c:b2:63:5d:20:ff: 1e:18:dc:06:b5:5a:7b:94:46:7b:bb:0d:d6:bb:2e: 32:56:03:24:98:72:7f:c2:d5:ea:e6:51:4b:af:83: db:0b:ba:6d:7a:4b:a0:f2:3f:a5:b4:4e:b6:77:ff: 32:b7:41:bf:b4:55:10:6e:ef:e9:b6:12:21:77:ef: 6f:43:18:09:1e:fc:dd:d9:1d:e5:53:8e:11:9a:b1: 15:86:2c:5e:4b:00:16:94:e6:e2:d4:4b:e1:42:63: f7:e4:3b:d8:fe:3b:f0:6e:00:1a:c4:d2:a7:7b:6f: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F2:BE:48:6B:9E:02:F8:F2:6D:AE:D9:05:F5:8E:BC:94:22:92:A0 X509v3 Authority Key Identifier: keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:6d:17:b6:b8:5d:3f:f3:ed:d5:67:f7:4d:f1:cd:50:df:07: 7c:de:c2:e6:ec:bc:df:3c:2d:24:cb:a4:0d:23:16:7d:fc:e5: 79:14:77:be:74:69:32:bc:3a:36:d3:fa:07:e7:ea:68:0a:d6: d5:1b:02:10:b5:89:9c:dd:0f:5e:f0:85:d1:b2:2a:3a:d4:b0: 45:e0:8a:f5:6b:a4:b4:9c:c2:b7:d2:f3:67:13:f0:6e:80:dc: 92:7c:e4:eb:72:ab:f8:73:42:5f:9c:29:52:73:18:32:d1:97: 59:ab:6e:58:11:d3:5f:3c:ec:17:dd:7a:73:35:2a:df:7b:13: 4f:85:ec:9d:3a:79:99:52:7d:a3:1b:34:b3:79:3c:63:0f:a2: 59:ae:47:61:3f:f7:e8:c5:6e:6f:53:de:09:ab:7e:43:21:98: 4c:f8:9d:9a:2a:f2:1d:b5:0f:d4:53:71:7e:2b:d8:9c:dd:9a: 89:b8:aa:b4:b3:5c:52:56:c7:d9:f9:f0:38:12:fb:eb:fc:4b: b5:a1:6b:b5:f0:06:87:65:bb:38:17:81:b4:77:ac:80:28:8b: 8b:e6:ff:c8:ee:1d:5f:63:81:1f:41:ea:f2:71:3e:17:77:c9: 1f:be:68:fc:19:cc:0b:b0:cb:49:54:8c:70:93:15:bc:85:6b: a6:5e:61:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt5psGy+FhJHyzuyWK65jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWRhMjBiZDk4YmFiZGY3NGMzZDU2Y2Q3OGFkYTY2ZWQ4 N2ExNDgwHhcNMjUxMjIxMjEwMTI3WhcNMjUxMjIyMjEwMTI3WjAzMTEwLwYDVQQD EyhmZmYyYmU0ODZiOWUwMmY4ZjI2ZGFlZDkwNWY1OGViYzk0MjI5MmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaY7XU/FZGiKFH+V+JpXXpHfNYj8 duBqlEt8Swu3ypej9LD0suQJOrtSdbNwqCAFyCc+s1lPjGxamfEidyJqN6h0mh7e oR8Ph5h0Gl5XlDSxfSG1bT731bq2lGdQSJzt9HPcHN2WgGNLCxHz/cUFn8kM8/LH qi8mQPFVB6LFkS99sQ4stnmK5oOzqXV3/AlssmNdIP8eGNwGtVp7lEZ7uw3Wuy4y VgMkmHJ/wtXq5lFLr4PbC7ptekug8j+ltE62d/8yt0G/tFUQbu/pthIhd+9vQxgJ Hvzd2R3lU44RmrEVhixeSwAWlObi1EvhQmP35DvY/jvwbgAaxNKne2/RiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/yvkhrngL48m2u2QX1jryUIpKgMB8GA1UdIwQY MBaAFPatogvZi6vfdMPVbNeK2mbth6FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ZDU0YjYtZTAzYy00MzEwLTliMzkt OWRiMTdhNWRlNDYzLzEvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80ZDU0YjYtZTAzYy00MzEwLTliMzktOWRiMTdhNWRlNDYz LzEvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd20Xtrhd P/Pt1Wf3TfHNUN8HfN7C5uy83zwtJMukDSMWffzleRR3vnRpMrw6NtP6B+fqaArW 1RsCELWJnN0PXvCF0bIqOtSwReCK9WuktJzCt9LzZxPwboDcknzk63Kr+HNCX5wp UnMYMtGXWatuWBHTXzzsF916czUq33sTT4XsnTp5mVJ9oxs0s3k8Yw+iWa5HYT/3 6MVub1PeCat+QyGYTPidmiryHbUP1FNxfivYnN2aibiqtLNcUlbH2fnwOBL76/xL taFrtfAGh2W7OBeBtHesgCiLi+b/yO4dX2OBH0Hq8nE+F3fJH75o/BnMC7DLSVSM cJMVvIVrpl5hFg== -----END CERTIFICATE-----Generated at Mon Dec 22 00:21:17 2025 by rpki-client