This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft File: 1-c9m7XQoo55j8NJzYDf0McQao08.mft (raw, json) Hash identifier: 7dzjhsewI8Nlcf6Lq7Vu2YlwtlJbVZfWB9wRYcX5+hU= Subject key identifier: F7:11:9A:C6:74:5C:13:46:55:D4:61:3C:DF:28:1C:9D:DA:C4:BC:A9 Authority key identifier: F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F Certificate issuer: /CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Certificate serial: 019B3FECE252F7C7F6A0D9EE1A3C62C83A91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 08:00:47 +0000 Manifest this update: Sun 21 Dec 2025 08:00:47 +0000 Manifest next update: Mon 22 Dec 2025 08:00:47 +0000 Files and hashes: 1: 1-c9m7XQoo55j8NJzYDf0McQao08.crl (hash: sq3//jpuS5p/eRP8oEaYNETHVWWVyk6Gs0hEs7UqeYA=) 2: rbOZFLBJLeiBgSg-ywSTHEPc89w.roa (hash: Wz1ZKiJOk56RIdFfsa2AALc0JqTjfQEXp/iXAbjA7+g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:e2:52:f7:c7:f6:a0:d9:ee:1a:3c:62:c8:3a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9cf66ed7428a39e63f0d2736037f431c41aa34f Validity Not Before: Dec 21 08:00:47 2025 GMT Not After : Dec 22 08:00:47 2025 GMT Subject: CN=f7119ac6745c134655d4613cdf281c9ddac4bca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:68:b4:bb:8d:97:97:68:74:9c:e3:c2:d8:d3: 9d:fd:7d:ce:ec:6e:6f:de:08:62:b3:6c:2a:a3:96: 7f:af:b3:35:cc:e1:6c:98:33:fd:b6:d4:bf:76:82: f4:99:41:58:c7:0c:ec:e1:ba:13:ce:66:f4:38:0d: 9d:31:4c:27:56:57:ed:8c:e7:91:fa:ea:8b:68:b3: 72:51:22:70:c1:af:25:11:c7:22:67:b0:b8:8b:42: d6:f7:30:32:aa:8b:95:b8:53:32:11:48:1f:89:7a: b9:d1:49:fa:05:03:f6:7a:7a:50:86:3a:5e:c2:95: 02:3a:8b:0e:4d:34:9d:9b:e7:a0:02:1e:7a:a6:f8: 62:bb:c8:5f:d0:26:0c:c5:1e:23:a1:32:cd:d5:51: f6:9e:29:86:e3:ce:78:4a:73:6c:18:46:cc:d3:8b: c2:df:0c:b3:32:e6:28:18:d0:a1:79:2a:f8:7b:2f: bf:13:6f:6c:65:c9:1a:4b:e5:d6:a0:58:85:61:0c: c2:57:e6:7b:6c:70:54:33:33:41:18:57:e0:1d:1a: b8:a7:e7:9a:1f:13:0d:3d:97:96:07:37:03:f5:19: 78:b6:2b:2b:6a:2e:05:46:33:8b:9c:24:f1:b8:d2: ea:0a:d8:37:35:af:de:3e:d6:de:e6:27:99:81:9f: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:11:9A:C6:74:5C:13:46:55:D4:61:3C:DF:28:1C:9D:DA:C4:BC:A9 X509v3 Authority Key Identifier: keyid:F9:CF:66:ED:74:28:A3:9E:63:F0:D2:73:60:37:F4:31:C4:1A:A3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-c9m7XQoo55j8NJzYDf0McQao08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d784ed-be75-4072-a780-e633703fcbed/1/1-c9m7XQoo55j8NJzYDf0McQao08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:cc:c8:15:8f:0a:f9:8e:3e:47:22:2a:d1:d6:bf:ed:a2:d5: c1:ee:27:c6:02:63:db:25:5e:51:cc:43:79:4c:1c:8d:78:20: 91:e4:63:d2:ac:4f:32:c1:e0:a5:c8:dd:64:b4:c3:1f:45:37: 1c:59:cc:41:b4:91:2d:e6:e1:f6:5e:b1:ba:a3:a3:89:63:59: 71:f3:32:11:46:2c:c6:56:f9:62:f3:8e:ea:fd:85:68:0a:d5: cc:11:ad:60:0d:39:fc:95:40:bf:f5:f0:d6:3e:cc:ea:91:40: 6f:68:5a:38:bd:66:fe:7d:78:ae:15:0c:9b:de:cd:79:65:1f: 61:41:c6:13:14:b0:c7:63:72:45:9e:b1:41:2a:ca:c0:6f:95: aa:6c:94:bc:b9:26:fe:ce:e3:a3:9d:c9:7e:10:cc:4c:d0:a6: 18:4c:4c:56:65:8d:44:87:80:50:1b:21:64:f1:db:fe:fd:db: f5:26:8e:77:b0:01:f7:c1:c7:94:de:12:7b:3a:a0:f4:2d:89: b9:c8:8b:c0:1d:d9:3b:e2:61:26:7f:4b:7e:89:ef:0e:5b:5c: d6:77:ef:b4:2f:91:c9:5f:c9:4c:49:ed:24:5f:d7:59:93:eb: 00:84:50:c2:3d:f4:29:13:ad:ba:7d:55:dd:1f:0f:9b:2d:1d: b1:4d:a3:f4 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZs/7OJS98f2oNnuGjxiyDqRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5Y2Y2NmVkNzQyOGEzOWU2M2YwZDI3MzYwMzdmNDMxYzQx YWEzNGYwHhcNMjUxMjIxMDgwMDQ3WhcNMjUxMjIyMDgwMDQ3WjAzMTEwLwYDVQQD EyhmNzExOWFjNjc0NWMxMzQ2NTVkNDYxM2NkZjI4MWM5ZGRhYzRiY2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2i0u42Xl2h0nOPC2NOd/X3O7G5v 3ghis2wqo5Z/r7M1zOFsmDP9ttS/doL0mUFYxwzs4boTzmb0OA2dMUwnVlftjOeR +uqLaLNyUSJwwa8lEcciZ7C4i0LW9zAyqouVuFMyEUgfiXq50Un6BQP2enpQhjpe wpUCOosOTTSdm+egAh56pvhiu8hf0CYMxR4joTLN1VH2nimG4854SnNsGEbM04vC 3wyzMuYoGNCheSr4ey+/E29sZckaS+XWoFiFYQzCV+Z7bHBUMzNBGFfgHRq4p+ea HxMNPZeWBzcD9Rl4tisrai4FRjOLnCTxuNLqCtg3Na/ePtbe5ieZgZ81kQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPcRmsZ0XBNGVdRhPN8oHJ3axLypMB8GA1UdIwQY MBaAFPnPZu10KKOeY/DSc2A39DHEGqNPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1jOW03WFFvbzU1ajhOSnpZRGYwTWNRYW8wOC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzEvZDc4NGVkLWJlNzUtNDA3Mi1hNzgw LWU2MzM3MDNmY2JlZC8xLzEtYzltN1hRb281NWo4Tkp6WURmME1jUWFvMDgubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzcxL2Q3ODRlZC1iZTc1LTQwNzItYTc4MC1lNjMzNzAzZmNi ZWQvMS8xLWM5bTdYUW9vNTVqOE5KellEZjBNY1FhbzA4LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASszI FY8K+Y4+RyIq0da/7aLVwe4nxgJj2yVeUcxDeUwcjXggkeRj0qxPMsHgpcjdZLTD H0U3HFnMQbSRLebh9l6xuqOjiWNZcfMyEUYsxlb5YvOO6v2FaArVzBGtYA05/JVA v/Xw1j7M6pFAb2haOL1m/n14rhUMm97NeWUfYUHGExSwx2NyRZ6xQSrKwG+VqmyU vLkm/s7jo53JfhDMTNCmGExMVmWNRIeAUBshZPHb/v3b9SaOd7AB98HHlN4Sezqg 9C2JuciLwB3ZO+JhJn9LfonvDltc1nfvtC+RyV/JTEntJF/XWZPrAIRQwj30KROt un1V3R8Pmy0dsU2j9A== -----END CERTIFICATE-----Generated at Sun Dec 21 10:20:42 2025 by rpki-client