This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft File: 9zHDObGGFyK__oZyGDFM4SlcPIU.mft (raw, json) Hash identifier: uDXwGP7csCJcARdYTP6jMU5A6NJrWSSyRvDw+M+WZX0= Subject key identifier: D7:00:6E:E9:80:AF:F1:19:E1:94:02:94:95:DB:0E:17:CE:1B:96:49 Authority key identifier: F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 Certificate issuer: /CN=f731c339b1861722bffe867218314ce1295c3c85 Certificate serial: 019AF577D8C8E84C40AC12F4F83B614AAC81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 21:01:03 +0000 Manifest this update: Sat 06 Dec 2025 21:01:03 +0000 Manifest next update: Sun 07 Dec 2025 21:01:03 +0000 Files and hashes: 1: 9UQ0_3_mS41_iKwg1qjiuH2k8kg.roa (hash: kiU7QM0C1mwEaOQNcthFFJZevyv4iXHm9WMDBPMiwH8=) 2: 9zHDObGGFyK__oZyGDFM4SlcPIU.crl (hash: yf8PRGCszRFtrX5UwbnN2OOSHyyl5K39bnjDmumvH+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:d8:c8:e8:4c:40:ac:12:f4:f8:3b:61:4a:ac:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f731c339b1861722bffe867218314ce1295c3c85 Validity Not Before: Dec 6 21:01:03 2025 GMT Not After : Dec 7 21:01:03 2025 GMT Subject: CN=d7006ee980aff119e194029495db0e17ce1b9649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:43:1e:91:45:d4:d2:81:80:9f:65:a5:c7: 9d:6b:2c:c3:bc:78:31:87:4a:8e:3b:0b:c0:90:1c: 0f:e3:c7:54:bb:d8:10:18:e9:e9:73:de:3f:56:e9: 87:18:8c:b4:d5:d8:93:29:ba:82:8e:e7:76:d5:a4: ce:c6:03:cb:55:2d:20:7c:f5:99:47:2b:74:f9:8f: f7:f8:ce:14:e2:6a:43:09:e4:f1:6d:b1:f6:68:ab: 98:e5:3a:08:c1:7c:65:d1:ec:7a:c2:de:b1:96:e1: de:fc:d6:ad:d4:ff:17:16:e5:5b:3d:d2:d9:a0:a9: 54:19:59:96:90:84:06:c6:15:f5:d6:c8:ea:35:e2: 3c:1d:a7:8b:76:80:f5:6a:6e:a0:58:f4:42:36:05: de:d9:cc:cc:05:20:77:66:f2:a3:d5:31:f0:e1:0e: 80:8a:34:c5:ec:ff:88:b9:51:e0:bb:40:1a:99:6b: e6:28:0f:9e:6f:d2:66:4a:fc:6d:d1:04:b0:c6:ec: ca:a4:70:c4:28:d2:68:d1:3c:44:a6:10:51:09:98: 09:f7:cc:03:44:d7:12:ca:a0:5b:cd:50:b2:15:7b: 14:56:80:66:0c:75:b4:d4:e7:9a:f5:3e:72:b3:6d: 01:e6:9b:65:56:0b:fe:b1:01:77:02:9e:95:5a:8a: 63:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:00:6E:E9:80:AF:F1:19:E1:94:02:94:95:DB:0E:17:CE:1B:96:49 X509v3 Authority Key Identifier: keyid:F7:31:C3:39:B1:86:17:22:BF:FE:86:72:18:31:4C:E1:29:5C:3C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zHDObGGFyK__oZyGDFM4SlcPIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/16c64b-b965-49cc-aa40-0dc20a7d82b9/1/9zHDObGGFyK__oZyGDFM4SlcPIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:47:ed:f0:34:22:df:69:10:ce:0c:bf:fb:92:87:0f:57:16: 41:5b:07:2b:b4:95:e0:d6:ef:c4:2b:8d:f1:a5:c7:21:c2:fe: c6:25:3e:a9:fc:43:44:df:bf:bd:50:a8:45:21:38:f8:e3:33: 7e:62:69:da:f4:f1:64:71:6c:76:77:3e:19:ac:df:b8:98:ce: 3e:3d:f6:8a:41:c5:5b:07:b0:6d:1b:c6:4d:e2:4d:eb:92:57: 47:5e:d0:8f:3d:3b:2f:8a:89:db:3a:65:d7:21:69:30:06:db: 16:8a:4f:4f:fd:d0:40:b2:55:73:7a:f5:72:9b:d4:c3:d2:28: 44:c1:80:e1:dd:48:53:59:3d:d2:d4:e9:ba:34:dd:af:81:6a: 6d:d9:6f:7d:b9:38:a1:c6:bb:f0:bc:f5:4e:7b:df:99:91:2e: dc:f7:98:43:a6:c3:35:de:ff:26:30:8d:6e:d9:cd:3a:ae:4f: 80:e8:6c:d9:7f:bd:0d:a6:3d:55:58:d3:a9:9c:cb:04:9d:4b: 69:f7:7a:4b:64:04:00:e6:f1:70:b2:0f:bf:46:ec:4f:fe:b9: 3b:3c:9d:17:ee:05:86:6a:7b:54:8f:fe:70:13:a4:7c:e0:41: f9:5a:68:27:5e:31:b6:2f:c5:e1:08:94:31:6c:7a:f5:87:4e: 84:50:dc:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d9jI6ExArBL0+DthSqyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzFjMzM5YjE4NjE3MjJiZmZlODY3MjE4MzE0Y2UxMjk1 YzNjODUwHhcNMjUxMjA2MjEwMTAzWhcNMjUxMjA3MjEwMTAzWjAzMTEwLwYDVQQD EyhkNzAwNmVlOTgwYWZmMTE5ZTE5NDAyOTQ5NWRiMGUxN2NlMWI5NjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgNDHpFF1NKBgJ9lpcedayzDvHgx h0qOOwvAkBwP48dUu9gQGOnpc94/VumHGIy01diTKbqCjud21aTOxgPLVS0gfPWZ Ryt0+Y/3+M4U4mpDCeTxbbH2aKuY5ToIwXxl0ex6wt6xluHe/Nat1P8XFuVbPdLZ oKlUGVmWkIQGxhX11sjqNeI8HaeLdoD1am6gWPRCNgXe2czMBSB3ZvKj1THw4Q6A ijTF7P+IuVHgu0AamWvmKA+eb9JmSvxt0QSwxuzKpHDEKNJo0TxEphBRCZgJ98wD RNcSyqBbzVCyFXsUVoBmDHW01Oea9T5ys20B5ptlVgv+sQF3Ap6VWopjjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcAbumAr/EZ4ZQClJXbDhfOG5ZJMB8GA1UdIwQY MBaAFPcxwzmxhhciv/6GchgxTOEpXDyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAt MGRjMjBhN2Q4MmI5LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8xNmM2NGItYjk2NS00OWNjLWFhNDAtMGRjMjBhN2Q4MmI5 LzEvOXpIRE9iR0dGeUtfX29aeUdERk00U2xjUElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAREft8DQi 32kQzgy/+5KHD1cWQVsHK7SV4NbvxCuN8aXHIcL+xiU+qfxDRN+/vVCoRSE4+OMz fmJp2vTxZHFsdnc+GazfuJjOPj32ikHFWwewbRvGTeJN65JXR17Qjz07L4qJ2zpl 1yFpMAbbFopPT/3QQLJVc3r1cpvUw9IoRMGA4d1IU1k90tTpujTdr4Fqbdlvfbk4 oca78Lz1TnvfmZEu3PeYQ6bDNd7/JjCNbtnNOq5PgOhs2X+9DaY9VVjTqZzLBJ1L afd6S2QEAObxcLIPv0bsT/65OzydF+4Fhmp7VI/+cBOkfOBB+VpoJ14xti/F4QiU MWx69YdOhFDcGA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:49 2025 by rpki-client