This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft File: m9ReJgecMchSFrcwDNjmMw1D1a8.mft (raw, json) Hash identifier: paht+YpuOGm7vDpl/INOtsdxO1cOcHpyhACauoaZCsE= Subject key identifier: 3A:DB:BC:22:88:E7:F6:22:CE:7C:EE:58:B0:52:CA:B9:B3:AB:EE:3A Authority key identifier: 9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF Certificate issuer: /CN=9bd45e26079c31c85216b7300cd8e6330d43d5af Certificate serial: 019AF49C460327FC504BB07AF173019C5DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft Manifest number: 01F3 Signing time: Sat 06 Dec 2025 17:01:13 +0000 Manifest this update: Sat 06 Dec 2025 17:01:13 +0000 Manifest next update: Sun 07 Dec 2025 17:01:13 +0000 Files and hashes: 1: f1BUILnewKi0pPk0-cUIO9sX1N4.roa (hash: upOHsTvU2HpEvGGaQw5H57ty1Pp8ZO03Lz1+b3tzvFA=) 2: m9ReJgecMchSFrcwDNjmMw1D1a8.crl (hash: VzhUKb+ch1BSdcGRUy169JGmW/sDkY5IdISxS9vrdlY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:46:03:27:fc:50:4b:b0:7a:f1:73:01:9c:5d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd45e26079c31c85216b7300cd8e6330d43d5af Validity Not Before: Dec 6 17:01:13 2025 GMT Not After : Dec 7 17:01:13 2025 GMT Subject: CN=3adbbc2288e7f622ce7cee58b052cab9b3abee3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:67:f1:4d:6f:91:36:39:ad:94:56:c9:d3:83: 48:b4:71:7a:f2:f1:25:19:b2:59:21:b9:46:77:b1: 37:07:e5:26:4d:36:a7:82:f0:a6:64:1a:d7:0d:1a: 6a:bd:bc:75:52:cf:21:61:d5:b8:7f:ba:c8:61:64: 95:d9:06:a7:d0:38:27:71:97:4d:ff:1e:cf:de:50: 96:c7:7e:d3:83:22:76:39:1f:37:5c:d6:83:05:bf: 74:b3:92:45:4e:14:f3:b6:33:32:99:4c:8b:fa:c7: 82:2d:76:b8:f7:02:3f:65:e1:91:7c:7a:12:d9:11: 7d:6d:e3:b2:4f:15:eb:3d:ef:38:f5:1e:24:d8:d4: e9:ad:b5:d0:09:fd:c2:f8:a9:c5:1b:f7:ed:9e:ae: 47:67:bf:b5:34:68:59:fa:65:13:bf:13:52:93:0c: 33:17:69:c6:33:a7:49:01:a5:c4:7b:bf:f5:49:97: 66:b8:f1:86:08:e4:5e:39:aa:ef:4f:0f:f6:cf:a4: 85:93:01:dc:5a:c3:ad:d6:75:37:a8:61:52:ac:60: e6:24:c0:01:e7:0a:a0:9b:22:3b:b7:1d:19:d4:89: 98:f8:af:7f:41:be:d5:e6:d6:9d:24:03:f5:bf:f8: 1d:0c:e7:02:63:5f:f6:ca:9e:90:b5:50:71:b0:be: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DB:BC:22:88:E7:F6:22:CE:7C:EE:58:B0:52:CA:B9:B3:AB:EE:3A X509v3 Authority Key Identifier: keyid:9B:D4:5E:26:07:9C:31:C8:52:16:B7:30:0C:D8:E6:33:0D:43:D5:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9ReJgecMchSFrcwDNjmMw1D1a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceb60e-0d2a-4171-bcb5-df9d5fbdbc15/1/m9ReJgecMchSFrcwDNjmMw1D1a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:cf:cc:46:db:5b:b3:c0:eb:cc:74:c6:09:79:db:2b:7a:d0: 7e:fb:71:1c:44:27:a6:28:17:4d:dc:2b:61:d3:73:55:fe:cb: ee:0a:f3:38:e3:6f:58:fb:e9:48:67:82:a1:d5:df:52:2f:74: bf:be:5e:fc:f1:cd:90:00:3d:f4:d9:a6:f5:9d:e7:76:6b:65: 7f:d9:7d:87:2f:3b:a2:e0:a7:a0:6b:7f:3e:f3:7e:6b:ab:07: d5:12:e0:ce:51:04:15:61:53:8b:f6:b4:1d:8c:5e:1f:c1:1a: bd:f4:36:08:59:9c:0a:88:da:5b:a1:33:a5:22:19:e4:fc:44: 5c:37:66:04:66:bc:5c:87:24:d9:83:a1:2e:a3:44:2b:70:ea: a3:84:eb:7d:17:02:b8:d6:c3:17:03:29:a0:ca:ca:d5:1e:6a: 07:f9:a2:c6:eb:39:bc:16:df:ee:c8:c4:68:b3:59:49:5b:d7: e1:4c:a4:f3:7e:4a:ef:34:33:53:c1:e0:38:ce:db:c2:02:f1: 1d:de:80:60:c2:3f:ea:18:b6:c7:c7:60:24:d5:04:a6:30:2c: e4:4e:54:a9:da:d6:04:64:d8:1c:75:99:72:c3:20:3b:8a:bd: 99:bd:23:7e:a9:0f:fa:e8:83:16:3b:b0:d5:fd:40:49:4c:fb: 98:ea:db:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEYDJ/xQS7B68XMBnF3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDQ1ZTI2MDc5YzMxYzg1MjE2YjczMDBjZDhlNjMzMGQ0 M2Q1YWYwHhcNMjUxMjA2MTcwMTEzWhcNMjUxMjA3MTcwMTEzWjAzMTEwLwYDVQQD EygzYWRiYmMyMjg4ZTdmNjIyY2U3Y2VlNThiMDUyY2FiOWIzYWJlZTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GfxTW+RNjmtlFbJ04NItHF68vEl GbJZIblGd7E3B+UmTTangvCmZBrXDRpqvbx1Us8hYdW4f7rIYWSV2Qan0DgncZdN /x7P3lCWx37TgyJ2OR83XNaDBb90s5JFThTztjMymUyL+seCLXa49wI/ZeGRfHoS 2RF9beOyTxXrPe849R4k2NTprbXQCf3C+KnFG/ftnq5HZ7+1NGhZ+mUTvxNSkwwz F2nGM6dJAaXEe7/1SZdmuPGGCOReOarvTw/2z6SFkwHcWsOt1nU3qGFSrGDmJMAB 5wqgmyI7tx0Z1ImY+K9/Qb7V5tadJAP1v/gdDOcCY1/2yp6QtVBxsL41ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrbvCKI5/YiznzuWLBSyrmzq+46MB8GA1UdIwQY MBaAFJvUXiYHnDHIUha3MAzY5jMNQ9WvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUt ZGY5ZDVmYmRiYzE1LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9jZWI2MGUtMGQyYS00MTcxLWJjYjUtZGY5ZDVmYmRiYzE1 LzEvbTlSZUpnZWNNY2hTRnJjd0ROam1NdzFEMWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8/MRttb s8DrzHTGCXnbK3rQfvtxHEQnpigXTdwrYdNzVf7L7grzOONvWPvpSGeCodXfUi90 v75e/PHNkAA99Nmm9Z3ndmtlf9l9hy87ouCnoGt/PvN+a6sH1RLgzlEEFWFTi/a0 HYxeH8EavfQ2CFmcCojaW6EzpSIZ5PxEXDdmBGa8XIck2YOhLqNEK3Dqo4TrfRcC uNbDFwMpoMrK1R5qB/mixus5vBbf7sjEaLNZSVvX4Uyk835K7zQzU8HgOM7bwgLx Hd6AYMI/6hi2x8dgJNUEpjAs5E5UqdrWBGTYHHWZcsMgO4q9mb0jfqkP+uiDFjuw 1f1ASUz7mOrbzA== -----END CERTIFICATE-----Generated at Sat Dec 6 21:34:44 2025 by rpki-client