This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft File: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json) Hash identifier: Dj5Oirzj7qg+vby7I21FoC5RtZlCHAF0pSko1sIIhn4= Subject key identifier: FC:B8:86:51:F5:FD:76:85:90:A0:C4:25:BD:F2:F4:A8:F5:39:11:4A Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A Certificate issuer: /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a Certificate serial: 019B3F7ECFAA70EF3198845B8CD2D19049F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft Manifest number: 157E Signing time: Sun 21 Dec 2025 06:00:33 +0000 Manifest this update: Sun 21 Dec 2025 06:00:33 +0000 Manifest next update: Mon 22 Dec 2025 06:00:33 +0000 Files and hashes: 1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: bTbBnMiUI7Il3ol/QuUFPf8hyMe351I4cDgoUtv4Mcw=) 2: rtyY9Cz1KYossj4NRjvNjMhwRZI.roa (hash: KYSFbkeXEHZUiKzf8OS4b0YogJmArNqO7BI7cVGBHSA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:cf:aa:70:ef:31:98:84:5b:8c:d2:d1:90:49:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a Validity Not Before: Dec 21 06:00:33 2025 GMT Not After : Dec 22 06:00:33 2025 GMT Subject: CN=fcb88651f5fd768590a0c425bdf2f4a8f539114a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:83:87:fe:3a:02:18:02:de:1a:7d:e2:26: ee:fe:36:a1:f1:45:03:4a:5c:5b:26:e0:9a:19:e3: 47:80:57:cb:e3:86:01:39:95:d8:77:86:96:10:5b: 7c:17:fb:27:93:63:cc:50:4c:90:86:fd:6c:53:d3: 52:66:df:ec:0f:58:9c:e2:f5:38:05:95:e8:bf:c2: 4c:d8:03:19:ff:05:81:7a:2b:b8:fd:35:0b:97:66: df:5c:29:17:ee:e2:2a:cc:ee:b2:61:6e:8d:dc:6c: bd:2e:23:ba:a3:f9:0a:6c:9a:be:b5:43:a7:e0:33: 03:c7:3d:5b:e8:86:1f:43:ca:63:42:53:39:f7:47: 16:4e:14:5d:c2:12:a2:1f:57:3e:8e:25:c8:2f:ff: 55:7f:69:92:30:f1:df:2a:c7:0d:c4:ab:b6:87:1c: e7:2a:64:67:ee:68:36:63:c8:1c:88:23:35:85:e7: 1f:f2:b7:53:ce:4d:89:39:3f:c6:fd:c6:c0:14:1a: 14:1d:50:62:93:37:a3:ae:b9:d3:4c:91:f3:ba:b7: f5:30:2f:74:64:c2:0b:89:8c:4a:26:35:84:bb:75: 2c:dc:c0:cb:0f:6d:9c:61:8a:38:e1:ee:a8:9d:6b: c0:c6:99:34:55:fd:73:04:50:2d:04:ab:91:d4:79: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B8:86:51:F5:FD:76:85:90:A0:C4:25:BD:F2:F4:A8:F5:39:11:4A X509v3 Authority Key Identifier: keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:2f:02:e0:48:a2:35:a6:10:3f:bf:47:8f:b9:f8:cf:a3:ed: 5f:03:f0:1f:e2:ec:04:7c:94:55:01:83:df:4a:35:a6:f3:41: 03:f0:b5:82:fa:f6:91:bc:b7:f0:30:bd:57:5c:92:14:11:10: 8f:77:a2:d9:18:57:a3:c8:57:33:15:85:8d:b7:82:73:8e:b7: 23:f6:8a:f9:42:df:20:45:25:f8:98:45:b8:bf:d2:37:e5:07: 31:11:26:62:56:97:3f:94:dd:72:fc:d4:24:0b:19:d7:f7:6a: 44:89:85:88:dc:e3:48:d7:15:d2:b9:b1:13:2e:12:c1:47:ba: 53:88:d8:fa:48:d8:5f:82:6a:63:2d:ec:58:53:3e:f6:5e:74: 49:88:cc:5c:13:03:01:c5:c2:c1:f5:b6:19:89:68:eb:43:3f: 2f:06:62:9c:72:ba:51:46:5a:b5:d2:2e:23:9b:6d:4e:76:56: 30:0b:c1:a4:b4:1a:d1:1b:0b:ac:63:b2:fc:b2:0b:a1:a5:e1: 46:df:d5:d6:48:96:db:03:ea:3d:ca:62:3c:20:dc:f3:e0:a3: 81:c1:02:fa:89:cc:71:a3:13:e3:74:d7:21:d8:61:f9:5f:40: a7:4f:84:54:d5:24:fb:45:08:ed:f4:2d:86:61:70:44:4a:6d: 54:a1:b9:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fs+qcO8xmIRbjNLRkEn0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1OWNiOTIzZTQwNjliZmUzNjJlMmQ5NmZmYWIyZmYzMTA3 ODMxN2EwHhcNMjUxMjIxMDYwMDMzWhcNMjUxMjIyMDYwMDMzWjAzMTEwLwYDVQQD EyhmY2I4ODY1MWY1ZmQ3Njg1OTBhMGM0MjViZGYyZjRhOGY1MzkxMTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOmDh/46AhgC3hp94ibu/jah8UUD SlxbJuCaGeNHgFfL44YBOZXYd4aWEFt8F/snk2PMUEyQhv1sU9NSZt/sD1ic4vU4 BZXov8JM2AMZ/wWBeiu4/TULl2bfXCkX7uIqzO6yYW6N3Gy9LiO6o/kKbJq+tUOn 4DMDxz1b6IYfQ8pjQlM590cWThRdwhKiH1c+jiXIL/9Vf2mSMPHfKscNxKu2hxzn KmRn7mg2Y8gciCM1hecf8rdTzk2JOT/G/cbAFBoUHVBikzejrrnTTJHzurf1MC90 ZMILiYxKJjWEu3Us3MDLD22cYYo44e6onWvAxpk0Vf1zBFAtBKuR1Hk27QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPy4hlH1/XaFkKDEJb3y9Kj1ORFKMB8GA1UdIwQY MBaAFPWcuSPkBpv+Ni4tlv+rL/MQeDF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MjYyOTgtMDI3OS00YjkzLWE5ODUt YTA0YWQyMmUzM2YzLzEvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MjYyOTgtMDI3OS00YjkzLWE5ODUtYTA0YWQyMmUzM2Yz LzEvOVp5NUktUUdtXzQyTGkyV182c3Y4eEI0TVhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhC8C4Eii NaYQP79Hj7n4z6PtXwPwH+LsBHyUVQGD30o1pvNBA/C1gvr2kby38DC9V1ySFBEQ j3ei2RhXo8hXMxWFjbeCc463I/aK+ULfIEUl+JhFuL/SN+UHMREmYlaXP5TdcvzU JAsZ1/dqRImFiNzjSNcV0rmxEy4SwUe6U4jY+kjYX4JqYy3sWFM+9l50SYjMXBMD AcXCwfW2GYlo60M/LwZinHK6UUZatdIuI5ttTnZWMAvBpLQa0RsLrGOy/LILoaXh Rt/V1kiW2wPqPcpiPCDc8+CjgcEC+onMcaMT43TXIdhh+V9Ap0+EVNUk+0UI7fQt hmFwREptVKG5rw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:35:19 2025 by rpki-client