This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft File: r9rCQfMBCxrkhLwx9YStD50gZzQ.mft (raw, json) Hash identifier: VzT45nx0hoTSl1Mwl05SxRJW4T22+/7/d1keZa6ZQu0= Subject key identifier: CE:EA:26:8E:A6:25:71:6B:F4:26:AF:31:DA:90:40:83:8A:F3:13:AB Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Certificate serial: 019AF49C3FD7A05F1494233FAF4FDEA0DADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft Manifest number: 0D29 Signing time: Sat 06 Dec 2025 17:01:11 +0000 Manifest this update: Sat 06 Dec 2025 17:01:11 +0000 Manifest next update: Sun 07 Dec 2025 17:01:11 +0000 Files and hashes: 1: Pyp3KZhgaPnGJ0klVfWstvZhAaA.roa (hash: 2zE2fETyOiknIdhnDsU5+xLMFz/vO5FngmYcWoMLhMg=) 2: r9rCQfMBCxrkhLwx9YStD50gZzQ.crl (hash: +hyESVCObHbI1k8SnfzwXekQEQqAQQ3j6Sh3V5eDdrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:3f:d7:a0:5f:14:94:23:3f:af:4f:de:a0:da:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734 Validity Not Before: Dec 6 17:01:11 2025 GMT Not After : Dec 7 17:01:11 2025 GMT Subject: CN=ceea268ea625716bf426af31da9040838af313ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d2:b0:e7:7b:32:10:97:29:06:94:33:31:ef: 2b:b1:92:41:c5:79:2d:50:d9:ad:00:38:0b:a8:cd: b8:18:9d:79:53:62:37:52:ac:4b:d9:dc:d5:75:ee: 1f:d3:06:2b:f5:1d:d8:27:a8:a8:08:19:07:0c:17: 81:a7:a4:17:16:b8:bb:18:e0:e3:71:6a:86:53:79: 55:87:32:6c:48:ca:44:81:5b:b4:98:e1:5e:e3:eb: 7f:b9:64:52:11:82:56:05:91:27:11:65:3f:36:36: 68:6c:5a:c8:49:0a:b7:ba:9e:37:34:c5:7a:30:ae: 7a:9e:ca:54:fd:b9:51:39:a6:dc:ba:e3:5a:3e:64: b5:86:2a:b6:b2:26:dd:92:19:0c:26:db:97:52:d0: 6f:2e:5a:a8:1a:8a:f5:11:ca:2a:9e:73:7f:f5:58: 0c:ee:d1:99:3e:20:82:15:87:ec:15:a3:16:c4:2e: de:e5:c3:95:1c:a7:fa:20:b2:1d:7a:47:8d:f3:ad: 87:fb:4a:c8:32:c1:5f:a0:fd:9c:f3:04:8a:7a:58: 42:21:d8:d6:2c:32:f0:25:d0:f9:f1:bf:88:a0:22: e0:5c:66:76:08:4a:14:81:3a:74:64:1e:70:c6:3d: 82:9b:ff:72:a9:41:a3:0f:c2:cf:e5:f4:c1:21:75: 25:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EA:26:8E:A6:25:71:6B:F4:26:AF:31:DA:90:40:83:8A:F3:13:AB X509v3 Authority Key Identifier: keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b0:68:ff:dd:19:b4:10:57:f0:85:e4:55:81:18:88:78:56: cb:6c:a5:b7:48:62:c3:4e:2b:47:9e:1d:5d:25:cf:90:53:9a: 7a:5c:2d:23:47:28:a7:35:a8:21:c6:06:6e:90:0c:ef:03:ff: 84:d4:b9:ff:3a:15:a4:44:9c:6d:48:c2:9f:82:27:7c:25:55: 91:02:d8:5e:82:12:f5:26:56:54:97:9e:d2:cc:78:99:70:3f: 9a:cc:92:63:0c:11:22:e2:51:e9:5b:48:1d:98:d6:e1:25:d8: e1:6b:a7:1d:c2:d2:d0:b8:38:ec:6f:dc:16:3d:34:65:63:3f: 37:33:37:c8:d5:20:22:23:21:64:24:e1:14:8b:17:12:7e:f6: 99:86:0c:d2:be:24:0e:d5:e5:66:31:6d:c9:0b:aa:b5:3d:21: 8d:d5:98:f5:e2:9e:d5:20:05:97:eb:76:e4:55:1e:82:6d:84: 32:d8:cf:07:5f:c9:25:62:9b:c4:ec:3c:99:1c:b0:64:8c:15: b4:77:6b:51:3f:88:82:75:e7:27:b8:8a:4b:93:1e:c0:2e:01: c5:ee:fc:63:21:eb:95:68:3a:0d:4b:4b:e9:e7:e5:39:a9:65: d7:dc:31:af:88:f0:da:78:02:f9:b1:f3:fa:50:f9:6d:58:2e: 5e:d4:98:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nD/XoF8UlCM/r0/eoNreMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy MDY3MzQwHhcNMjUxMjA2MTcwMTExWhcNMjUxMjA3MTcwMTExWjAzMTEwLwYDVQQD EyhjZWVhMjY4ZWE2MjU3MTZiZjQyNmFmMzFkYTkwNDA4MzhhZjMxM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydKw53syEJcpBpQzMe8rsZJBxXkt UNmtADgLqM24GJ15U2I3UqxL2dzVde4f0wYr9R3YJ6ioCBkHDBeBp6QXFri7GODj cWqGU3lVhzJsSMpEgVu0mOFe4+t/uWRSEYJWBZEnEWU/NjZobFrISQq3up43NMV6 MK56nspU/blROabcuuNaPmS1hiq2sibdkhkMJtuXUtBvLlqoGor1EcoqnnN/9VgM 7tGZPiCCFYfsFaMWxC7e5cOVHKf6ILIdekeN862H+0rIMsFfoP2c8wSKelhCIdjW LDLwJdD58b+IoCLgXGZ2CEoUgTp0ZB5wxj2Cm/9yqUGjD8LP5fTBIXUl0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM7qJo6mJXFr9CavMdqQQIOK8xOrMB8GA1UdIwQY MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct NGI0ZjBmNmY3NTIyLzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLBo/90Z tBBX8IXkVYEYiHhWy2ylt0hiw04rR54dXSXPkFOaelwtI0copzWoIcYGbpAM7wP/ hNS5/zoVpEScbUjCn4InfCVVkQLYXoIS9SZWVJee0sx4mXA/msySYwwRIuJR6VtI HZjW4SXY4WunHcLS0Lg47G/cFj00ZWM/NzM3yNUgIiMhZCThFIsXEn72mYYM0r4k DtXlZjFtyQuqtT0hjdWY9eKe1SAFl+t25FUegm2EMtjPB1/JJWKbxOw8mRywZIwV tHdrUT+IgnXnJ7iKS5MewC4Bxe78YyHrlWg6DUtL6eflOall19wxr4jw2ngC+bHz +lD5bVguXtSYew== -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:31 2025 by rpki-client