This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json) Hash identifier: ZSccS7HMJKRVV/hy+vCR7sSwXgpG9i6oX7w7Xvrxjek= Subject key identifier: 19:F1:92:65:25:50:EB:1E:BE:ED:A3:60:2C:7F:20:AE:D5:F2:10:B1 Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71 Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571 Certificate serial: 019AF31C54DB9E352BA8395B05AFF6F8BDEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft Manifest number: 0832 Signing time: Sat 06 Dec 2025 10:01:51 +0000 Manifest this update: Sat 06 Dec 2025 10:01:51 +0000 Manifest next update: Sun 07 Dec 2025 10:01:51 +0000 Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: Aubnq7YElKLf30oeX8jSEDnYNuCWfdG3REFFZgThWS4=) 2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:54:db:9e:35:2b:a8:39:5b:05:af:f6:f8:bd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f41180a7c51667ec3875e765f245f90938612571 Validity Not Before: Dec 6 10:01:51 2025 GMT Not After : Dec 7 10:01:51 2025 GMT Subject: CN=19f192652550eb1ebeeda3602c7f20aed5f210b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c3:00:9d:82:40:3a:56:9a:47:f1:74:0a:aa: 06:cd:52:40:41:6b:c2:bf:2c:c2:79:f5:9c:12:d3: 92:fe:fa:a5:c0:47:5c:e7:c0:9e:34:dc:ef:f2:32: f8:69:be:c8:39:e0:d3:79:67:8f:d3:a8:c8:e8:aa: fa:d4:32:b5:30:4b:aa:9e:3b:bb:7b:1f:ce:a1:26: a4:bd:53:14:b2:34:26:f6:5e:54:70:86:78:aa:c5: e9:40:f7:0d:d4:79:c9:5e:6d:af:77:31:2a:bf:74: 3f:11:c4:ad:e8:00:7c:78:e4:ba:58:d9:99:e3:26: c2:36:be:cc:b0:63:06:ac:53:f1:02:3c:bc:52:c4: ec:73:32:44:43:37:91:28:7b:54:37:fc:eb:fc:d2: 62:ab:73:e0:1c:d8:63:82:01:0f:21:29:9d:03:7e: 31:1a:01:f5:93:40:e7:8b:2b:a0:cc:e1:6f:08:56: 85:bb:21:cc:36:ef:5a:56:8d:d9:e9:2c:d5:24:f4: 09:d2:c1:7e:c5:9c:d1:c8:23:54:9a:30:27:9c:50: f2:49:a5:bf:cf:b5:c4:99:5f:b2:ca:cf:dc:69:15: 25:af:a6:e6:e4:79:6d:64:9f:54:dd:d0:89:7a:da: a9:77:ad:74:eb:51:b5:08:c0:ef:84:7d:06:72:de: 15:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F1:92:65:25:50:EB:1E:BE:ED:A3:60:2C:7F:20:AE:D5:F2:10:B1 X509v3 Authority Key Identifier: keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:73:ca:6f:a2:16:ec:67:21:91:a8:5e:92:95:39:d8:ab:54: 85:72:57:4b:b8:fa:33:3b:9b:ed:dd:c8:d6:ca:17:fb:53:83: 43:e4:9e:6b:e2:d0:4b:41:b7:74:57:e5:44:2e:8d:20:1e:3c: e5:a1:cb:ad:e7:c4:f8:61:41:78:b9:c8:7e:50:3c:cb:31:c1: 17:59:bc:64:0c:ac:93:e6:fb:c6:d7:d5:c6:eb:0b:31:a8:3f: 82:13:f4:00:d1:e5:aa:c6:8d:a2:fb:75:f0:a0:97:c9:0c:c7: 98:24:3e:b4:6e:09:e0:cb:af:06:c0:37:5b:d1:35:0b:3f:4b: b0:b9:28:c4:b5:cf:35:fe:c4:26:98:34:42:ef:0a:48:99:3c: 54:9a:f8:41:3b:ed:3d:0c:aa:c2:8e:cf:bc:6c:45:d3:67:e0: 41:1f:ea:d0:fa:d8:37:b8:9d:c0:34:92:2b:66:46:aa:36:e9: b1:ea:3f:e1:2e:4e:c2:16:01:91:64:c1:73:59:4c:f8:6c:ce: 8b:26:f2:fe:12:b6:6a:e8:1c:04:ac:14:b8:b1:e9:5a:47:61: ce:a4:e7:e4:c9:c1:eb:85:03:1d:69:d4:6e:e6:ff:db:18:de: 24:17:af:bd:f9:57:43:74:13:ec:f8:1f:0b:0c:8d:1a:dd:93: 5b:88:78:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHFTbnjUrqDlbBa/2+L3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTE4MGE3YzUxNjY3ZWMzODc1ZTc2NWYyNDVmOTA5Mzg2 MTI1NzEwHhcNMjUxMjA2MTAwMTUxWhcNMjUxMjA3MTAwMTUxWjAzMTEwLwYDVQQD EygxOWYxOTI2NTI1NTBlYjFlYmVlZGEzNjAyYzdmMjBhZWQ1ZjIxMGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8MAnYJAOlaaR/F0CqoGzVJAQWvC vyzCefWcEtOS/vqlwEdc58CeNNzv8jL4ab7IOeDTeWeP06jI6Kr61DK1MEuqnju7 ex/OoSakvVMUsjQm9l5UcIZ4qsXpQPcN1HnJXm2vdzEqv3Q/EcSt6AB8eOS6WNmZ 4ybCNr7MsGMGrFPxAjy8UsTsczJEQzeRKHtUN/zr/NJiq3PgHNhjggEPISmdA34x GgH1k0DniyugzOFvCFaFuyHMNu9aVo3Z6SzVJPQJ0sF+xZzRyCNUmjAnnFDySaW/ z7XEmV+yys/caRUlr6bm5HltZJ9U3dCJetqpd61061G1CMDvhH0Gct4VZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnxkmUlUOsevu2jYCx/IK7V8hCxMB8GA1UdIwQY MBaAFPQRgKfFFmfsOHXnZfJF+Qk4YSVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUt OGYzMmQwMzE5NGIwLzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZDZmZGQtNmQ0MS00MTI1LThiYjUtOGYzMmQwMzE5NGIw LzEvOUJHQXA4VVdaLXc0ZGVkbDhrWDVDVGhoSlhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXPKb6IW 7GchkahekpU52KtUhXJXS7j6Mzub7d3I1soX+1ODQ+Sea+LQS0G3dFflRC6NIB48 5aHLrefE+GFBeLnIflA8yzHBF1m8ZAysk+b7xtfVxusLMag/ghP0ANHlqsaNovt1 8KCXyQzHmCQ+tG4J4MuvBsA3W9E1Cz9LsLkoxLXPNf7EJpg0Qu8KSJk8VJr4QTvt PQyqwo7PvGxF02fgQR/q0PrYN7idwDSSK2ZGqjbpseo/4S5OwhYBkWTBc1lM+GzO iyby/hK2augcBKwUuLHpWkdhzqTn5MnB64UDHWnUbub/2xjeJBevvflXQ3QT7Pgf CwyNGt2TW4h4Ng== -----END CERTIFICATE-----Generated at Sat Dec 6 18:52:04 2025 by rpki-client