This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft File: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft (raw, json) Hash identifier: Cl0zhL/PtYUxfKAer39DjDeXGobFTwsrGpKqRah9kyE= Subject key identifier: DE:BD:03:F9:AC:88:93:68:2C:67:9C:51:19:B1:C0:32:DD:64:70:F5 Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a Certificate serial: 019AF352B19D22FF8FDBD6817D226E53362E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft Manifest number: 1209 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: 8IrRnzXhLEtJOzQ76JyjoEUrlXo.roa (hash: twXscxBiA6A/cPdgQ7hNA9EiiSEcOyWKVNdA2W42KG4=) 2: LsBMcdJw5xS8I63MgOSx7GP6YGo.roa (hash: eclfzXKV6RSN6OrnDOnk9OvTtMq4JN86esMRl2QpoQY=) 3: R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl (hash: etUMLEKcPzFG00P+0mhV6dvc8QXenIbrj3spL8XC8Zk=) 4: RP5jpn-uKD4VZqtBiaKoc8atoPw.roa (hash: QDcnUril7uwVWWdbILh+cVbAEXM+2Qt6gMgTdP6yAQo=) 5: UEQBycXO84xxZEefVNxr90yQeH0.roa (hash: TEj6JdNtANQj346QJ0SBfIpcEXL1H4ox6W/yWcLs2Y0=) 6: ufd9I1sTMu_-cmgS_4wyO_C2LOU.roa (hash: t8YD8zi5UguFlovOm8R2XRjIBtMUKaWMQ8CNRGn6mYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b1:9d:22:ff:8f:db:d6:81:7d:22:6e:53:36:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=debd03f9ac8893682c679c5119b1c032dd6470f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:db:d2:ce:75:00:a1:75:8d:c1:40:fa:1c:14: c0:44:83:bb:a1:e8:9a:c5:07:72:55:c7:d0:59:d2: 4d:e1:14:e9:03:fa:c6:f1:71:3d:60:f1:fd:b8:fc: 8a:43:f7:7d:cc:a6:2c:00:6f:2e:7f:7c:33:08:93: 9c:63:e1:84:2d:6e:af:d9:00:cb:e1:ba:b4:33:d8: 90:90:07:bc:fb:1b:bd:db:84:d9:31:9c:e2:ff:54: d8:a2:08:e8:dd:5f:03:b3:f9:3a:20:b3:52:e2:7b: f0:5e:3f:e3:c6:f5:87:2f:ee:7d:31:ad:60:ee:99: a3:bd:e8:01:e7:59:29:7d:09:57:c6:88:87:d1:aa: e0:89:c7:b7:85:60:f4:52:e6:1b:47:e0:1c:52:65: 6f:df:c9:f2:4e:33:f5:54:9f:33:19:21:56:ae:48: 38:90:01:1b:63:38:61:5b:b4:15:15:dc:ac:5b:f8: a9:6c:1b:87:ba:61:48:7c:e8:d9:52:cb:7b:16:35: 73:ac:cf:5a:e8:32:71:db:9c:1f:f1:63:1c:73:db: 98:05:e3:1d:a6:2d:85:12:5e:f9:82:fb:6a:67:dd: d9:00:3b:e5:4d:54:fe:97:21:94:b5:59:25:12:a2: ce:6b:c5:c7:37:91:5c:ac:0c:c5:d6:48:16:ce:1e: 83:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:BD:03:F9:AC:88:93:68:2C:67:9C:51:19:B1:C0:32:DD:64:70:F5 X509v3 Authority Key Identifier: keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:18:1d:af:20:da:12:ff:8a:f9:13:88:c4:de:4e:9f:ca:c0: 98:2c:06:cf:32:b8:60:ee:c7:42:41:38:9d:0e:3d:84:f2:02: 48:19:ef:4a:72:ae:ea:b7:c5:e9:59:06:da:d6:ef:b0:42:5e: 2c:79:24:ce:53:b5:a9:c9:15:0e:57:81:34:fa:55:94:da:02: 7f:25:2a:a3:40:9e:0e:bf:bf:48:1a:fd:38:8e:d3:d1:1d:f6: 68:f4:d6:1c:75:83:16:bc:e2:69:c7:3b:02:fa:82:19:36:30: b7:1d:5e:be:d5:69:f7:c7:9e:70:9e:ee:e1:e2:52:e8:39:b9: d1:41:5f:21:8e:a7:e3:c1:de:92:fc:b2:fd:fe:5e:80:d4:6a: 11:2c:a6:31:9a:5b:66:ec:e3:94:c9:b4:66:6c:18:ee:38:a8: b3:ca:76:34:c6:a5:1e:6f:97:dc:02:0a:85:a3:bd:65:96:0b: d1:15:88:ca:bc:06:2b:05:31:79:71:4e:98:55:bb:d0:f0:a3: a0:2e:29:7b:df:c9:e0:2e:05:6f:c7:cc:48:10:c6:40:f2:fc: a5:6d:f7:13:bd:7f:86:2d:06:d2:62:f5:2f:5d:37:ec:7e:95: 17:25:fa:68:50:1d:57:b5:84:6a:70:3a:85:64:53:bb:63:ad: 24:21:2c:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrGdIv+P29aBfSJuUzYuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZDA2NGZiM2U1NDFmMjM1NjMwNjVlNDhmMzAwZjJjZmRm ZTAwOWEwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD EyhkZWJkMDNmOWFjODg5MzY4MmM2NzljNTExOWIxYzAzMmRkNjQ3MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dvSznUAoXWNwUD6HBTARIO7oeia xQdyVcfQWdJN4RTpA/rG8XE9YPH9uPyKQ/d9zKYsAG8uf3wzCJOcY+GELW6v2QDL 4bq0M9iQkAe8+xu924TZMZzi/1TYogjo3V8Ds/k6ILNS4nvwXj/jxvWHL+59Ma1g 7pmjvegB51kpfQlXxoiH0argice3hWD0UuYbR+AcUmVv38nyTjP1VJ8zGSFWrkg4 kAEbYzhhW7QVFdysW/ipbBuHumFIfOjZUst7FjVzrM9a6DJx25wf8WMcc9uYBeMd pi2FEl75gvtqZ93ZADvlTVT+lyGUtVklEqLOa8XHN5FcrAzF1kgWzh6DQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN69A/msiJNoLGecURmxwDLdZHD1MB8GA1UdIwQY MBaAFEfQZPs+VB8jVjBl5I8wDyz9/gCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmIt ZWZhYWZmMGE5ODJmLzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kNTY2OTMtMjI1NC00YTNiLWFjYmItZWZhYWZmMGE5ODJm LzEvUjlCay16NVVIeU5XTUdYa2p6QVBMUDMtQUpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExgdryDa Ev+K+ROIxN5On8rAmCwGzzK4YO7HQkE4nQ49hPICSBnvSnKu6rfF6VkG2tbvsEJe LHkkzlO1qckVDleBNPpVlNoCfyUqo0CeDr+/SBr9OI7T0R32aPTWHHWDFrziacc7 AvqCGTYwtx1evtVp98eecJ7u4eJS6Dm50UFfIY6n48Hekvyy/f5egNRqESymMZpb ZuzjlMm0ZmwY7jios8p2NMalHm+X3AIKhaO9ZZYL0RWIyrwGKwUxeXFOmFW70PCj oC4pe9/J4C4Fb8fMSBDGQPL8pW33E71/hi0G0mL1L1037H6VFyX6aFAdV7WEanA6 hWRTu2OtJCEsMg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:41:56 2025 by rpki-client