This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft File: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft (raw, json) Hash identifier: e098Cj4Y+dnR7wm3GQRlEKiNsgodgjkiGtnZB3TfEDE= Subject key identifier: C4:69:DD:03:7E:DF:9E:43:70:0C:36:35:57:87:D3:79:EF:88:9E:24 Authority key identifier: F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58 Certificate issuer: /CN=f4674b6ab3d5c6743d004ec0920a0371ce019758 Certificate serial: 019AF49B9FA6077A7CC2D555C4104D43E541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft Manifest number: 0BD7 Signing time: Sat 06 Dec 2025 17:00:30 +0000 Manifest this update: Sat 06 Dec 2025 17:00:30 +0000 Manifest next update: Sun 07 Dec 2025 17:00:30 +0000 Files and hashes: 1: 9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl (hash: 7tEMe2/EyiUo1Eostiywa8qrilKFswK5KCvOF2XhIX8=) 2: JFSPkHUXD6uekiRT14OFUV3SRJ8.roa (hash: d66KNl4Y3abt7U8S0mMyC51IECrPTJ0e2/YrGhdvTTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:9f:a6:07:7a:7c:c2:d5:55:c4:10:4d:43:e5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4674b6ab3d5c6743d004ec0920a0371ce019758 Validity Not Before: Dec 6 17:00:30 2025 GMT Not After : Dec 7 17:00:30 2025 GMT Subject: CN=c469dd037edf9e43700c36355787d379ef889e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8b:b4:3a:7c:0a:b4:19:38:18:dc:1a:fe:04: 11:83:7e:5c:8d:35:c0:ec:1a:47:7f:29:d3:f6:75: ee:70:04:0b:ee:31:10:78:98:7a:06:c0:a4:5e:5f: b2:c8:40:37:60:fb:1f:4b:4a:65:4a:01:86:1b:36: 6d:d1:6a:e1:8a:44:03:2c:0d:cb:6c:0a:0c:18:fd: eb:ae:4e:13:d4:45:32:f0:73:29:0f:ac:ac:d9:ff: 65:68:f4:8a:8b:b1:06:c8:b0:c2:7f:26:ab:af:5d: 29:05:b2:56:49:7e:4a:31:e1:e3:a0:d2:34:2f:ee: e1:01:b9:00:15:24:4a:95:3b:64:78:c2:9e:e2:ac: bd:7e:29:bf:75:4d:4b:d1:af:7a:d2:85:19:57:47: 84:c2:3d:81:f7:df:9f:3d:fc:a2:b0:40:6b:f1:c1: c6:5e:08:5c:53:7a:f3:a8:d6:94:9c:40:bf:81:27: 2d:d8:2a:3a:34:fa:5c:34:a8:5b:01:80:ec:eb:02: 8b:a5:05:65:23:ae:7e:9c:d9:03:0a:54:20:2d:c3: d6:ad:fa:fa:96:47:64:4e:15:26:68:b9:8d:f4:3d: 11:14:8f:a1:a6:e2:62:69:33:29:01:be:36:21:09: c6:94:18:71:8d:b9:c8:92:18:88:f3:30:6a:d6:9a: 60:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:69:DD:03:7E:DF:9E:43:70:0C:36:35:57:87:D3:79:EF:88:9E:24 X509v3 Authority Key Identifier: keyid:F4:67:4B:6A:B3:D5:C6:74:3D:00:4E:C0:92:0A:03:71:CE:01:97:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/748ede-de37-4308-8872-39570d6f009e/1/9GdLarPVxnQ9AE7AkgoDcc4Bl1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:01:d3:d9:13:c3:92:b1:85:29:6a:e6:f8:bf:15:8a:b9:b5: f7:96:7f:c8:cf:a9:df:99:21:3f:97:29:92:57:60:a0:9e:cc: cf:8b:0d:9e:42:1f:a4:00:a7:4a:cf:8f:6e:f7:f1:f8:ae:7f: 9a:30:f9:44:59:8d:31:e1:02:c2:df:aa:01:8d:b8:eb:3d:65: 84:55:29:4c:3e:bd:63:c4:7a:4b:ce:79:ad:52:ef:f3:92:86: 78:a9:02:e9:8f:e5:d4:3f:57:89:39:f4:76:d7:16:a6:b2:0c: 04:18:4e:37:f2:74:b6:2a:f7:78:71:0a:ca:94:d4:64:e5:fc: 2e:0e:0d:5d:f1:3a:61:a4:56:f3:6d:0a:a5:da:81:d0:e3:a2: f1:77:9c:e4:22:c7:59:41:3e:0f:99:9d:52:86:75:84:df:36: fd:bb:39:e0:07:5a:14:a6:62:98:d9:e8:07:2e:3a:1c:80:4b: 8f:40:f1:77:55:c9:43:5f:a3:36:f1:eb:1c:70:63:a1:8b:b7: c0:09:3c:fb:3d:e0:f1:eb:a5:1e:68:dc:9c:30:11:fd:69:66: 58:2c:70:2d:2f:1b:12:75:c5:f4:e3:f9:40:f4:19:31:e5:13: 3f:82:97:a9:d7:75:40:6a:98:c4:e8:5e:09:95:17:28:62:51: ce:c2:a3:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m5+mB3p8wtVVxBBNQ+VBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Njc0YjZhYjNkNWM2NzQzZDAwNGVjMDkyMGEwMzcxY2Uw MTk3NTgwHhcNMjUxMjA2MTcwMDMwWhcNMjUxMjA3MTcwMDMwWjAzMTEwLwYDVQQD EyhjNDY5ZGQwMzdlZGY5ZTQzNzAwYzM2MzU1Nzg3ZDM3OWVmODg5ZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYu0OnwKtBk4GNwa/gQRg35cjTXA 7BpHfynT9nXucAQL7jEQeJh6BsCkXl+yyEA3YPsfS0plSgGGGzZt0WrhikQDLA3L bAoMGP3rrk4T1EUy8HMpD6ys2f9laPSKi7EGyLDCfyarr10pBbJWSX5KMeHjoNI0 L+7hAbkAFSRKlTtkeMKe4qy9fim/dU1L0a960oUZV0eEwj2B99+fPfyisEBr8cHG XghcU3rzqNaUnEC/gSct2Co6NPpcNKhbAYDs6wKLpQVlI65+nNkDClQgLcPWrfr6 lkdkThUmaLmN9D0RFI+hpuJiaTMpAb42IQnGlBhxjbnIkhiI8zBq1ppgxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRp3QN+355DcAw2NVeH03nviJ4kMB8GA1UdIwQY MBaAFPRnS2qz1cZ0PQBOwJIKA3HOAZdYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzIt Mzk1NzBkNmYwMDllLzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS83NDhlZGUtZGUzNy00MzA4LTg4NzItMzk1NzBkNmYwMDll LzEvOUdkTGFyUFZ4blE5QUU3QWtnb0RjYzRCbDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwHT2RPD krGFKWrm+L8Virm195Z/yM+p35khP5cpkldgoJ7Mz4sNnkIfpACnSs+Pbvfx+K5/ mjD5RFmNMeECwt+qAY246z1lhFUpTD69Y8R6S855rVLv85KGeKkC6Y/l1D9XiTn0 dtcWprIMBBhON/J0tir3eHEKypTUZOX8Lg4NXfE6YaRW820KpdqB0OOi8Xec5CLH WUE+D5mdUoZ1hN82/bs54AdaFKZimNnoBy46HIBLj0Dxd1XJQ1+jNvHrHHBjoYu3 wAk8+z3g8eulHmjcnDAR/WlmWCxwLS8bEnXF9OP5QPQZMeUTP4KXqdd1QGqYxOhe CZUXKGJRzsKj9A== -----END CERTIFICATE-----Generated at Sat Dec 6 19:12:56 2025 by rpki-client