This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft File: 9EAkreXkgCwKL2Hm-A9NItwVSFM.mft (raw, json) Hash identifier: GrOxU+UgR2up36S/opD/c0pmuXUQpmAxI6SQaWdKY00= Subject key identifier: 7B:0F:98:DE:69:60:09:1A:97:40:06:4A:C7:23:E2:66:8B:C5:43:74 Authority key identifier: F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53 Certificate issuer: /CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853 Certificate serial: 019B3C0FDA319148D2A186782EDB93032307 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft Manifest number: 14CC Signing time: Sat 20 Dec 2025 14:00:30 +0000 Manifest this update: Sat 20 Dec 2025 14:00:30 +0000 Manifest next update: Sun 21 Dec 2025 14:00:30 +0000 Files and hashes: 1: 4J1X6PCF39tH0Ho4_SbJ7AtxDbg.roa (hash: sDrnXJKsdAbmdaesDlUsR31uPE7GfMdA3txIVC37ks4=) 2: 9EAkreXkgCwKL2Hm-A9NItwVSFM.crl (hash: zzjNcWl3o84nuGeU4pKret5SrCi8ZGn5m1wH69Lazew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:0f:da:31:91:48:d2:a1:86:78:2e:db:93:03:23:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44024ade5e4802c0a2f61e6f80f4d22dc154853 Validity Not Before: Dec 20 14:00:30 2025 GMT Not After : Dec 21 14:00:30 2025 GMT Subject: CN=7b0f98de6960091a9740064ac723e2668bc54374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:24:89:c6:47:24:00:19:e7:c5:1c:75:19:e3: cb:99:29:c5:8b:7e:9c:4c:7d:d6:fe:64:98:03:aa: 7f:f7:ff:98:c9:20:0e:28:4c:d3:66:a1:93:1d:34: d4:02:65:0b:c1:2a:56:1f:57:b3:28:4a:72:1c:69: 00:ef:5b:cf:10:55:b0:7f:df:c6:fd:81:d9:28:c9: 87:a6:49:f3:a3:cc:9a:5a:cc:97:cc:0b:be:e8:5d: 7c:98:0f:c1:46:05:e7:73:d4:fd:d3:86:1d:37:9e: 79:af:53:b9:1b:63:ba:ff:99:c0:f8:71:0b:b6:c7: 97:07:b3:61:bf:c3:5e:04:29:3c:34:f5:5f:ac:49: d5:8b:da:21:40:28:c3:94:98:02:9b:7e:92:72:d2: 05:f3:8a:9d:bf:04:3f:79:c7:67:41:37:44:23:8b: 51:f1:c7:17:ba:99:17:91:4c:e3:9c:06:33:12:cc: 9a:80:a1:84:0f:ea:59:4b:94:dc:4a:3f:9e:e5:f4: fc:70:4e:37:a6:0b:e9:9d:fd:05:84:de:3b:71:13: 73:7b:cd:81:55:e6:d3:56:59:b3:bb:6a:0c:03:1d: 99:95:11:79:ba:d4:46:f8:c8:7b:b7:98:1d:fc:e4: a3:92:55:42:0c:17:ca:fe:ba:ea:b8:5d:99:89:c9: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:98:DE:69:60:09:1A:97:40:06:4A:C7:23:E2:66:8B:C5:43:74 X509v3 Authority Key Identifier: keyid:F4:40:24:AD:E5:E4:80:2C:0A:2F:61:E6:F8:0F:4D:22:DC:15:48:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EAkreXkgCwKL2Hm-A9NItwVSFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/679b4d-fa3d-4993-a18a-63c9c84ec74f/1/9EAkreXkgCwKL2Hm-A9NItwVSFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:02:d1:1e:fa:f3:45:f6:e7:5d:5f:b2:5b:6f:1c:b4:66:6d: 1f:58:5f:96:4c:f2:90:ce:22:ba:b5:26:91:41:74:ee:1c:ff: 73:d5:98:06:e3:ee:92:6f:e2:54:bc:22:fc:43:c2:bc:28:a0: 14:1b:56:95:32:9b:ca:7f:f5:2d:52:ea:83:3b:a9:a4:c6:54: c9:a0:dd:6e:e6:23:4f:86:2a:51:a8:4d:c5:e0:ec:f0:26:df: 38:b4:1d:b5:e9:32:8c:6e:9b:e8:ad:d3:27:4c:76:80:40:39: ac:52:12:4f:ce:50:52:4d:f0:39:3b:c3:29:ce:99:7c:37:a9: 6d:ba:a5:42:e6:0f:97:4a:8f:57:0a:31:10:cd:07:e0:51:7f: 66:00:d2:07:2b:c4:5b:5a:62:9b:e0:3f:46:39:27:e4:96:69: 00:86:3b:93:f9:07:92:4e:91:1f:1b:83:bd:e4:e3:e6:d1:8c: 65:fe:2d:e5:fe:c8:66:fd:c2:4a:c5:ef:91:41:ca:bb:93:8e: 3d:4a:47:28:84:1a:18:3f:d5:81:98:61:44:c5:5b:df:06:b8: 85:2f:ae:4b:d3:b1:02:e6:35:f9:70:89:7c:93:6d:69:20:c3: e2:09:5d:35:13:cc:2e:06:a8:96:3e:2b:46:4e:e8:6a:e8:0c: ae:0d:fa:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8D9oxkUjSoYZ4LtuTAyMHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NDAyNGFkZTVlNDgwMmMwYTJmNjFlNmY4MGY0ZDIyZGMx NTQ4NTMwHhcNMjUxMjIwMTQwMDMwWhcNMjUxMjIxMTQwMDMwWjAzMTEwLwYDVQQD Eyg3YjBmOThkZTY5NjAwOTFhOTc0MDA2NGFjNzIzZTI2NjhiYzU0Mzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiSJxkckABnnxRx1GePLmSnFi36c TH3W/mSYA6p/9/+YySAOKEzTZqGTHTTUAmULwSpWH1ezKEpyHGkA71vPEFWwf9/G /YHZKMmHpknzo8yaWsyXzAu+6F18mA/BRgXnc9T904YdN555r1O5G2O6/5nA+HEL tseXB7Nhv8NeBCk8NPVfrEnVi9ohQCjDlJgCm36SctIF84qdvwQ/ecdnQTdEI4tR 8ccXupkXkUzjnAYzEsyagKGED+pZS5TcSj+e5fT8cE43pgvpnf0FhN47cRNze82B VebTVlmzu2oMAx2ZlRF5utRG+Mh7t5gd/OSjklVCDBfK/rrquF2Zicli8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsPmN5pYAkal0AGSscj4maLxUN0MB8GA1UdIwQY MBaAFPRAJK3l5IAsCi9h5vgPTSLcFUhTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEt NjNjOWM4NGVjNzRmLzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi82NzliNGQtZmEzZC00OTkzLWExOGEtNjNjOWM4NGVjNzRm LzEvOUVBa3JlWGtnQ3dLTDJIbS1BOU5JdHdWU0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfALRHvrz RfbnXV+yW28ctGZtH1hflkzykM4iurUmkUF07hz/c9WYBuPukm/iVLwi/EPCvCig FBtWlTKbyn/1LVLqgzuppMZUyaDdbuYjT4YqUahNxeDs8CbfOLQdtekyjG6b6K3T J0x2gEA5rFIST85QUk3wOTvDKc6ZfDepbbqlQuYPl0qPVwoxEM0H4FF/ZgDSByvE W1pim+A/Rjkn5JZpAIY7k/kHkk6RHxuDveTj5tGMZf4t5f7IZv3CSsXvkUHKu5OO PUpHKIQaGD/VgZhhRMVb3wa4hS+uS9OxAuY1+XCJfJNtaSDD4gldNRPMLgaolj4r Rk7oaugMrg366Q== -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:44 2025 by rpki-client