This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft File: V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json) Hash identifier: Lc4I5OaWa9D8JOrj0w7f/f+SFMrXr4NZckgfmQrcliM= Subject key identifier: 21:1C:72:FF:9F:A4:01:A3:D1:0F:B1:AF:90:81:EC:6D:D7:6A:A1:AA Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34 Certificate issuer: /CN=57db143c17fb051944426a79f24334c25cdbc234 Certificate serial: 019AF389A8AB6ABCE2826C067C1E193A8F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft Manifest number: 0237 Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: LGPCXsstqIHfBFoiMfK-mbsBUjw.roa (hash: 7stOVhfnEQBs17GDG+FcbDZCYanm4iM/V5R3N/Vll+k=) 2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: YwTh8ejsXc0gq37ihSSFuzzJt6HyNgkKWrXuCORvFcY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a8:ab:6a:bc:e2:82:6c:06:7c:1e:19:3a:8f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234 Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=211c72ff9fa401a3d10fb1af9081ec6dd76aa1aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:4c:76:85:0b:e0:01:9f:b8:ce:6e:93:c7: aa:6a:26:25:9e:06:7f:55:91:cc:83:ae:e1:76:3a: ab:fe:ca:f6:95:34:e4:ee:66:e3:13:4f:40:58:15: 6d:63:59:4e:1f:ba:47:e1:4f:61:0d:a4:00:76:4a: 90:5b:07:03:5e:c0:63:22:da:f2:1c:8e:20:2a:b0: b5:77:a4:84:04:86:02:c7:f5:83:30:15:d1:69:c7: 33:42:f3:56:d0:e1:86:ed:4f:e8:7f:83:85:cb:a3: c0:d6:1b:81:89:a7:3c:b1:94:b1:de:c1:ff:7c:fa: aa:ee:54:1e:83:a9:a3:7f:cf:ab:69:40:97:73:08: 65:ee:4b:89:53:0b:3d:66:86:a8:d1:a7:3d:28:d8: 1f:2c:1e:d8:58:03:20:c9:f8:e1:4d:e8:05:86:6c: 86:2d:47:1d:f6:1c:c0:b4:45:7f:e4:89:b2:3f:70: 6a:f2:7e:1c:ec:3b:b2:f2:79:94:92:4c:44:f4:65: ef:58:76:e4:e8:ae:aa:df:48:4a:91:54:1a:30:1a: 2a:8f:23:23:a4:02:f2:da:f8:e9:9b:88:6d:fa:fa: ca:02:33:13:6f:9d:77:33:9d:29:ca:9b:dc:7a:f0: ee:ae:e2:40:d1:2a:a0:81:61:1c:10:10:b0:53:61: dd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:1C:72:FF:9F:A4:01:A3:D1:0F:B1:AF:90:81:EC:6D:D7:6A:A1:AA X509v3 Authority Key Identifier: keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:11:b4:2f:7b:64:63:a3:74:0f:b9:60:4c:a7:d5:e0:c2:5c: 77:91:37:00:78:e9:87:ae:ac:06:50:70:23:47:fb:ee:05:b7: 87:d8:8e:33:7f:a8:76:b4:8b:6a:22:d0:a5:c3:e8:db:23:27: c0:64:6c:9d:97:a1:f7:a6:a9:28:c8:57:19:5a:41:c7:15:da: 42:a7:97:98:06:ce:cd:de:58:60:af:24:cb:17:ac:d5:79:c3: 39:87:cc:0e:3a:8e:ae:31:fe:36:23:e6:85:57:e1:06:80:d9: 49:e5:18:16:a5:47:58:0c:04:c6:91:45:c7:c4:3d:03:3e:af: ce:35:2f:f7:05:4b:6c:bc:af:8b:8b:7d:d9:08:c4:ae:05:31: 47:0f:8f:1a:5b:f2:27:22:e9:ee:22:cf:6f:98:56:90:db:7c: e2:22:db:62:9b:f7:05:39:83:13:0b:4c:61:3b:7e:bb:27:f6: de:df:79:3c:da:24:a7:ec:7a:a7:53:e0:f6:e4:25:a0:31:8c: 72:48:b3:72:fc:fd:31:fe:d1:94:f5:d1:67:5a:e2:0c:fb:de: cd:b6:36:c8:cd:2c:bf:e0:93:c9:50:9c:09:0a:cb:0b:88:d7: c8:02:c7:6e:48:78:5a:51:1f:96:8c:4f:a4:7d:b0:ab:29:31: 8b:1f:92:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziairarzigmwGfB4ZOo8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3ZGIxNDNjMTdmYjA1MTk0NDQyNmE3OWYyNDMzNGMyNWNk YmMyMzQwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD EygyMTFjNzJmZjlmYTQwMWEzZDEwZmIxYWY5MDgxZWM2ZGQ3NmFhMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF9MdoUL4AGfuM5uk8eqaiYlngZ/ VZHMg67hdjqr/sr2lTTk7mbjE09AWBVtY1lOH7pH4U9hDaQAdkqQWwcDXsBjItry HI4gKrC1d6SEBIYCx/WDMBXRacczQvNW0OGG7U/of4OFy6PA1huBiac8sZSx3sH/ fPqq7lQeg6mjf8+raUCXcwhl7kuJUws9Zoao0ac9KNgfLB7YWAMgyfjhTegFhmyG LUcd9hzAtEV/5ImyP3Bq8n4c7Duy8nmUkkxE9GXvWHbk6K6q30hKkVQaMBoqjyMj pALy2vjpm4ht+vrKAjMTb513M50pypvcevDuruJA0SqggWEcEBCwU2HdRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEccv+fpAGj0Q+xr5CB7G3XaqGqMB8GA1UdIwQY MBaAFFfbFDwX+wUZREJqefJDNMJc28I0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjIt YmRhNGY4ZWIxYWQ5LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy85MDEzODAtZjgyMS00NDNhLTliZjItYmRhNGY4ZWIxYWQ5 LzEvVjlzVVBCZjdCUmxFUW1wNThrTTB3bHpid2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRG0L3tk Y6N0D7lgTKfV4MJcd5E3AHjph66sBlBwI0f77gW3h9iOM3+odrSLaiLQpcPo2yMn wGRsnZeh96apKMhXGVpBxxXaQqeXmAbOzd5YYK8kyxes1XnDOYfMDjqOrjH+NiPm hVfhBoDZSeUYFqVHWAwExpFFx8Q9Az6vzjUv9wVLbLyvi4t92QjErgUxRw+PGlvy JyLp7iLPb5hWkNt84iLbYpv3BTmDEwtMYTt+uyf23t95PNokp+x6p1Pg9uQloDGM ckizcvz9Mf7RlPXRZ1riDPvezbY2yM0sv+CTyVCcCQrLC4jXyALHbkh4WlEfloxP pH2wqykxix+StA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:55 2025 by rpki-client