This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft File: kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft (raw, json) Hash identifier: kczj0wJekxAXgymhKTX+jpgLTNfP4mHoGAgpUnpqOd8= Subject key identifier: BD:DE:71:1E:FD:52:FF:14:90:2A:B3:B6:6F:54:F0:A1:10:61:8F:E9 Authority key identifier: 90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2 Certificate issuer: /CN=901f648dce927fe41833f86d575160b0bc5130a2 Certificate serial: 019B269B7E298187B51EABB6140A2BEFB3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft Manifest number: 0410 Signing time: Tue 16 Dec 2025 10:01:22 +0000 Manifest this update: Tue 16 Dec 2025 10:01:22 +0000 Manifest next update: Wed 17 Dec 2025 10:01:22 +0000 Files and hashes: 1: kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl (hash: fzAu29wQdBgpoj54cls8DWF2M8zpEILmu0W7q6d3Qns=) 2: zfxMRbf5mdjUMmv1wfh1AaOn2cM.roa (hash: jcUlXj90sAjd3pxsJhlKVr5rFOgIRX3LrqrBra0uGW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:9b:7e:29:81:87:b5:1e:ab:b6:14:0a:2b:ef:b3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901f648dce927fe41833f86d575160b0bc5130a2 Validity Not Before: Dec 16 10:01:22 2025 GMT Not After : Dec 17 10:01:22 2025 GMT Subject: CN=bdde711efd52ff14902ab3b66f54f0a110618fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:9c:cc:e0:b8:43:98:b3:32:8b:26:6c:0f: ea:f3:92:29:38:28:d0:c8:ee:cb:00:32:f2:df:29: 49:a0:84:45:23:fa:08:dd:36:d6:97:0b:a9:47:38: 30:7a:0d:98:9f:e8:16:86:89:7f:73:60:c0:8e:14: d9:0c:2d:a2:6c:0d:39:19:04:35:b1:59:ab:a8:a7: e4:12:5a:c9:4c:77:21:3a:e2:c1:ff:17:2d:47:c0: a0:2f:49:60:75:ee:cf:88:4e:78:85:cd:65:a7:7b: 2b:85:19:1a:53:99:32:3e:cd:7c:34:9a:be:38:e4: a4:0f:76:4c:92:9f:08:4f:81:6c:6b:1c:64:a6:cf: bb:67:ea:39:b1:ef:69:2a:df:75:cf:4f:00:a2:4c: d3:77:d6:be:dd:e7:58:a4:f5:5e:ac:1f:33:db:60: eb:fc:7a:a0:62:47:36:98:88:66:3a:98:f2:0d:c5: 12:6d:f3:e3:ad:b4:cd:d7:8d:26:76:7e:13:6a:b9: 13:10:f4:2e:0e:38:cd:df:67:71:ed:b6:89:a8:63: e2:0d:50:c8:4d:a6:f6:24:d1:c4:4e:75:87:6a:87: f7:5e:36:b9:4f:24:3a:15:4c:a2:2a:31:ad:2a:c0: da:eb:a4:5a:ef:11:ea:4d:ea:11:1e:d8:86:e0:5d: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DE:71:1E:FD:52:FF:14:90:2A:B3:B6:6F:54:F0:A1:10:61:8F:E9 X509v3 Authority Key Identifier: keyid:90:1F:64:8D:CE:92:7F:E4:18:33:F8:6D:57:51:60:B0:BC:51:30:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB9kjc6Sf-QYM_htV1FgsLxRMKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/73c085-cc42-4cc1-a1ab-4c13c5e1e1aa/1/kB9kjc6Sf-QYM_htV1FgsLxRMKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:24:40:bb:61:c8:6e:62:0c:3b:f6:79:89:8a:a3:4f:d0:ea: 8f:49:8b:26:9c:dd:bb:43:61:da:cf:20:1c:3c:df:fc:14:a1: 57:4c:57:c1:73:37:eb:0e:81:36:8c:9a:c4:a2:b0:b0:4a:7c: 77:cd:10:2e:c1:06:8b:2f:c8:4d:da:3c:e7:e8:ae:fc:f2:5b: 03:95:b0:d4:37:09:8c:c5:51:5b:8a:78:b9:30:ed:3d:0b:d6: e8:f8:73:20:0c:93:f5:e1:7a:26:6c:a7:40:18:47:87:55:6f: 34:15:0e:3f:e4:7f:08:ef:9c:a7:f6:f1:95:65:cf:87:4f:20: 76:11:bc:51:8f:58:4f:3c:2f:87:dc:3f:a4:2c:c9:af:9d:4e: f3:0c:1b:7b:cc:49:a1:e3:1e:b1:9f:d0:e4:e1:73:33:8d:97: 4b:aa:c6:97:01:75:eb:fe:96:8e:ef:ae:60:80:90:a5:98:56: 54:9f:12:49:ca:b4:63:15:ad:ab:3b:26:ce:bc:30:f9:f8:dc: e5:71:aa:45:28:ad:9c:e1:29:d3:c2:a9:b2:69:5c:1e:a1:d4: b0:e2:c9:23:54:ff:c0:39:b1:db:7f:73:56:36:c0:65:de:19: ae:36:cf:a2:72:85:bd:b8:ad:bf:9c:6c:d7:53:9a:94:56:4a: 8f:ef:6b:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmm34pgYe1Hqu2FAor77O/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMWY2NDhkY2U5MjdmZTQxODMzZjg2ZDU3NTE2MGIwYmM1 MTMwYTIwHhcNMjUxMjE2MTAwMTIyWhcNMjUxMjE3MTAwMTIyWjAzMTEwLwYDVQQD EyhiZGRlNzExZWZkNTJmZjE0OTAyYWIzYjY2ZjU0ZjBhMTEwNjE4ZmU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriCczOC4Q5izMosmbA/q85IpOCjQ yO7LADLy3ylJoIRFI/oI3TbWlwupRzgweg2Yn+gWhol/c2DAjhTZDC2ibA05GQQ1 sVmrqKfkElrJTHchOuLB/xctR8CgL0lgde7PiE54hc1lp3srhRkaU5kyPs18NJq+ OOSkD3ZMkp8IT4Fsaxxkps+7Z+o5se9pKt91z08AokzTd9a+3edYpPVerB8z22Dr /HqgYkc2mIhmOpjyDcUSbfPjrbTN140mdn4TarkTEPQuDjjN32dx7baJqGPiDVDI Tab2JNHETnWHaof3Xja5TyQ6FUyiKjGtKsDa66Ra7xHqTeoRHtiG4F0xRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3ecR79Uv8UkCqztm9U8KEQYY/pMB8GA1UdIwQY MBaAFJAfZI3Okn/kGDP4bVdRYLC8UTCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWIt NGMxM2M1ZTFlMWFhLzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC83M2MwODUtY2M0Mi00Y2MxLWExYWItNGMxM2M1ZTFlMWFh LzEva0I5a2pjNlNmLVFZTV9odFYxRmdzTHhSTUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCRAu2HI bmIMO/Z5iYqjT9Dqj0mLJpzdu0Nh2s8gHDzf/BShV0xXwXM36w6BNoyaxKKwsEp8 d80QLsEGiy/ITdo85+iu/PJbA5Ww1DcJjMVRW4p4uTDtPQvW6PhzIAyT9eF6Jmyn QBhHh1VvNBUOP+R/CO+cp/bxlWXPh08gdhG8UY9YTzwvh9w/pCzJr51O8wwbe8xJ oeMesZ/Q5OFzM42XS6rGlwF16/6Wju+uYICQpZhWVJ8SScq0YxWtqzsmzrww+fjc 5XGqRSitnOEp08KpsmlcHqHUsOLJI1T/wDmx239zVjbAZd4ZrjbPonKFvbitv5xs 11OalFZKj+9rZA== -----END CERTIFICATE-----Generated at Tue Dec 16 20:59:30 2025 by rpki-client