This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft File: 9_TLjFICzFNe2v0grLaoBQLk_Sk.mft (raw, json) Hash identifier: RFS8hH0lndix5/yND+2XM09DwyNc8Kwylv20uxroprM= Subject key identifier: 2B:98:9C:E5:1D:1B:78:7B:63:16:E6:AD:1E:FB:EA:00:EE:D5:C5:4B Authority key identifier: F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29 Certificate issuer: /CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29 Certificate serial: 019AF12DC57F4E953482CB0BE0C2E6D75348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft Manifest number: 144C Signing time: Sat 06 Dec 2025 01:01:39 +0000 Manifest this update: Sat 06 Dec 2025 01:01:39 +0000 Manifest next update: Sun 07 Dec 2025 01:01:39 +0000 Files and hashes: 1: 7HvIX7fCTI2gbjc-7RnxufJl1mA.roa (hash: NWw/MjwkOB9Lahk4UnTOA4UYmqTEetLTZcrDtU3BUtM=) 2: 9_TLjFICzFNe2v0grLaoBQLk_Sk.crl (hash: 22+CqcPUs1EEyWvxEDDUloWtuNgwJywRvsLWleN/4Mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:c5:7f:4e:95:34:82:cb:0b:e0:c2:e6:d7:53:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7f4cb8c5202cc535edafd20acb6a80502e4fd29 Validity Not Before: Dec 6 01:01:39 2025 GMT Not After : Dec 7 01:01:39 2025 GMT Subject: CN=2b989ce51d1b787b6316e6ad1efbea00eed5c54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:e6:6e:74:49:94:8a:35:fd:f6:fa:b8:90: 2a:cc:99:60:0f:75:35:0c:f9:a0:58:68:02:97:01: 98:22:dc:01:7a:9e:5b:73:36:ab:2d:fd:6f:f0:4f: e5:37:fe:e8:0b:53:58:13:75:dd:16:42:4c:e7:a3: d3:9b:6f:43:d8:53:d2:1c:00:7a:49:5c:13:ac:70: 9f:dd:8d:c3:a1:ff:4e:20:e8:ad:1d:11:59:7a:8a: 1a:48:e6:0c:75:c7:b4:35:a5:0b:b0:77:e4:62:8a: 98:04:b5:84:c3:5e:e5:54:a2:10:5b:df:01:b2:a4: 47:c7:35:1f:f6:36:64:45:e6:f0:14:4d:66:e2:7c: b4:2a:73:23:1d:fc:95:8f:1a:d4:07:3c:05:5c:de: 06:5d:af:3d:51:9a:e9:25:6a:f0:d9:d9:eb:39:31: fb:06:f2:56:af:c4:77:a4:ca:e4:f0:23:18:7e:d3: 26:6f:ef:f9:04:74:f6:64:cf:42:09:03:b9:74:40: b9:9f:a2:f0:1d:c7:80:ed:8a:eb:df:4b:83:e6:d1: 97:c1:cc:ff:7c:93:0f:96:2e:22:69:68:b3:39:86: ae:10:6f:63:7f:b2:12:85:32:46:83:7f:c6:25:04: ec:6c:b9:c6:ff:21:a4:72:c7:90:53:1f:82:ff:5b: f5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:98:9C:E5:1D:1B:78:7B:63:16:E6:AD:1E:FB:EA:00:EE:D5:C5:4B X509v3 Authority Key Identifier: keyid:F7:F4:CB:8C:52:02:CC:53:5E:DA:FD:20:AC:B6:A8:05:02:E4:FD:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9_TLjFICzFNe2v0grLaoBQLk_Sk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b681e4-fcf8-40af-aba3-cf3bdb32fd64/1/9_TLjFICzFNe2v0grLaoBQLk_Sk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8a:b2:86:0b:06:6f:60:c0:e5:43:a4:5c:6e:57:58:a7:4e: 92:34:6b:da:d5:2e:15:17:13:23:1c:a3:34:ca:21:7b:f7:58: 95:85:e7:06:cb:ec:e5:b8:e7:3a:23:fa:63:f1:7a:31:5a:b7: 7c:c9:29:de:c6:f2:bb:db:35:43:d3:19:52:f6:89:44:a8:ef: 94:f6:7e:a1:ed:91:88:bb:6b:e7:e8:2f:e6:42:ae:be:39:31: 63:52:49:bb:9e:a4:b3:41:38:1f:4f:4d:4f:91:09:53:cc:bd: 0f:9a:37:19:43:22:68:e1:42:72:2b:80:a8:05:e8:d2:3b:6d: db:98:28:41:a7:fb:d3:23:11:cd:a2:b1:d8:5a:cb:14:58:7e: 56:6a:f4:b2:b0:19:67:53:09:86:5f:54:d2:97:51:26:12:68: a5:0f:15:f9:cd:e1:3a:4f:9b:15:aa:03:77:ac:f4:85:bb:81: c8:97:97:8d:6c:35:67:36:d1:87:cf:48:54:be:19:14:84:ee: 31:66:69:56:bc:de:15:49:1b:17:0b:f3:1a:e5:77:98:0f:2b: fc:17:0e:78:6e:90:39:1b:74:f4:72:a8:3f:8d:5b:f2:22:0f: 3a:50:24:45:68:79:cf:91:96:b1:a2:36:d1:30:fa:a5:f6:dd: cc:0d:c4:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLcV/TpU0gssL4MLm11NIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3ZjRjYjhjNTIwMmNjNTM1ZWRhZmQyMGFjYjZhODA1MDJl NGZkMjkwHhcNMjUxMjA2MDEwMTM5WhcNMjUxMjA3MDEwMTM5WjAzMTEwLwYDVQQD EygyYjk4OWNlNTFkMWI3ODdiNjMxNmU2YWQxZWZiZWEwMGVlZDVjNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI/mbnRJlIo1/fb6uJAqzJlgD3U1 DPmgWGgClwGYItwBep5bczarLf1v8E/lN/7oC1NYE3XdFkJM56PTm29D2FPSHAB6 SVwTrHCf3Y3Dof9OIOitHRFZeooaSOYMdce0NaULsHfkYoqYBLWEw17lVKIQW98B sqRHxzUf9jZkRebwFE1m4ny0KnMjHfyVjxrUBzwFXN4GXa89UZrpJWrw2dnrOTH7 BvJWr8R3pMrk8CMYftMmb+/5BHT2ZM9CCQO5dEC5n6LwHceA7Yrr30uD5tGXwcz/ fJMPli4iaWizOYauEG9jf7IShTJGg3/GJQTsbLnG/yGkcseQUx+C/1v1ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuYnOUdG3h7YxbmrR776gDu1cVLMB8GA1UdIwQY MBaAFPf0y4xSAsxTXtr9IKy2qAUC5P0pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMt Y2YzYmRiMzJmZDY0LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iNjgxZTQtZmNmOC00MGFmLWFiYTMtY2YzYmRiMzJmZDY0 LzEvOV9UTGpGSUN6Rk5lMnYwZ3JMYW9CUUxrX1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4qyhgsG b2DA5UOkXG5XWKdOkjRr2tUuFRcTIxyjNMohe/dYlYXnBsvs5bjnOiP6Y/F6MVq3 fMkp3sbyu9s1Q9MZUvaJRKjvlPZ+oe2RiLtr5+gv5kKuvjkxY1JJu56ks0E4H09N T5EJU8y9D5o3GUMiaOFCciuAqAXo0jtt25goQaf70yMRzaKx2FrLFFh+Vmr0srAZ Z1MJhl9U0pdRJhJopQ8V+c3hOk+bFaoDd6z0hbuByJeXjWw1ZzbRh89IVL4ZFITu MWZpVrzeFUkbFwvzGuV3mA8r/BcOeG6QORt09HKoP41b8iIPOlAkRWh5z5GWsaI2 0TD6pfbdzA3EDg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:49 2025 by rpki-client