This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft File: m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft (raw, json) Hash identifier: udk0C2+gbS+J/hbwFMjq8kc/HzNR88CNUfqrbITT8JA= Subject key identifier: D7:15:23:61:5C:B0:8C:AA:45:AB:53:42:F8:DE:2D:59:51:29:6F:66 Authority key identifier: 9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 Certificate issuer: /CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Certificate serial: 019AFB0C4AC98960F13FDD7CD465177B5AAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 23:01:18 +0000 Manifest this update: Sun 07 Dec 2025 23:01:18 +0000 Manifest next update: Mon 08 Dec 2025 23:01:18 +0000 Files and hashes: 1: 6gwfZ0imtXXPhJEbNpqe4SziOnE.roa (hash: Pn+V1Yp5GxtDMsze+Fax5FaJ18PgHU1//S1rPV1x8cg=) 2: m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl (hash: AljtajHw6a7GzoPyaqpEuTCYqTKfWrR+rapxn5iDkm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 19:58:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:0c:4a:c9:89:60:f1:3f:dd:7c:d4:65:17:7b:5a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd0f8b42045c73870216ce0369cbd1a80bc8995 Validity Not Before: Dec 7 23:01:18 2025 GMT Not After : Dec 8 23:01:18 2025 GMT Subject: CN=d71523615cb08caa45ab5342f8de2d5951296f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:55:22:c6:53:e3:b9:ef:62:87:7c:10:ef:83: d1:a6:ea:74:f9:19:e1:ae:70:05:a0:c5:d4:01:54: d4:77:4e:ea:d6:43:20:6f:8d:08:eb:b2:df:e8:85: 8b:f5:28:7d:30:d5:90:88:1c:e6:47:26:c4:d4:32: 9e:4e:b3:21:cb:a0:c2:2b:3e:9b:e1:ab:b5:f1:ec: 0d:fd:5d:ea:c4:fe:17:af:8a:8b:62:17:81:3d:4c: a0:0e:64:db:19:62:2e:70:0d:88:6b:4d:01:5d:23: d8:98:50:44:73:ac:97:36:d0:40:be:34:e4:c2:70: 20:53:60:d6:99:c4:29:8d:7d:89:f2:72:ca:2a:e8: a9:c2:25:0a:af:c4:d0:d5:b9:0b:e2:11:f4:40:1d: 3e:a1:c2:ed:1b:73:0f:5f:f5:95:99:88:bf:14:56: 84:26:d2:d6:02:f3:f2:c6:98:94:a5:ab:cf:7d:3d: 89:0d:23:a4:56:3c:e3:74:fd:27:99:69:85:ac:a4: c0:97:61:eb:79:07:48:1f:d0:1b:70:cd:e3:24:ab: 9c:2d:c5:17:88:7b:27:76:5c:be:07:de:06:65:0e: e6:0f:67:0a:83:3a:86:c0:03:5a:fd:10:83:1d:a3: e5:e3:77:9f:47:6b:c7:99:52:10:72:77:34:f7:19: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:15:23:61:5C:B0:8C:AA:45:AB:53:42:F8:DE:2D:59:51:29:6F:66 X509v3 Authority Key Identifier: keyid:9B:D0:F8:B4:20:45:C7:38:70:21:6C:E0:36:9C:BD:1A:80:BC:89:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9D4tCBFxzhwIWzgNpy9GoC8iZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/m9D4tCBFxzhwIWzgNpy9GoC8iZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:04:17:8e:6e:6b:2e:01:eb:20:cc:32:6e:94:7e:55:49:00: b6:fc:5f:af:b3:e0:e9:d0:fe:f0:3a:db:f6:76:21:5d:31:fe: 23:b1:55:40:e6:b3:15:3c:4f:56:2a:8a:a5:07:75:ac:3a:34: 70:a8:6b:62:f8:f3:2e:d7:6d:de:75:22:12:cd:54:05:56:26: 59:e9:2b:a2:8f:b2:75:d0:99:7b:a8:a3:03:d2:61:b6:d1:82: 02:b7:c9:56:7c:c0:0b:b8:10:fd:46:c7:ad:45:9c:bb:75:b9: 59:d1:20:ff:74:d8:ad:03:45:d6:3c:90:ea:e5:4f:96:87:a1: 12:bb:02:3e:8e:9e:67:1f:13:0d:77:cf:65:7f:48:2c:91:9d: 1d:44:d8:12:4e:b7:93:d8:1e:ab:66:56:90:1b:c8:f7:a9:4d: 06:99:d5:07:a8:aa:09:d7:3a:86:ca:4b:43:cc:ad:0e:a9:de: 2a:e1:4b:6e:ae:90:72:5d:91:93:a8:ab:ab:14:cf:27:04:5d: 6e:f3:4e:74:fb:01:50:aa:07:4e:47:4f:22:1e:2b:07:2c:1a: 18:2a:82:89:c1:da:15:ef:d0:09:86:b9:45:90:6c:ef:71:4a: bc:67:76:c0:9e:71:5e:34:a5:60:7d:4b:16:80:cf:d7:47:1c: a7:61:fd:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr7DErJiWDxP9181GUXe1qvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDBmOGI0MjA0NWM3Mzg3MDIxNmNlMDM2OWNiZDFhODBi Yzg5OTUwHhcNMjUxMjA3MjMwMTE4WhcNMjUxMjA4MjMwMTE4WjAzMTEwLwYDVQQD EyhkNzE1MjM2MTVjYjA4Y2FhNDVhYjUzNDJmOGRlMmQ1OTUxMjk2ZjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lUixlPjue9ih3wQ74PRpup0+Rnh rnAFoMXUAVTUd07q1kMgb40I67Lf6IWL9Sh9MNWQiBzmRybE1DKeTrMhy6DCKz6b 4au18ewN/V3qxP4Xr4qLYheBPUygDmTbGWIucA2Ia00BXSPYmFBEc6yXNtBAvjTk wnAgU2DWmcQpjX2J8nLKKuipwiUKr8TQ1bkL4hH0QB0+ocLtG3MPX/WVmYi/FFaE JtLWAvPyxpiUpavPfT2JDSOkVjzjdP0nmWmFrKTAl2HreQdIH9AbcM3jJKucLcUX iHsndly+B94GZQ7mD2cKgzqGwANa/RCDHaPl43efR2vHmVIQcnc09xkkEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcVI2FcsIyqRatTQvjeLVlRKW9mMB8GA1UdIwQY MBaAFJvQ+LQgRcc4cCFs4DacvRqAvImVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEt OTJmMWQ3ZGZjODE3LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wZjk2MzItOGMzZC00ZjdjLWIyMmEtOTJmMWQ3ZGZjODE3 LzEvbTlENHRDQkZ4emh3SVd6Z05weTlHb0M4aVpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAQXjm5r LgHrIMwybpR+VUkAtvxfr7Pg6dD+8Drb9nYhXTH+I7FVQOazFTxPViqKpQd1rDo0 cKhrYvjzLtdt3nUiEs1UBVYmWekroo+yddCZe6ijA9JhttGCArfJVnzAC7gQ/UbH rUWcu3W5WdEg/3TYrQNF1jyQ6uVPloehErsCPo6eZx8TDXfPZX9ILJGdHUTYEk63 k9geq2ZWkBvI96lNBpnVB6iqCdc6hspLQ8ytDqneKuFLbq6Qcl2Rk6irqxTPJwRd bvNOdPsBUKoHTkdPIh4rBywaGCqCicHaFe/QCYa5RZBs73FKvGd2wJ5xXjSlYH1L FoDP10ccp2H9Ww== -----END CERTIFICATE-----Generated at Mon Dec 8 04:22:08 2025 by rpki-client