This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft File: p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft (raw, json) Hash identifier: GyfLTObSz0vBk0JKmU65NINazuDTyNJ+Wcl4NZwsROI= Subject key identifier: 98:BF:44:CF:24:8D:12:CC:54:3D:7F:3C:50:ED:F1:1A:EF:D1:DD:D2 Authority key identifier: A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD Certificate issuer: /CN=a7ef66cb7cc350345852be9bdd75455782afe4dd Certificate serial: 019AF1D1CD120DEAFE0660BBAA9EFE29D51C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft Manifest number: 087C Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: a05D2as5w-ZphYSOJlRsKKwpve8.roa (hash: xvnLmK5XjCaYTBnLCkguyMd5kItynb1Iv2CauMJIpxU=) 2: p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl (hash: kHn/1wPN6yQPkllmj2p9Z55LoZnWr9neFrz/BWHQf4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cd:12:0d:ea:fe:06:60:bb:aa:9e:fe:29:d5:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ef66cb7cc350345852be9bdd75455782afe4dd Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=98bf44cf248d12cc543d7f3c50edf11aefd1ddd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2c:fc:5e:67:bd:56:53:85:84:fd:08:7f:f6: 2f:8f:41:e0:d3:9b:12:76:30:ec:b9:cb:6f:a8:76: 8a:3c:87:1f:27:f2:a4:15:45:01:3d:fe:22:71:30: c6:8a:38:fe:04:a2:b6:67:8e:4e:b7:79:65:fb:b3: 33:42:43:6f:78:3b:2d:44:19:e3:67:20:1e:fc:80: c7:67:cb:82:7b:a0:36:34:fd:05:37:6a:d0:2e:42: 3e:bb:bd:f3:43:02:60:b1:06:b7:bf:7d:08:bf:0e: 87:93:c1:3f:14:f4:08:dc:aa:81:1a:df:4b:d9:ab: ec:2f:89:37:93:16:71:e1:ff:6e:a3:bd:cc:aa:cc: f5:c8:37:38:4d:67:d0:55:c1:81:1b:9f:55:2d:b9: f8:e9:ae:3b:31:8b:a1:c3:af:af:c4:0f:4b:89:97: dc:e7:17:b5:07:4f:14:94:05:32:41:e8:19:26:f3: a8:6c:7f:fd:90:32:b4:2e:fe:d7:50:97:0d:1e:a6: 5c:7b:e6:55:9c:27:e6:cf:79:d1:98:50:8d:b5:ef: a8:22:24:55:5e:74:00:98:3f:a2:cd:9d:99:78:9a: 17:7c:a8:70:48:77:5b:af:f4:6d:4a:a1:44:02:3b: 48:97:cc:cb:75:7a:66:0c:a8:cd:77:da:04:b1:a9: fb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BF:44:CF:24:8D:12:CC:54:3D:7F:3C:50:ED:F1:1A:EF:D1:DD:D2 X509v3 Authority Key Identifier: keyid:A7:EF:66:CB:7C:C3:50:34:58:52:BE:9B:DD:75:45:57:82:AF:E4:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-9my3zDUDRYUr6b3XVFV4Kv5N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/deac8a-8013-4c8c-b471-9e573e710958/1/p-9my3zDUDRYUr6b3XVFV4Kv5N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:7a:8b:76:ca:36:7e:28:f5:ca:ed:68:a5:56:29:24:94:04: cb:e5:8d:ab:25:3e:20:5c:68:03:67:d7:1c:19:c5:79:54:1b: 50:fd:6f:15:79:92:6e:d5:ae:6c:47:ab:f9:15:86:e4:ec:06: 2c:87:eb:fc:03:75:6c:63:4c:9a:e7:af:2a:65:77:4c:3a:4a: 54:b7:42:26:93:b8:05:ae:53:b3:19:09:18:65:d1:17:59:a2: 6a:9b:ca:70:3f:65:d4:52:8b:91:b1:94:ac:e2:df:ca:c1:45: e1:85:53:eb:70:21:6a:e0:7b:41:0d:c5:85:18:3d:2a:6d:eb: 25:56:ea:63:94:84:ae:62:22:29:52:db:91:83:c8:e1:7a:ab: 09:11:e1:c8:c9:e7:2a:2b:cd:e8:62:00:7d:dd:da:e4:6e:c1: ff:a5:f2:78:67:d6:23:da:6d:e1:38:a0:08:56:1b:3a:04:e6: 7d:ff:95:56:82:32:95:2e:1b:d1:10:9b:a9:49:d8:d9:d5:79: 93:09:f5:60:39:22:91:02:36:a8:6f:c5:f5:36:50:ea:3e:0f: 19:5e:19:46:0c:68:16:ec:ca:c8:3c:fe:00:86:0f:5c:85:6c: 81:98:47:8b:10:a0:84:a2:13:aa:8d:ea:e4:ec:0b:9c:96:6d: e2:5f:a9:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0c0SDer+BmC7qp7+KdUcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWY2NmNiN2NjMzUwMzQ1ODUyYmU5YmRkNzU0NTU3ODJh ZmU0ZGQwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD Eyg5OGJmNDRjZjI0OGQxMmNjNTQzZDdmM2M1MGVkZjExYWVmZDFkZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCz8Xme9VlOFhP0If/Yvj0Hg05sS djDsuctvqHaKPIcfJ/KkFUUBPf4icTDGijj+BKK2Z45Ot3ll+7MzQkNveDstRBnj ZyAe/IDHZ8uCe6A2NP0FN2rQLkI+u73zQwJgsQa3v30Ivw6Hk8E/FPQI3KqBGt9L 2avsL4k3kxZx4f9uo73Mqsz1yDc4TWfQVcGBG59VLbn46a47MYuhw6+vxA9LiZfc 5xe1B08UlAUyQegZJvOobH/9kDK0Lv7XUJcNHqZce+ZVnCfmz3nRmFCNte+oIiRV XnQAmD+izZ2ZeJoXfKhwSHdbr/RtSqFEAjtIl8zLdXpmDKjNd9oEsan7VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJi/RM8kjRLMVD1/PFDt8Rrv0d3SMB8GA1UdIwQY MBaAFKfvZst8w1A0WFK+m911RVeCr+TdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9kZWFjOGEtODAxMy00YzhjLWI0NzEt OWU1NzNlNzEwOTU4LzEvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9kZWFjOGEtODAxMy00YzhjLWI0NzEtOWU1NzNlNzEwOTU4 LzEvcC05bXkzekRVRFJZVXI2YjNYVkZWNEt2NU4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHqLdso2 fij1yu1opVYpJJQEy+WNqyU+IFxoA2fXHBnFeVQbUP1vFXmSbtWubEer+RWG5OwG LIfr/AN1bGNMmuevKmV3TDpKVLdCJpO4Ba5TsxkJGGXRF1miapvKcD9l1FKLkbGU rOLfysFF4YVT63AhauB7QQ3FhRg9Km3rJVbqY5SErmIiKVLbkYPI4XqrCRHhyMnn KivN6GIAfd3a5G7B/6XyeGfWI9pt4TigCFYbOgTmff+VVoIylS4b0RCbqUnY2dV5 kwn1YDkikQI2qG/F9TZQ6j4PGV4ZRgxoFuzKyDz+AIYPXIVsgZhHixCghKITqo3q 5OwLnJZt4l+pIg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:15:04 2025 by rpki-client