This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft File: 9KvMeaNn2cASwWhKhCKZbNxD3nY.mft (raw, json) Hash identifier: ILFnBS0MdSWvJKy6lyfMBBPYiPFjxR6YxgDBhiHnhh8= Subject key identifier: A4:74:9A:F4:DB:EE:5E:20:1F:0C:82:31:B3:2D:B3:51:1E:F6:10:ED Authority key identifier: F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 Certificate issuer: /CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Certificate serial: 019AF5E576AE681E2186F164AADC24BF3E42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft Manifest number: 0582 Signing time: Sat 06 Dec 2025 23:00:47 +0000 Manifest this update: Sat 06 Dec 2025 23:00:47 +0000 Manifest next update: Sun 07 Dec 2025 23:00:47 +0000 Files and hashes: 1: 6vjl9U2iQ2PU377HYgeQNGNavVA.roa (hash: 9lo8xMTqnMTjqGzAvxVHUfsjdWxdily2JUl3SHSBWVE=) 2: 9KvMeaNn2cASwWhKhCKZbNxD3nY.crl (hash: FAjDjTiO46GgXatE2iSxh+SzT340PaZGJTbOKcp2gPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:76:ae:68:1e:21:86:f1:64:aa:dc:24:bf:3e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4abcc79a367d9c012c1684a8422996cdc43de76 Validity Not Before: Dec 6 23:00:47 2025 GMT Not After : Dec 7 23:00:47 2025 GMT Subject: CN=a4749af4dbee5e201f0c8231b32db3511ef610ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5a:2a:3c:05:ee:b3:f4:e9:4d:45:08:b9:50: 3b:45:8b:d6:c5:64:86:58:26:b2:01:27:2c:26:e3: cd:00:37:e9:43:7e:7e:60:87:e0:bd:7e:e5:79:d6: 80:09:84:76:d0:8c:36:df:86:eb:9c:47:52:86:e6: ba:38:45:c5:ab:9b:e0:65:60:1d:1e:85:9d:64:c4: a8:74:98:d7:d9:f4:6f:c4:5f:b1:df:6d:d5:88:a8: 70:e5:99:38:b5:71:c7:57:19:7b:3f:d8:da:3b:9a: be:1a:4a:85:2e:b9:8a:d7:26:9c:b8:5d:16:f0:4c: b6:d6:23:ab:39:34:7e:7c:7c:cb:d8:77:f7:f8:49: 92:ef:73:59:f4:b9:f6:c0:6d:05:52:3a:c7:b4:44: 26:6a:5c:7f:8f:69:a4:28:55:47:79:56:97:d6:70: b0:c7:e0:b5:67:7c:fd:5d:9f:6e:15:15:5a:e9:c1: b2:22:91:d3:66:85:9e:34:f6:84:23:0c:d2:43:35: 2f:cf:e3:eb:70:a0:2e:99:0f:39:6b:a3:b6:7a:8e: 09:23:ee:95:a2:d7:82:c3:56:c2:a5:60:2a:30:33: ef:01:c8:dc:90:8e:e7:b6:b7:04:22:39:bd:06:07: 6e:c1:07:f2:89:5e:b9:a5:04:a3:0a:01:23:ce:3b: ad:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:74:9A:F4:DB:EE:5E:20:1F:0C:82:31:B3:2D:B3:51:1E:F6:10:ED X509v3 Authority Key Identifier: keyid:F4:AB:CC:79:A3:67:D9:C0:12:C1:68:4A:84:22:99:6C:DC:43:DE:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KvMeaNn2cASwWhKhCKZbNxD3nY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/88bf1e-d9c5-4d24-94b8-de44ee81470b/1/9KvMeaNn2cASwWhKhCKZbNxD3nY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f5:26:89:73:51:dd:41:a2:f2:54:b4:f7:c6:b5:c3:15:6c: 7e:e7:7e:c3:a7:59:8b:a7:36:38:c3:f7:94:78:4a:63:42:28: a0:66:a3:85:dd:df:02:42:b7:dd:12:1d:93:8d:b0:fb:b0:1f: 64:96:1d:4a:23:78:ce:34:c2:7a:44:ab:40:1d:3b:98:74:c0: b1:66:4f:cd:3a:9b:ad:37:ce:34:05:83:c1:68:cc:e4:61:20: 9f:0a:12:a7:fc:85:1a:c2:9f:c0:a8:b3:b0:8d:70:38:c8:8d: c2:48:57:62:33:7d:56:66:89:4c:de:e2:fc:e0:9c:21:2d:8a: 97:1a:1a:03:8c:cc:99:e5:3f:c0:d1:e0:39:63:8e:38:27:1d: cf:e4:cd:c5:5d:86:4b:69:18:d5:0b:5b:cb:c0:7c:37:ed:82: a4:c9:26:df:6b:0f:4a:e7:9c:04:8e:95:26:65:5a:ef:48:14: 06:25:8b:cd:c3:ac:5e:4e:e4:9e:0e:b2:88:7b:09:39:7a:37: 4d:57:a4:23:ac:eb:de:a3:fc:1a:fd:5a:e2:23:ca:1d:cf:ad: 32:bb:0b:15:3a:66:6b:ef:27:9b:fb:42:bf:ae:cb:52:6c:72: 7e:63:a5:94:eb:9c:c2:c6:34:a4:5f:69:3a:20:ed:c4:97:5a: 63:32:b8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15XauaB4hhvFkqtwkvz5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YWJjYzc5YTM2N2Q5YzAxMmMxNjg0YTg0MjI5OTZjZGM0 M2RlNzYwHhcNMjUxMjA2MjMwMDQ3WhcNMjUxMjA3MjMwMDQ3WjAzMTEwLwYDVQQD EyhhNDc0OWFmNGRiZWU1ZTIwMWYwYzgyMzFiMzJkYjM1MTFlZjYxMGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVoqPAXus/TpTUUIuVA7RYvWxWSG WCayAScsJuPNADfpQ35+YIfgvX7ledaACYR20Iw234brnEdShua6OEXFq5vgZWAd HoWdZMSodJjX2fRvxF+x323ViKhw5Zk4tXHHVxl7P9jaO5q+GkqFLrmK1yacuF0W 8Ey21iOrOTR+fHzL2Hf3+EmS73NZ9Ln2wG0FUjrHtEQmalx/j2mkKFVHeVaX1nCw x+C1Z3z9XZ9uFRVa6cGyIpHTZoWeNPaEIwzSQzUvz+PrcKAumQ85a6O2eo4JI+6V oteCw1bCpWAqMDPvAcjckI7ntrcEIjm9BgduwQfyiV65pQSjCgEjzjutNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR0mvTb7l4gHwyCMbMts1Ee9hDtMB8GA1UdIwQY MBaAFPSrzHmjZ9nAEsFoSoQimWzcQ952MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0Yjgt ZGU0NGVlODE0NzBiLzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi84OGJmMWUtZDljNS00ZDI0LTk0YjgtZGU0NGVlODE0NzBi LzEvOUt2TWVhTm4yY0FTd1doS2hDS1piTnhEM25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvUmiXNR 3UGi8lS098a1wxVsfud+w6dZi6c2OMP3lHhKY0IooGajhd3fAkK33RIdk42w+7Af ZJYdSiN4zjTCekSrQB07mHTAsWZPzTqbrTfONAWDwWjM5GEgnwoSp/yFGsKfwKiz sI1wOMiNwkhXYjN9VmaJTN7i/OCcIS2KlxoaA4zMmeU/wNHgOWOOOCcdz+TNxV2G S2kY1Qtby8B8N+2CpMkm32sPSuecBI6VJmVa70gUBiWLzcOsXk7kng6yiHsJOXo3 TVekI6zr3qP8Gv1a4iPKHc+tMrsLFTpma+8nm/tCv67LUmxyfmOllOucwsY0pF9p OiDtxJdaYzK4eQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:28:23 2025 by rpki-client