This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft File: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft (raw, json) Hash identifier: Sqa9ZZaYVJj1uMHVchO64FVfp8/qF1oGG3MoOCWMpgc= Subject key identifier: 63:9C:39:A7:18:2B:87:56:9F:3A:DF:76:ED:3B:11:83:D5:C0:1E:FF Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Certificate serial: 019AF31D2FC674FE05F82A0EF4C7840AFC1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft Manifest number: 0666 Signing time: Sat 06 Dec 2025 10:02:47 +0000 Manifest this update: Sat 06 Dec 2025 10:02:47 +0000 Manifest next update: Sun 07 Dec 2025 10:02:47 +0000 Files and hashes: 1: 1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl (hash: 9qFUTeyyOIsyMYQPCtZtHHWgmy7wUN4O/uPyXkboPYw=) 2: 9QHkwH3XoDFhii5_H5-wevfnn0w.roa (hash: vBY1ZnWKVkF95bYClA+BXEDvlx1Nx1rI/kqfnvMGLFw=) 3: NHqj8wB10WSekKQpmh-HseccI8I.roa (hash: L+izevOgWXTJAUEusaUxSyDXId3hMIswTW9GC9CMwnw=) 4: VDPu88hH8S8YAOXUCG9WApGM4Ak.roa (hash: 4CZLCtvGc/kQTFKa66ISm8BXViC73GORAMW68kpOvho=) 5: oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa (hash: AjGNR5wRMBSzjpjmL0iwZdQfVi3IKmsNzSO+kwX6G8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:2f:c6:74:fe:05:f8:2a:0e:f4:c7:84:0a:fc:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b Validity Not Before: Dec 6 10:02:47 2025 GMT Not After : Dec 7 10:02:47 2025 GMT Subject: CN=639c39a7182b87569f3adf76ed3b1183d5c01eff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b5:ff:2f:83:9f:36:c5:2a:b7:bc:1e:c8:83: 52:ac:5f:5d:cb:82:07:03:3a:5e:0d:3f:9a:54:81: 63:0f:4a:95:8c:20:62:a8:da:8a:a6:20:b4:3b:76: f9:a7:cf:53:a8:a4:5c:d9:3c:0c:c5:9e:7b:20:d8: f0:03:ea:f6:21:b8:3e:6c:c3:66:05:a4:e2:64:09: f5:3a:56:5d:e7:ef:d1:5a:57:0b:7a:6b:ad:41:c0: b0:21:8e:fe:e7:66:c6:a8:bb:c5:19:40:e7:b7:65: a4:85:0b:d0:4e:07:59:1e:15:48:ca:32:5f:ab:d2: 25:8a:3a:6d:56:be:5d:2c:fe:02:43:a4:02:b1:cb: e3:c4:2e:2a:0b:5a:7e:8a:fd:19:0c:44:11:53:e8: 14:61:bf:c5:5c:59:74:6f:d4:2b:56:6b:15:65:77: a0:83:67:c2:85:ad:e1:12:c4:a8:1c:36:24:da:14: d2:13:6c:63:44:8d:3a:ce:16:14:cd:90:2c:ee:ce: 1b:a6:4a:b1:1d:e4:a9:d6:93:7e:6b:d8:5f:70:27: 86:ec:bf:f7:aa:f1:5a:3c:d0:87:72:a0:a3:40:ac: e2:4d:f6:a0:b7:c4:02:7f:55:04:d6:43:e3:cb:5e: 03:c6:96:d1:31:5d:99:7b:4b:54:45:04:f0:da:54: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:9C:39:A7:18:2B:87:56:9F:3A:DF:76:ED:3B:11:83:D5:C0:1E:FF X509v3 Authority Key Identifier: keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:20:81:86:4e:ab:c6:66:2b:df:9b:44:3c:5b:9f:e8:5b:57: 55:14:c7:6e:23:ba:d7:79:dd:14:51:6d:f6:93:d2:77:66:23: e5:7d:b1:9a:f4:bf:ca:a2:38:0b:1f:68:09:c7:41:e4:d6:8a: 63:7d:e3:8f:d0:86:01:97:d6:ac:6b:3d:8c:c5:74:f3:b7:c7: 94:1d:87:f3:fa:6d:1e:41:84:3a:d1:b0:d2:21:13:5a:b7:7e: 4a:f7:40:81:7c:ed:e4:9c:cc:f2:47:ef:e2:73:26:a8:78:c3: 5e:8f:bd:98:2b:e2:22:15:e2:24:27:a3:88:de:b2:01:d4:d2: 8f:64:2d:8d:bb:87:48:d8:f1:71:1a:0f:03:90:d0:70:fd:29: 48:d0:49:b3:4b:2e:6b:3a:1a:b4:2d:55:cf:04:e4:fa:76:72: 3d:aa:26:a2:e2:29:a5:4d:b9:a7:29:47:69:c3:a3:5b:65:09: bd:2f:78:9d:ed:23:dc:12:c2:d3:51:64:7a:cf:85:66:70:a9: 6d:46:a8:fb:e2:21:c4:71:89:b1:29:b1:55:73:8a:76:15:f5: eb:5b:65:73:b9:f0:8f:4f:76:c9:6a:70:3c:fe:b4:3f:1e:49: 19:7a:cb:22:e2:29:b2:4f:8a:ed:fb:d2:90:29:ca:6d:2b:95: 61:46:cc:f0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZrzHS/GdP4F+CoO9MeECvwbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAwYWJlMTg0YTYyNWI3NmY4ZDFmYmNlZWY4MTdhYWY3 MTQxNWIwHhcNMjUxMjA2MTAwMjQ3WhcNMjUxMjA3MTAwMjQ3WjAzMTEwLwYDVQQD Eyg2MzljMzlhNzE4MmI4NzU2OWYzYWRmNzZlZDNiMTE4M2Q1YzAxZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7X/L4OfNsUqt7weyINSrF9dy4IH AzpeDT+aVIFjD0qVjCBiqNqKpiC0O3b5p89TqKRc2TwMxZ57INjwA+r2Ibg+bMNm BaTiZAn1OlZd5+/RWlcLemutQcCwIY7+52bGqLvFGUDnt2WkhQvQTgdZHhVIyjJf q9IlijptVr5dLP4CQ6QCscvjxC4qC1p+iv0ZDEQRU+gUYb/FXFl0b9QrVmsVZXeg g2fCha3hEsSoHDYk2hTSE2xjRI06zhYUzZAs7s4bpkqxHeSp1pN+a9hfcCeG7L/3 qvFaPNCHcqCjQKziTfagt8QCf1UE1kPjy14DxpbRMV2Ze0tURQTw2lRzzQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFGOcOacYK4dWnzrfdu07EYPVwB7/MB8GA1UdIwQY MBaAFPngCr4YSmJbdvjR+87vgXqvcUFbMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQUt2aGhLWWx0Mi1OSDd6dS1CZXE5eFFWcy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvOGEzMjJmLWRjMjgtNDIyZi1iNTcw LTU4YjY0ZDU1N2MwYy8xLzEtZUFLdmhoS1lsdDItTkg3enUtQmVxOXhRVnMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzlmLzhhMzIyZi1kYzI4LTQyMmYtYjU3MC01OGI2NGQ1NTdj MGMvMS8xLWVBS3ZoaEtZbHQyLU5IN3p1LUJlcTl4UVZzLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCCB hk6rxmYr35tEPFuf6FtXVRTHbiO613ndFFFt9pPSd2Yj5X2xmvS/yqI4Cx9oCcdB 5NaKY33jj9CGAZfWrGs9jMV087fHlB2H8/ptHkGEOtGw0iETWrd+SvdAgXzt5JzM 8kfv4nMmqHjDXo+9mCviIhXiJCejiN6yAdTSj2QtjbuHSNjxcRoPA5DQcP0pSNBJ s0suazoatC1VzwTk+nZyPaomouIppU25pylHacOjW2UJvS94ne0j3BLC01Fkes+F ZnCpbUao++IhxHGJsSmxVXOKdhX161tlc7nwj092yWpwPP60Px5JGXrLIuIpsk+K 7fvSkCnKbSuVYUbM8A== -----END CERTIFICATE-----Generated at Sat Dec 6 18:14:14 2025 by rpki-client