This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft File: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft (raw, json) Hash identifier: e72SAfGJNi90Uqo+X/yTcnT1ryY9v7hN4/3LBGPVUew= Subject key identifier: 23:1B:1D:2F:15:73:DF:44:E2:09:1C:64:FE:71:90:EA:3E:06:00:6A Authority key identifier: F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A Certificate issuer: /CN=f5cb856d4269219ed3a0c0dc47333236f155953a Certificate serial: 019AF0BF1080E13C4FE230DA40422039EB61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft Manifest number: 022B Signing time: Fri 05 Dec 2025 23:00:44 +0000 Manifest this update: Fri 05 Dec 2025 23:00:44 +0000 Manifest next update: Sat 06 Dec 2025 23:00:44 +0000 Files and hashes: 1: 59uDpaWEezIlndm7ImZL33KmY98.roa (hash: faf2z4pHl5bW71/IOumRXeUq2DneYTGbFv6mONAFUxg=) 2: 9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl (hash: N7DxiIRDxCC+YxK56Ei4HL7GhCT36DGe2B9Vux/V/+Y=) 3: FUVd8ZfhcrCGB4dVlnbfdWvNaJY.roa (hash: 888rexXxSPjA4V1QgAN4s9dCepxu8RrFKO0s2g6CYeM=) 4: U02yntsAPfPK9DKBsRhU3Tc1HoQ.roa (hash: Rh+ABlbykq4lEGUZu+XpvC7FjPWl1oXlv1c6u60nzNY=) 5: a3SyScX72L5TkWnjrj7OuShiBm0.roa (hash: EcnC4sDg2JzNdW4ec0ThJsTXhRWMy/yu92wkqgkxq6Y=) 6: kEeDyUl01hTZEGFM3itOVXFr62M.roa (hash: FjPrfh53WoDMFf9Gz/XVlKYYZ1UhSfrDGs50b54qMv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:10:80:e1:3c:4f:e2:30:da:40:42:20:39:eb:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5cb856d4269219ed3a0c0dc47333236f155953a Validity Not Before: Dec 5 23:00:44 2025 GMT Not After : Dec 6 23:00:44 2025 GMT Subject: CN=231b1d2f1573df44e2091c64fe7190ea3e06006a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c5:75:f1:27:88:10:82:3b:f5:07:cd:24:84: 4b:c7:76:5e:1f:36:57:ce:10:dd:e5:0b:2e:5e:98: 43:02:c0:a2:ee:82:74:6c:7b:5e:6d:0d:a4:dc:15: 3a:bd:06:2f:2a:1e:ae:62:2b:47:2e:a1:6b:d9:74: 3c:a6:18:d5:26:3b:0e:f7:ab:c0:c6:45:14:c5:96: f0:8d:24:57:d8:b0:01:4e:8b:9a:ae:67:8e:16:0e: b7:5d:45:fa:2d:32:3a:4a:49:ba:65:88:e0:58:29: d4:84:12:42:05:3a:9e:ec:53:09:95:69:fe:27:aa: 8a:ff:f8:81:32:9e:19:1b:3e:4d:62:1a:b8:32:48: e2:65:fb:ad:c8:c8:82:d9:7e:08:8a:df:a1:62:c8: ac:57:7a:50:e5:2a:bf:73:c8:9f:0e:c9:50:5b:52: 02:87:2e:ef:ed:a7:7f:35:55:c0:d6:91:0c:f7:1c: 2f:2a:33:fc:08:92:33:da:9d:38:c3:6b:50:3f:c8: 30:ff:5d:d5:02:73:90:f9:5b:5e:93:28:7f:6a:15: 27:f1:9e:d8:25:4c:cb:1b:50:e9:1f:77:47:40:7d: 0d:c0:17:1a:77:91:75:3c:04:f6:4a:25:23:59:2e: f9:6a:ea:66:7a:91:f1:64:f4:6e:8d:3a:e4:63:7b: 79:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:1B:1D:2F:15:73:DF:44:E2:09:1C:64:FE:71:90:EA:3E:06:00:6A X509v3 Authority Key Identifier: keyid:F5:CB:85:6D:42:69:21:9E:D3:A0:C0:DC:47:33:32:36:F1:55:95:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/74b280-e1b4-4310-8085-d65617bd3b4f/1/9cuFbUJpIZ7ToMDcRzMyNvFVlTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:48:d8:f7:8b:94:ec:0a:70:f1:2e:a2:c3:40:3e:c2:84:55: e2:6a:00:a8:1e:c9:26:e4:c9:92:ac:3f:4f:ac:c4:20:7b:d7: ff:87:f0:93:46:0a:02:ea:9f:fc:23:46:83:9c:cc:93:7c:93: 0b:07:63:af:ef:e5:c0:8b:0b:a9:0e:e6:db:69:62:72:a0:2e: 79:0a:5c:45:12:66:63:11:d4:38:26:fd:14:ea:06:e5:dd:84: 81:a4:af:18:76:d8:42:36:62:11:69:b0:61:b8:cd:6a:51:e0: cd:ce:a2:55:71:88:2a:a1:13:05:51:24:bf:5f:62:fd:57:81: 9c:6d:27:24:0d:c0:09:ec:e3:c1:10:65:82:92:4b:97:b2:29: 22:47:d5:b6:d3:da:c8:60:19:c2:2f:30:af:e8:ff:9f:5b:9e: 8c:fd:72:ab:2a:9b:9e:e6:d4:c2:52:af:b3:d8:93:ac:6b:e1: cd:84:9f:27:63:22:13:28:96:f4:ca:00:d6:7f:d7:d5:ae:3f: c4:8d:b7:73:cc:89:ae:11:6d:1d:5b:ed:ec:5c:93:b7:eb:cc: cb:2d:aa:84:a5:c0:b6:6a:f8:98:31:af:21:c0:cf:30:91:35: be:cd:7b:10:a0:b8:03:70:7b:f4:25:9d:01:8c:fd:a5:a2:39: 7d:11:af:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxCA4TxP4jDaQEIgOethMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Y2I4NTZkNDI2OTIxOWVkM2EwYzBkYzQ3MzMzMjM2ZjE1 NTk1M2EwHhcNMjUxMjA1MjMwMDQ0WhcNMjUxMjA2MjMwMDQ0WjAzMTEwLwYDVQQD EygyMzFiMWQyZjE1NzNkZjQ0ZTIwOTFjNjRmZTcxOTBlYTNlMDYwMDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsV18SeIEII79QfNJIRLx3ZeHzZX zhDd5QsuXphDAsCi7oJ0bHtebQ2k3BU6vQYvKh6uYitHLqFr2XQ8phjVJjsO96vA xkUUxZbwjSRX2LABTouarmeOFg63XUX6LTI6Skm6ZYjgWCnUhBJCBTqe7FMJlWn+ J6qK//iBMp4ZGz5NYhq4MkjiZfutyMiC2X4Iit+hYsisV3pQ5Sq/c8ifDslQW1IC hy7v7ad/NVXA1pEM9xwvKjP8CJIz2p04w2tQP8gw/13VAnOQ+Vtekyh/ahUn8Z7Y JUzLG1DpH3dHQH0NwBcad5F1PAT2SiUjWS75aupmepHxZPRujTrkY3t51QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMbHS8Vc99E4gkcZP5xkOo+BgBqMB8GA1UdIwQY MBaAFPXLhW1CaSGe06DA3EczMjbxVZU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUt ZDY1NjE3YmQzYjRmLzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS83NGIyODAtZTFiNC00MzEwLTgwODUtZDY1NjE3YmQzYjRm LzEvOWN1RmJVSnBJWjdUb01EY1J6TXlOdkZWbFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEjY94uU 7Apw8S6iw0A+woRV4moAqB7JJuTJkqw/T6zEIHvX/4fwk0YKAuqf/CNGg5zMk3yT Cwdjr+/lwIsLqQ7m22licqAueQpcRRJmYxHUOCb9FOoG5d2EgaSvGHbYQjZiEWmw YbjNalHgzc6iVXGIKqETBVEkv19i/VeBnG0nJA3ACezjwRBlgpJLl7IpIkfVttPa yGAZwi8wr+j/n1uejP1yqyqbnubUwlKvs9iTrGvhzYSfJ2MiEyiW9MoA1n/X1a4/ xI23c8yJrhFtHVvt7FyTt+vMyy2qhKXAtmr4mDGvIcDPMJE1vs17EKC4A3B79CWd AYz9paI5fRGv4w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:58 2025 by rpki-client