This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft File: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft (raw, json) Hash identifier: HaLCflEru0IIjX8ml+t73tp+8Fb3nRz7cIttHP/qZC8= Subject key identifier: 22:D0:6D:38:3B:83:FE:F5:32:FE:94:51:0E:9A:45:C1:B7:1F:5B:F8 Authority key identifier: F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 Certificate issuer: /CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Certificate serial: 019AF2099DB1DC1AE41538C6259FDCF1EEEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft Manifest number: 0154 Signing time: Sat 06 Dec 2025 05:01:47 +0000 Manifest this update: Sat 06 Dec 2025 05:01:47 +0000 Manifest next update: Sun 07 Dec 2025 05:01:47 +0000 Files and hashes: 1: 9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl (hash: 0VKpUmFv0C2tsd1AOEH/zUPgtTSTOeQuTPSIidb8mqI=) 2: mNqIiIsivK3RH9-qHlJI1-YYSi8.roa (hash: H9Eh88q+8mpDx8ZuUb0d9LRmXaGpIblFFe9crHh272Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:9d:b1:dc:1a:e4:15:38:c6:25:9f:dc:f1:ee:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f499881880c6f995c29c177bed33a1a6e3d4fb30 Validity Not Before: Dec 6 05:01:47 2025 GMT Not After : Dec 7 05:01:47 2025 GMT Subject: CN=22d06d383b83fef532fe94510e9a45c1b71f5bf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:2a:c1:03:5c:15:6a:ca:d0:92:e9:86:bf: 52:b7:9c:c4:17:09:af:b3:4d:18:49:4b:48:34:40: b3:7e:ce:70:4e:be:b8:d1:8a:3a:46:57:ee:97:64: f0:20:88:e5:bd:62:a8:77:ae:9a:95:3a:eb:d2:70: ff:7d:3e:74:bc:00:c5:e5:e9:fd:fa:1c:a6:f9:f8: 84:a7:e2:c5:57:7c:dd:71:0f:da:6b:ef:67:55:84: 23:88:96:aa:a4:4a:a1:2e:da:ef:b0:73:47:4d:0e: db:55:86:27:eb:54:8a:98:45:e3:df:5b:18:5b:e3: 3a:a5:be:f2:b8:ec:ba:1e:95:8f:c4:52:6a:6e:b1: 0f:a5:fc:96:c4:24:d1:93:7d:83:66:cf:be:01:b8: 49:a0:57:7b:65:1c:e9:a9:48:e0:10:55:6e:e6:b7: ad:4e:6e:b9:43:29:23:3e:a6:00:1e:aa:0d:65:9e: b6:14:27:89:f0:7d:c6:63:2a:a1:02:52:5d:98:99: e2:28:fd:9e:23:02:64:af:71:5e:ee:0b:03:38:a4: 40:1e:16:0b:7a:5c:9c:53:0d:ce:28:f2:2f:2a:28: 3d:fb:2a:e3:cf:aa:e9:fe:f1:a2:4c:e6:4a:b4:b7: 17:a6:0e:0e:e5:58:54:d2:e8:7f:6b:ad:cf:d3:c0: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D0:6D:38:3B:83:FE:F5:32:FE:94:51:0E:9A:45:C1:B7:1F:5B:F8 X509v3 Authority Key Identifier: keyid:F4:99:88:18:80:C6:F9:95:C2:9C:17:7B:ED:33:A1:A6:E3:D4:FB:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JmIGIDG-ZXCnBd77TOhpuPU-zA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/37e632-5246-46af-a729-b3af8300add3/1/9JmIGIDG-ZXCnBd77TOhpuPU-zA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:20:2a:01:c6:9c:ee:8a:58:84:34:46:c9:f8:14:db:7e:2f: c9:ba:15:d9:a5:91:8c:aa:0c:b7:65:81:11:99:ca:d3:86:87: 52:ea:7e:9b:a0:d0:df:5f:34:31:fd:81:2b:4d:9e:8c:9f:f0: b3:99:87:42:4f:09:54:d8:2a:96:50:ae:28:04:66:8b:1c:57: 96:57:2b:55:45:58:39:23:72:bb:57:c7:62:d6:e4:e6:9e:d9: 52:ea:ef:b9:1d:bc:be:10:93:3c:8d:78:74:99:ae:e7:79:76: 2b:52:fd:e1:7f:a6:07:f2:59:91:c7:8e:3e:eb:b1:9c:71:66: 4c:a2:c4:16:ad:8a:ad:8b:49:24:4a:90:56:13:98:8f:0a:e0: 57:63:d7:de:d5:e3:5f:12:b7:bc:43:cf:97:53:7b:c0:42:ee: 99:24:5a:df:ab:d8:ff:ab:7e:a2:bc:eb:a9:7d:18:64:44:88: 73:dc:68:5c:8d:c0:44:1f:32:f0:16:6b:95:9d:4a:fd:5d:a0: 11:8a:cf:50:51:45:75:fc:ab:76:33:12:65:0f:79:16:27:9b: 44:19:58:ef:b9:d6:a3:59:6a:c7:5c:a3:98:65:5d:1e:f3:5f: c0:43:bc:bc:2f:5e:d0:77:b3:c9:eb:2d:e1:8a:04:ca:38:2f: 10:c3:51:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCZ2x3BrkFTjGJZ/c8e7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0OTk4ODE4ODBjNmY5OTVjMjljMTc3YmVkMzNhMWE2ZTNk NGZiMzAwHhcNMjUxMjA2MDUwMTQ3WhcNMjUxMjA3MDUwMTQ3WjAzMTEwLwYDVQQD EygyMmQwNmQzODNiODNmZWY1MzJmZTk0NTEwZTlhNDVjMWI3MWY1YmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp08qwQNcFWrK0JLphr9St5zEFwmv s00YSUtINECzfs5wTr640Yo6Rlful2TwIIjlvWKod66alTrr0nD/fT50vADF5en9 +hym+fiEp+LFV3zdcQ/aa+9nVYQjiJaqpEqhLtrvsHNHTQ7bVYYn61SKmEXj31sY W+M6pb7yuOy6HpWPxFJqbrEPpfyWxCTRk32DZs++AbhJoFd7ZRzpqUjgEFVu5ret Tm65QykjPqYAHqoNZZ62FCeJ8H3GYyqhAlJdmJniKP2eIwJkr3Fe7gsDOKRAHhYL elycUw3OKPIvKig9+yrjz6rp/vGiTOZKtLcXpg4O5VhU0uh/a63P08AFBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLQbTg7g/71Mv6UUQ6aRcG3H1v4MB8GA1UdIwQY MBaAFPSZiBiAxvmVwpwXe+0zoabj1PswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3Mjkt YjNhZjgzMDBhZGQzLzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8zN2U2MzItNTI0Ni00NmFmLWE3MjktYjNhZjgzMDBhZGQz LzEvOUptSUdJREctWlhDbkJkNzdUT2hwdVBVLXpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAACAqAcac 7opYhDRGyfgU234vyboV2aWRjKoMt2WBEZnK04aHUup+m6DQ3180Mf2BK02ejJ/w s5mHQk8JVNgqllCuKARmixxXllcrVUVYOSNyu1fHYtbk5p7ZUurvuR28vhCTPI14 dJmu53l2K1L94X+mB/JZkceOPuuxnHFmTKLEFq2KrYtJJEqQVhOYjwrgV2PX3tXj XxK3vEPPl1N7wELumSRa36vY/6t+orzrqX0YZESIc9xoXI3ARB8y8BZrlZ1K/V2g EYrPUFFFdfyrdjMSZQ95FiebRBlY77nWo1lqx1yjmGVdHvNfwEO8vC9e0Hezyest 4YoEyjgvEMNRbA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:35:57 2025 by rpki-client