This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft File: 9poKXR6NVCSOh2Z-mIPJAvF14uc.mft (raw, json) Hash identifier: eiTAk1h5p++yFW/N+B3Zd8c5GDJyUoi6I3xABjpzfI8= Subject key identifier: 7D:FC:82:A9:F6:9D:B3:FE:95:D1:0D:3B:43:CA:1D:D7:9D:09:32:3F Authority key identifier: F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 Certificate issuer: /CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Certificate serial: 019AF509B95BFA137150E351C08B3BA25297 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:00:46 +0000 Manifest this update: Sat 06 Dec 2025 19:00:46 +0000 Manifest next update: Sun 07 Dec 2025 19:00:46 +0000 Files and hashes: 1: 9poKXR6NVCSOh2Z-mIPJAvF14uc.crl (hash: /RDdW3Tfr/ehv0GKeY9yuOZTT1BAswHG0kd8pPS8CEg=) 2: HmMkZMs_L5qVhevMb58XTv8ACos.roa (hash: p6Cspm4w36V6nse6CJ6sMJJCGrV41tHwZhdpXbj7GQQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:b9:5b:fa:13:71:50:e3:51:c0:8b:3b:a2:52:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f69a0a5d1e8d54248e87667e9883c902f175e2e7 Validity Not Before: Dec 6 19:00:46 2025 GMT Not After : Dec 7 19:00:46 2025 GMT Subject: CN=7dfc82a9f69db3fe95d10d3b43ca1dd79d09323f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:10:9c:7d:3d:4d:ae:48:2c:27:f5:b7:7d: d8:91:26:b7:d8:15:ae:a3:e8:6e:22:45:4d:2e:97: b0:d3:e2:80:6a:ee:0e:1a:6c:c1:89:4e:f2:31:8f: 0e:94:6d:e0:1d:79:b4:49:74:e4:4a:a1:31:93:b4: 64:4b:b1:92:d7:b5:c1:58:59:05:ce:ff:89:35:f2: 0b:aa:55:03:a0:a7:c2:8d:f9:f8:68:dc:77:21:67: c4:7d:ed:9f:08:e3:9e:fe:fb:58:01:0d:97:4c:bc: 51:fc:41:0a:94:69:b5:9b:bb:27:55:77:7a:1c:57: 9a:1f:6d:3a:00:06:2b:ee:67:cc:16:d6:a4:d9:22: fa:08:fb:d2:96:87:d4:8e:cd:9f:77:9f:cb:91:f2: f4:b3:50:22:e5:90:3d:d4:16:28:fb:58:43:ca:8c: 19:eb:83:82:fc:6c:26:e4:02:f8:ec:20:78:a5:ca: c7:5c:c2:07:2b:89:8d:e9:a6:3b:69:46:e6:6d:5d: 55:19:ca:1d:f2:e8:ce:86:57:ae:9f:7d:05:b3:e4: 7c:27:7f:7d:bf:9b:dd:b9:50:20:01:6c:6e:a9:5e: 67:93:cf:20:ae:c4:7c:84:d1:37:52:f3:be:ba:1e: 26:64:88:5b:b6:5a:da:f0:82:51:68:d0:b9:a5:93: a0:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FC:82:A9:F6:9D:B3:FE:95:D1:0D:3B:43:CA:1D:D7:9D:09:32:3F X509v3 Authority Key Identifier: keyid:F6:9A:0A:5D:1E:8D:54:24:8E:87:66:7E:98:83:C9:02:F1:75:E2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9poKXR6NVCSOh2Z-mIPJAvF14uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9440a4-0b42-4a58-900a-e99f22772624/1/9poKXR6NVCSOh2Z-mIPJAvF14uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:7a:85:f0:84:f0:21:f8:67:60:a6:05:39:9b:55:af:1e:1f: a5:30:55:63:b1:63:69:08:8c:bf:38:df:80:ad:70:45:a1:53: 4e:d7:8f:f8:77:f9:76:95:ee:f6:04:e0:f1:8d:a2:ef:b7:cf: 43:af:ce:db:82:74:88:ce:09:35:e8:df:da:be:66:83:c9:58: e7:b0:e7:99:75:3f:52:fa:86:fc:73:ab:c0:6e:19:e1:c8:34: f3:a7:b9:a8:7f:9e:ea:47:09:0f:e3:a5:48:75:47:11:95:1b: 0f:58:53:e1:37:83:4d:ed:2d:8f:6b:21:bc:20:8e:d5:df:0f: 66:44:9c:66:9e:a5:2e:4f:d2:91:4b:d6:30:73:f3:da:ad:af: a3:e5:c1:c0:dd:ae:0c:1e:25:08:02:b6:33:7b:24:b8:95:ab: 5b:5b:de:ed:58:5a:15:b1:ab:1d:91:3f:7e:c5:0d:5b:1c:45: a1:c9:10:42:f0:54:6d:f5:af:9c:da:0e:d2:19:c4:3c:dc:05: 4f:da:24:38:02:6d:12:41:67:89:6e:da:f9:79:71:ad:0b:00: e6:20:04:a8:0d:db:e1:45:82:53:76:64:d1:62:4f:c9:a9:26: f4:fd:42:bb:c9:85:7c:5e:48:2a:1e:0c:c0:b6:67:3f:b9:2a: 2f:95:c3:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cblb+hNxUONRwIs7olKXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OWEwYTVkMWU4ZDU0MjQ4ZTg3NjY3ZTk4ODNjOTAyZjE3 NWUyZTcwHhcNMjUxMjA2MTkwMDQ2WhcNMjUxMjA3MTkwMDQ2WjAzMTEwLwYDVQQD Eyg3ZGZjODJhOWY2OWRiM2ZlOTVkMTBkM2I0M2NhMWRkNzlkMDkzMjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRoQnH09Ta5ILCf1t33YkSa32BWu o+huIkVNLpew0+KAau4OGmzBiU7yMY8OlG3gHXm0SXTkSqExk7RkS7GS17XBWFkF zv+JNfILqlUDoKfCjfn4aNx3IWfEfe2fCOOe/vtYAQ2XTLxR/EEKlGm1m7snVXd6 HFeaH206AAYr7mfMFtak2SL6CPvSlofUjs2fd5/LkfL0s1Ai5ZA91BYo+1hDyowZ 64OC/Gwm5AL47CB4pcrHXMIHK4mN6aY7aUbmbV1VGcod8ujOhleun30Fs+R8J399 v5vduVAgAWxuqV5nk88grsR8hNE3UvO+uh4mZIhbtlra8IJRaNC5pZOgOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH38gqn2nbP+ldENO0PKHdedCTI/MB8GA1UdIwQY MBaAFPaaCl0ejVQkjodmfpiDyQLxdeLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEt ZTk5ZjIyNzcyNjI0LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS85NDQwYTQtMGI0Mi00YTU4LTkwMGEtZTk5ZjIyNzcyNjI0 LzEvOXBvS1hSNk5WQ1NPaDJaLW1JUEpBdkYxNHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXqF8ITw IfhnYKYFOZtVrx4fpTBVY7FjaQiMvzjfgK1wRaFTTteP+Hf5dpXu9gTg8Y2i77fP Q6/O24J0iM4JNejf2r5mg8lY57DnmXU/UvqG/HOrwG4Z4cg086e5qH+e6kcJD+Ol SHVHEZUbD1hT4TeDTe0tj2shvCCO1d8PZkScZp6lLk/SkUvWMHPz2q2vo+XBwN2u DB4lCAK2M3skuJWrW1ve7VhaFbGrHZE/fsUNWxxFockQQvBUbfWvnNoO0hnEPNwF T9okOAJtEkFniW7a+XlxrQsA5iAEqA3b4UWCU3Zk0WJPyakm9P1Cu8mFfF5IKh4M wLZnP7kqL5XD5Q== -----END CERTIFICATE-----Generated at Sun Dec 7 02:16:57 2025 by rpki-client