This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft File: 9LdppT3YY1LTRA8iK9-QfPCcLbo.mft (raw, json) Hash identifier: 4el8qAFoYBLCYniVuIyTxHjcRyg1+t+xDaJoeCm7nUg= Subject key identifier: B8:C2:BE:A4:FB:8D:74:BD:84:EC:61:3E:2A:90:0A:86:96:61:C4:05 Authority key identifier: F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA Certificate issuer: /CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Certificate serial: 019B262DC8318D3987C67C1F2962202F3578 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft Manifest number: 1799 Signing time: Tue 16 Dec 2025 08:01:33 +0000 Manifest this update: Tue 16 Dec 2025 08:01:33 +0000 Manifest next update: Wed 17 Dec 2025 08:01:33 +0000 Files and hashes: 1: 07X0hen1-KbW9Uhkt7xjA-PCLGU.roa (hash: 8+QD86bIku1q5HIr9iB6Xu8OCMzU+b8rQ15QGWkM/rs=) 2: 9LdppT3YY1LTRA8iK9-QfPCcLbo.crl (hash: ryQ/yqROdrtGz2L2kwq5tA3IriFzd++P2PyLzWVnHoA=) 3: Ue3VZrB8a4EG4I_RXK87Uw3OtZs.roa (hash: UZno3qoAs6BNi7dyZDbKw3CxcQ+pse82BKcQlZP0pfM=) 4: XljC5T-tfn8kyp8IckkuxduArlE.roa (hash: GpetnE8RGdPeAs90fgd9VHf6P54N2jU+6iw/T8HuxAQ=) 5: azUb986KPmjNBXNI1GEnnjHJfR8.roa (hash: 0Eh3zrlfIiIGJgQrMOsGTA9FYjfTizw8KSjWE+UgRQA=) 6: jlRsnNgvFlgHwrIkC3ndsz-DeHA.roa (hash: KIeWObQIaCMxnHDPh3clv17Pl6xMfKd4hJmG5jzOw94=) 7: urbklb_tMgWulJwput0Uvsn9CsE.roa (hash: WllQD7vTFpOMjfn+nif/0eXgJY9cIhU7nttx45/fv5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:c8:31:8d:39:87:c6:7c:1f:29:62:20:2f:35:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b769a53dd86352d3440f222bdf907cf09c2dba Validity Not Before: Dec 16 08:01:33 2025 GMT Not After : Dec 17 08:01:33 2025 GMT Subject: CN=b8c2bea4fb8d74bd84ec613e2a900a869661c405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:b5:e2:7f:8b:4f:00:04:7a:80:d1:ea:81: ca:3b:0b:91:40:01:9a:d1:7e:53:89:e0:15:b2:33: 39:20:76:ad:7d:fd:bd:41:6a:8b:f0:2a:e0:07:ca: 8a:6d:81:14:2f:38:d4:ea:02:2a:a4:da:8c:6f:54: b8:18:08:69:f4:8a:c8:da:09:5d:b3:68:75:cc:da: 3e:2a:fb:aa:2c:83:26:df:e6:8a:bb:5f:6b:25:19: 5d:b0:70:68:30:84:80:fe:d6:81:ff:48:10:85:7c: b7:e5:26:8e:70:66:a4:20:1e:5a:b6:5c:8a:93:03: db:96:f9:a8:07:56:5d:61:c8:7b:7f:99:31:c0:af: de:65:6e:eb:cd:35:0c:95:02:9e:29:83:c6:00:ec: 0a:c9:a8:4e:b4:62:d0:16:e6:ab:7f:b2:81:6e:01: 4b:76:f0:d1:0f:7f:58:09:17:9d:88:a5:45:a7:7e: d5:fd:72:46:b4:3c:46:a9:a6:f8:cc:95:ba:ba:70: ba:02:ca:2e:41:fc:55:b0:91:2b:60:f6:c1:03:a2: 72:54:6f:c7:80:a4:5b:49:58:d9:c0:e9:f9:13:0a: d0:24:a5:b1:8b:74:83:a2:55:67:e2:cc:3a:87:3f: 63:c0:fd:be:06:14:ef:1b:8c:cb:e7:2a:58:b4:14: ee:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:C2:BE:A4:FB:8D:74:BD:84:EC:61:3E:2A:90:0A:86:96:61:C4:05 X509v3 Authority Key Identifier: keyid:F4:B7:69:A5:3D:D8:63:52:D3:44:0F:22:2B:DF:90:7C:F0:9C:2D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdppT3YY1LTRA8iK9-QfPCcLbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/70d50f-ff3c-4f63-8dec-d7c36c27c087/1/9LdppT3YY1LTRA8iK9-QfPCcLbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ad:d2:a9:ba:e3:f7:75:d6:28:54:9c:9c:ad:45:10:07:6e: 15:1b:7e:e9:b8:22:27:e7:c0:4e:18:a8:4f:ef:79:45:e6:21: 4d:d1:22:4e:16:cc:4e:34:1a:0d:17:5b:59:ac:db:ba:f4:61: c2:9a:ad:c1:7f:1e:66:02:ae:4b:2c:49:fa:63:52:2f:04:79: 51:6d:9a:9d:96:42:44:48:d9:30:e5:48:97:cd:db:92:5a:ca: 2d:4d:5c:7d:9c:ab:25:09:3f:cd:28:d7:31:21:3b:fb:3d:0f: 0d:83:ea:fb:2e:13:ba:32:70:a9:39:0b:6f:bb:8a:cf:0f:58: bf:3d:fc:df:4e:79:9f:25:53:0f:54:69:93:c1:1c:92:06:d2: 51:90:6f:55:be:aa:4a:ee:c0:78:79:d6:6b:e1:7c:2e:78:af: 1d:0e:f6:30:40:6a:b3:51:06:cd:1b:f6:71:23:5e:0c:12:13: c6:28:11:96:8b:4c:64:43:7d:07:26:a3:12:ce:57:bf:e6:ce: aa:74:8e:a4:85:56:9e:69:2b:ef:1e:46:40:b1:4d:2e:04:9e: 7f:41:b2:08:86:2b:30:1e:d1:e8:49:70:57:48:f9:07:7b:57: 4a:75:14:73:c2:77:d9:71:a2:51:77:16:0f:97:42:65:54:85: a5:cf:0c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLcgxjTmHxnwfKWIgLzV4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2OWE1M2RkODYzNTJkMzQ0MGYyMjJiZGY5MDdjZjA5 YzJkYmEwHhcNMjUxMjE2MDgwMTMzWhcNMjUxMjE3MDgwMTMzWjAzMTEwLwYDVQQD EyhiOGMyYmVhNGZiOGQ3NGJkODRlYzYxM2UyYTkwMGE4Njk2NjFjNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCC14n+LTwAEeoDR6oHKOwuRQAGa 0X5TieAVsjM5IHatff29QWqL8CrgB8qKbYEULzjU6gIqpNqMb1S4GAhp9IrI2gld s2h1zNo+KvuqLIMm3+aKu19rJRldsHBoMISA/taB/0gQhXy35SaOcGakIB5atlyK kwPblvmoB1ZdYch7f5kxwK/eZW7rzTUMlQKeKYPGAOwKyahOtGLQFuarf7KBbgFL dvDRD39YCRediKVFp37V/XJGtDxGqab4zJW6unC6AsouQfxVsJErYPbBA6JyVG/H gKRbSVjZwOn5EwrQJKWxi3SDolVn4sw6hz9jwP2+BhTvG4zL5ypYtBTugwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjCvqT7jXS9hOxhPiqQCoaWYcQFMB8GA1UdIwQY MBaAFPS3aaU92GNS00QPIivfkHzwnC26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMt ZDdjMzZjMjdjMDg3LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83MGQ1MGYtZmYzYy00ZjYzLThkZWMtZDdjMzZjMjdjMDg3 LzEvOUxkcHBUM1lZMUxUUkE4aUs5LVFmUENjTGJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq3Sqbrj 93XWKFScnK1FEAduFRt+6bgiJ+fAThioT+95ReYhTdEiThbMTjQaDRdbWazbuvRh wpqtwX8eZgKuSyxJ+mNSLwR5UW2anZZCREjZMOVIl83bklrKLU1cfZyrJQk/zSjX MSE7+z0PDYPq+y4TujJwqTkLb7uKzw9Yvz383055nyVTD1Rpk8EckgbSUZBvVb6q Su7AeHnWa+F8LnivHQ72MEBqs1EGzRv2cSNeDBITxigRlotMZEN9ByajEs5Xv+bO qnSOpIVWnmkr7x5GQLFNLgSef0GyCIYrMB7R6ElwV0j5B3tXSnUUc8J32XGiUXcW D5dCZVSFpc8MJQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:04:56 2025 by rpki-client