This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft File: 9pRmi6ds9VDEE5wXMAFgB33OoFk.mft (raw, json) Hash identifier: f1c4oSU41cXO4veBkAuAcUkDzZf8k5s7+cfMgz5RYcE= Subject key identifier: DD:09:88:43:64:B4:0E:94:27:2E:25:47:0F:F7:93:BF:E5:1F:ED:30 Authority key identifier: F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59 Certificate issuer: /CN=f694668ba76cf550c4139c17300160077dcea059 Certificate serial: 019AF31B32BF4B7B684A057654539CB4E2A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft Manifest number: 10DA Signing time: Sat 06 Dec 2025 10:00:37 +0000 Manifest this update: Sat 06 Dec 2025 10:00:37 +0000 Manifest next update: Sun 07 Dec 2025 10:00:37 +0000 Files and hashes: 1: 2JNf8PoETHUWKrlbGvJA_rrI9NI.roa (hash: 1FKPW+J1lE2HkIdpCVRmwjCFGmaaz0tFXqdGn/MO/uM=) 2: 9pRmi6ds9VDEE5wXMAFgB33OoFk.crl (hash: 9EcKXRdNF8sz4XVTvfygvm8PxQ+HAP7OFmtMLK1wLkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:32:bf:4b:7b:68:4a:05:76:54:53:9c:b4:e2:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f694668ba76cf550c4139c17300160077dcea059 Validity Not Before: Dec 6 10:00:37 2025 GMT Not After : Dec 7 10:00:37 2025 GMT Subject: CN=dd09884364b40e94272e25470ff793bfe51fed30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:88:90:b0:3a:6a:0c:7e:3b:77:5d:4a:1d: 66:89:94:17:fd:dd:35:0a:6a:41:9b:b3:3b:df:42: fa:ba:d1:1e:64:47:75:b7:9b:19:1c:8b:37:f7:68: 29:02:8e:7c:02:10:d2:00:c4:8a:7c:62:b9:c2:20: 51:aa:50:7c:25:ef:6a:ce:55:de:89:4d:b1:bf:36: 35:be:a5:0c:d6:c6:b5:d7:98:af:f9:63:b0:63:71: 5d:3e:39:bf:26:27:f5:18:0b:6e:67:6e:26:b9:09: c6:e8:63:82:cd:53:f0:99:e8:85:55:fc:e8:d1:a1: d3:67:b2:58:27:72:91:88:9b:65:c3:af:9f:43:86: 90:25:3f:25:58:be:f6:f9:a6:ca:98:6e:e9:9a:d0: 3c:24:d3:02:40:38:f6:05:03:22:63:65:5e:1d:66: 18:e3:5f:d2:8c:80:c0:8e:3e:cc:a9:0b:c9:74:a6: ef:6b:a0:19:e3:8b:53:47:32:cf:96:3f:98:64:e9: 20:59:b1:c4:f1:33:56:e6:42:0d:23:0d:a0:c6:51: bd:89:10:a2:cb:8f:d9:d5:6d:4d:2d:5d:a3:50:b9: 34:e9:60:57:e3:77:78:59:6f:9f:fa:87:95:d7:ac: fc:c8:63:1f:d3:3a:b7:a9:15:ad:60:ad:f8:ab:36: f9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:09:88:43:64:B4:0E:94:27:2E:25:47:0F:F7:93:BF:E5:1F:ED:30 X509v3 Authority Key Identifier: keyid:F6:94:66:8B:A7:6C:F5:50:C4:13:9C:17:30:01:60:07:7D:CE:A0:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pRmi6ds9VDEE5wXMAFgB33OoFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6e0316-f4b9-4f89-a8a1-7e50913ac01d/1/9pRmi6ds9VDEE5wXMAFgB33OoFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5f:7e:34:74:0c:24:db:43:52:a8:20:79:95:d7:fd:a7:e3: ba:b5:01:68:90:34:bf:75:ef:3a:1b:55:48:5d:c8:4c:5b:de: d7:9b:42:75:44:b7:97:2c:ff:b5:6d:55:51:4f:87:f1:06:a7: a6:b2:71:ef:72:c8:4d:27:6d:82:4e:1d:fc:a6:63:39:12:a0: fe:2b:ee:c4:ca:1e:05:21:64:52:be:a1:93:83:21:98:d5:e0: 88:c5:09:ec:56:a8:ee:bc:86:9d:fc:db:02:05:fc:36:c4:58: ad:e5:10:ab:ab:37:8f:37:99:dc:a4:29:2d:0d:a8:52:e0:4d: a9:84:f0:e8:72:a3:ed:75:92:fd:ff:31:a9:d9:2a:af:ec:52: ad:63:1b:67:43:f5:b4:7a:2f:5d:e2:fe:53:37:8e:54:34:57: 92:a4:67:76:31:4c:42:c3:99:08:f6:f2:fa:01:9c:cb:5c:cc: 41:6e:8b:66:e6:3e:e1:7a:79:1a:25:e1:a9:41:54:e8:17:36: bf:88:cc:cb:5d:97:5f:97:7f:9c:83:c1:59:27:8a:8f:02:1d: 73:65:94:3e:19:13:50:91:7a:d9:0c:e4:ba:1b:da:33:7b:a9: c1:3f:32:5c:4c:b1:6d:50:21:c7:6e:da:34:66:f9:7f:94:81: 78:63:e4:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGzK/S3toSgV2VFOctOKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OTQ2NjhiYTc2Y2Y1NTBjNDEzOWMxNzMwMDE2MDA3N2Rj ZWEwNTkwHhcNMjUxMjA2MTAwMDM3WhcNMjUxMjA3MTAwMDM3WjAzMTEwLwYDVQQD EyhkZDA5ODg0MzY0YjQwZTk0MjcyZTI1NDcwZmY3OTNiZmU1MWZlZDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoniIkLA6agx+O3ddSh1miZQX/d01 CmpBm7M730L6utEeZEd1t5sZHIs392gpAo58AhDSAMSKfGK5wiBRqlB8Je9qzlXe iU2xvzY1vqUM1sa115iv+WOwY3FdPjm/Jif1GAtuZ24muQnG6GOCzVPwmeiFVfzo 0aHTZ7JYJ3KRiJtlw6+fQ4aQJT8lWL72+abKmG7pmtA8JNMCQDj2BQMiY2VeHWYY 41/SjIDAjj7MqQvJdKbva6AZ44tTRzLPlj+YZOkgWbHE8TNW5kINIw2gxlG9iRCi y4/Z1W1NLV2jULk06WBX43d4WW+f+oeV16z8yGMf0zq3qRWtYK34qzb57wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0JiENktA6UJy4lRw/3k7/lH+0wMB8GA1UdIwQY MBaAFPaUZounbPVQxBOcFzABYAd9zqBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEt N2U1MDkxM2FjMDFkLzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82ZTAzMTYtZjRiOS00Zjg5LWE4YTEtN2U1MDkxM2FjMDFk LzEvOXBSbWk2ZHM5VkRFRTV3WE1BRmdCMzNPb0ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl19+NHQM JNtDUqggeZXX/afjurUBaJA0v3XvOhtVSF3ITFve15tCdUS3lyz/tW1VUU+H8Qan prJx73LITSdtgk4d/KZjORKg/ivuxMoeBSFkUr6hk4MhmNXgiMUJ7Fao7ryGnfzb AgX8NsRYreUQq6s3jzeZ3KQpLQ2oUuBNqYTw6HKj7XWS/f8xqdkqr+xSrWMbZ0P1 tHovXeL+UzeOVDRXkqRndjFMQsOZCPby+gGcy1zMQW6LZuY+4Xp5GiXhqUFU6Bc2 v4jMy12XX5d/nIPBWSeKjwIdc2WUPhkTUJF62QzkuhvaM3upwT8yXEyxbVAhx27a NGb5f5SBeGPk4w== -----END CERTIFICATE-----Generated at Sat Dec 6 18:01:35 2025 by rpki-client