This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft File: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft (raw, json) Hash identifier: LCBi9CiFbxrbM7H4Bmb3WlP0kK1SngaLNmM6qOrZCH0= Subject key identifier: 38:D3:7F:71:59:B3:80:7E:3A:19:45:AB:65:36:A2:E3:0F:8A:DE:75 Authority key identifier: F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 Certificate issuer: /CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Certificate serial: 019B3D59D78BF5ED94159F428EC1C1595345 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft Manifest number: 03A0 Signing time: Sat 20 Dec 2025 20:00:56 +0000 Manifest this update: Sat 20 Dec 2025 20:00:56 +0000 Manifest next update: Sun 21 Dec 2025 20:00:56 +0000 Files and hashes: 1: 9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl (hash: rvjmuqxKBMmpmXeSKITyqoGcO4BXT3lv+CE6KQ0n1w8=) 2: AnWhlH6XKqUu4_GnJM2nKdO071s.roa (hash: /ulEE3dLzdrGEic+8DMTJn8iVbu0rFN7I+VggC4+dZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:d7:8b:f5:ed:94:15:9f:42:8e:c1:c1:59:53:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6e7d811954993a953b7948dd06765cbc090dcf7 Validity Not Before: Dec 20 20:00:56 2025 GMT Not After : Dec 21 20:00:56 2025 GMT Subject: CN=38d37f7159b3807e3a1945ab6536a2e30f8ade75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:09:77:f3:8d:4c:75:07:77:13:79:eb:57:d2: eb:5d:95:d1:35:d2:e2:c7:a7:c3:c3:1d:bd:df:f6: 18:93:38:04:e0:1f:ee:08:d7:56:27:53:43:60:dd: 77:f5:83:f7:a4:3b:c9:99:c8:3d:5b:eb:ce:a8:65: a5:9b:fc:18:c9:bc:38:74:19:35:5f:6a:6c:19:b7: 44:3a:9c:74:96:f3:46:d2:e4:92:19:93:d9:2c:01: e8:49:91:48:8e:b3:fd:25:ae:89:bb:45:e0:21:99: e4:e5:de:58:e7:74:19:0f:ce:52:c9:18:f2:14:27: 37:ab:98:6d:e4:17:60:f4:4a:37:2e:cb:18:9d:2e: ca:dc:66:b8:cf:f5:f3:aa:50:73:f4:87:3c:f0:2a: 06:41:94:4e:07:c5:04:fc:3c:4f:c8:a2:8e:fa:3b: d6:2b:12:b5:7b:7a:04:0f:33:59:4e:9c:35:8a:58: cc:f9:ad:91:05:ab:ef:92:28:89:a9:34:77:52:d9: eb:b9:d8:b6:ed:3e:af:05:07:37:30:2c:05:b0:e6: 1a:0e:09:8f:6b:d6:2c:d3:48:db:3f:21:0a:b8:c2: fd:2a:59:cf:5e:d3:6f:52:fd:3a:3c:21:2d:3b:df: 4a:69:b7:8f:98:a4:ef:ae:5f:81:61:1b:bf:64:dd: 30:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:7F:71:59:B3:80:7E:3A:19:45:AB:65:36:A2:E3:0F:8A:DE:75 X509v3 Authority Key Identifier: keyid:F6:E7:D8:11:95:49:93:A9:53:B7:94:8D:D0:67:65:CB:C0:90:DC:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/96297d-c627-466d-9eba-107890801213/1/9ufYEZVJk6lTt5SN0Gdly8CQ3Pc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:fd:dd:cd:2e:85:30:f1:af:58:4e:71:5e:fd:83:f6:cb:03: ed:04:6e:ec:a0:66:d6:2e:83:75:d2:b9:2f:6a:b0:58:09:5c: 40:85:c1:6b:6f:2c:80:31:63:87:9b:94:54:4a:9b:3f:11:77: 05:96:74:cf:af:11:34:9f:4e:21:bc:4c:68:90:a6:31:38:49: c7:71:3b:51:1c:99:cc:ce:b1:87:8e:3c:5b:4b:84:76:4f:f2: c1:76:fc:cf:73:e5:ef:f2:92:7e:06:b6:5f:a1:54:be:eb:1c: 05:6c:b6:57:61:96:16:cf:02:ae:7c:d9:55:01:b7:a3:ec:39: 73:1c:cd:35:e6:97:66:73:8b:02:ef:63:b3:0e:48:65:0e:9c: 01:7d:99:95:08:6d:79:fa:01:6a:92:ea:1c:d7:5f:72:dc:b2: 50:5f:36:ca:94:93:fa:04:98:54:7d:9e:67:6c:1e:14:20:f6: 7c:3d:64:1f:ef:bf:aa:c8:f4:09:d4:fc:be:46:47:66:b8:ef: 65:cd:3d:5e:b7:0a:ed:3a:8e:45:7e:7b:98:51:b7:23:10:db: c5:65:84:f6:3f:3a:8c:b1:ec:24:90:f7:54:e0:0e:45:81:55: 33:74:cb:f2:f2:a0:0a:89:c4:37:cb:7b:a3:54:ed:50:db:e2: b4:61:c8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WdeL9e2UFZ9CjsHBWVNFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2ZTdkODExOTU0OTkzYTk1M2I3OTQ4ZGQwNjc2NWNiYzA5 MGRjZjcwHhcNMjUxMjIwMjAwMDU2WhcNMjUxMjIxMjAwMDU2WjAzMTEwLwYDVQQD EygzOGQzN2Y3MTU5YjM4MDdlM2ExOTQ1YWI2NTM2YTJlMzBmOGFkZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAl3841MdQd3E3nrV9LrXZXRNdLi x6fDwx293/YYkzgE4B/uCNdWJ1NDYN139YP3pDvJmcg9W+vOqGWlm/wYybw4dBk1 X2psGbdEOpx0lvNG0uSSGZPZLAHoSZFIjrP9Ja6Ju0XgIZnk5d5Y53QZD85SyRjy FCc3q5ht5Bdg9Eo3LssYnS7K3Ga4z/XzqlBz9Ic88CoGQZROB8UE/DxPyKKO+jvW KxK1e3oEDzNZTpw1iljM+a2RBavvkiiJqTR3Utnrudi27T6vBQc3MCwFsOYaDgmP a9Ys00jbPyEKuML9KlnPXtNvUv06PCEtO99KabePmKTvrl+BYRu/ZN0w3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjTf3FZs4B+OhlFq2U2ouMPit51MB8GA1UdIwQY MBaAFPbn2BGVSZOpU7eUjdBnZcvAkNz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEt MTA3ODkwODAxMjEzLzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi85NjI5N2QtYzYyNy00NjZkLTllYmEtMTA3ODkwODAxMjEz LzEvOXVmWUVaVkprNmxUdDVTTjBHZGx5OENRM1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjP3dzS6F MPGvWE5xXv2D9ssD7QRu7KBm1i6DddK5L2qwWAlcQIXBa28sgDFjh5uUVEqbPxF3 BZZ0z68RNJ9OIbxMaJCmMThJx3E7URyZzM6xh448W0uEdk/ywXb8z3Pl7/KSfga2 X6FUvuscBWy2V2GWFs8CrnzZVQG3o+w5cxzNNeaXZnOLAu9jsw5IZQ6cAX2ZlQht efoBapLqHNdfctyyUF82ypST+gSYVH2eZ2weFCD2fD1kH++/qsj0CdT8vkZHZrjv Zc09XrcK7TqORX57mFG3IxDbxWWE9j86jLHsJJD3VOAORYFVM3TL8vKgConEN8t7 o1TtUNvitGHISw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:23:45 2025 by rpki-client