This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft File: 9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json) Hash identifier: dAOWqBZPMYzq7ONgpCcV3OVyNt5DpaIk9vNFnJAfJgg= Subject key identifier: 2F:AC:CC:92:EE:C9:71:4C:5B:37:17:BB:09:58:93:25:D2:1E:E1:25 Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8 Certificate issuer: /CN=f5346d3edbec6da72780722c0a41abeea63661d8 Certificate serial: 019B30E8A52B86FC5F979A6AA915A5DBFA0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 10:01:51 +0000 Manifest this update: Thu 18 Dec 2025 10:01:51 +0000 Manifest next update: Fri 19 Dec 2025 10:01:51 +0000 Files and hashes: 1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: ORTxycNSOD1HMvb3Pclpn/Awx1oGS2ViiZCO8jRSbhY=) 2: Ru57e4KJGmCNDXrPayGNrM1Z2dE.roa (hash: PjkMG0o3XCBX2V0z1wG5kUtXFYLyKVu1bhkUTY6FzyU=) 3: nRY6f0HmJ7S8CYmolnmrtVb1JGw.roa (hash: jhgaQrPs/TQq82v7wbUyYwj7VfBFttXWHM8WTx1fF9k=) 4: wn3IojBdCy5Wl_2EBruQi7YNS44.roa (hash: 1KdRgMRZAJuO8z+H0eUMB9aA/0ER0ehetz8BXxZxUoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 10:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:e8:a5:2b:86:fc:5f:97:9a:6a:a9:15:a5:db:fa:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8 Validity Not Before: Dec 18 10:01:51 2025 GMT Not After : Dec 19 10:01:51 2025 GMT Subject: CN=2faccc92eec9714c5b3717bb09589325d21ee125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:78:14:c8:d9:a0:7d:da:85:4e:36:43:54: 00:b2:4c:30:9d:b5:45:c7:dc:7c:81:1d:f8:b8:5e: 9f:79:2d:2d:c4:5e:d2:85:62:c0:fd:4e:79:cd:4a: c8:15:9d:69:91:86:91:52:26:0f:34:fb:b9:d2:8f: 91:6a:48:aa:c0:49:bf:8f:bf:4a:2f:4d:f9:b3:75: b6:07:12:52:10:2d:54:36:c2:32:c6:a7:5b:e6:24: 39:87:4a:84:c7:d5:59:14:44:0d:09:93:e7:d1:6e: 46:86:32:ac:17:18:18:0d:de:10:11:be:14:b2:ba: fb:c5:a5:6a:c2:dd:38:f5:e2:af:63:04:0d:01:76: 5f:3f:7a:dc:6d:ce:4c:bd:bc:2d:8a:42:5e:2d:57: 04:74:f1:04:88:8e:94:b0:3f:f9:f2:ca:0c:58:3e: a6:46:b8:fe:49:2a:e9:6d:d3:87:09:4e:40:92:ef: 27:ed:d6:71:07:db:2a:df:6a:0e:49:5f:a7:28:9a: 47:53:4c:1d:19:61:ad:c4:a8:5e:5c:e6:e1:bd:b9: fe:ea:ba:49:18:f3:95:78:30:cb:59:ac:45:cc:d1: 0c:0f:45:eb:81:94:67:b9:c9:1e:b2:ce:3b:87:49: 4e:a2:68:72:17:8e:70:70:69:fe:22:26:e4:4c:5a: e6:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:AC:CC:92:EE:C9:71:4C:5B:37:17:BB:09:58:93:25:D2:1E:E1:25 X509v3 Authority Key Identifier: keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:fc:00:f5:36:c9:12:d2:df:89:82:39:e4:e6:30:6a:bb: fb:f9:bc:dc:3b:07:0b:a2:f5:a1:f2:52:96:77:f2:e4:e5:69: 52:c9:46:38:4b:bf:56:01:d6:f7:6c:2d:4a:bb:34:06:3d:7d: fa:c9:70:e0:5b:46:6a:e3:37:b0:a6:a5:9d:f4:04:e5:4a:04: ce:99:30:ec:7f:c6:c3:d0:44:a1:95:c6:d5:15:9c:09:58:b1: b1:70:fc:56:fa:06:42:2f:9e:1a:d5:89:71:be:2a:e7:77:32: 66:a5:cc:d8:f7:e6:35:74:1b:11:a8:d1:fa:f9:3d:63:de:8e: fa:dc:b2:a1:2f:a7:d9:29:8e:9f:c5:7e:41:df:ed:1b:9a:c6: 2a:b2:27:49:87:6c:1e:94:42:05:b5:41:66:ae:61:8f:1e:14: c7:07:0a:9b:62:5e:b6:fd:c5:5a:b7:40:7f:b6:c0:9f:d9:0d: 3a:ff:c7:62:b3:f5:1f:79:fb:a8:6a:a0:7d:c3:38:3a:23:1b: f1:e8:a1:23:2c:d2:67:eb:21:8d:a5:fa:5e:46:7b:9a:eb:ab: b3:3b:58:f7:a0:a2:cd:df:7a:8d:eb:d9:e8:f3:e1:bb:32:55: 08:fe:1a:40:41:3c:39:2d:55:66:4e:cb:bf:98:a0:33:0c:15: 9f:40:99:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsw6KUrhvxfl5pqqRWl2/oOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MzQ2ZDNlZGJlYzZkYTcyNzgwNzIyYzBhNDFhYmVlYTYz NjYxZDgwHhcNMjUxMjE4MTAwMTUxWhcNMjUxMjE5MTAwMTUxWjAzMTEwLwYDVQQD EygyZmFjY2M5MmVlYzk3MTRjNWIzNzE3YmIwOTU4OTMyNWQyMWVlMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBt4FMjZoH3ahU42Q1QAskwwnbVF x9x8gR34uF6feS0txF7ShWLA/U55zUrIFZ1pkYaRUiYPNPu50o+RakiqwEm/j79K L035s3W2BxJSEC1UNsIyxqdb5iQ5h0qEx9VZFEQNCZPn0W5GhjKsFxgYDd4QEb4U srr7xaVqwt049eKvYwQNAXZfP3rcbc5MvbwtikJeLVcEdPEEiI6UsD/58soMWD6m Rrj+SSrpbdOHCU5Aku8n7dZxB9sq32oOSV+nKJpHU0wdGWGtxKheXObhvbn+6rpJ GPOVeDDLWaxFzNEMD0XrgZRnuckess47h0lOomhyF45wcGn+IibkTFrmvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+szJLuyXFMWzcXuwlYkyXSHuElMB8GA1UdIwQY MBaAFPU0bT7b7G2nJ4ByLApBq+6mNmHYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQt ZmE3MGJkOTBlODk0LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9iZTgwNjQtOWUxMS00NjFhLTkzNmQtZmE3MGJkOTBlODk0 LzEvOVRSdFB0dnNiYWNuZ0hJc0NrR3I3cVkyWWRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZr8APU2 yRLS34mCOeTmMGq7+/m83DsHC6L1ofJSlnfy5OVpUslGOEu/VgHW92wtSrs0Bj19 +slw4FtGauM3sKalnfQE5UoEzpkw7H/Gw9BEoZXG1RWcCVixsXD8VvoGQi+eGtWJ cb4q53cyZqXM2PfmNXQbEajR+vk9Y96O+tyyoS+n2SmOn8V+Qd/tG5rGKrInSYds HpRCBbVBZq5hjx4UxwcKm2Jetv3FWrdAf7bAn9kNOv/HYrP1H3n7qGqgfcM4OiMb 8eihIyzSZ+shjaX6XkZ7muursztY96Cizd96jevZ6PPhuzJVCP4aQEE8OS1VZk7L v5igMwwVn0CZ0Q== -----END CERTIFICATE-----Generated at Thu Dec 18 19:12:15 2025 by rpki-client