This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft File: 9WdppC5EJm8Dfss5DUEV_r44YaQ.mft (raw, json) Hash identifier: ao+01TlEeL01tardrjwpKh+sn8FIj0KtHY9u/cjtc+c= Subject key identifier: DB:5B:EC:57:32:93:E3:50:58:AD:4A:87:6C:9E:69:2C:EA:B5:37:AF Authority key identifier: F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 Certificate issuer: /CN=f56769a42e44266f037ecb390d4115febe3861a4 Certificate serial: 019AF1647AF691CAA3D4890D70BE8911DE55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 02:01:25 +0000 Manifest this update: Sat 06 Dec 2025 02:01:25 +0000 Manifest next update: Sun 07 Dec 2025 02:01:25 +0000 Files and hashes: 1: 6wW68rpEYT5imOHdAJC8iqYgH-8.roa (hash: 2OyXhc87+DnhsUi/Ak2VDrIMxn2fa0IaWGuzCLcLykQ=) 2: 9WdppC5EJm8Dfss5DUEV_r44YaQ.crl (hash: dOsyXp7U6vk7GKFc3s5nDSLj5yOLOSmX1zJz493jtCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:7a:f6:91:ca:a3:d4:89:0d:70:be:89:11:de:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56769a42e44266f037ecb390d4115febe3861a4 Validity Not Before: Dec 6 02:01:25 2025 GMT Not After : Dec 7 02:01:25 2025 GMT Subject: CN=db5bec573293e35058ad4a876c9e692ceab537af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:20:a2:bc:96:10:bc:f7:a7:4b:fa:2b:81:2e: 0b:be:bf:5f:df:50:ce:5a:7e:0e:95:71:bf:83:54: e4:ee:20:22:78:02:cd:28:e7:06:68:54:ed:6a:de: ad:cd:cb:c6:b4:a5:65:ae:69:9d:74:8a:4c:92:82: 9a:d9:f7:c9:e3:b9:73:f2:77:9c:83:e6:41:60:cb: f0:64:8a:bd:4b:8e:44:a7:13:a2:de:f1:81:2d:56: c8:37:ac:36:5b:a1:be:bd:2e:bf:68:15:47:fe:47: 82:d3:c3:aa:dc:49:44:74:80:87:1c:ad:d7:29:0c: 41:0f:13:fb:41:50:c0:d1:0b:8b:a0:6a:42:82:5b: f4:c7:2f:04:cc:ea:4e:d2:8d:d7:0a:66:d1:38:32: dc:1e:8b:ec:48:05:cd:91:a4:d6:03:6b:36:eb:08: f7:2f:7d:74:03:f5:c2:fb:e3:6d:45:01:62:cb:6a: 46:0b:73:20:e3:ef:ea:ff:d5:2c:83:26:cb:85:5a: cd:e2:ff:92:27:51:8a:43:1e:c6:45:46:fb:60:9f: b4:66:dc:7c:bf:87:73:86:72:53:81:8a:8a:5c:e7: 95:2e:21:e7:85:a6:8f:67:d0:64:1c:67:21:b8:58: e3:de:80:10:0c:39:66:c5:45:05:a4:9d:4d:fc:af: 4d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5B:EC:57:32:93:E3:50:58:AD:4A:87:6C:9E:69:2C:EA:B5:37:AF X509v3 Authority Key Identifier: keyid:F5:67:69:A4:2E:44:26:6F:03:7E:CB:39:0D:41:15:FE:BE:38:61:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WdppC5EJm8Dfss5DUEV_r44YaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1d2fd-4dbd-4362-ac7b-7a3ffb00b716/1/9WdppC5EJm8Dfss5DUEV_r44YaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:1a:7f:d1:0c:69:af:8b:5d:be:a4:ba:10:15:5e:44:3f:40: 55:a8:c0:78:fe:d8:4c:10:27:c0:be:0b:3d:9d:a7:3c:59:13: 60:d3:a1:73:71:b3:18:d0:3f:26:c7:46:f9:1b:49:83:a6:f6: e7:c3:ed:4a:2c:fd:86:36:47:82:bb:89:ac:81:30:93:0c:4a: e1:49:e5:64:36:48:55:8d:28:f6:86:87:c7:d5:76:d9:4b:cc: f0:00:8a:66:05:40:70:3a:26:6b:81:e7:76:a5:22:18:64:37: 42:c9:20:e0:63:d3:35:a2:e0:3b:42:9f:24:77:0d:43:bb:ee: 8d:56:b2:4f:7f:08:1f:c5:87:17:f3:2e:0a:d1:64:a8:ee:65: 90:f0:d1:af:e5:25:8c:bd:aa:dd:31:7f:af:01:34:74:d5:51: c7:64:df:f1:43:a0:97:c5:e8:99:1f:ab:82:51:c2:c5:2f:71: e1:18:0a:c4:7d:c6:fd:74:a3:ba:4d:e7:12:e8:4c:28:1d:a3: 28:f1:5b:31:0c:62:e7:a6:0e:f5:83:31:49:85:3d:89:69:76: c6:aa:5b:b0:22:a0:0c:fe:80:24:81:b1:90:7f:f9:db:a3:c6: bf:8e:a0:fe:26:38:07:71:eb:7a:2d:e5:85:cb:27:1a:b4:ca: 65:8f:d8:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZHr2kcqj1IkNcL6JEd5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1Njc2OWE0MmU0NDI2NmYwMzdlY2IzOTBkNDExNWZlYmUz ODYxYTQwHhcNMjUxMjA2MDIwMTI1WhcNMjUxMjA3MDIwMTI1WjAzMTEwLwYDVQQD EyhkYjViZWM1NzMyOTNlMzUwNThhZDRhODc2YzllNjkyY2VhYjUzN2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSCivJYQvPenS/orgS4Lvr9f31DO Wn4OlXG/g1Tk7iAieALNKOcGaFTtat6tzcvGtKVlrmmddIpMkoKa2ffJ47lz8nec g+ZBYMvwZIq9S45EpxOi3vGBLVbIN6w2W6G+vS6/aBVH/keC08Oq3ElEdICHHK3X KQxBDxP7QVDA0QuLoGpCglv0xy8EzOpO0o3XCmbRODLcHovsSAXNkaTWA2s26wj3 L310A/XC++NtRQFiy2pGC3Mg4+/q/9UsgybLhVrN4v+SJ1GKQx7GRUb7YJ+0Ztx8 v4dzhnJTgYqKXOeVLiHnhaaPZ9BkHGchuFjj3oAQDDlmxUUFpJ1N/K9NXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtb7Fcyk+NQWK1Kh2yeaSzqtTevMB8GA1UdIwQY MBaAFPVnaaQuRCZvA37LOQ1BFf6+OGGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2It N2EzZmZiMDBiNzE2LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMWQyZmQtNGRiZC00MzYyLWFjN2ItN2EzZmZiMDBiNzE2 LzEvOVdkcHBDNUVKbThEZnNzNURVRVZfcjQ0WWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXhp/0Qxp r4tdvqS6EBVeRD9AVajAeP7YTBAnwL4LPZ2nPFkTYNOhc3GzGNA/JsdG+RtJg6b2 58PtSiz9hjZHgruJrIEwkwxK4UnlZDZIVY0o9oaHx9V22UvM8ACKZgVAcDoma4Hn dqUiGGQ3Qskg4GPTNaLgO0KfJHcNQ7vujVayT38IH8WHF/MuCtFkqO5lkPDRr+Ul jL2q3TF/rwE0dNVRx2Tf8UOgl8XomR+rglHCxS9x4RgKxH3G/XSjuk3nEuhMKB2j KPFbMQxi56YO9YMxSYU9iWl2xqpbsCKgDP6AJIGxkH/526PGv46g/iY4B3Hrei3l hcsnGrTKZY/Ylw== -----END CERTIFICATE-----Generated at Sat Dec 6 05:55:08 2025 by rpki-client