This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft File: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft (raw, json) Hash identifier: pTw1QKt15/LA3JRVVivosDUogJhttN6U/I/BSgDk68U= Subject key identifier: 1C:03:32:12:7F:CD:C9:B9:A8:2C:2A:BF:14:D0:58:04:22:90:22:5B Authority key identifier: F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A Certificate issuer: /CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Certificate serial: 019AF12DA4BAD0B4FDCD4A5A8C5F04B45B94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft Manifest number: 16F1 Signing time: Sat 06 Dec 2025 01:01:31 +0000 Manifest this update: Sat 06 Dec 2025 01:01:31 +0000 Manifest next update: Sun 07 Dec 2025 01:01:31 +0000 Files and hashes: 1: 9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl (hash: 4txsJPwZylgQ4SZa2pjzFs1egaaq+2EwHXmF7Z6L5/I=) 2: xsMFnUirGLrsIHVnOE89k-g_TNQ.roa (hash: +kCjATrNGMNDq1U+j1qAO+cqX9M0j46A6h5U99mLaHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a4:ba:d0:b4:fd:cd:4a:5a:8c:5f:04:b4:5b:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f430d0805f42ffa3bcd0c0b7c550805117923a Validity Not Before: Dec 6 01:01:31 2025 GMT Not After : Dec 7 01:01:31 2025 GMT Subject: CN=1c0332127fcdc9b9a82c2abf14d058042290225b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:17:f8:81:2c:94:b8:f9:3f:a6:cf:a3:83:4d: 36:37:36:0f:e6:68:eb:a0:1b:3a:13:91:ce:8c:42: 7c:7f:cd:06:13:34:4a:56:8c:a1:4a:b5:b7:ea:2b: bd:c4:41:f3:cb:71:da:d2:e6:f5:95:8c:e5:cd:ec: ec:6c:b7:41:12:8d:6f:79:f8:6c:c6:23:94:9e:ab: e1:27:34:8b:9e:d8:1a:ea:43:71:3f:89:3a:ee:a5: 4a:57:2d:d6:17:91:83:41:da:a3:95:2d:93:37:5c: 08:bd:20:6d:f5:ae:66:6b:7b:cd:05:3d:12:24:54: e5:70:1c:ca:2c:38:c0:a4:b1:ff:08:41:c9:de:b5: bf:03:18:72:77:3e:fc:f5:a4:34:33:e7:48:31:36: 61:23:ae:28:b4:66:20:7c:db:67:8d:7f:fc:b7:33: 07:90:8c:6c:64:14:8c:b6:4e:be:be:cd:10:b4:54: df:f8:84:29:4d:37:d7:26:1a:e0:8e:61:64:92:0e: 08:4a:41:08:87:7e:8a:4d:a6:d0:c7:60:be:81:0e: b9:2f:8a:9f:84:c5:46:94:8a:56:d7:c2:0f:1f:f9: 3d:80:41:44:a8:51:3a:bc:82:81:18:8b:43:aa:a9: 76:9f:d0:cb:fd:aa:e8:39:25:3e:83:64:2a:d9:e4: 6d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:03:32:12:7F:CD:C9:B9:A8:2C:2A:BF:14:D0:58:04:22:90:22:5B X509v3 Authority Key Identifier: keyid:F4:F4:30:D0:80:5F:42:FF:A3:BC:D0:C0:B7:C5:50:80:51:17:92:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PQw0IBfQv-jvNDAt8VQgFEXkjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/28bd13-8a3b-4550-9700-f0f93cca2479/1/9PQw0IBfQv-jvNDAt8VQgFEXkjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:d7:c2:2e:3b:08:e3:7c:e1:66:06:da:bf:2b:f5:06:fe:3c: 39:a7:90:15:65:35:31:10:85:6b:69:39:4e:9a:74:4f:4c:cb: 78:13:f0:71:f4:c7:9b:a1:ba:34:cf:ac:f4:e5:14:19:23:a6: 65:c1:29:59:ab:31:69:3a:86:08:46:41:c8:d0:10:ca:cb:0a: 5c:cc:6c:49:4e:48:a1:d6:3d:20:5a:88:3c:63:b2:01:b8:f6: cf:e5:66:14:52:a1:17:91:4f:d1:20:77:7d:c1:83:d8:8c:7c: 65:c0:f7:39:35:ad:be:00:f2:87:15:d8:4d:21:73:ef:77:46: 7d:12:ce:9a:09:7a:5b:49:26:97:a7:aa:92:de:03:40:02:f7: 05:d8:6b:3a:db:77:d0:5f:18:e1:05:a8:51:32:bb:9e:8e:45: 96:20:4b:f4:7b:8b:11:b4:57:13:5f:8c:2d:b9:ca:a9:23:60: 47:26:a1:9f:cf:a9:bd:07:14:e5:58:a1:3a:20:68:80:fe:38: 74:c0:f3:7e:74:86:76:07:32:96:b8:0e:43:c5:e0:e7:0e:3e: f9:fa:56:fb:d4:f7:57:9d:be:6e:dc:44:37:ae:ad:84:f3:7e: 0b:0d:bd:bb:f1:c5:a0:ae:70:ca:25:ec:11:1d:4b:77:ae:0a: 76:c0:7f:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLaS60LT9zUpajF8EtFuUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjQzMGQwODA1ZjQyZmZhM2JjZDBjMGI3YzU1MDgwNTEx NzkyM2EwHhcNMjUxMjA2MDEwMTMxWhcNMjUxMjA3MDEwMTMxWjAzMTEwLwYDVQQD EygxYzAzMzIxMjdmY2RjOWI5YTgyYzJhYmYxNGQwNTgwNDIyOTAyMjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRf4gSyUuPk/ps+jg002NzYP5mjr oBs6E5HOjEJ8f80GEzRKVoyhSrW36iu9xEHzy3Ha0ub1lYzlzezsbLdBEo1vefhs xiOUnqvhJzSLntga6kNxP4k67qVKVy3WF5GDQdqjlS2TN1wIvSBt9a5ma3vNBT0S JFTlcBzKLDjApLH/CEHJ3rW/Axhydz789aQ0M+dIMTZhI64otGYgfNtnjX/8tzMH kIxsZBSMtk6+vs0QtFTf+IQpTTfXJhrgjmFkkg4ISkEIh36KTabQx2C+gQ65L4qf hMVGlIpW18IPH/k9gEFEqFE6vIKBGItDqql2n9DL/aroOSU+g2Qq2eRt2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwDMhJ/zcm5qCwqvxTQWAQikCJbMB8GA1UdIwQY MBaAFPT0MNCAX0L/o7zQwLfFUIBRF5I6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAt ZjBmOTNjY2EyNDc5LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8yOGJkMTMtOGEzYi00NTUwLTk3MDAtZjBmOTNjY2EyNDc5 LzEvOVBRdzBJQmZRdi1qdk5EQXQ4VlFnRkVYa2pvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1tfCLjsI 43zhZgbavyv1Bv48OaeQFWU1MRCFa2k5Tpp0T0zLeBPwcfTHm6G6NM+s9OUUGSOm ZcEpWasxaTqGCEZByNAQyssKXMxsSU5IodY9IFqIPGOyAbj2z+VmFFKhF5FP0SB3 fcGD2Ix8ZcD3OTWtvgDyhxXYTSFz73dGfRLOmgl6W0kml6eqkt4DQAL3BdhrOtt3 0F8Y4QWoUTK7no5FliBL9HuLEbRXE1+MLbnKqSNgRyahn8+pvQcU5VihOiBogP44 dMDzfnSGdgcylrgOQ8Xg5w4++fpW+9T3V52+btxEN66thPN+Cw29u/HFoK5wyiXs ER1Ld64KdsB/3w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:26 2025 by rpki-client