This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: lQmtwA0YBIZf61nB8GW5bbQIZczF4JlCqdvUQk0S4sw= Subject key identifier: 91:33:4F:99:99:49:1E:20:DF:3B:5B:7A:7D:4B:C8:B4:D2:26:82:B8 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019AF19B42FAB617C21BC2D6839BD13D3F67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 0123 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: 4pRecLSQ-xIl4IPEZzRcqIax3-I.roa (hash: H+a8jrfauVXAPTlOBPXoA0IxSm3rMjg8mh86PIxmueU=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: 2Lm5kCqmMv12Yy+r3YROGqi6xytdZ98A1xPsWnCF5Mo=) 3: HS9PpWT4FCSSstlIOFCaEuTYhZA.roa (hash: dTpJ+Vqey+wyIsJCiKM1TfllRZ7B3eMpNoAigDi5hoo=) 4: JNDj7IkhbQ_3xrbEz4uAXQ1Yv3Q.roa (hash: Wl0WwrfiuzHjyAyUMW+l+iPzUUYZzp7CP7Vher9u5s8=) 5: TDs3SCHkSwxi2Xb9E5-5lxldSWA.roa (hash: UmMaqKmCtjb0oErlYVHbczcMBZ32+2r0z5hmDOfKCCM=) 6: V6wlyE81nOSUZZNevO5fwFq_yuI.roa (hash: BJWgiCN26bDpqIeJaukxrOIxIn7K1eaqwr8a29JJlYg=) 7: Y6E3ztUNuP-EkxZVJnP3QMV8f34.roa (hash: 5ZMvfHfzXA3N5iMX/egkwzxlZHE1t5ELeXRMtB3b6GA=) 8: g_xhFlxALcLse_-Oj4PBePBZJnY.roa (hash: ZZWn8HGPLGkcu+1b7mxcw+bmNtXcMX/Z/tSj0BCyotA=) 9: kRIa94MWYWrUOVwjc9XA73SAMOA.roa (hash: CLFC01EOAmxOj0g9Emkl9wa15kGO2yyt+4qXoqbGCJI=) 10: wMrCQWEm2lPKU1aAl1mFhi-JWnE.roa (hash: hT7L1jOf2Ub3XumgetpA4h0Ys4xPjaNTHFtmr8cP4hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:42:fa:b6:17:c2:1b:c2:d6:83:9b:d1:3d:3f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=91334f9999491e20df3b5b7a7d4bc8b4d22682b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:4a:91:4c:21:ae:c3:ba:b9:16:06:c8:97: 2e:fa:7f:7f:19:9e:0e:5a:cf:36:6c:4f:bb:9b:d3: b2:54:d8:09:58:fb:f2:e5:d4:b7:ff:c5:64:0c:8f: 92:89:01:64:86:3f:04:1f:21:47:27:e5:cb:90:f3: ae:3d:c0:63:13:c4:62:cf:d1:c6:23:30:ad:ec:83: c6:55:2d:19:cd:60:d7:3c:6f:68:17:75:fd:e9:e9: 45:6c:c5:13:56:e4:c6:5a:fe:50:02:2d:d1:73:c2: af:b9:2d:c2:e7:ac:d8:ce:a1:a9:7d:04:05:a1:1a: 13:91:51:60:36:cb:b5:2f:60:b6:33:3a:d5:6e:6f: 27:4c:2e:ea:ea:ca:9e:99:43:6a:52:fb:13:98:de: 55:67:33:c9:0b:a7:e1:f8:55:a2:cb:06:8d:25:97: 86:57:3e:0a:e3:f2:2e:22:1e:86:74:97:19:74:18: e2:7b:99:b5:f2:76:0f:b5:9a:38:f4:2f:70:3f:8a: 29:87:44:0b:70:93:c1:7d:e5:bc:7e:40:35:a7:90: 3b:bd:c3:24:c8:48:06:36:84:5f:22:41:71:c0:ce: 85:1b:f1:0d:2f:8c:16:c1:cb:3b:80:be:2d:0e:b1: 3d:09:98:b1:b2:76:72:67:49:12:aa:2f:91:41:0f: e0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:4F:99:99:49:1E:20:DF:3B:5B:7A:7D:4B:C8:B4:D2:26:82:B8 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:5e:a8:a1:f5:eb:65:36:03:14:d3:ef:c3:41:73:d3:5f:41: e3:20:7d:9e:4c:a1:57:65:92:b3:07:64:4e:dd:fa:18:f9:93: 20:93:5e:29:97:97:c6:10:25:2a:7b:6b:8c:21:fa:62:10:38: f1:73:59:85:58:68:b5:ba:c5:2e:72:03:c5:28:9b:e6:4a:f3: 29:85:da:fc:c7:dc:a8:6c:e4:5f:fb:87:48:d9:69:53:83:38: de:fb:c5:c0:ce:8e:4f:95:fc:73:8f:b5:0d:16:e9:7a:47:8d: b2:38:3d:43:23:71:bb:e6:af:ae:62:0b:28:82:fb:79:ba:0c: b4:47:81:d2:ff:1c:ee:57:e9:98:e9:ee:9e:50:b6:9e:18:85: 9a:51:4b:b4:f9:57:b5:67:d6:56:52:01:25:80:36:d3:cc:9b: 38:01:8f:8b:b0:e3:57:02:06:ab:66:d0:b5:dc:ab:95:01:74: 73:fa:ff:7f:54:56:de:9e:1a:eb:38:e0:cf:63:12:63:92:92: e1:ee:b2:ff:21:b2:db:c1:8c:bc:5d:57:cf:6d:49:ce:3e:80: 72:fb:a2:e5:1b:8d:cf:4a:55:b5:b5:91:e2:51:3d:f9:57:46: f1:17:1c:42:92:90:a8:1f:9f:cd:92:01:f0:27:49:80:3a:b1: 99:19:ab:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0L6thfCG8LWg5vRPT9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD Eyg5MTMzNGY5OTk5NDkxZTIwZGYzYjViN2E3ZDRiYzhiNGQyMjY4MmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy9KkUwhrsO6uRYGyJcu+n9/GZ4O Ws82bE+7m9OyVNgJWPvy5dS3/8VkDI+SiQFkhj8EHyFHJ+XLkPOuPcBjE8Riz9HG IzCt7IPGVS0ZzWDXPG9oF3X96elFbMUTVuTGWv5QAi3Rc8KvuS3C56zYzqGpfQQF oRoTkVFgNsu1L2C2MzrVbm8nTC7q6sqemUNqUvsTmN5VZzPJC6fh+FWiywaNJZeG Vz4K4/IuIh6GdJcZdBjie5m18nYPtZo49C9wP4oph0QLcJPBfeW8fkA1p5A7vcMk yEgGNoRfIkFxwM6FG/ENL4wWwcs7gL4tDrE9CZixsnZyZ0kSqi+RQQ/gywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJEzT5mZSR4g3ztben1LyLTSJoK4MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArl6oofXr ZTYDFNPvw0Fz019B4yB9nkyhV2WSswdkTt36GPmTIJNeKZeXxhAlKntrjCH6YhA4 8XNZhVhotbrFLnIDxSib5krzKYXa/MfcqGzkX/uHSNlpU4M43vvFwM6OT5X8c4+1 DRbpekeNsjg9QyNxu+avrmILKIL7eboMtEeB0v8c7lfpmOnunlC2nhiFmlFLtPlX tWfWVlIBJYA208ybOAGPi7DjVwIGq2bQtdyrlQF0c/r/f1RW3p4a6zjgz2MSY5KS 4e6y/yGy28GMvF1Xz21Jzj6Acvui5RuNz0pVtbWR4lE9+VdG8RccQpKQqB+fzZIB 8CdJgDqxmRmr+A== -----END CERTIFICATE-----Generated at Sat Dec 6 10:14:30 2025 by rpki-client