This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft File: 9PjslsjuJlw9pCMjClUhk2bdmyg.mft (raw, json) Hash identifier: PerQNISUvyQ/72FuTh8yE7PF34oahLrFsqr/XuIf5Yc= Subject key identifier: 86:C6:0A:94:5A:37:DE:71:78:F3:0C:FB:04:C9:3E:80:F5:91:30:52 Authority key identifier: F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 Certificate issuer: /CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Certificate serial: 019AF49BD95016B133D63B3175355A7D0A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft Manifest number: 0BDD Signing time: Sat 06 Dec 2025 17:00:45 +0000 Manifest this update: Sat 06 Dec 2025 17:00:45 +0000 Manifest next update: Sun 07 Dec 2025 17:00:45 +0000 Files and hashes: 1: 9PjslsjuJlw9pCMjClUhk2bdmyg.crl (hash: XSugHuwXJX+3HdY65RIEce5aZIrlt3iwIeMiEuG1NmE=) 2: KtAzNYXVImWMGMH8A6HLsIQbFYc.roa (hash: ltDvt7Ps4IWIzfc/uVIIbjH4kHjztdeIqznwfwNq8iY=) 3: X7mQYJCLCkSBMPn_lrSoI8KIXAY.roa (hash: qkjXPDtCPdPuWts7n2uaYetfDj2xIXD2HuaNsodcZ5o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:d9:50:16:b1:33:d6:3b:31:75:35:5a:7d:0a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f8ec96c8ee265c3da423230a55219366dd9b28 Validity Not Before: Dec 6 17:00:45 2025 GMT Not After : Dec 7 17:00:45 2025 GMT Subject: CN=86c60a945a37de7178f30cfb04c93e80f5913052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:16:9e:85:6a:b7:e4:26:5c:37:8a:72:42:70: f9:d2:2b:8f:86:cb:0f:ad:ae:6f:46:65:39:cd:8f: 7d:85:f9:fc:9f:fc:c7:c5:31:a2:7b:00:7d:20:93: 4d:ee:e1:a2:f8:18:f6:ac:7d:fc:f8:83:99:26:5b: 4d:94:d9:10:0f:7b:17:31:cd:da:24:dd:1b:48:19: 49:3e:4e:84:58:95:14:65:f9:fc:ea:9a:3b:0e:b8: 4a:b0:14:ba:23:0d:69:e2:c6:d8:1a:0d:19:bd:19: 23:27:cb:82:07:e3:69:c0:2b:98:8c:00:ae:09:11: 62:93:4d:94:c3:0a:a6:a1:a4:0d:c5:07:46:f7:8b: 86:71:27:ea:e6:57:7e:61:07:44:a0:ed:3b:49:3f: 21:cd:db:8b:ee:2a:ab:0e:22:c0:ff:ec:d5:d0:38: 72:53:e8:0d:5a:2d:23:74:0a:8d:ba:72:a6:03:87: cd:f2:b4:7d:94:f7:0e:18:22:27:27:cd:ae:d8:e7: ba:f3:8b:f8:22:98:7f:66:21:99:92:db:26:f2:ec: 85:50:5c:87:2a:77:27:66:56:01:16:60:53:de:9f: b9:4a:0e:86:89:db:c0:88:42:c4:cf:1b:62:e8:7f: 4a:f7:1c:39:c6:3a:d0:40:20:32:e3:a9:98:6a:01: 8f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C6:0A:94:5A:37:DE:71:78:F3:0C:FB:04:C9:3E:80:F5:91:30:52 X509v3 Authority Key Identifier: keyid:F4:F8:EC:96:C8:EE:26:5C:3D:A4:23:23:0A:55:21:93:66:DD:9B:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PjslsjuJlw9pCMjClUhk2bdmyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9159db-6173-408c-8e1b-8d498827f45c/1/9PjslsjuJlw9pCMjClUhk2bdmyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:93:7c:16:23:91:15:a1:6b:a2:ea:9b:64:ae:5a:b7:a0:c8: c5:ce:1a:c3:05:18:bb:0e:11:c8:df:03:bd:fa:e2:d0:3f:21: 6d:62:d4:02:13:d7:b4:39:91:a2:29:e8:8f:28:d0:8e:d6:1a: bd:a8:fd:9d:48:e6:f6:6f:8f:23:97:b2:16:21:cf:f9:e4:93: c5:0f:80:94:c6:33:0f:67:5d:93:0f:44:ac:27:22:0c:14:4d: 54:d7:80:d0:68:19:c0:bf:6b:dc:2f:02:a8:3f:23:07:98:bc: 77:a9:e9:6f:81:c6:74:35:18:89:7e:82:53:fc:18:3f:0f:fd: 89:5d:d0:bc:7e:d4:f2:17:44:a0:51:15:d8:69:a9:6f:7f:c2: cf:62:14:0f:e0:ea:e8:4c:8d:aa:ea:2b:8a:fb:ef:9c:6a:59: bb:d9:02:f6:cf:fa:eb:75:aa:ff:ca:1e:00:4a:9e:de:92:92: d6:e6:d7:45:6e:0b:9d:c3:12:c2:99:70:63:81:00:5a:85:9c: 4e:d8:81:74:e2:88:e8:30:a5:99:04:d2:df:e9:6c:be:60:fb: 11:0a:a6:af:85:61:1a:e8:7b:1e:ed:29:54:8d:66:f9:ed:da: 5c:c9:a5:d5:fd:8b:4e:19:d8:e2:e6:d1:05:99:d5:b2:c1:f2: 65:0b:83:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m9lQFrEz1jsxdTVafQp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjhlYzk2YzhlZTI2NWMzZGE0MjMyMzBhNTUyMTkzNjZk ZDliMjgwHhcNMjUxMjA2MTcwMDQ1WhcNMjUxMjA3MTcwMDQ1WjAzMTEwLwYDVQQD Eyg4NmM2MGE5NDVhMzdkZTcxNzhmMzBjZmIwNGM5M2U4MGY1OTEzMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBaehWq35CZcN4pyQnD50iuPhssP ra5vRmU5zY99hfn8n/zHxTGiewB9IJNN7uGi+Bj2rH38+IOZJltNlNkQD3sXMc3a JN0bSBlJPk6EWJUUZfn86po7DrhKsBS6Iw1p4sbYGg0ZvRkjJ8uCB+NpwCuYjACu CRFik02UwwqmoaQNxQdG94uGcSfq5ld+YQdEoO07ST8hzduL7iqrDiLA/+zV0Dhy U+gNWi0jdAqNunKmA4fN8rR9lPcOGCInJ82u2Oe684v4Iph/ZiGZktsm8uyFUFyH KncnZlYBFmBT3p+5Sg6GidvAiELEzxti6H9K9xw5xjrQQCAy46mYagGPMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbGCpRaN95xePMM+wTJPoD1kTBSMB8GA1UdIwQY MBaAFPT47JbI7iZcPaQjIwpVIZNm3ZsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWIt OGQ0OTg4MjdmNDVjLzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS85MTU5ZGItNjE3My00MDhjLThlMWItOGQ0OTg4MjdmNDVj LzEvOVBqc2xzanVKbHc5cENNakNsVWhrMmJkbXlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5N8FiOR FaFrouqbZK5at6DIxc4awwUYuw4RyN8Dvfri0D8hbWLUAhPXtDmRoinojyjQjtYa vaj9nUjm9m+PI5eyFiHP+eSTxQ+AlMYzD2ddkw9ErCciDBRNVNeA0GgZwL9r3C8C qD8jB5i8d6npb4HGdDUYiX6CU/wYPw/9iV3QvH7U8hdEoFEV2Gmpb3/Cz2IUD+Dq 6EyNquorivvvnGpZu9kC9s/663Wq/8oeAEqe3pKS1ubXRW4LncMSwplwY4EAWoWc TtiBdOKI6DClmQTS3+lsvmD7EQqmr4VhGuh7Hu0pVI1m+e3aXMml1f2LThnY4ubR BZnVssHyZQuDKg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:36:10 2025 by rpki-client