This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft File: 9n7U99NVdSgcF2yuPdy9QMxcHdY.mft (raw, json) Hash identifier: 8l05FvC5oWTQX5Wh4yk1sAsBqR8OJQsqNZPsu0gkUyA= Subject key identifier: BB:E4:D5:0D:B2:81:E3:CA:01:CC:09:FA:E0:80:D2:BF:87:82:80:2E Authority key identifier: F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6 Certificate issuer: /CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6 Certificate serial: 019AF0510C1FB9E69B4FA5AB3B126CB18834 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 21:00:34 +0000 Manifest this update: Fri 05 Dec 2025 21:00:34 +0000 Manifest next update: Sat 06 Dec 2025 21:00:34 +0000 Files and hashes: 1: 88-pt2hIN1dTOb7W_yyIcsyIKos.roa (hash: rXxfNXMHY0jcVNFeL7a/dvDj6ZDtDB0GLjdB35wLnIg=) 2: 9n7U99NVdSgcF2yuPdy9QMxcHdY.crl (hash: tJsOHHsOHINudDcuxYSccYeoMJWfX2g+EfEuoddp8js=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:0c:1f:b9:e6:9b:4f:a5:ab:3b:12:6c:b1:88:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f67ed4f7d35575281c176cae3ddcbd40cc5c1dd6 Validity Not Before: Dec 5 21:00:34 2025 GMT Not After : Dec 6 21:00:34 2025 GMT Subject: CN=bbe4d50db281e3ca01cc09fae080d2bf8782802e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:7b:dc:38:ca:c6:36:d7:f2:07:13:e3:a0: e6:3d:7d:9a:96:6b:e5:f0:cf:38:19:c4:76:b0:46: a0:8a:e3:2e:a9:22:6b:65:9c:17:a3:96:e0:a9:4d: 14:00:e9:4c:82:83:b3:7e:e4:b4:d4:84:ca:91:9f: c4:97:1a:55:70:8c:55:8c:8c:5b:42:86:01:ec:d1: 92:cf:d0:1f:f7:b5:60:83:0e:4b:33:33:dd:e1:3b: 28:65:dc:17:96:22:35:e7:93:a4:d1:88:1a:57:72: 47:9e:27:61:7f:86:87:14:7e:9d:8d:4f:6c:3c:f0: 58:2d:fc:6f:ad:82:45:77:bd:67:c8:91:ed:00:0c: f8:d7:a6:95:4b:45:b0:d1:dc:ed:fb:19:1d:4b:35: 19:8b:42:23:01:61:38:5e:63:bd:79:58:82:99:2a: 7e:52:8a:2e:53:af:f0:f6:42:d4:14:49:d8:df:c2: 5b:af:9c:f5:5d:8d:2f:d3:16:47:77:c9:35:fd:03: f4:03:02:79:18:60:4b:78:35:f7:aa:72:f2:91:4a: cf:6f:dd:93:33:3e:09:55:d0:bb:76:f4:59:ed:c6: 39:07:a0:77:4b:7e:a3:f6:80:f0:45:de:c0:f2:de: b7:ea:59:f8:b8:5b:01:08:3d:61:46:a8:43:f5:fb: c0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E4:D5:0D:B2:81:E3:CA:01:CC:09:FA:E0:80:D2:BF:87:82:80:2E X509v3 Authority Key Identifier: keyid:F6:7E:D4:F7:D3:55:75:28:1C:17:6C:AE:3D:DC:BD:40:CC:5C:1D:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9n7U99NVdSgcF2yuPdy9QMxcHdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b62e77-357a-4aad-bb27-f4485aed7429/1/9n7U99NVdSgcF2yuPdy9QMxcHdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:18:a2:9c:56:93:5f:9e:78:30:1d:dd:57:6c:95:da:91:ff: c0:62:a2:05:04:22:3f:f3:25:cd:36:43:1e:dd:85:71:d7:47: 90:99:c2:60:af:e4:93:08:d6:02:5a:e5:ea:f7:d6:fe:f1:71: 5c:6c:7c:c2:88:73:86:53:c9:53:57:b8:5b:8f:09:35:59:c6: 39:0b:f0:ad:11:9a:b0:7c:a8:02:a3:f4:76:f2:bb:be:03:e3: 74:9c:17:de:8e:81:64:cc:49:c4:cb:2a:b0:ed:62:f0:73:f0: 21:d8:69:0b:e7:73:3c:5f:33:6d:15:38:86:79:cb:03:6e:9b: c3:e9:3a:e0:a6:c3:c0:71:df:56:4a:6c:7a:6d:93:2b:bf:60: aa:0a:74:eb:4f:98:e3:b2:3d:fd:40:c0:45:ae:a8:b1:0d:bb: 7b:cb:ed:33:a4:67:1d:ea:ff:5f:cd:67:08:82:c3:3f:a9:77: 85:5b:b4:16:d3:8d:fa:70:71:75:e7:65:96:69:27:21:40:3e: d4:44:18:fc:fe:e7:0a:9e:af:53:bc:5b:10:85:ac:6d:e8:cc: 5f:75:1f:2d:7a:4c:96:fd:85:2f:b0:a9:8b:82:82:64:41:17: 4f:dd:d9:70:9a:83:dc:ff:d7:75:36:42:9c:9c:09:0d:7e:68: 16:5d:bd:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUQwfueabT6WrOxJssYg0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2N2VkNGY3ZDM1NTc1MjgxYzE3NmNhZTNkZGNiZDQwY2M1 YzFkZDYwHhcNMjUxMjA1MjEwMDM0WhcNMjUxMjA2MjEwMDM0WjAzMTEwLwYDVQQD EyhiYmU0ZDUwZGIyODFlM2NhMDFjYzA5ZmFlMDgwZDJiZjg3ODI4MDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUF73DjKxjbX8gcT46DmPX2almvl 8M84GcR2sEagiuMuqSJrZZwXo5bgqU0UAOlMgoOzfuS01ITKkZ/ElxpVcIxVjIxb QoYB7NGSz9Af97Vggw5LMzPd4TsoZdwXliI155Ok0YgaV3JHnidhf4aHFH6djU9s PPBYLfxvrYJFd71nyJHtAAz416aVS0Ww0dzt+xkdSzUZi0IjAWE4XmO9eViCmSp+ UoouU6/w9kLUFEnY38Jbr5z1XY0v0xZHd8k1/QP0AwJ5GGBLeDX3qnLykUrPb92T Mz4JVdC7dvRZ7cY5B6B3S36j9oDwRd7A8t636ln4uFsBCD1hRqhD9fvA8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvk1Q2ygePKAcwJ+uCA0r+HgoAuMB8GA1UdIwQY MBaAFPZ+1PfTVXUoHBdsrj3cvUDMXB3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjct ZjQ0ODVhZWQ3NDI5LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9iNjJlNzctMzU3YS00YWFkLWJiMjctZjQ0ODVhZWQ3NDI5 LzEvOW43VTk5TlZkU2djRjJ5dVBkeTlRTXhjSGRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxRiinFaT X554MB3dV2yV2pH/wGKiBQQiP/MlzTZDHt2FcddHkJnCYK/kkwjWAlrl6vfW/vFx XGx8wohzhlPJU1e4W48JNVnGOQvwrRGasHyoAqP0dvK7vgPjdJwX3o6BZMxJxMsq sO1i8HPwIdhpC+dzPF8zbRU4hnnLA26bw+k64KbDwHHfVkpsem2TK79gqgp060+Y 47I9/UDARa6osQ27e8vtM6RnHer/X81nCILDP6l3hVu0FtON+nBxdedllmknIUA+ 1EQY/P7nCp6vU7xbEIWsbejMX3UfLXpMlv2FL7Cpi4KCZEEXT93ZcJqD3P/XdTZC nJwJDX5oFl29tw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:08:54 2025 by rpki-client