This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft File: 9XvH8urwyvppvuX6vmcSK0Nj_nI.mft (raw, json) Hash identifier: x3jJM/xFDnI0SDOCjfrpXGdX9eB8/S11/cgAsk3fpCw= Subject key identifier: 20:A4:36:2F:27:A1:4B:04:3D:C0:40:76:BB:79:18:36:DD:6B:B5:CC Authority key identifier: F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 Certificate issuer: /CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Certificate serial: 019B2B54001F7D411E02FEA06D3B315755CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft Manifest number: 1780 Signing time: Wed 17 Dec 2025 08:01:23 +0000 Manifest this update: Wed 17 Dec 2025 08:01:23 +0000 Manifest next update: Thu 18 Dec 2025 08:01:23 +0000 Files and hashes: 1: 9XvH8urwyvppvuX6vmcSK0Nj_nI.crl (hash: F5aoVQMzocLRwmMTG9eF7JKTjRvj/8F8YPPbb18gYDY=) 2: KNQf97WzItrOYioPwLu-Tdh4fNc.roa (hash: RIjtWc8dl547OecCvbWgp63AohvHeAGZkMZVo9/tFEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:54:00:1f:7d:41:1e:02:fe:a0:6d:3b:31:57:55:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f57bc7f2eaf0cafa69bee5fabe67122b4363fe72 Validity Not Before: Dec 17 08:01:23 2025 GMT Not After : Dec 18 08:01:23 2025 GMT Subject: CN=20a4362f27a14b043dc04076bb791836dd6bb5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:a3:45:e1:8b:41:51:83:ba:ec:bf:f9:e3: 87:ec:dd:ca:c4:c5:dc:f0:87:3a:7b:d0:99:e7:40: 39:b8:b0:90:27:0b:29:b2:3f:59:aa:8c:c0:b4:20: 4d:6c:d3:a5:4b:7b:67:c4:62:1c:cc:92:af:bb:d3: 96:5a:85:02:f5:b5:41:8a:d7:76:1e:13:d2:9a:84: b7:e8:79:2b:17:d3:6e:23:70:00:66:fc:24:1e:0e: 40:14:05:21:04:fe:8c:95:5f:dc:ee:a8:c8:db:b0: 4b:51:c5:fc:f0:e0:1f:05:04:68:5f:03:16:da:e1: d2:ed:1b:b9:73:24:b8:fb:5e:06:96:ff:ab:ce:50: c7:c9:78:f4:c7:91:82:dd:9d:cf:2a:6b:cc:b0:7b: 71:fe:48:25:e2:ce:d5:01:8e:1d:8e:8c:9a:2c:3c: 0b:f3:36:81:c5:70:32:a9:11:86:6c:f5:90:92:18: 2b:cb:e8:49:54:66:bb:6d:eb:aa:83:20:29:27:9d: 23:5b:cf:7d:7a:2b:e1:09:c1:c5:f7:75:8c:77:67: 7e:ff:ba:e5:1a:2f:13:9b:77:23:1c:4d:1c:fd:9e: fd:95:8c:c5:ad:90:a6:50:1e:76:a1:13:58:2c:69: e3:d8:fe:38:9b:87:17:aa:5f:6b:84:b0:2f:58:a3: 8f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A4:36:2F:27:A1:4B:04:3D:C0:40:76:BB:79:18:36:DD:6B:B5:CC X509v3 Authority Key Identifier: keyid:F5:7B:C7:F2:EA:F0:CA:FA:69:BE:E5:FA:BE:67:12:2B:43:63:FE:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XvH8urwyvppvuX6vmcSK0Nj_nI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4441b4-f981-4c26-9b99-1010473f4fe8/1/9XvH8urwyvppvuX6vmcSK0Nj_nI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:8c:bc:7c:c2:fc:71:fb:f2:24:87:76:d0:df:57:68:ea:b6: ae:6d:c4:e6:2c:6d:4e:d6:05:b9:a9:c6:a2:da:bb:ce:7a:b6: 1c:0f:09:30:17:16:4d:b6:a4:c0:f0:df:b5:09:0f:1c:1b:71: 34:b2:bf:3c:59:78:1a:da:0e:7e:89:86:23:e3:b1:87:63:16: 18:00:f6:2f:9c:df:0f:c9:ab:f3:18:2e:10:2b:33:88:41:54: d0:6e:cb:de:53:7a:ce:99:8d:f4:49:11:7d:81:86:b2:60:7b: 3b:18:74:d6:1f:75:d7:92:5e:32:2f:b9:a6:cc:fb:31:a7:2f: 95:8b:44:71:4d:3d:84:0d:40:e7:76:df:95:cf:36:df:a9:ab: 10:f2:3d:3c:04:9c:f3:a1:20:b3:ac:b5:db:09:c3:81:af:9e: 6b:11:4a:9a:c2:f8:79:4a:12:50:d3:7e:20:7c:84:db:ae:88: ff:fd:e2:9c:5e:ab:79:a7:65:e2:5f:f2:f2:2e:05:3b:cd:62: e6:66:7c:9b:d1:26:0b:84:c1:b7:41:ac:c9:5a:eb:e7:d4:54: e3:64:ac:c6:2a:7b:b9:c3:93:c8:d6:dc:b3:66:71:e5:20:ca: 27:12:e5:6e:a0:d5:26:66:f5:84:f9:f2:1a:61:d7:fb:e5:2c: 18:19:5d:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrVAAffUEeAv6gbTsxV1XPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1N2JjN2YyZWFmMGNhZmE2OWJlZTVmYWJlNjcxMjJiNDM2 M2ZlNzIwHhcNMjUxMjE3MDgwMTIzWhcNMjUxMjE4MDgwMTIzWjAzMTEwLwYDVQQD EygyMGE0MzYyZjI3YTE0YjA0M2RjMDQwNzZiYjc5MTgzNmRkNmJiNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX2jReGLQVGDuuy/+eOH7N3KxMXc 8Ic6e9CZ50A5uLCQJwspsj9ZqozAtCBNbNOlS3tnxGIczJKvu9OWWoUC9bVBitd2 HhPSmoS36HkrF9NuI3AAZvwkHg5AFAUhBP6MlV/c7qjI27BLUcX88OAfBQRoXwMW 2uHS7Ru5cyS4+14Glv+rzlDHyXj0x5GC3Z3PKmvMsHtx/kgl4s7VAY4djoyaLDwL 8zaBxXAyqRGGbPWQkhgry+hJVGa7beuqgyApJ50jW899eivhCcHF93WMd2d+/7rl Gi8Tm3cjHE0c/Z79lYzFrZCmUB52oRNYLGnj2P44m4cXql9rhLAvWKOPSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCkNi8noUsEPcBAdrt5GDbda7XMMB8GA1UdIwQY MBaAFPV7x/Lq8Mr6ab7l+r5nEitDY/5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTkt MTAxMDQ3M2Y0ZmU4LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy80NDQxYjQtZjk4MS00YzI2LTliOTktMTAxMDQ3M2Y0ZmU4 LzEvOVh2SDh1cnd5dnBwdnVYNnZtY1NLME5qX25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAIy8fML8 cfvyJId20N9XaOq2rm3E5ixtTtYFuanGotq7znq2HA8JMBcWTbakwPDftQkPHBtx NLK/PFl4GtoOfomGI+Oxh2MWGAD2L5zfD8mr8xguECsziEFU0G7L3lN6zpmN9EkR fYGGsmB7Oxh01h9115JeMi+5psz7MacvlYtEcU09hA1A53bflc8236mrEPI9PASc 86Egs6y12wnDga+eaxFKmsL4eUoSUNN+IHyE266I//3inF6readl4l/y8i4FO81i 5mZ8m9EmC4TBt0GsyVrr59RU42Ssxip7ucOTyNbcs2Zx5SDKJxLlbqDVJmb1hPny GmHX++UsGBldTg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:13:00 2025 by rpki-client