This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft File: 9QtrQlYAolptwTLeUUeX4qpLAkc.mft (raw, json) Hash identifier: YUuk/yYd6accCZB3Ccz/h3EUIT6RVR5aEPE81jymWGg= Subject key identifier: 67:39:6F:0E:32:DC:77:F1:3B:B7:0F:C1:4C:B8:D0:31:16:86:C8:FD Authority key identifier: F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47 Certificate issuer: /CN=f50b6b425600a25a6dc132de514797e2aa4b0247 Certificate serial: 019AF23F6B570D92448BC39CAEABA9ECD3E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:00:33 +0000 Manifest this update: Sat 06 Dec 2025 06:00:33 +0000 Manifest next update: Sun 07 Dec 2025 06:00:33 +0000 Files and hashes: 1: 9QtrQlYAolptwTLeUUeX4qpLAkc.crl (hash: xy/JXgyZWBgrsE15ft+YGJOwXFNssNonlZkxJxh5Kv8=) 2: LF_3HwZmRrCki2d-FP5TfnY-Yfo.roa (hash: OqUUHUSkyKdGpgaBU1hHW7IYtyTJfajGz9ID3t644ac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6b:57:0d:92:44:8b:c3:9c:ae:ab:a9:ec:d3:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f50b6b425600a25a6dc132de514797e2aa4b0247 Validity Not Before: Dec 6 06:00:33 2025 GMT Not After : Dec 7 06:00:33 2025 GMT Subject: CN=67396f0e32dc77f13bb70fc14cb8d0311686c8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:41:25:18:b7:ff:b1:42:d9:14:03:ba:b8:d1: 1a:3b:2a:fc:b6:00:c7:7f:bd:5b:42:10:1e:6f:ae: 43:25:99:90:b2:2f:bb:34:13:c5:54:f7:8d:6f:48: 61:53:93:80:e4:3a:69:fa:24:db:0f:f8:9c:13:bf: e0:ea:e8:e5:bf:88:ff:57:05:9b:a9:9b:e9:1f:d3: 76:b6:4d:43:43:3c:bc:10:a6:f7:9b:85:6a:80:d4: 91:7d:4c:08:f3:e4:a0:e3:ed:6a:e4:95:14:c9:e3: 56:a5:ee:42:35:85:20:9f:12:4b:7b:12:56:cb:96: f7:d0:78:cf:05:ee:d0:8f:db:e8:da:b3:41:e9:5e: 7a:56:a9:39:72:3a:b1:0c:39:92:00:bb:24:3e:45: 42:83:5f:15:94:63:51:42:4c:07:98:b7:79:74:27: 19:3e:f5:cd:83:d6:8c:49:5d:78:77:a8:ad:63:24: 0e:d6:99:28:ba:c1:0d:75:75:cb:4d:5e:b1:4a:49: 84:1f:31:b9:f7:bc:68:21:46:3e:d7:d8:5f:f7:dc: 83:d6:da:b0:8d:96:a6:1a:5c:38:7c:cf:55:13:fc: 40:8b:78:3c:8f:96:bd:5c:a6:e6:78:5a:ef:de:91: 10:fd:d8:b5:0e:b9:91:ac:2f:ef:95:dc:3f:2c:c6: 56:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:39:6F:0E:32:DC:77:F1:3B:B7:0F:C1:4C:B8:D0:31:16:86:C8:FD X509v3 Authority Key Identifier: keyid:F5:0B:6B:42:56:00:A2:5A:6D:C1:32:DE:51:47:97:E2:AA:4B:02:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QtrQlYAolptwTLeUUeX4qpLAkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a9fcc9-67b2-44d6-b566-100f84fe950c/1/9QtrQlYAolptwTLeUUeX4qpLAkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:16:40:d1:0c:d6:26:b1:d3:eb:77:b3:b5:70:a5:23:4b:36: 93:cd:18:7e:4b:e3:b1:af:ce:1d:70:66:c8:d2:3f:4a:f8:e0: ef:af:6a:e2:e2:0f:e8:b6:0a:56:cb:b1:4a:e7:f4:23:8a:2b: cc:e4:f8:8e:5a:bb:39:1b:33:8e:d4:0f:0d:9e:14:2a:4c:5f: 60:a7:e7:91:2e:98:d1:e7:6e:0f:1c:d1:a4:ad:f9:16:74:de: f3:7e:a5:ce:88:9a:e5:d5:30:11:41:28:a8:98:19:59:f8:80: 94:d7:5d:be:e7:f9:19:d7:ff:3b:0e:b0:ac:29:a3:56:0b:1e: 74:db:73:2c:b9:86:a6:18:f5:b6:2a:ec:ab:2f:e8:62:b0:e0: de:42:59:10:e5:1c:7b:88:d9:09:b6:8c:17:c6:30:33:5f:be: d9:cb:6e:f4:01:be:5b:aa:3e:a2:d7:21:81:a4:38:a0:55:fe: 66:88:50:20:ac:48:5e:05:aa:67:dd:60:e9:75:5f:4a:18:57: 69:48:a6:1c:6d:68:7b:9f:b7:f5:2b:3b:54:36:33:63:5d:7a: 70:58:57:ac:30:60:35:70:71:93:ee:a5:80:55:0a:71:07:fd: 11:19:0b:bd:68:2c:30:c6:16:f9:de:77:90:4d:39:5a:ec:c8: b6:08:f2:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP2tXDZJEi8Ocrqup7NPjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MGI2YjQyNTYwMGEyNWE2ZGMxMzJkZTUxNDc5N2UyYWE0 YjAyNDcwHhcNMjUxMjA2MDYwMDMzWhcNMjUxMjA3MDYwMDMzWjAzMTEwLwYDVQQD Eyg2NzM5NmYwZTMyZGM3N2YxM2JiNzBmYzE0Y2I4ZDAzMTE2ODZjOGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7UElGLf/sULZFAO6uNEaOyr8tgDH f71bQhAeb65DJZmQsi+7NBPFVPeNb0hhU5OA5Dpp+iTbD/icE7/g6ujlv4j/VwWb qZvpH9N2tk1DQzy8EKb3m4VqgNSRfUwI8+Sg4+1q5JUUyeNWpe5CNYUgnxJLexJW y5b30HjPBe7Qj9vo2rNB6V56Vqk5cjqxDDmSALskPkVCg18VlGNRQkwHmLd5dCcZ PvXNg9aMSV14d6itYyQO1pkousENdXXLTV6xSkmEHzG597xoIUY+19hf99yD1tqw jZamGlw4fM9VE/xAi3g8j5a9XKbmeFrv3pEQ/di1DrmRrC/vldw/LMZWuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGc5bw4y3HfxO7cPwUy40DEWhsj9MB8GA1UdIwQY MBaAFPULa0JWAKJabcEy3lFHl+KqSwJHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYt MTAwZjg0ZmU5NTBjLzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hOWZjYzktNjdiMi00NGQ2LWI1NjYtMTAwZjg0ZmU5NTBj LzEvOVF0clFsWUFvbHB0d1RMZVVVZVg0cXBMQWtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxZA0QzW JrHT63eztXClI0s2k80Yfkvjsa/OHXBmyNI/Svjg769q4uIP6LYKVsuxSuf0I4or zOT4jlq7ORszjtQPDZ4UKkxfYKfnkS6Y0eduDxzRpK35FnTe836lzoia5dUwEUEo qJgZWfiAlNddvuf5Gdf/Ow6wrCmjVgsedNtzLLmGphj1tirsqy/oYrDg3kJZEOUc e4jZCbaMF8YwM1++2ctu9AG+W6o+otchgaQ4oFX+ZohQIKxIXgWqZ91g6XVfShhX aUimHG1oe5+39Ss7VDYzY116cFhXrDBgNXBxk+6lgFUKcQf9ERkLvWgsMMYW+d53 kE05WuzItgjyKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:20:50 2025 by rpki-client