This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft File: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft (raw, json) Hash identifier: bNuFY0GW5FQiSfS4TqdOork3eSNOMbi33+7iGQ3T21E= Subject key identifier: 01:83:75:2C:23:97:1B:D5:B2:1B:E6:50:78:50:BF:5B:DD:DC:9D:73 Authority key identifier: F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 Certificate issuer: /CN=f4b207ef8024244bbb4a0106af19270150c9f624 Certificate serial: 019AF49C27EBBCF1B9D77EBD2736ACA2FA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft Manifest number: 06DA Signing time: Sat 06 Dec 2025 17:01:05 +0000 Manifest this update: Sat 06 Dec 2025 17:01:05 +0000 Manifest next update: Sun 07 Dec 2025 17:01:05 +0000 Files and hashes: 1: 7DAxFJT5VyzcSgHTnJmDdUKxQNw.roa (hash: 37ijJqs68GCjjpypVGN9wvpiuMLosaLv3KKoBIsmUtU=) 2: 9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl (hash: Joa0hBWOe6dV4HRleBAPYTlhlxz4X4x/Es/XdWrA+pg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:27:eb:bc:f1:b9:d7:7e:bd:27:36:ac:a2:fa:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b207ef8024244bbb4a0106af19270150c9f624 Validity Not Before: Dec 6 17:01:05 2025 GMT Not After : Dec 7 17:01:05 2025 GMT Subject: CN=0183752c23971bd5b21be6507850bf5bdddc9d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:4a:e6:7e:53:a7:66:f8:7d:93:d1:3d:a9:29: f7:f8:b6:f4:28:f6:2a:ab:7b:57:d0:8e:57:9c:7d: 60:d1:fc:89:5c:6c:f0:63:1b:7c:11:62:9f:4a:b9: 62:3a:3a:af:17:22:f3:3d:07:ec:c8:32:87:37:1d: 17:77:57:8d:92:f8:57:be:e3:1f:f4:69:7d:97:95: 82:60:de:57:90:d4:50:b3:91:2f:e7:92:5c:7d:24: 71:cd:01:ae:ef:7e:7a:b0:4b:6f:44:27:75:f0:85: da:18:b8:1d:0d:1b:44:32:de:c4:7a:7b:d0:34:7a: 14:23:04:2e:74:92:06:a2:35:ef:53:00:bf:d0:c4: 69:23:f4:80:1a:34:6b:7b:d7:a6:57:ed:2b:e5:8e: 3b:29:0d:7f:03:f1:7e:76:8b:2d:10:f0:f2:ff:d2: 53:49:2d:6b:40:90:77:dd:b6:1f:fa:44:87:51:1b: 54:9c:52:d5:d4:32:5e:15:6d:df:0a:c6:a5:a8:ba: f2:3f:45:93:e5:df:99:75:30:b2:0e:d7:eb:eb:11: af:92:1c:34:88:27:63:b8:f5:ce:dd:04:3c:99:b5: b7:89:cd:39:63:27:ae:fb:12:84:91:c2:38:22:96: 50:14:b7:c4:bd:eb:46:7b:cd:f1:48:4d:47:1e:72: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:83:75:2C:23:97:1B:D5:B2:1B:E6:50:78:50:BF:5B:DD:DC:9D:73 X509v3 Authority Key Identifier: keyid:F4:B2:07:EF:80:24:24:4B:BB:4A:01:06:AF:19:27:01:50:C9:F6:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LIH74AkJEu7SgEGrxknAVDJ9iQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/8bf256-d96f-4500-b13c-35e069348eb3/1/9LIH74AkJEu7SgEGrxknAVDJ9iQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:39:1c:87:0b:25:39:39:72:b7:d0:88:cf:12:03:bf:8a:0f: 98:5d:f5:6d:be:b6:a9:ab:31:e6:7c:88:2c:28:a0:bc:95:6e: 10:68:4b:2f:72:bf:14:5f:0a:f0:2c:be:4b:f4:9a:c8:ec:21: 4c:df:6b:7d:a3:0c:9f:f7:35:c0:bb:ec:06:63:36:94:72:a0: 14:12:bd:89:9f:c2:2b:29:14:ce:86:79:1a:86:d8:fe:e9:bc: 10:73:29:5c:aa:cf:f2:01:76:f5:b2:79:2c:0d:65:14:02:da: ae:5c:37:db:ef:c2:39:3b:19:3e:48:b2:35:2d:9b:08:ec:96: 75:8e:bc:c3:6b:a8:82:f6:24:9d:44:e4:ec:db:0e:c4:5b:9c: 7d:4d:c6:5a:e9:f2:d5:bc:95:c4:f7:67:9d:ca:3f:e5:5d:aa: 95:50:80:58:38:33:a3:04:99:8c:fa:fa:46:72:fd:5c:d4:ba: e2:ed:bf:95:53:f4:97:7f:ef:40:16:12:1a:2d:26:6c:0c:8e: b8:48:79:a4:fc:ed:7f:dd:1b:a1:0c:be:e6:46:a1:73:56:e5: ad:c7:ba:d5:88:ac:60:74:68:e9:bd:56:4e:e1:ab:72:74:79: 9f:e6:42:68:74:26:09:00:8a:8a:46:b6:bb:00:18:14:a9:de: 7c:8e:f1:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nCfrvPG51369JzasovqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YjIwN2VmODAyNDI0NGJiYjRhMDEwNmFmMTkyNzAxNTBj OWY2MjQwHhcNMjUxMjA2MTcwMTA1WhcNMjUxMjA3MTcwMTA1WjAzMTEwLwYDVQQD EygwMTgzNzUyYzIzOTcxYmQ1YjIxYmU2NTA3ODUwYmY1YmRkZGM5ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20rmflOnZvh9k9E9qSn3+Lb0KPYq q3tX0I5XnH1g0fyJXGzwYxt8EWKfSrliOjqvFyLzPQfsyDKHNx0Xd1eNkvhXvuMf 9Gl9l5WCYN5XkNRQs5Ev55JcfSRxzQGu7356sEtvRCd18IXaGLgdDRtEMt7EenvQ NHoUIwQudJIGojXvUwC/0MRpI/SAGjRre9emV+0r5Y47KQ1/A/F+dostEPDy/9JT SS1rQJB33bYf+kSHURtUnFLV1DJeFW3fCsalqLryP0WT5d+ZdTCyDtfr6xGvkhw0 iCdjuPXO3QQ8mbW3ic05Yyeu+xKEkcI4IpZQFLfEvetGe83xSE1HHnJUwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGDdSwjlxvVshvmUHhQv1vd3J1zMB8GA1UdIwQY MBaAFPSyB++AJCRLu0oBBq8ZJwFQyfYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2Mt MzVlMDY5MzQ4ZWIzLzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS84YmYyNTYtZDk2Zi00NTAwLWIxM2MtMzVlMDY5MzQ4ZWIz LzEvOUxJSDc0QWtKRXU3U2dFR3J4a25BVkRKOWlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTkchwsl OTlyt9CIzxIDv4oPmF31bb62qasx5nyILCigvJVuEGhLL3K/FF8K8Cy+S/SayOwh TN9rfaMMn/c1wLvsBmM2lHKgFBK9iZ/CKykUzoZ5GobY/um8EHMpXKrP8gF29bJ5 LA1lFALarlw32+/COTsZPkiyNS2bCOyWdY68w2uogvYknUTk7NsOxFucfU3GWuny 1byVxPdnnco/5V2qlVCAWDgzowSZjPr6RnL9XNS64u2/lVP0l3/vQBYSGi0mbAyO uEh5pPztf90boQy+5kahc1blrce61YisYHRo6b1WTuGrcnR5n+ZCaHQmCQCKika2 uwAYFKnefI7xFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:24:33 2025 by rpki-client