This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft File: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft (raw, json) Hash identifier: TDHcUL5aRRzVAWEHrQ3gQfgCMIcZr6go9/zgtA6OJqQ= Subject key identifier: E9:55:86:FB:38:BC:5B:F9:D5:CB:E8:D1:85:AD:4B:0C:26:E5:1C:FE Authority key identifier: F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38 Certificate issuer: /CN=f68b2f4e668ef0a176a8bd0004e2777670833238 Certificate serial: 019AF1D2514F0A937F63670B1432823F75C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: 1-WLV8VecHIiJX48ZCRXCPnkSV1w.roa (hash: LW+UjxgXYW+oRlL0a5q0N9JKog1QwqgaxgEIN56GOWA=) 2: 9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl (hash: hZhaQcEZaUdtydJ2uzf50dYnT5U99PL6AGB67r0/GT8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:51:4f:0a:93:7f:63:67:0b:14:32:82:3f:75:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f68b2f4e668ef0a176a8bd0004e2777670833238 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=e95586fb38bc5bf9d5cbe8d185ad4b0c26e51cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:0d:df:dc:64:77:90:85:b7:b0:ea:67:1f: 7c:2c:c4:ca:2e:c6:84:e1:a0:60:17:38:b0:a6:47: a5:e4:a8:d1:b1:19:4d:c1:b6:21:ed:29:df:e5:87: af:ea:5b:9e:f5:93:d4:d6:c1:da:2b:5f:a0:86:de: b1:9c:65:0b:44:f8:8d:71:6c:a1:03:a5:0f:73:58: 39:6a:64:a5:5d:d6:58:39:d3:59:d5:4c:3f:39:c7: d4:2b:7b:b5:e7:b7:74:42:c2:e0:23:af:05:ed:3f: 27:ea:83:ac:57:43:99:69:cd:b8:92:db:b4:f2:d5: cb:01:e9:c4:17:50:f8:bc:4b:78:b2:96:83:93:fb: c1:83:ae:ca:1f:45:df:71:c2:a9:43:4c:8b:1b:89: 8d:e0:a9:76:24:ea:0e:d9:8c:b2:91:1a:e8:5e:d6: 00:f6:28:4c:43:1a:b8:03:94:ea:7b:bd:b3:0d:a0: 84:8d:44:ab:95:8d:fb:c5:52:1b:d9:65:8d:39:0e: c7:e3:5d:84:77:e4:9f:d9:d0:a5:33:37:2f:3f:d6: 14:fe:f5:a5:d4:95:00:df:cb:9d:d4:b6:9e:53:91: f8:38:10:48:50:7c:c0:1e:e1:af:cc:a5:c4:3d:ba: 20:14:6b:d5:dc:6f:45:94:36:e5:c4:d3:0e:0e:f5: dd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:55:86:FB:38:BC:5B:F9:D5:CB:E8:D1:85:AD:4B:0C:26:E5:1C:FE X509v3 Authority Key Identifier: keyid:F6:8B:2F:4E:66:8E:F0:A1:76:A8:BD:00:04:E2:77:76:70:83:32:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9osvTmaO8KF2qL0ABOJ3dnCDMjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fdc599-780b-4414-9e2a-52b0775c7cb4/1/9osvTmaO8KF2qL0ABOJ3dnCDMjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:fd:fe:b2:8a:a2:4f:a2:99:b4:bb:a1:0d:bc:da:37:d1: 45:64:23:7f:56:5a:e2:ae:f3:89:fb:f5:5a:05:36:4a:a0:f6: 36:dc:70:2e:f4:44:fb:fd:c1:b0:e8:f1:26:67:ba:65:cf:9e: 97:12:bc:ab:b9:8f:81:55:c9:d0:7f:54:fd:95:76:f3:a7:b9: 95:50:67:fe:10:8b:e5:95:85:80:2d:39:ef:2b:23:5c:b6:db: ec:56:8e:7c:0b:51:87:cd:39:70:87:8b:32:8c:d9:5e:dd:58: 25:2d:7f:ef:f4:8a:fb:4b:a0:c7:f4:20:a1:39:35:3d:71:de: 7b:0d:de:03:ac:71:76:52:10:25:c6:97:1b:30:ff:6b:e8:4e: 00:7b:bb:4b:fa:af:dd:16:96:f8:74:4c:9f:4c:f5:86:7d:7d: 76:04:fb:1a:01:8f:8a:59:e1:ae:6f:53:11:83:e9:a5:84:3d: c0:b4:ed:d8:31:48:0a:63:57:a0:76:16:2a:98:78:6a:a1:7a: dd:62:78:f7:72:f3:7a:83:b5:98:89:05:2d:2e:42:9f:ab:77: b6:f3:36:76:0f:7a:1c:d8:09:c9:3d:bb:20:3f:54:76:cc:4c: cd:5b:b4:64:0b:32:ee:19:52:5a:0c:e1:7b:4c:2a:7e:11:cb: 05:04:fb:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lFPCpN/Y2cLFDKCP3XGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2OGIyZjRlNjY4ZWYwYTE3NmE4YmQwMDA0ZTI3Nzc2NzA4 MzMyMzgwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD EyhlOTU1ODZmYjM4YmM1YmY5ZDVjYmU4ZDE4NWFkNGIwYzI2ZTUxY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQYN39xkd5CFt7DqZx98LMTKLsaE 4aBgFziwpkel5KjRsRlNwbYh7Snf5Yev6lue9ZPU1sHaK1+ght6xnGULRPiNcWyh A6UPc1g5amSlXdZYOdNZ1Uw/OcfUK3u157d0QsLgI68F7T8n6oOsV0OZac24ktu0 8tXLAenEF1D4vEt4spaDk/vBg67KH0XfccKpQ0yLG4mN4Kl2JOoO2YyykRroXtYA 9ihMQxq4A5Tqe72zDaCEjUSrlY37xVIb2WWNOQ7H412Ed+Sf2dClMzcvP9YU/vWl 1JUA38ud1LaeU5H4OBBIUHzAHuGvzKXEPbogFGvV3G9FlDblxNMODvXddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOlVhvs4vFv51cvo0YWtSwwm5Rz+MB8GA1UdIwQY MBaAFPaLL05mjvChdqi9AATid3ZwgzI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEt NTJiMDc3NWM3Y2I0LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9mZGM1OTktNzgwYi00NDE0LTllMmEtNTJiMDc3NWM3Y2I0 LzEvOW9zdlRtYU84S0YycUwwQUJPSjNkbkNETWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4b9/rKK ok+imbS7oQ282jfRRWQjf1Za4q7zifv1WgU2SqD2NtxwLvRE+/3BsOjxJme6Zc+e lxK8q7mPgVXJ0H9U/ZV286e5lVBn/hCL5ZWFgC057ysjXLbb7FaOfAtRh805cIeL MozZXt1YJS1/7/SK+0ugx/QgoTk1PXHeew3eA6xxdlIQJcaXGzD/a+hOAHu7S/qv 3RaW+HRMn0z1hn19dgT7GgGPilnhrm9TEYPppYQ9wLTt2DFICmNXoHYWKph4aqF6 3WJ493LzeoO1mIkFLS5Cn6t3tvM2dg96HNgJyT27ID9UdsxMzVu0ZAsy7hlSWgzh e0wqfhHLBQT7cg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:56:32 2025 by rpki-client