This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft File: m9bIYDQsx5nCgHT2mXaKjsvapS4.mft (raw, json) Hash identifier: vsoC1Wcorpfc53x78p6mQsM934Srnz65jryJXeRdAjg= Subject key identifier: 94:22:95:A0:6F:20:31:09:DD:91:FE:66:29:68:44:56:85:7F:60:8D Authority key identifier: 9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E Certificate issuer: /CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Certificate serial: 019AF208ED6E3F110A8AA060C93820340591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft Manifest number: 1508 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: E9yjq7sNmTyPb-NC6kzqBRLzrkw.roa (hash: Fv8DNDjTn+xqZTnmPhsaO+M3G5osAwVvGy2YaFQtoP4=) 2: m9bIYDQsx5nCgHT2mXaKjsvapS4.crl (hash: jhE/Mt4N5dGVYuoRoxYBCq6tvopgE7020YEX+F5QwDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:6e:3f:11:0a:8a:a0:60:c9:38:20:34:05:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bd6c860342cc799c28074f699768a8ecbdaa52e Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=942295a06f203109dd91fe6629684456857f608d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e0:9d:37:70:48:a7:7c:a1:45:db:9d:de:c7: d6:05:05:26:7d:25:29:52:af:6d:b6:a4:be:f5:95: 53:a1:e3:b2:7c:cb:bb:a1:29:ce:e4:16:c1:fb:d0: f3:ab:29:7c:33:1f:c1:7e:09:ff:fb:c7:3e:4e:22: aa:70:cb:97:c0:e3:6c:6b:44:ee:77:36:5b:81:83: fc:8c:e0:2f:c1:d3:54:26:56:cf:57:45:3b:41:47: e4:2d:d1:e9:1c:16:5c:da:1f:83:ef:58:eb:97:78: 86:d1:cc:74:9d:60:df:68:be:1e:c0:d6:f0:fa:65: 8d:f5:5a:07:fc:b1:ca:b2:c3:5e:3d:91:09:38:06: b3:36:3b:d2:84:7f:00:bc:1b:57:e4:0e:be:ad:4c: 4b:e2:59:2c:8d:42:9d:86:d3:7f:d8:0a:fb:97:13: db:9a:66:94:e1:89:88:7f:81:71:08:27:90:92:83: 02:51:41:9e:94:21:6b:28:2c:b9:fe:c7:e5:ea:df: 9d:05:17:b7:73:23:31:a8:94:d5:99:2e:39:9e:14: c5:40:c5:99:15:6e:9e:11:fd:7e:2d:4c:88:66:0b: e9:6c:b0:ab:f5:e2:2c:09:91:d6:13:20:93:04:38: 84:ac:63:c6:1d:3f:67:a6:54:ec:6d:3a:d8:ec:d3: 15:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:22:95:A0:6F:20:31:09:DD:91:FE:66:29:68:44:56:85:7F:60:8D X509v3 Authority Key Identifier: keyid:9B:D6:C8:60:34:2C:C7:99:C2:80:74:F6:99:76:8A:8E:CB:DA:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9bIYDQsx5nCgHT2mXaKjsvapS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/afa69d-e143-4bf7-b743-42e3ef4f8b91/1/m9bIYDQsx5nCgHT2mXaKjsvapS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:aa:58:f2:83:1a:e4:19:da:d9:1f:91:2e:80:85:68:86:ff: d8:ce:aa:70:9e:23:04:16:19:7b:25:85:60:c6:69:7b:d2:3e: 71:f0:f0:1c:92:f0:fb:4b:f0:d8:b1:52:37:15:cc:df:b6:eb: 13:ab:94:83:cc:d2:d6:a3:2a:2d:f8:89:6a:26:9c:74:6d:1e: 58:e2:01:7e:9d:35:d0:d7:2e:a0:ce:f2:68:9e:43:c9:96:b3: 83:11:85:00:38:9a:53:4e:df:9f:f5:b5:c2:d0:45:9b:8c:56: 86:35:6f:4f:cb:46:e1:33:b0:40:94:08:ae:89:a1:19:76:6a: 34:9a:e3:d6:2b:38:ec:42:0a:8d:51:e3:bd:3a:57:9d:22:a6: 99:1e:b8:95:4d:0a:23:9a:36:2b:b1:30:44:35:2c:2f:35:12: d4:a3:be:36:4c:34:1a:5d:17:0f:26:93:d3:7e:60:7f:85:90: 64:14:f2:f9:7e:e2:54:07:72:1c:76:e1:fe:45:b9:54:1e:a6: 1d:36:b6:62:40:d3:c8:ce:8b:fd:1f:c5:e1:fc:f7:39:06:24: 23:00:31:5d:c9:d4:5b:41:ae:7f:13:cb:d4:c3:c2:f8:a3:b0: f1:88:66:ef:f9:52:9e:97:c1:71:b0:07:cd:dd:ab:12:6c:84: 13:84:a3:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO1uPxEKiqBgyTggNAWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZDZjODYwMzQyY2M3OTljMjgwNzRmNjk5NzY4YThlY2Jk YWE1MmUwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg5NDIyOTVhMDZmMjAzMTA5ZGQ5MWZlNjYyOTY4NDQ1Njg1N2Y2MDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+CdN3BIp3yhRdud3sfWBQUmfSUp Uq9ttqS+9ZVToeOyfMu7oSnO5BbB+9Dzqyl8Mx/Bfgn/+8c+TiKqcMuXwONsa0Tu dzZbgYP8jOAvwdNUJlbPV0U7QUfkLdHpHBZc2h+D71jrl3iG0cx0nWDfaL4ewNbw +mWN9VoH/LHKssNePZEJOAazNjvShH8AvBtX5A6+rUxL4lksjUKdhtN/2Ar7lxPb mmaU4YmIf4FxCCeQkoMCUUGelCFrKCy5/sfl6t+dBRe3cyMxqJTVmS45nhTFQMWZ FW6eEf1+LUyIZgvpbLCr9eIsCZHWEyCTBDiErGPGHT9nplTsbTrY7NMVbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQilaBvIDEJ3ZH+ZiloRFaFf2CNMB8GA1UdIwQY MBaAFJvWyGA0LMeZwoB09pl2io7L2qUuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMt NDJlM2VmNGY4YjkxLzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hZmE2OWQtZTE0My00YmY3LWI3NDMtNDJlM2VmNGY4Yjkx LzEvbTliSVlEUXN4NW5DZ0hUMm1YYUtqc3ZhcFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo6pY8oMa 5Bna2R+RLoCFaIb/2M6qcJ4jBBYZeyWFYMZpe9I+cfDwHJLw+0vw2LFSNxXM37br E6uUg8zS1qMqLfiJaiacdG0eWOIBfp010NcuoM7yaJ5DyZazgxGFADiaU07fn/W1 wtBFm4xWhjVvT8tG4TOwQJQIromhGXZqNJrj1is47EIKjVHjvTpXnSKmmR64lU0K I5o2K7EwRDUsLzUS1KO+Nkw0Gl0XDyaT035gf4WQZBTy+X7iVAdyHHbh/kW5VB6m HTa2YkDTyM6L/R/F4fz3OQYkIwAxXcnUW0GufxPL1MPC+KOw8Yhm7/lSnpfBcbAH zd2rEmyEE4Sjnw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:16:23 2025 by rpki-client