This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft File: 9RDHudzJJZg-WbWGzVmrVUviWYI.mft (raw, json) Hash identifier: jksWcXWUWIMQhmyy0HDZlmtkyKjkypVbDbpiwlIzeIQ= Subject key identifier: 0A:09:94:33:3B:F8:EE:58:63:38:61:DD:AB:D5:6E:34:98:43:6C:91 Authority key identifier: F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 Certificate issuer: /CN=f510c7b9dcc925983e59b586cd59ab554be25982 Certificate serial: 019B2C66DFC58324673515702720685D9380 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft Manifest number: 18 Signing time: Wed 17 Dec 2025 13:01:38 +0000 Manifest this update: Wed 17 Dec 2025 13:01:38 +0000 Manifest next update: Thu 18 Dec 2025 13:01:38 +0000 Files and hashes: 1: 9RDHudzJJZg-WbWGzVmrVUviWYI.crl (hash: snf9qcyYiNkEnwaO4Z5Y+2airrdlTsHzo5A0kOIGrGA=) 2: WOHzoz9_3wsG5dPQrnQZY5iJqxA.roa (hash: vp1azStFxo+mPInlylvmSemgZa94N6epgGUZezt+m8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:66:df:c5:83:24:67:35:15:70:27:20:68:5d:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f510c7b9dcc925983e59b586cd59ab554be25982 Validity Not Before: Dec 17 13:01:38 2025 GMT Not After : Dec 18 13:01:38 2025 GMT Subject: CN=0a0994333bf8ee58633861ddabd56e3498436c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:63:7e:3b:ab:c9:ec:36:fa:a6:3c:11:0c:03: 67:05:22:b7:38:0b:19:d8:3d:cc:0d:f4:9c:4c:36: 13:b7:59:fd:95:65:0b:82:d6:c1:9e:a6:72:02:a4: 25:95:28:5f:a2:8e:a3:c6:19:e9:56:b4:8d:bc:5f: c9:40:18:9a:ee:11:78:68:ba:6d:06:ff:1e:8d:2a: d7:ea:43:cc:f1:2e:0c:50:3e:2c:bb:07:5b:64:21: 45:00:17:3e:f0:a9:32:30:a6:04:3e:a5:48:0e:57: a6:81:42:aa:3a:f0:79:a9:56:02:e1:e6:64:84:82: 86:73:0d:f0:31:9e:a1:bd:f9:ca:ee:3b:d8:7c:f6: 46:3a:ed:32:d2:37:81:e4:35:c1:59:38:6e:ac:88: f0:ca:00:d2:3d:04:14:1b:b7:fc:89:11:8a:d7:5f: a2:03:16:a7:2e:ba:d6:95:c2:97:4a:5e:e5:ec:91: db:f4:6c:ad:47:32:8d:7c:37:4d:a0:22:83:83:e3: ed:99:ee:4e:4f:3a:79:db:5b:a7:44:a0:78:6f:ed: a5:74:96:40:86:ea:3a:56:51:f4:15:6f:b6:00:db: 4c:9e:d5:ab:e1:a3:49:56:df:08:92:a0:ab:28:cc: be:a1:f5:ab:87:36:d2:ce:b2:4a:f5:95:c3:23:e9: 64:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:09:94:33:3B:F8:EE:58:63:38:61:DD:AB:D5:6E:34:98:43:6C:91 X509v3 Authority Key Identifier: keyid:F5:10:C7:B9:DC:C9:25:98:3E:59:B5:86:CD:59:AB:55:4B:E2:59:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RDHudzJJZg-WbWGzVmrVUviWYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a0b58c-3719-4773-9206-a1b2b6a70272/1/9RDHudzJJZg-WbWGzVmrVUviWYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:20:fd:10:db:63:f3:0c:ff:7d:ad:63:dd:8e:03:3c:47:d3: fb:e4:c7:d4:a9:a0:f6:a0:9a:88:37:fd:c9:0f:32:91:85:d5: 24:e8:84:34:fe:0f:8d:7a:ed:3a:55:10:04:d6:90:95:9f:e2: d5:e4:4a:b0:a9:d3:00:6b:9f:84:a5:35:51:b1:8b:12:87:4d: e6:10:9a:64:ea:82:5b:45:72:35:83:06:df:8c:c8:1c:ff:00: 42:9f:aa:ab:4d:32:78:b4:51:d8:44:80:0a:57:92:02:9a:72: 86:37:dd:ab:93:78:3f:c6:bf:b9:19:60:09:1e:cc:98:47:a1: da:55:e7:06:9b:c9:fc:7e:a8:65:32:8f:40:34:d3:f4:9a:a7: f3:b3:97:2a:9b:d5:1f:4c:63:c0:5d:4c:f2:5c:9b:93:74:20: cb:fd:2d:5c:1f:70:b8:6b:f2:20:58:21:e8:ba:49:43:20:ce: 4f:7d:14:45:be:f3:e6:d2:e7:2a:06:3a:e6:7d:2a:ca:a2:33: e9:d7:40:f4:97:b6:01:4c:36:48:cf:95:78:2f:5c:46:ec:2a: 88:27:f9:d9:93:02:af:1f:a3:01:2b:b0:a3:3b:b5:12:f7:e1: d9:c4:b1:74:e8:d8:f8:fe:9f:32:b3:8a:d1:f6:7d:86:78:8b: 8b:ec:0b:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssZt/FgyRnNRVwJyBoXZOAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTBjN2I5ZGNjOTI1OTgzZTU5YjU4NmNkNTlhYjU1NGJl MjU5ODIwHhcNMjUxMjE3MTMwMTM4WhcNMjUxMjE4MTMwMTM4WjAzMTEwLwYDVQQD EygwYTA5OTQzMzNiZjhlZTU4NjMzODYxZGRhYmQ1NmUzNDk4NDM2YzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWN+O6vJ7Db6pjwRDANnBSK3OAsZ 2D3MDfScTDYTt1n9lWULgtbBnqZyAqQllShfoo6jxhnpVrSNvF/JQBia7hF4aLpt Bv8ejSrX6kPM8S4MUD4suwdbZCFFABc+8KkyMKYEPqVIDlemgUKqOvB5qVYC4eZk hIKGcw3wMZ6hvfnK7jvYfPZGOu0y0jeB5DXBWThurIjwygDSPQQUG7f8iRGK11+i AxanLrrWlcKXSl7l7JHb9GytRzKNfDdNoCKDg+Ptme5OTzp521unRKB4b+2ldJZA huo6VlH0FW+2ANtMntWr4aNJVt8IkqCrKMy+ofWrhzbSzrJK9ZXDI+lk2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoJlDM7+O5YYzhh3avVbjSYQ2yRMB8GA1UdIwQY MBaAFPUQx7ncySWYPlm1hs1Zq1VL4lmCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYt YTFiMmI2YTcwMjcyLzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9hMGI1OGMtMzcxOS00NzczLTkyMDYtYTFiMmI2YTcwMjcy LzEvOVJESHVkekpKWmctV2JXR3pWbXJWVXZpV1lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCD9ENtj 8wz/fa1j3Y4DPEfT++TH1Kmg9qCaiDf9yQ8ykYXVJOiENP4PjXrtOlUQBNaQlZ/i 1eRKsKnTAGufhKU1UbGLEodN5hCaZOqCW0VyNYMG34zIHP8AQp+qq00yeLRR2ESA CleSAppyhjfdq5N4P8a/uRlgCR7MmEeh2lXnBpvJ/H6oZTKPQDTT9Jqn87OXKpvV H0xjwF1M8lybk3Qgy/0tXB9wuGvyIFgh6LpJQyDOT30URb7z5tLnKgY65n0qyqIz 6ddA9Je2AUw2SM+VeC9cRuwqiCf52ZMCrx+jASuwozu1Evfh2cSxdOjY+P6fMrOK 0fZ9hniLi+wLXA== -----END CERTIFICATE-----Generated at Wed Dec 17 18:38:11 2025 by rpki-client