This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft File: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft (raw, json) Hash identifier: fkZLVRiKiXFbWENcJD4xCBulTBlypgApXUdy2W0Ggrs= Subject key identifier: 84:09:40:37:3A:AB:EF:21:8A:E4:33:FF:71:6E:6E:5E:7F:DA:1A:1C Authority key identifier: F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 Certificate issuer: /CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Certificate serial: 019B2C2F43DBF9A077BF58E59603DB03DDC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft Manifest number: 146D Signing time: Wed 17 Dec 2025 12:00:53 +0000 Manifest this update: Wed 17 Dec 2025 12:00:53 +0000 Manifest next update: Thu 18 Dec 2025 12:00:53 +0000 Files and hashes: 1: 9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl (hash: gMaKQWUdcxOZwzGlQjcevz9JaOZuOKChnu6uaSl/j+A=) 2: FhvwZmZbFQ5_XSu4XdZkFej3jvE.roa (hash: ld2MBpkdINa/HpitEI9hE8KrLNtvxY4fg+rJ1pVUK1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:2f:43:db:f9:a0:77:bf:58:e5:96:03:db:03:dd:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4c9baa4429da786591b72525852e6d97b32c1e8 Validity Not Before: Dec 17 12:00:53 2025 GMT Not After : Dec 18 12:00:53 2025 GMT Subject: CN=840940373aabef218ae433ff716e6e5e7fda1a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:fb:a5:5a:a1:a2:1d:59:6d:23:b1:68:e2:e9: 28:8f:50:24:b6:11:c5:bf:b5:f6:a3:c6:b1:a1:d3: 44:c0:86:5b:c0:2a:f8:8e:56:2a:38:61:bb:6e:61: 7a:1f:f4:e6:a2:1b:dc:46:41:b7:6a:c1:97:a2:9e: 46:1b:88:cd:bd:b9:08:61:98:d7:26:ba:dc:59:e3: 97:6b:40:93:d7:d5:b4:4e:8d:26:65:3d:a7:e3:52: ec:fe:44:b5:ad:78:d2:12:07:b6:db:4f:70:6b:42: 83:5f:fd:4d:dd:b2:ba:a4:6e:b3:83:96:2c:ea:ff: da:6e:3e:78:a9:4a:d1:e8:6d:c7:71:9f:a4:9d:ce: 53:9e:8d:34:3b:b9:ca:8c:08:d7:59:89:41:d0:28: 1a:fd:12:94:1c:37:84:ef:cc:8d:05:68:ae:d2:63: 60:3f:17:ce:68:02:4e:d7:f0:a8:e4:4a:46:55:d1: 94:a7:51:08:3f:0b:b2:ef:a2:13:d5:1a:72:c2:be: ec:bf:c0:3e:be:fc:25:c8:ff:8e:d1:39:e9:3d:ed: f1:e9:38:b6:42:1b:69:49:61:5e:40:5e:bc:ff:b8: c0:b6:d7:e0:dd:13:e7:49:4a:70:fb:c5:df:68:05: 55:00:a4:95:d6:9f:f2:85:d5:1f:9d:61:2f:8a:cc: 8a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:09:40:37:3A:AB:EF:21:8A:E4:33:FF:71:6E:6E:5E:7F:DA:1A:1C X509v3 Authority Key Identifier: keyid:F4:C9:BA:A4:42:9D:A7:86:59:1B:72:52:58:52:E6:D9:7B:32:C1:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/6877ba-4e6c-4f5a-9cc2-af7da2b6edc5/1/9Mm6pEKdp4ZZG3JSWFLm2Xsyweg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c8:4a:63:d3:49:4f:c6:11:f3:2f:dd:3b:ae:56:6a:69:50: e8:50:66:78:1b:79:9b:4b:d8:93:73:6c:92:a4:ed:da:4c:85: cf:2e:7c:00:18:b3:0b:fe:2e:b3:63:d4:85:d3:4e:ad:46:ad: 8e:f5:4b:5d:99:c8:e4:a3:e6:56:ce:26:6b:83:fa:59:bb:72: a5:d0:db:9b:6c:4d:07:a0:9f:e6:4a:ae:27:25:35:42:47:db: d7:cf:36:31:d5:90:e9:6a:af:b2:ac:94:16:9a:73:c6:8f:30: 4b:0e:51:c0:90:47:24:07:cd:c2:7b:d6:3b:4c:00:75:aa:25: 32:dd:49:7e:c8:18:a6:a0:c3:b7:86:ff:47:9f:8e:a4:c2:c1: 99:8c:90:b7:10:7a:b9:99:a9:c7:ad:13:32:32:19:e8:cc:1a: 78:4f:1a:47:0e:15:dd:a1:cf:fb:78:cd:ec:69:db:fb:f5:50: d1:a6:ea:29:bd:97:09:c1:b0:0c:4d:cc:12:30:15:7b:c7:89: 16:0c:8d:86:24:74:64:76:44:2e:66:b2:07:f9:ba:dc:bd:1e: 51:a9:ea:10:c1:45:5c:7e:82:a8:20:34:d8:a0:77:0c:8d:5e: 35:8f:f8:80:76:ef:9f:70:c4:43:b2:be:4c:7b:72:c5:d1:70: 5e:39:9b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssL0Pb+aB3v1jllgPbA93FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0YzliYWE0NDI5ZGE3ODY1OTFiNzI1MjU4NTJlNmQ5N2Iz MmMxZTgwHhcNMjUxMjE3MTIwMDUzWhcNMjUxMjE4MTIwMDUzWjAzMTEwLwYDVQQD Eyg4NDA5NDAzNzNhYWJlZjIxOGFlNDMzZmY3MTZlNmU1ZTdmZGExYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9fulWqGiHVltI7Fo4ukoj1AkthHF v7X2o8axodNEwIZbwCr4jlYqOGG7bmF6H/TmohvcRkG3asGXop5GG4jNvbkIYZjX JrrcWeOXa0CT19W0To0mZT2n41Ls/kS1rXjSEge2209wa0KDX/1N3bK6pG6zg5Ys 6v/abj54qUrR6G3HcZ+knc5Tno00O7nKjAjXWYlB0Cga/RKUHDeE78yNBWiu0mNg PxfOaAJO1/Co5EpGVdGUp1EIPwuy76IT1Rpywr7sv8A+vvwlyP+O0TnpPe3x6Ti2 QhtpSWFeQF68/7jAttfg3RPnSUpw+8XfaAVVAKSV1p/yhdUfnWEvisyKUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQJQDc6q+8hiuQz/3Fubl5/2hocMB8GA1UdIwQY MBaAFPTJuqRCnaeGWRtyUlhS5tl7MsHoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzIt YWY3ZGEyYjZlZGM1LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy82ODc3YmEtNGU2Yy00ZjVhLTljYzItYWY3ZGEyYjZlZGM1 LzEvOU1tNnBFS2RwNFpaRzNKU1dGTG0yWHN5d2VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALshKY9NJ T8YR8y/dO65WamlQ6FBmeBt5m0vYk3NskqTt2kyFzy58ABizC/4us2PUhdNOrUat jvVLXZnI5KPmVs4ma4P6WbtypdDbm2xNB6Cf5kquJyU1Qkfb1882MdWQ6WqvsqyU Fppzxo8wSw5RwJBHJAfNwnvWO0wAdaolMt1JfsgYpqDDt4b/R5+OpMLBmYyQtxB6 uZmpx60TMjIZ6MwaeE8aRw4V3aHP+3jN7Gnb+/VQ0abqKb2XCcGwDE3MEjAVe8eJ FgyNhiR0ZHZELmayB/m63L0eUanqEMFFXH6CqCA02KB3DI1eNY/4gHbvn3DEQ7K+ THtyxdFwXjmb5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 21:40:06 2025 by rpki-client