This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: /RzBwoA084pOq4LZ8SQ1KXr2V1MHWgsjTaFrf5zPQFk= Subject key identifier: B0:63:86:DD:78:92:70:F7:EA:96:95:66:09:1D:0B:6E:5C:28:C6:0E Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B2E8BDE10A9D5F8D9F783556586F99A19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1789 Signing time: Wed 17 Dec 2025 23:01:16 +0000 Manifest this update: Wed 17 Dec 2025 23:01:16 +0000 Manifest next update: Thu 18 Dec 2025 23:01:16 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: fwHZYUqdiOralRg9EuEqbO0H4DQlAER4PTfAGsJeFm0=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: b405QCs1aUgpVCYR4Gaf0mhpXUg.roa (hash: vr3hh37YG76cIiO+7+0A0llwbOl+y0kE8NKxOJZ/Pus=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:de:10:a9:d5:f8:d9:f7:83:55:65:86:f9:9a:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Dec 17 23:01:16 2025 GMT Not After : Dec 18 23:01:16 2025 GMT Subject: CN=b06386dd789270f7ea969566091d0b6e5c28c60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6b:26:4d:99:97:38:32:b6:fa:d5:b0:0a:97: b7:f5:99:63:df:d2:87:9c:e8:bb:c8:d6:e9:bb:19: f6:51:b3:cc:fa:21:48:42:a2:54:2a:14:93:77:48: b2:7f:20:3d:61:39:c7:d5:47:cd:23:52:1e:84:4f: 92:aa:06:38:ca:64:53:47:b5:b2:ae:9e:21:c5:a6: 99:77:3f:ad:31:f6:0b:09:06:f2:c3:34:30:60:58: c2:55:70:d7:4c:7f:da:da:ee:4e:76:c0:12:61:3f: 31:a5:b4:7e:8c:df:d7:45:cd:11:5c:36:95:49:40: dd:29:39:d0:ae:eb:ea:a6:9f:bb:b9:06:18:b6:23: f9:6e:8f:6b:b4:ac:9c:d0:0c:86:ee:cf:c9:1f:60: 91:3c:0a:c8:b2:55:9c:b7:75:da:a3:3a:e8:ac:3f: 1a:e1:d0:b9:d1:5a:e8:b7:70:c5:31:f4:75:cb:f8: 87:76:e9:80:48:ae:05:0c:43:95:60:9a:37:69:46: 4e:99:d9:c8:e6:8b:42:53:d1:18:10:2d:30:3d:97: 91:f9:37:be:d9:57:9b:d1:d6:90:48:7d:97:38:05: 23:de:b6:e0:08:dd:b1:04:40:26:5a:be:08:9d:fa: 3b:d1:3b:d8:07:f0:78:fd:94:1f:1f:d6:9a:03:14: 9c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:63:86:DD:78:92:70:F7:EA:96:95:66:09:1D:0B:6E:5C:28:C6:0E X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:6e:28:5d:63:ff:9c:d1:ac:c7:e4:fe:aa:4c:ac:67:54:c5: fb:27:06:a7:58:78:f3:48:76:02:cf:82:50:b5:b9:f5:96:91: 24:cb:ab:6e:75:c6:c0:75:e4:86:34:c6:2f:72:2e:21:bc:c0: 1f:1b:58:2f:b9:2c:87:9b:21:9b:ad:86:cc:84:8b:00:a5:09: 87:be:2d:2f:55:dc:7d:29:81:fc:42:7c:ac:0c:0f:2a:23:6c: 59:d6:1e:32:d5:f5:ca:cb:d5:7c:ba:09:7b:3b:f5:1e:04:d2: e3:f0:48:c0:74:7e:85:54:cd:f0:8f:e2:40:aa:b7:74:70:6a: 03:04:03:6b:15:14:a0:8d:df:a5:05:55:3a:a6:c7:2f:29:af: 3a:b3:46:c7:32:5e:22:98:f9:d3:6e:52:61:44:4f:e3:ce:07: 2a:fd:a8:7e:05:94:1e:fb:08:58:57:83:20:56:0b:28:c5:1e: 55:44:39:f6:f4:19:15:b5:b4:07:70:f3:1b:f7:09:85:b5:91: bd:e5:01:ff:21:4e:66:06:2d:9b:ce:e4:fd:48:ef:34:c5:45: 0b:d5:f7:ab:12:ee:01:d7:4c:35:eb:96:25:1a:e1:7d:e8:22: 43:be:f0:5f:7b:23:35:61:60:90:f8:25:92:31:8b:04:22:c8: 92:f7:76:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsui94QqdX42feDVWWG+ZoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUxMjE3MjMwMTE2WhcNMjUxMjE4MjMwMTE2WjAzMTEwLwYDVQQD EyhiMDYzODZkZDc4OTI3MGY3ZWE5Njk1NjYwOTFkMGI2ZTVjMjhjNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGsmTZmXODK2+tWwCpe39Zlj39KH nOi7yNbpuxn2UbPM+iFIQqJUKhSTd0iyfyA9YTnH1UfNI1IehE+SqgY4ymRTR7Wy rp4hxaaZdz+tMfYLCQbywzQwYFjCVXDXTH/a2u5OdsASYT8xpbR+jN/XRc0RXDaV SUDdKTnQruvqpp+7uQYYtiP5bo9rtKyc0AyG7s/JH2CRPArIslWct3XaozrorD8a 4dC50Vrot3DFMfR1y/iHdumASK4FDEOVYJo3aUZOmdnI5otCU9EYEC0wPZeR+Te+ 2Veb0daQSH2XOAUj3rbgCN2xBEAmWr4Info70TvYB/B4/ZQfH9aaAxScvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLBjht14knD36paVZgkdC25cKMYOMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ24oXWP/ nNGsx+T+qkysZ1TF+ycGp1h480h2As+CULW59ZaRJMurbnXGwHXkhjTGL3IuIbzA HxtYL7ksh5shm62GzISLAKUJh74tL1XcfSmB/EJ8rAwPKiNsWdYeMtX1ysvVfLoJ ezv1HgTS4/BIwHR+hVTN8I/iQKq3dHBqAwQDaxUUoI3fpQVVOqbHLymvOrNGxzJe Ipj5025SYURP484HKv2ofgWUHvsIWFeDIFYLKMUeVUQ59vQZFbW0B3DzG/cJhbWR veUB/yFOZgYtm87k/UjvNMVFC9X3qxLuAddMNeuWJRrhfegiQ77wX3sjNWFgkPgl kjGLBCLIkvd2hw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:44:03 2025 by rpki-client