This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: 51St3Hxb7m419eCPZlQ3W2+PN59tW1m2onFbKQps1uM= Subject key identifier: 91:66:B6:42:7D:BE:18:9A:F2:38:AB:30:5F:5A:DA:78:0F:2E:04:50 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019AF3F75DA63D50F9A548DF9DC5D3EE5F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 176A Signing time: Sat 06 Dec 2025 14:01:06 +0000 Manifest this update: Sat 06 Dec 2025 14:01:06 +0000 Manifest next update: Sun 07 Dec 2025 14:01:06 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: QfPfeNP9VUTrp8wMQ6AHjtmNg+yC/z6JOBeQx1w7dXo=) 2: 4c68WXa89S9GaEZ3betWtfOynEI.roa (hash: fVAp1PUxEqPq1PXw46ujCE/Pw+4uzGlNeTIsndTtQ4g=) 3: 7kfcYNNoB5VB3-_80xlsWN3weyk.roa (hash: 1wJop1mQ6qBQDepGqT5ANO4tx0iRC5GqiIyWQqeZxiY=) 4: Bs0O01jXAqadcOrA_652_6vgquk.roa (hash: hEdFCfeLg1JToe8V2oyy+hkNpnht00+5NYTQRgNDOq8=) 5: KidN7PJCXFwqwby4fVpHaeAhpFY.roa (hash: rFMoYmqrD8lR5TajeeUqUicyuRT28K2jKIN4IFZHnsU=) 6: NYzishm2ogJfRyzy8nT6kXYmzuI.roa (hash: LaEEfSMmtUB1mBqYxGiYK3KhOkpxYURIQoeWj6Zjkz4=) 7: RIPl0ZcnNzCRnoJoRMQdo7FatJo.roa (hash: V51bdAbDUbCCdG4ap1IngeKOzNBFdbTp51TPAvBkqrE=) 8: eKmkaw2M8tueZ_tzxfDI9F6CNcc.roa (hash: fg34CUb41rhu+065E2VZ9qaIx2X2iqQ2jxGQO4GwQe4=) 9: pq2QS5SBDS3pAxrbz1jylBKYb1c.roa (hash: kdt9b8eHxviCcBXo3alD6ToqY7JvOLmYwFiRPu6twu8=) 10: tpxzfABwHA4uTKjODgtKlvT10t8.roa (hash: /uiIY+OMfjw8MyTKZlNYbS4i9kHVxO0uNCEe4Op3YPE=) 11: xz6DVtU3-Ra9kwVQS1hT5B1NgIk.roa (hash: L6obqobAUv8Kf3w8kISkegiNvXZC3M7YbdVJnQVDNRA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:5d:a6:3d:50:f9:a5:48:df:9d:c5:d3:ee:5f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Dec 6 14:01:06 2025 GMT Not After : Dec 7 14:01:06 2025 GMT Subject: CN=9166b6427dbe189af238ab305f5ada780f2e0450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2a:bd:2c:66:b5:03:d5:3a:1f:48:39:bc:42: 13:6a:e0:5b:84:4b:7d:7c:4e:bd:1e:7a:98:ef:52: 32:01:05:15:d5:d4:5c:90:fa:b1:86:a0:ca:42:c7: 48:8d:1d:27:c7:58:42:c2:0b:ac:dd:c3:f4:40:22: 95:7d:99:ff:95:6c:dd:30:d3:6e:3d:15:5f:21:f0: a8:fa:ec:df:b0:7d:9f:ca:01:e1:ef:78:57:df:70: 32:4a:f7:88:db:d6:23:59:e2:79:30:6e:96:d9:c9: a5:3f:32:fb:23:c4:2a:6c:34:d0:4e:cd:64:c1:23: 2f:d2:4b:8b:b2:a3:bb:fa:8d:bd:f6:09:37:32:ea: 99:2a:1d:05:1b:8f:9e:5c:84:16:09:3f:06:73:6c: 85:21:e0:fc:dd:15:e1:32:f0:86:a7:15:6a:8b:f9: ce:10:2d:70:d4:c9:58:af:a5:6a:6f:2a:67:80:e8: 3e:42:60:15:32:89:4d:b4:5a:69:73:94:f0:ad:74: 7b:61:1d:b3:23:3c:b3:41:8e:47:c3:9e:f9:e3:ac: f4:46:1e:60:b8:2f:de:32:22:ee:5b:bf:9e:8c:a4: 9e:04:9b:3f:11:a6:78:dd:dd:9f:1f:cb:7b:aa:2a: 2f:39:23:47:bb:58:d3:7e:a6:1f:73:60:7b:43:ab: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:66:B6:42:7D:BE:18:9A:F2:38:AB:30:5F:5A:DA:78:0F:2E:04:50 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b5:da:30:5b:97:c0:35:a1:a4:3d:7e:0e:e0:f4:67:06:49: b9:b0:4d:e8:b4:88:08:bd:82:b3:ff:42:5a:f3:b3:65:d3:9f: ba:96:47:ab:c5:57:e1:37:24:35:0e:0f:cf:04:fe:98:df:50: 1e:b0:8e:62:39:cc:74:5a:67:d0:a7:84:5a:f5:94:ab:15:9a: de:7f:a8:6e:72:41:48:6b:60:35:2b:6f:95:17:39:c7:5f:d7: ca:f0:83:8d:22:b8:a0:ef:34:db:c4:56:67:1d:76:b2:53:3e: 3c:fc:67:ad:d1:c9:73:bd:02:4a:af:bf:a1:82:9b:09:fc:d2: a4:bf:82:a7:72:a3:9f:74:e2:3d:c4:42:7e:d5:47:ab:cf:35: e4:97:eb:4c:a3:a6:92:12:dd:f6:da:10:e7:3c:2c:e3:5b:d7: ee:d4:e5:7c:04:12:a5:aa:ee:4c:8e:08:5c:72:4f:80:e7:c8: 59:f2:7c:4c:46:af:4b:0b:84:96:a2:6c:61:b7:bd:71:54:40: a7:91:d4:b4:0d:cc:73:63:40:ff:15:15:d6:c7:34:f8:59:26: 42:b5:76:67:7c:26:eb:fe:c2:e9:92:7b:95:6d:29:c2:a7:62: 65:43:db:9a:cf:76:ba:28:cb:e7:78:5d:14:01:ae:30:e2:f8: 0c:cc:47:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz912mPVD5pUjfncXT7l8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjUxMjA2MTQwMTA2WhcNMjUxMjA3MTQwMTA2WjAzMTEwLwYDVQQD Eyg5MTY2YjY0MjdkYmUxODlhZjIzOGFiMzA1ZjVhZGE3ODBmMmUwNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCq9LGa1A9U6H0g5vEITauBbhEt9 fE69HnqY71IyAQUV1dRckPqxhqDKQsdIjR0nx1hCwgus3cP0QCKVfZn/lWzdMNNu PRVfIfCo+uzfsH2fygHh73hX33AySveI29YjWeJ5MG6W2cmlPzL7I8QqbDTQTs1k wSMv0kuLsqO7+o299gk3MuqZKh0FG4+eXIQWCT8Gc2yFIeD83RXhMvCGpxVqi/nO EC1w1MlYr6VqbypngOg+QmAVMolNtFppc5TwrXR7YR2zIzyzQY5Hw57546z0Rh5g uC/eMiLuW7+ejKSeBJs/EaZ43d2fH8t7qiovOSNHu1jTfqYfc2B7Q6ubAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFmtkJ9vhia8jirMF9a2ngPLgRQMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7XaMFuX wDWhpD1+DuD0ZwZJubBN6LSICL2Cs/9CWvOzZdOfupZHq8VX4TckNQ4PzwT+mN9Q HrCOYjnMdFpn0KeEWvWUqxWa3n+obnJBSGtgNStvlRc5x1/XyvCDjSK4oO8028RW Zx12slM+PPxnrdHJc70CSq+/oYKbCfzSpL+Cp3Kjn3TiPcRCftVHq8815JfrTKOm khLd9toQ5zws41vX7tTlfAQSparuTI4IXHJPgOfIWfJ8TEavSwuElqJsYbe9cVRA p5HUtA3Mc2NA/xUV1sc0+FkmQrV2Z3wm6/7C6ZJ7lW0pwqdiZUPbms92uijL53hd FAGuMOL4DMxH4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 17:38:14 2025 by rpki-client